last executing test programs: 1m41.101180467s ago: executing program 3 (id=614): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000380)='./bus\x00', 0x208c, 0x1) mknod$loop(&(0x7f0000000200)='./bus\x00', 0x208c, 0x1) 1m40.856262562s ago: executing program 3 (id=617): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004440)="e6", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000881) 1m40.647857723s ago: executing program 3 (id=619): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setown(r1, 0x8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m40.398037107s ago: executing program 3 (id=622): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x104e22}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m40.202592182s ago: executing program 3 (id=625): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f01000000000000000000090581034000000000090582"], 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) 1m39.807422956s ago: executing program 3 (id=630): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r1, 0x0, 0x0) 1m39.328897889s ago: executing program 32 (id=630): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r1, 0x0, 0x0) 29.451546732s ago: executing program 2 (id=1225): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c002280340000800800030000000000080005000000000008000200000000000800030000000000080002000000000008000400000000004400008008000400000000000800070000000000080006000000000008000500000000000800010000000000080002"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) 29.177321758s ago: executing program 2 (id=1229): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 25.940629216s ago: executing program 2 (id=1242): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x6}}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) 25.48798792s ago: executing program 2 (id=1245): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 25.278424185s ago: executing program 2 (id=1247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r2, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0xffa6, 0x0, 0xd0}, 0x20008000) 24.872107375s ago: executing program 2 (id=1249): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 24.387195081s ago: executing program 33 (id=1249): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 5.038280534s ago: executing program 1 (id=1371): ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) close(r0) 4.501505084s ago: executing program 1 (id=1378): io_setup(0x3f, &(0x7f0000000140)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0xf000, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0xffff, r1, &(0x7f0000000000)="66fe1ff6b94d79bc", 0x8, 0x7}]) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3.770437048s ago: executing program 1 (id=1384): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) sendmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="a3e3bc2fa89eb048f98f6825f2daa1ac975d5bb88be3805e2a56", 0x1a}], 0x1}}], 0x1, 0x4) 2.919756264s ago: executing program 6 (id=1392): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000014}) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) shutdown(r0, 0x1) 2.596329638s ago: executing program 6 (id=1396): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) close_range(r0, 0xffffffffffffffff, 0x0) 2.546687979s ago: executing program 1 (id=1397): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x100000) 2.3982093s ago: executing program 0 (id=1398): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0xb, 0xf, 0xff, 0x0, 0x3, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xf4, 0x2], 0x1, [0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 2.156143715s ago: executing program 1 (id=1400): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x43, 0x2}, 0x4}}, 0x10) 2.030316967s ago: executing program 5 (id=1402): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.973720763s ago: executing program 6 (id=1403): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x440, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x8d) open$dir(&(0x7f0000000000)='./file1\x00', 0x80000, 0x8b) 1.97275444s ago: executing program 0 (id=1404): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e21, 0x26, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e31687172d956b141e3f4e87e6ab615ea379a12c5a6f5c6e7b3ab38f5f3570909f89f3e47ec97b12cc30a1c48cd0300fd5dfad4624800"}, 0xd8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000014c0)={@local, @random="e462e98700", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x3c, 0x64, 0x0, 0x3, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x7, 0x0, 0xe7, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x1, 0x4d, 0x4, 0xfffff5be}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 1.696072046s ago: executing program 0 (id=1405): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}}}, 0x0, 0x0, 0x3, 0x0, "0c9e089c1b4a04000bde79f0613be7fa187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bb399ad5bd2ff21907c7988d1300000000000000000000000400"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) close(0x4) 1.640915578s ago: executing program 5 (id=1407): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) 1.392562298s ago: executing program 0 (id=1408): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000440)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) 1.31922836s ago: executing program 5 (id=1409): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) unshare(0x20000400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.296425829s ago: executing program 4 (id=1410): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 1.149388227s ago: executing program 1 (id=1411): socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000019480)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000006c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16, @ANYRES16=r0], 0x0) 1.064362055s ago: executing program 0 (id=1412): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000140)={r2}, 0x8) 987.104655ms ago: executing program 4 (id=1413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x34, r1, 0x5, 0x70bd31, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_SSID={0x6, 0x34, @random="08f5"}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 930.646176ms ago: executing program 6 (id=1414): r0 = syz_io_uring_setup(0x23a, &(0x7f0000000480)={0x0, 0xa101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000002280)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 866.002703ms ago: executing program 0 (id=1415): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000500)={0x40, 0x1, 0x2, "3aec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x40, 0xf, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 753.417515ms ago: executing program 5 (id=1416): open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)=':', 0x1, 0x4004845, &(0x7f0000000140)={0xa, 0x4e20, 0x3, @private0, 0x3}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 714.411935ms ago: executing program 4 (id=1417): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast1, @in6=@mcast2, 0x4e25, 0x0, 0x0, 0x0, 0x2}, {0x2, 0x53, 0xfff, 0x8, 0xfffffffffffffffc, 0x1e6, 0x2, 0x8004}, {0x7ffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in6=@empty, 0x0, 0x32}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x4, 0x2, 0x0, 0x2, 0x2, 0x9}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 543.213127ms ago: executing program 6 (id=1418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000001406"], 0xfdef) 485.843722ms ago: executing program 4 (id=1419): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xf, "c51fca0a5550cf9652a3f0b942747b193fd10d95793a0c159f6dca495afb8114"}) close_range(r0, r0, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020) 422.510329ms ago: executing program 5 (id=1420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x40, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_b, @from_mac=@broadcast, {0x9, 0x9}}, 0x2b, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4044844) 267.171971ms ago: executing program 4 (id=1421): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f000000c600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) getsockopt$ax25_int(r1, 0x101, 0x4, 0x0, &(0x7f00000000c0)) 78.737136ms ago: executing program 5 (id=1422): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000d00)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) write$binfmt_script(r1, 0x0, 0x0) 2.88274ms ago: executing program 6 (id=1423): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x0, 0x10}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x6, 0x4, 0x305294c5, 0x10001, 0x9, 0x101, 0x2, r1}, 0x20) 0s ago: executing program 4 (id=1424): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x401) listen(r0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r0, 0x0) kernel console output (not intermixed with test programs): th: hci1: command tx timeout [ 101.788403][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.832172][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.840799][ T5845] Bluetooth: hci3: command tx timeout [ 101.897572][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.920839][ T5845] Bluetooth: hci4: command tx timeout [ 101.929745][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.951257][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.987613][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.092825][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.113854][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.124001][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.137310][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.149101][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.222350][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.269668][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.277236][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.296702][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.338194][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.345407][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.413068][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.425690][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.509631][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.516864][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.546239][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.561550][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.568767][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.586818][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.624315][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.631777][ T3471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.663340][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.670621][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.701336][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.792555][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.825765][ T5844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.836996][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.859491][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.906696][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.913938][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.959594][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.966863][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.003557][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.010961][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.078415][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.085834][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.207938][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.355434][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.642995][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.687642][ T5845] Bluetooth: hci0: command tx timeout [ 103.718668][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.829948][ T5844] veth0_vlan: entered promiscuous mode [ 103.846361][ T5845] Bluetooth: hci2: command tx timeout [ 103.852333][ T5845] Bluetooth: hci1: command tx timeout [ 103.888673][ T5844] veth1_vlan: entered promiscuous mode [ 103.920534][ T5843] Bluetooth: hci3: command tx timeout [ 103.982536][ T5844] veth0_macvtap: entered promiscuous mode [ 103.992352][ T5848] veth0_vlan: entered promiscuous mode [ 104.004303][ T5843] Bluetooth: hci4: command tx timeout [ 104.025102][ T5848] veth1_vlan: entered promiscuous mode [ 104.056113][ T5844] veth1_macvtap: entered promiscuous mode [ 104.067793][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.122821][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.145744][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.163177][ T5848] veth0_macvtap: entered promiscuous mode [ 104.183151][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.195044][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.205483][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.214467][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.224342][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.244076][ T5848] veth1_macvtap: entered promiscuous mode [ 104.295078][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.333783][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.369971][ T5853] veth0_vlan: entered promiscuous mode [ 104.397375][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.406617][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.416197][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.425110][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.437258][ T5839] veth0_vlan: entered promiscuous mode [ 104.474958][ T5853] veth1_vlan: entered promiscuous mode [ 104.523855][ T5839] veth1_vlan: entered promiscuous mode [ 104.541897][ T5852] veth0_vlan: entered promiscuous mode [ 104.615490][ T5852] veth1_vlan: entered promiscuous mode [ 104.638739][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.655861][ T5853] veth0_macvtap: entered promiscuous mode [ 104.666167][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.719381][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.743042][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.769261][ T5853] veth1_macvtap: entered promiscuous mode [ 104.804194][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.826892][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.835422][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.846882][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.852095][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.871815][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.895283][ T5839] veth0_macvtap: entered promiscuous mode [ 104.908606][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.919543][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.928610][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.937559][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.956895][ T5852] veth0_macvtap: entered promiscuous mode [ 104.984579][ T5839] veth1_macvtap: entered promiscuous mode [ 105.008438][ T5852] veth1_macvtap: entered promiscuous mode [ 105.032163][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.084819][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.134579][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.177451][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.203366][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.244093][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.266160][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.295078][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.331462][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.404640][ T5852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.416188][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.425265][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.439701][ T5852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.453254][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.478899][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.632306][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.658088][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.766962][ T5843] Bluetooth: hci0: command tx timeout [ 105.804547][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.837524][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.846835][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.859689][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.920811][ T5843] Bluetooth: hci1: command tx timeout [ 105.926384][ T5843] Bluetooth: hci2: command tx timeout [ 106.001809][ T5843] Bluetooth: hci3: command tx timeout [ 106.048508][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 106.081078][ T5843] Bluetooth: hci4: command tx timeout [ 106.146254][ T5969] warning: `syz.1.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.181373][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 106.221019][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.242503][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.347553][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.405604][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.680097][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 107.232000][ T5994] 9pnet_virtio: no channels available for device syz [ 107.721297][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 108.225387][ T5840] kernel write not supported for file /dsp1 (pid: 5840 comm: kworker/0:3) [ 108.547382][ T43] kernel read not supported for file /dsp (pid: 43 comm: kworker/1:1) [ 109.591813][ T5949] kernel write not supported for file bpf-prog (pid: 5949 comm: kworker/0:7) [ 109.842985][ T6072] syz.0.54 uses obsolete (PF_INET,SOCK_PACKET) [ 109.862715][ T6073] veth0: entered promiscuous mode [ 109.895170][ T6071] veth0: left promiscuous mode [ 110.096156][ T6081] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.112322][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.180957][ T5840] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.314012][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.336791][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.347018][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.363472][ T43] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 111.378038][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.407830][ T43] usb 1-1: config 0 descriptor?? [ 111.420520][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 111.446482][ T5840] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 111.458593][ T6117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.75'. [ 111.468398][ T5840] usb 3-1: config 0 has no interface number 0 [ 111.479881][ T5840] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 111.529417][ T5840] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 111.564672][ T5840] usb 3-1: config 0 interface 126 has no altsetting 0 [ 111.621729][ T5840] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 111.671568][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.714600][ T5840] usb 3-1: Product: syz [ 111.737220][ T5840] usb 3-1: Manufacturer: syz [ 111.754300][ T5840] usb 3-1: SerialNumber: syz [ 111.778975][ T5840] usb 3-1: config 0 descriptor?? [ 111.820732][ T6109] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 111.832291][ T6109] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 111.976804][ T43] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0 [ 111.985071][ T43] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x2 [ 111.992697][ T43] hid-rmi 0003:1532:011D.0001: item fetching failed at offset 3/4 [ 112.002118][ T43] hid-rmi 0003:1532:011D.0001: parse failed [ 112.008196][ T43] hid-rmi 0003:1532:011D.0001: probe with driver hid-rmi failed with error -22 [ 112.122197][ T1211] usb 1-1: USB disconnect, device number 2 [ 112.287344][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 112.310560][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 112.371549][ T5840] ir_usb 3-1:0.126: IR Dongle converter detected [ 112.564996][ T5840] usb 3-1: IRDA class descriptor not found, device not bound [ 112.641790][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.793459][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 112.803947][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.810769][ T43] usb 3-1: USB disconnect, device number 2 [ 112.864487][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.879094][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 112.892741][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.920963][ T10] usb 2-1: config 0 descriptor?? [ 113.364561][ T10] playstation 0003:054C:05C4.0002: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 113.560605][ T10] playstation 0003:054C:05C4.0002: Failed to retrieve feature with reportID 18: -71 [ 113.591950][ T10] playstation 0003:054C:05C4.0002: Failed to retrieve DualShock4 pairing info: -71 [ 113.621060][ T10] playstation 0003:054C:05C4.0002: Failed to get MAC address from DualShock4 [ 113.655870][ T10] playstation 0003:054C:05C4.0002: Failed to create dualshock4. [ 113.701754][ T10] playstation 0003:054C:05C4.0002: probe with driver playstation failed with error -71 [ 113.768222][ T10] usb 2-1: USB disconnect, device number 2 [ 113.818679][ T6160] netlink: 724 bytes leftover after parsing attributes in process `syz.2.94'. [ 113.860433][ T6160] netlink: 724 bytes leftover after parsing attributes in process `syz.2.94'. [ 114.048475][ T6166] mmap: syz.0.97 (6166) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.156467][ T6168] netlink: 76 bytes leftover after parsing attributes in process `syz.2.98'. [ 114.228471][ T6168] nbd: illegal input index -65456 [ 114.667663][ T10] kernel write not supported for file /snd/seq (pid: 10 comm: kworker/0:1) [ 114.731579][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.109'. [ 114.860269][ T5840] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.060606][ T5840] usb 2-1: Using ep0 maxpacket: 32 [ 115.075556][ T5840] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 115.094853][ T5840] usb 2-1: config 0 has no interface number 0 [ 115.162279][ T5840] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 115.174698][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.186423][ T5840] usb 2-1: Product: syz [ 115.218825][ T5840] usb 2-1: Manufacturer: syz [ 115.225738][ T5840] usb 2-1: SerialNumber: syz [ 115.239760][ T5840] usb 2-1: config 0 descriptor?? [ 115.249517][ T5840] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 115.430298][ T1211] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.481156][ T5840] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 115.525785][ T5840] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 115.601732][ T1211] usb 4-1: Using ep0 maxpacket: 16 [ 115.622531][ T1211] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 115.664793][ T1211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 115.704789][ T1211] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 115.717363][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.736046][ T1211] usb 4-1: Product: syz [ 115.742701][ T1211] usb 4-1: Manufacturer: syz [ 115.747589][ T1211] usb 4-1: SerialNumber: syz [ 115.807221][ T1211] usb 4-1: config 0 descriptor?? [ 115.817313][ T6213] tap0: tun_chr_ioctl cmd 1074025677 [ 115.841747][ T1211] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 115.851927][ T6213] tap0: linktype set to 774 [ 115.878944][ T1211] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 115.915952][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 115.917364][ T5893] usb 2-1: USB disconnect, device number 3 [ 115.961975][ T5893] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 116.011398][ T5893] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 116.039991][ T5893] quatech2 2-1:0.51: device disconnected [ 116.210521][ T6222] program syz.2.123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.455924][ T1211] em28xx 4-1:0.0: unknown em28xx chip ID (254) [ 116.656594][ T1211] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 116.670468][ T5840] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 116.682658][ T1211] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 116.699576][ T1211] em28xx 4-1:0.0: No AC97 audio processor [ 116.732520][ T1211] usb 4-1: USB disconnect, device number 2 [ 116.765535][ T1211] em28xx 4-1:0.0: Disconnecting em28xx [ 116.781519][ T1211] em28xx 4-1:0.0: Freeing device [ 116.855085][ T5840] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.873738][ T5840] usb 5-1: config 0 has no interfaces? [ 116.888839][ T5840] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 116.919488][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.949014][ T5840] usb 5-1: config 0 descriptor?? [ 117.199815][ T5840] usb 5-1: USB disconnect, device number 2 [ 117.862613][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 118.068742][ T6273] tap0: tun_chr_ioctl cmd 1074025677 [ 118.074714][ T5893] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.092838][ T6273] tap0: linktype set to 270 [ 118.230331][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 118.238887][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 118.249700][ T5893] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 118.276140][ T5893] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 16129, setting to 1024 [ 118.310405][ T5893] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 118.346523][ T5893] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.369997][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.390214][ T5893] usb 2-1: Product: syz [ 118.402008][ T5893] usb 2-1: Manufacturer: syz [ 118.420300][ T5893] usb 2-1: SerialNumber: syz [ 118.445363][ T6287] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 118.634849][ T6289] netlink: 'syz.2.156': attribute type 3 has an invalid length. [ 118.703850][ T5893] cdc_ncm 2-1:1.0: bind() failure [ 118.745374][ T5893] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 118.763519][ T5893] cdc_ncm 2-1:1.1: bind() failure [ 118.809106][ T5893] usb 2-1: USB disconnect, device number 4 [ 118.883308][ T6294] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 118.957820][ T6297] sctp: [Deprecated]: syz.0.157 (pid 6297) Use of int in maxseg socket option. [ 118.957820][ T6297] Use struct sctp_assoc_value instead [ 120.084857][ T6332] Bluetooth: MGMT ver 1.23 [ 120.653885][ T6352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.177'. [ 120.749247][ T6352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.177'. [ 120.780412][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 122.931255][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.128244][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 123.154207][ T24] usb 2-1: config 0 has no interfaces? [ 123.167994][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 123.208798][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.242933][ T24] usb 2-1: Product: syz [ 123.252074][ T24] usb 2-1: Manufacturer: syz [ 123.276013][ T24] usb 2-1: SerialNumber: syz [ 123.312435][ T24] usb 2-1: config 0 descriptor?? [ 123.707996][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'. [ 123.739401][ T6390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.191'. [ 123.815678][ T24] usb 2-1: USB disconnect, device number 5 [ 124.847667][ T6430] capability: warning: `syz.4.209' uses deprecated v2 capabilities in a way that may be insecure [ 125.305349][ T6442] netlink: 'syz.4.215': attribute type 2 has an invalid length. [ 125.313709][ T6442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.215'. [ 125.453588][ T6440] syz.0.214 (6440) used greatest stack depth: 17816 bytes left [ 126.276275][ T6470] block nbd2: not configured, cannot reconfigure [ 126.604045][ T6481] netlink: 60 bytes leftover after parsing attributes in process `syz.4.233'. [ 127.328904][ T6506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.244'. [ 129.690284][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 129.713451][ T6561] vim2m vim2m.0: vidioc_s_fmt queue busy [ 129.890458][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 129.924598][ T6567] netlink: 120 bytes leftover after parsing attributes in process `syz.3.270'. [ 129.951829][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 130.035883][ T10] kernel write not supported for file /input/mouse0 (pid: 10 comm: kworker/0:1) [ 130.171552][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.332836][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 130.341341][ T6580] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 130.356734][ T6584] blkio.reset_stats is deprecated [ 130.363581][ T6580] nbd: error processing sock list [ 130.375130][ T24] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 130.403909][ T24] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 130.418753][ T6580] block nbd0: shutting down sockets [ 130.428027][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.462690][ T24] usb 2-1: Product: syz [ 130.467953][ T24] usb 2-1: Manufacturer: syz [ 130.480262][ T24] usb 2-1: SerialNumber: syz [ 130.505218][ T24] usb 2-1: config 0 descriptor?? [ 130.525246][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 130.565413][ T24] usb 2-1: setting power ON [ 130.576956][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 130.608841][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.650330][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.667159][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 130.706595][ T24] usb 2-1: media controller created [ 130.752560][ T6571] dvb-usb: bulk message failed: -22 (3/0) [ 130.758524][ T6571] dvb-usb: bulk message failed: -22 (37/0) [ 130.766481][ T6571] cxusb: i2c rd: len=80 is too big! [ 130.766481][ T6571] [ 130.851641][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 130.856659][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.878091][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 130.909125][ T6596] process 'syz.0.283' launched './file0' with NULL argv: empty string added [ 130.928308][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.949298][ T10] usb 5-1: Product: syz [ 130.967668][ T24] usb 2-1: selecting invalid altsetting 6 [ 130.974752][ T10] usb 5-1: Manufacturer: syz [ 130.979429][ T10] usb 5-1: SerialNumber: syz [ 131.002051][ T24] usb 2-1: digital interface selection failed (-22) [ 131.028577][ T10] usb 5-1: config 0 descriptor?? [ 131.047450][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 131.069979][ T24] usb 2-1: setting power OFF [ 131.075481][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 131.086025][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 131.106481][ T24] (NULL device *): no alternate interface [ 131.248473][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 131.266971][ T10] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 131.362389][ T24] usb 2-1: USB disconnect, device number 6 [ 131.875088][ T10] usb write operation failed. (-71) [ 131.895633][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 131.920257][ T6620] Zero length message leads to an empty skb [ 131.939969][ T10] dvbdev: DVB: registering new adapter (Terratec H7) [ 131.966049][ T10] usb 5-1: media controller created [ 131.975529][ T10] usb read operation failed. (-71) [ 131.991182][ T10] usb write operation failed. (-71) [ 132.044556][ T10] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 132.110799][ T10] usb 5-1: USB disconnect, device number 3 [ 132.161289][ T6627] dummy0: entered promiscuous mode [ 132.176819][ T6626] dummy0: left promiscuous mode [ 133.288623][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.372120][ T6666] sctp: [Deprecated]: syz.1.317 (pid 6666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.372120][ T6666] Use struct sctp_sack_info instead [ 133.396139][ T6667] ./file0: Can't lookup blockdev [ 133.470519][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 133.494954][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.508433][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.526893][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.539475][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 133.570410][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.592447][ T24] usb 1-1: config 0 descriptor?? [ 133.807393][ T6678] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 133.807393][ T6678] The task syz.1.321 (6678) triggered the difference, watch for misbehavior. [ 134.032264][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.053932][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.173647][ T6685] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.338923][ T10] usb 1-1: USB disconnect, device number 3 [ 135.662124][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 135.872536][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 135.892015][ T10] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.930529][ T10] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 135.985397][ T10] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.020368][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 136.032404][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 136.042359][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.070317][ T10] usb 2-1: Product: syz [ 136.096125][ T10] usb 2-1: Manufacturer: syz [ 136.113360][ T10] usb 2-1: SerialNumber: syz [ 136.403941][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 136.633440][ T10] usb 2-1: USB disconnect, device number 7 [ 136.653108][ T10] usblp0: removed [ 136.667853][ T6748] openvswitch: netlink: Missing key (keys=40, expected=80) [ 136.691434][ T6749] binder: 6747:6749 ioctl c0306201 200000000100 returned -14 [ 136.960546][ T6756] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 137.944001][ T1211] IPVS: starting estimator thread 0... [ 137.951043][ T6771] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 138.060456][ T6779] IPVS: using max 25 ests per chain, 60000 per kthread [ 138.219965][ T6787] input: syz0 as /devices/virtual/input/input5 [ 138.288514][ T6789] netlink: 'syz.0.370': attribute type 10 has an invalid length. [ 138.340822][ T1211] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.363193][ T6791] netlink: 512 bytes leftover after parsing attributes in process `syz.2.372'. [ 138.385166][ T6789] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 138.405581][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.420538][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.554251][ T1211] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 138.575069][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.620383][ T1211] usb 5-1: Product: syz [ 138.624673][ T1211] usb 5-1: Manufacturer: syz [ 138.629326][ T1211] usb 5-1: SerialNumber: syz [ 138.691402][ T1211] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 138.792001][ T5840] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.512979][ T1211] usb 5-1: USB disconnect, device number 4 [ 140.161040][ T5840] usb 5-1: Service connection timeout for: 256 [ 140.180219][ T5840] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 140.223951][ T5840] ath9k_htc: Failed to initialize the device [ 140.269401][ T1211] usb 5-1: ath9k_htc: USB layer deinitialized [ 140.660334][ T5893] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.883792][ T5893] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 140.911606][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.947049][ T5893] usb 4-1: config 0 descriptor?? [ 140.963317][ T5893] cp210x 4-1:0.0: cp210x converter detected [ 141.208278][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 141.384949][ T5893] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 141.462458][ T5893] usb 4-1: cp210x converter now attached to ttyUSB0 [ 141.496809][ T6875] sctp: [Deprecated]: syz.1.406 (pid 6875) Use of int in max_burst socket option deprecated. [ 141.496809][ T6875] Use struct sctp_assoc_value instead [ 141.650256][ T5840] usb 4-1: USB disconnect, device number 3 [ 141.706390][ T5840] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 141.769661][ T5840] cp210x 4-1:0.0: device disconnected [ 142.754418][ T6905] input: syz1 as /devices/virtual/input/input7 [ 142.796915][ T6901] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 142.823847][ T6906] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 144.159966][ T6935] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 144.222201][ T6934] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 144.323534][ T6941] loop9: detected capacity change from 0 to 7 [ 144.384322][ T6941] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 144.389970][ T6941] loop9: partition table partially beyond EOD, truncated [ 144.498514][ T6941] loop9: p1 size 2433217042 extends beyond EOD, truncated [ 144.682070][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 145.405942][ T6964] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.537857][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 145.581190][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 145.641305][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 145.832496][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 145.865219][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.894799][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 145.925183][ T24] usb 5-1: SerialNumber: syz [ 146.577542][ T6995] tun0: tun_chr_ioctl cmd 1074025675 [ 146.590367][ T6995] tun0: persist enabled [ 146.736904][ T6995] tun0: tun_chr_ioctl cmd 1074025675 [ 146.743204][ T24] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 146.763312][ T6995] tun0: persist disabled [ 146.990201][ T24] usb 5-1: USB disconnect, device number 5 [ 146.998260][ T24] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 148.085877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 148.333075][ T7043] syzkaller1: entered promiscuous mode [ 148.338750][ T7043] syzkaller1: entered allmulticast mode [ 150.680267][ T5893] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 150.877192][ T5893] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.909052][ T5893] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.939789][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.952685][ T7134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.960614][ T5893] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 150.982391][ T7134] batadv_slave_1: entered promiscuous mode [ 150.988444][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.010501][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 151.064795][ T5893] usb 5-1: config 0 descriptor?? [ 151.706269][ T5893] usb 5-1: string descriptor 0 read error: -22 [ 152.113104][ T5893] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #100: -71 [ 152.141182][ T5893] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 152.159643][ T5893] uclogic 0003:256C:006D.0004: failed probing pen v1 parameters: -71 [ 152.187238][ T5893] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 152.204491][ T5893] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 152.229635][ T5893] usb 5-1: USB disconnect, device number 6 [ 152.392239][ T5962] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 152.560190][ T5962] usb 4-1: Using ep0 maxpacket: 32 [ 152.617583][ T5962] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 152.624140][ T7174] loop8: detected capacity change from 0 to 8 [ 152.640693][ T5962] usb 4-1: config 0 interface 0 has no altsetting 0 [ 152.675854][ T7174] Dev loop8: unable to read RDB block 8 [ 152.680212][ T5962] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 152.686677][ T7174] loop8: unable to read partition table [ 152.714345][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.716214][ T7174] loop8: partition table beyond EOD, truncated [ 152.765657][ T7178] overlayfs: upper fs does not support file handles, falling back to index=off. [ 152.774768][ T5962] usb 4-1: config 0 descriptor?? [ 152.782356][ T7174] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 152.804271][ T7178] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 152.818023][ T7178] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 152.943778][ T7180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.446558][ T7196] netlink: 64 bytes leftover after parsing attributes in process `syz.2.533'. [ 153.580308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 153.622500][ T5962] corsair-psu 0003:1B1C:1C09.0005: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 153.637340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 153.771320][ T5949] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 153.797844][ T5962] corsair-psu 0003:1B1C:1C09.0005: unable to initialize device (-95) [ 153.821716][ T5962] corsair-psu 0003:1B1C:1C09.0005: probe with driver corsair-psu failed with error -95 [ 153.951864][ T5949] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 153.973908][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.985423][ T5949] usb 5-1: Product: syz [ 153.989678][ T5949] usb 5-1: Manufacturer: syz [ 153.997541][ T5949] usb 5-1: SerialNumber: syz [ 154.000649][ T5893] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 154.014675][ T5949] usb 5-1: config 0 descriptor?? [ 154.044208][ T43] usb 4-1: USB disconnect, device number 4 [ 154.170466][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 154.182576][ T5893] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 154.202321][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.234619][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.263857][ T5949] hso 5-1:0.0: Can't find BULK IN endpoint [ 154.291161][ T5949] usb-storage 5-1:0.0: USB Mass Storage device detected [ 154.303471][ T5893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.316081][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.330182][ T5893] usb 2-1: Product: syz [ 154.343946][ T5893] usb 2-1: Manufacturer: syz [ 154.357553][ T5893] usb 2-1: SerialNumber: syz [ 154.495853][ T5949] usb 5-1: USB disconnect, device number 7 [ 154.784929][ T5893] usb 2-1: 0:2 : does not exist [ 155.350413][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 155.419946][ T5893] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 155.513726][ T5893] usb 2-1: USB disconnect, device number 8 [ 155.530358][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 155.540605][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.568402][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.620049][ T5847] udevd[5847]: setting owner of /dev/bus/usb/002/008 to uid=0, gid=0 failed: No such file or directory [ 155.623729][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 155.665591][ T43] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 155.681653][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.695829][ T43] usb 3-1: config 0 descriptor?? [ 155.790006][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.164316][ T43] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 156.167386][ T5843] Bluetooth: hci3: unexpected cc 0x040d length: 63 > 7 [ 156.367142][ T43] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 156.379793][ T43] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 156.474257][ T5901] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 156.498472][ T43] usb 3-1: USB disconnect, device number 3 [ 156.540557][ T5901] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 156.609691][ T5901] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 156.648673][ T5901] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 156.751305][ T7274] cgroup: fork rejected by pids controller in /syz1 [ 157.274376][ T5840] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 157.347156][ T7289] netlink: 'syz.2.574': attribute type 1 has an invalid length. [ 157.360877][ T7289] netlink: 216 bytes leftover after parsing attributes in process `syz.2.574'. [ 157.433669][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.480614][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.518707][ T5840] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.546046][ T7291] ALSA: mixer_oss: invalid OSS volume '' [ 157.552022][ T5840] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.594443][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.635081][ T1089] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.650335][ T5840] usb 1-1: config 0 descriptor?? [ 157.797184][ T1089] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.968279][ T1089] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.098167][ T5840] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 158.139656][ T5840] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 158.152380][ T5840] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 158.166274][ T5840] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 158.184552][ T1089] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.215784][ T5840] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 158.250431][ T5840] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 158.339923][ T5840] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 158.414090][ T5840] usb 1-1: USB disconnect, device number 4 [ 158.618299][ T7305] fido_id[7305]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 158.778334][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.788988][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.796396][ T1211] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 158.806547][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.821972][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.835452][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.871522][ T1089] bridge_slave_1: left allmulticast mode [ 158.883793][ T1089] bridge_slave_1: left promiscuous mode [ 158.901258][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.929130][ T1089] bridge_slave_0: left allmulticast mode [ 158.981719][ T1089] bridge_slave_0: left promiscuous mode [ 158.993352][ T1211] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.004943][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.033483][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.058125][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 159.078911][ T1211] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.112823][ T1211] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.140189][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.165248][ T1211] usb 5-1: config 0 descriptor?? [ 159.639567][ T1211] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 159.912672][ T43] usb 5-1: USB disconnect, device number 8 [ 160.245326][ T5843] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 160.260283][ T5843] Bluetooth: hci3: Injecting HCI hardware error event [ 160.269599][ T5843] Bluetooth: hci3: hardware error 0x00 [ 160.616841][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.757928][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.805476][ T1089] bond0 (unregistering): Released all slaves [ 160.831595][ T7312] syzkaller1: entered promiscuous mode [ 160.837343][ T7312] syzkaller1: entered allmulticast mode [ 160.881675][ T5845] Bluetooth: hci2: command tx timeout [ 160.940836][ T1211] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 161.123716][ T1211] usb 5-1: unable to get BOS descriptor or descriptor too short [ 161.138581][ T1211] usb 5-1: not running at top speed; connect to a high speed hub [ 161.154055][ T1211] usb 5-1: config 187 interface 0 altsetting 8 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 161.172592][ T1211] usb 5-1: config 187 interface 0 altsetting 8 endpoint 0x6 has invalid maxpacket 576, setting to 64 [ 161.217191][ T1211] usb 5-1: config 187 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 161.267065][ T1211] usb 5-1: config 187 interface 0 has no altsetting 0 [ 161.296062][ T1211] usb 5-1: New USB device found, idVendor=0582, idProduct=0012, bcdDevice=e2.be [ 161.329772][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.372009][ T1211] usb 5-1: Product: syz [ 161.377701][ T1211] usb 5-1: Manufacturer: syz [ 161.400167][ T1211] usb 5-1: SerialNumber: syz [ 161.423403][ T7356] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.462140][ T7356] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.711894][ T1211] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.721957][ T1089] hsr_slave_0: left promiscuous mode [ 161.740253][ T5949] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 161.758555][ T1089] hsr_slave_1: left promiscuous mode [ 161.768149][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.791181][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.799083][ T1211] usb 5-1: USB disconnect, device number 9 [ 161.874181][ T6296] udevd[6296]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:187.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.879898][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.930284][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.932368][ T5949] usb 1-1: config 0 interface 0 has no altsetting 0 [ 161.969711][ T5949] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 161.988774][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.018111][ T5949] usb 1-1: config 0 descriptor?? [ 162.066360][ T1089] veth1_macvtap: left promiscuous mode [ 162.090542][ T1089] veth0_macvtap: left promiscuous mode [ 162.096585][ T1089] veth1_vlan: left promiscuous mode [ 162.110567][ T1089] veth0_vlan: left promiscuous mode [ 162.400914][ T5843] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 162.434005][ T7376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.960466][ T5843] Bluetooth: hci2: command tx timeout [ 163.047826][ T5949] video4linux radio48: keene_cmd_set failed (-71) [ 163.065546][ T5949] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 163.083380][ T5949] usb 1-1: USB disconnect, device number 5 [ 163.732553][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 163.849602][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 164.012756][ T1211] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 164.199950][ T1211] usb 4-1: Using ep0 maxpacket: 32 [ 164.207328][ T1211] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 164.220188][ T1211] usb 4-1: config 0 has no interface number 0 [ 164.245059][ T1211] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 164.266264][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.294512][ T1211] usb 4-1: Product: syz [ 164.298867][ T1211] usb 4-1: Manufacturer: syz [ 164.305316][ T1211] usb 4-1: SerialNumber: syz [ 164.315797][ T1211] usb 4-1: config 0 descriptor?? [ 164.336145][ T1211] smsc95xx v2.0.0 [ 165.040271][ T5843] Bluetooth: hci2: command tx timeout [ 165.246305][ T7314] chnl_net:caif_netlink_parms(): no params data found [ 165.388160][ T1211] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 165.425909][ T1211] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 165.452090][ T1211] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 165.470387][ T1211] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 165.507395][ T1211] usb 4-1: USB disconnect, device number 5 [ 165.681285][ T7314] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.688528][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.716976][ T7314] bridge_slave_0: entered allmulticast mode [ 165.745076][ T7314] bridge_slave_0: entered promiscuous mode [ 165.757660][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.765151][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.788269][ T7314] bridge_slave_1: entered allmulticast mode [ 165.852768][ T7314] bridge_slave_1: entered promiscuous mode [ 165.976418][ T7314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.004910][ T7314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.104836][ T7438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.612'. [ 166.125023][ T7442] capability: warning: `syz.3.614' uses 32-bit capabilities (legacy support in use) [ 166.137354][ T7438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.612'. [ 166.439049][ T7314] team0: Port device team_slave_0 added [ 166.476630][ T7314] team0: Port device team_slave_1 added [ 166.656336][ T7314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.665359][ T7314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.703920][ T7314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.837737][ T7314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.870232][ T7314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.969925][ T7314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.120272][ T5843] Bluetooth: hci2: command tx timeout [ 167.303041][ T7314] hsr_slave_0: entered promiscuous mode [ 167.312084][ T7314] hsr_slave_1: entered promiscuous mode [ 167.319608][ T7314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.334090][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 167.334759][ T7314] Cannot create hsr debugfs directory [ 167.627659][ T1089] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.793897][ T1089] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.124589][ T1089] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.402373][ T1089] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.815550][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.826523][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.841665][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.851501][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.860332][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.304984][ T1089] bridge_slave_1: left allmulticast mode [ 169.326136][ T1089] bridge_slave_1: left promiscuous mode [ 169.352166][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.373222][ T1089] bridge_slave_0: left allmulticast mode [ 169.379241][ T1089] bridge_slave_0: left promiscuous mode [ 169.388296][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.005211][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 170.091722][ T5962] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 170.113782][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.126221][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.140530][ T1089] bond0 (unregistering): Released all slaves [ 170.282614][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.300153][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.320527][ T5962] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.344709][ T5962] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.360195][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.376229][ T5962] usb 5-1: config 0 descriptor?? [ 170.650722][ T5845] Bluetooth: hci2: command 0x0405 tx timeout [ 170.797713][ T5962] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 170.845552][ T5962] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 170.970794][ T5845] Bluetooth: hci1: command tx timeout [ 171.077020][ T10] usb 5-1: USB disconnect, device number 10 [ 171.325537][ T1089] hsr_slave_0: left promiscuous mode [ 171.347312][ T1089] hsr_slave_1: left promiscuous mode [ 171.355017][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.371511][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.383422][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.408681][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.470213][ T1089] veth1_macvtap: left promiscuous mode [ 171.475864][ T1089] veth0_macvtap: left promiscuous mode [ 171.506246][ T1089] veth1_vlan: left promiscuous mode [ 171.518981][ T1089] veth0_vlan: left promiscuous mode [ 171.984992][ T7570] IPVS: Scheduler module ip_vs_sip not found [ 172.418962][ T7578] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 172.444546][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 172.537687][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 172.680297][ T7582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.020823][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 173.044370][ T5845] Bluetooth: hci1: command tx timeout [ 173.170313][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 173.177681][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 173.199804][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 173.216951][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 173.228154][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.240882][ T10] usb 1-1: Product: syz [ 173.245607][ T10] usb 1-1: Manufacturer: syz [ 173.250504][ T10] usb 1-1: SerialNumber: syz [ 173.259005][ T10] usb 1-1: config 0 descriptor?? [ 173.269821][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 173.284256][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 173.391035][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 173.412353][ T7511] chnl_net:caif_netlink_parms(): no params data found [ 173.561179][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 173.578394][ T43] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 173.590217][ T43] usb 5-1: config 0 has no interface number 0 [ 173.610373][ T43] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 173.640216][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.651484][ T7314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.682084][ T43] usb 5-1: Product: syz [ 173.702329][ T43] usb 5-1: Manufacturer: syz [ 173.707275][ T43] usb 5-1: SerialNumber: syz [ 173.758037][ T43] usb 5-1: config 0 descriptor?? [ 173.791643][ T43] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 173.819443][ T7314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.857653][ T7314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.875765][ T7511] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.883501][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.891426][ T7511] bridge_slave_0: entered allmulticast mode [ 173.892976][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 173.902371][ T7511] bridge_slave_0: entered promiscuous mode [ 173.913506][ T7314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.926533][ T10] em28xx 1-1:0.0: Config register raw data: 0x15 [ 173.950887][ T7511] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.958307][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.970555][ T7511] bridge_slave_1: entered allmulticast mode [ 173.978859][ T7511] bridge_slave_1: entered promiscuous mode [ 174.011113][ T43] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 174.052283][ T43] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 174.107258][ T7511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.137478][ T10] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 174.154287][ T10] em28xx 1-1:0.0: No AC97 audio processor [ 174.207914][ T7511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.229417][ T10] usb 1-1: USB disconnect, device number 6 [ 174.258098][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 174.279093][ T10] em28xx 1-1:0.0: Freeing device [ 174.405899][ T7511] team0: Port device team_slave_0 added [ 174.433448][ T7511] team0: Port device team_slave_1 added [ 174.473820][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 174.483552][ T43] usb 5-1: USB disconnect, device number 11 [ 174.527331][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 174.564389][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 174.583977][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.595205][ T43] quatech2 5-1:0.51: device disconnected [ 174.601635][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.628002][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.662181][ T7511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.701075][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.709209][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.791183][ T7511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.019090][ T7511] hsr_slave_0: entered promiscuous mode [ 175.055497][ T7511] hsr_slave_1: entered promiscuous mode [ 175.102096][ T7511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.109783][ T7511] Cannot create hsr debugfs directory [ 175.120402][ T5845] Bluetooth: hci1: command tx timeout [ 175.569023][ T7314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.860947][ T7314] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.004534][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.011909][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.103571][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.110855][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.202593][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 176.378081][ T7314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.502697][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.690'. [ 176.550336][ T7511] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.615897][ T7511] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.657902][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.667396][ T7657] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.865712][ T7511] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.880638][ T5949] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 176.928915][ T7511] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 176.979154][ T7665] syzkaller1: entered promiscuous mode [ 176.996902][ T7665] syzkaller1: entered allmulticast mode [ 177.075491][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.107875][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 177.145228][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 177.184678][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.202074][ T5845] Bluetooth: hci1: command tx timeout [ 177.215361][ T5949] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.227670][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.251203][ T5949] usb 3-1: config 0 descriptor?? [ 177.258363][ T7664] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 177.357643][ T7314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.418969][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 177.428655][ T7688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.694'. [ 177.526785][ T7511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.636829][ T7511] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.656751][ T7314] veth0_vlan: entered promiscuous mode [ 177.688961][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.696365][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.761270][ T7314] veth1_vlan: entered promiscuous mode [ 177.777658][ T5949] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 177.797523][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.804832][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.828502][ T5949] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 178.081082][ T5949] usb 3-1: USB disconnect, device number 4 [ 178.153321][ T7697] fido_id[7697]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 178.255918][ T7314] veth0_macvtap: entered promiscuous mode [ 178.299278][ T7314] veth1_macvtap: entered promiscuous mode [ 178.392694][ T7314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.463087][ T7314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.499042][ T7314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.533655][ T7314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.577203][ T7314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.605422][ T7314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.350767][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.365284][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.467663][ T7511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.525187][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.564314][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.700358][ T5949] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 179.877239][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 179.923022][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 179.976273][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 180.017727][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.074779][ T5949] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.125025][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.180161][ T5949] usb 3-1: config 0 descriptor?? [ 180.454853][ T31] audit: type=1326 audit(1754484372.050:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7754 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b7d8ebe9 code=0x7ffc0000 [ 180.521026][ T31] audit: type=1326 audit(1754484372.050:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7754 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f28b7d2add9 code=0x7ffc0000 [ 180.591043][ T31] audit: type=1326 audit(1754484372.050:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7754 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f28b7d2add9 code=0x7ffc0000 [ 180.653612][ T31] audit: type=1326 audit(1754484372.050:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7754 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b7d8ebe9 code=0x7ffc0000 [ 180.689975][ T5949] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 180.756270][ T31] audit: type=1326 audit(1754484372.050:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7754 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f28b7d2add9 code=0x7ffc0000 [ 180.889494][ T31] audit: type=1326 audit(1754484372.050:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7754 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f28b7d2add9 code=0x7ffc0000 [ 180.909702][ T5949] usb 3-1: USB disconnect, device number 5 [ 180.939334][ T7765] netlink: 'syz.1.713': attribute type 10 has an invalid length. [ 180.993578][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.009471][ T31] audit: type=1326 audit(1754484372.050:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7754 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b7d8ebe9 code=0x7ffc0000 [ 181.046824][ T7765] bridge_slave_1: left allmulticast mode [ 181.053951][ T7765] bridge_slave_1: left promiscuous mode [ 181.056291][ T7762] fido_id[7762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 181.074611][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.082872][ T31] audit: type=1326 audit(1754484372.050:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7754 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b7d8ebe9 code=0x7ffc0000 [ 181.107483][ T31] audit: type=1326 audit(1754484372.060:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7754 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f28b7d2add9 code=0x7ffc0000 [ 181.131113][ T31] audit: type=1326 audit(1754484372.060:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7754 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b7d8ebe9 code=0x7ffc0000 [ 181.169727][ T7765] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 181.186521][ T7511] veth0_vlan: entered promiscuous mode [ 181.221799][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 181.231352][ T7511] veth1_vlan: entered promiscuous mode [ 181.335266][ T7511] veth0_macvtap: entered promiscuous mode [ 181.385475][ T7511] veth1_macvtap: entered promiscuous mode [ 181.434460][ T7511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.503875][ T7511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.544068][ T7511] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.578825][ T7511] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.606570][ T7511] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.629081][ T7511] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.988708][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.073601][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.188483][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.238982][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.634887][ T7806] input: syz0 as /devices/virtual/input/input14 [ 183.402350][ T7822] netlink: 188 bytes leftover after parsing attributes in process `syz.1.730'. [ 184.048574][ T7848] sctp: [Deprecated]: syz.2.739 (pid 7848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.048574][ T7848] Use struct sctp_sack_info instead [ 184.167858][ T5845] block nbd5: Receive control failed (result -107) [ 184.305924][ T7851] block nbd5: shutting down sockets [ 184.381269][ T7857] syz_tun: entered promiscuous mode [ 184.404426][ T7857] macsec1: entered allmulticast mode [ 184.427188][ T7857] syz_tun: entered allmulticast mode [ 184.470961][ T7857] syz_tun: left allmulticast mode [ 184.476472][ T7857] syz_tun: left promiscuous mode [ 185.276377][ T7885] netlink: 'syz.4.752': attribute type 25 has an invalid length. [ 185.314820][ T7885] netlink: 'syz.4.752': attribute type 7 has an invalid length. [ 186.403441][ T43] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 186.590480][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 186.608566][ T43] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 186.650184][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.680617][ T43] usb 1-1: Product: syz [ 186.700784][ T43] usb 1-1: Manufacturer: syz [ 186.726309][ T43] usb 1-1: SerialNumber: syz [ 186.757542][ T43] usb 1-1: config 0 descriptor?? [ 186.801237][ T5840] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 186.980285][ T5840] usb 5-1: Using ep0 maxpacket: 32 [ 186.995380][ T5840] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 187.003346][ T43] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 187.027500][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.073792][ T5840] usb 5-1: config 0 descriptor?? [ 187.297657][ T5840] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 187.316188][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.355574][ T5840] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 187.373440][ T5840] usb 5-1: media controller created [ 187.429600][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.549325][ T5840] az6027: usb out operation failed. (-71) [ 187.562682][ T5840] az6027: usb out operation failed. (-71) [ 187.579151][ T5840] stb0899_attach: Driver disabled by Kconfig [ 187.606582][ T5840] az6027: no front-end attached [ 187.606582][ T5840] [ 187.638779][ T5840] az6027: usb out operation failed. (-71) [ 187.655648][ T5840] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 187.689347][ T5840] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 187.749047][ T5840] dvb-usb: schedule remote query interval to 400 msecs. [ 187.771769][ T5840] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 187.822992][ T5840] usb 5-1: USB disconnect, device number 12 [ 187.825920][ T43] gspca_sunplus: reg_w_riv err -71 [ 187.853471][ T43] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 187.888552][ T43] usb 1-1: USB disconnect, device number 7 [ 188.060873][ T5840] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 188.642312][ T7988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.195889][ T8025] netlink: 'syz.2.800': attribute type 29 has an invalid length. [ 190.210255][ T8025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.800'. [ 190.830876][ T8050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'. [ 191.316124][ T8070] loop2: detected capacity change from 0 to 7 [ 191.354954][ T5847] Dev loop2: unable to read RDB block 7 [ 191.369591][ T5847] loop2: AHDI p2 p3 [ 191.394722][ T5847] loop2: partition table partially beyond EOD, truncated [ 191.424882][ T5847] loop2: p2 size 150995456 extends beyond EOD, truncated [ 191.473848][ T8070] Dev loop2: unable to read RDB block 7 [ 191.485627][ T8070] loop2: AHDI p2 p3 [ 191.500742][ T8070] loop2: partition table partially beyond EOD, truncated [ 191.560491][ T8070] loop2: p2 size 150995456 extends beyond EOD, truncated [ 191.873409][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 192.062966][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 192.083857][ T8092] block nbd4: NBD_DISCONNECT [ 192.105179][ T8085] block nbd4: Disconnected due to user request. [ 192.143492][ T8085] block nbd4: shutting down sockets [ 192.433987][ T8097] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.558895][ T8101] netlink: 'syz.2.824': attribute type 12 has an invalid length. [ 192.586246][ T8101] netlink: 'syz.2.824': attribute type 29 has an invalid length. [ 192.605738][ T8101] netlink: 148 bytes leftover after parsing attributes in process `syz.2.824'. [ 192.626600][ T8101] netlink: 59 bytes leftover after parsing attributes in process `syz.2.824'. [ 192.725871][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.827'. [ 192.840636][ T8111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.828'. [ 192.853917][ T8097] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.942816][ T8108] IPVS: Error joining to the multicast group [ 193.122387][ T8097] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.372874][ T8097] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.695032][ T8097] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.755671][ T8097] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.833567][ T8097] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.940514][ T8097] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.209742][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'. [ 194.734066][ T8167] syz_tun: entered allmulticast mode [ 194.774386][ T8166] syz_tun: left allmulticast mode [ 194.950621][ T8173] netlink: 428 bytes leftover after parsing attributes in process `syz.4.848'. [ 194.995894][ T8173] netlink: 'syz.4.848': attribute type 5 has an invalid length. [ 195.511132][ T8194] input: syz1 as /devices/virtual/input/input16 [ 195.627319][ T8204] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 195.720203][ T5901] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 195.830263][ T5949] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 195.892343][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.925143][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.956766][ T5901] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 195.988759][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.003206][ T5901] usb 1-1: config 0 descriptor?? [ 196.033784][ T5949] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.060874][ T5949] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 196.100336][ T5949] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 196.129546][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.164312][ T5949] usb 5-1: config 0 descriptor?? [ 196.183079][ T5949] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 196.189831][ T5949] dvb-usb: bulk message failed: -22 (3/0) [ 196.258488][ T5949] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 196.287205][ T5949] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 196.304293][ T5949] usb 5-1: media controller created [ 196.323483][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.399983][ T5949] dvb-usb: bulk message failed: -22 (6/0) [ 196.431351][ T5949] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 196.445756][ T5901] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0 [ 196.483408][ T5949] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 196.510428][ T5901] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0 [ 196.518010][ T5901] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0 [ 196.569602][ T5949] dvb-usb: schedule remote query interval to 150 msecs. [ 196.638621][ T5949] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 196.767039][ T8231] can0: slcan on ttyS3. [ 196.796515][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 196.824872][ T5949] dvb-usb: error while querying for an remote control event. [ 196.974033][ T8231] can0 (unregistered): slcan off ttyS3. [ 197.001807][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 197.022190][ T5949] dvb-usb: error while querying for an remote control event. [ 197.051411][ T5840] usb 1-1: USB disconnect, device number 8 [ 197.240181][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 197.268021][ T43] usb 5-1: USB disconnect, device number 13 [ 197.271081][ T5949] dvb-usb: error while querying for an remote control event. [ 197.331126][ T8248] loop8: detected capacity change from 0 to 8 [ 197.367470][ T5847] Dev loop8: unable to read RDB block 8 [ 197.396475][ T5847] loop8: unable to read partition table [ 197.404884][ T43] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 197.415140][ T5847] loop8: partition table beyond EOD, truncated [ 197.459155][ T8248] Dev loop8: unable to read RDB block 8 [ 197.483322][ T8248] loop8: unable to read partition table [ 197.503733][ T8248] loop8: partition table beyond EOD, truncated [ 197.520563][ T8249] netlink: 'syz.5.872': attribute type 4 has an invalid length. [ 197.528676][ T8248] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 197.540814][ T8249] netlink: 32 bytes leftover after parsing attributes in process `syz.5.872'. [ 198.531554][ T8287] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.883'. [ 199.485373][ T8313] kvm: kvm [8310]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x85 [ 199.578911][ T8323] netlink: 4344 bytes leftover after parsing attributes in process `syz.5.895'. [ 199.845935][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.860724][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.239299][ T8343] loop2: detected capacity change from 0 to 7 [ 200.287653][ T8343] Dev loop2: unable to read RDB block 7 [ 200.332702][ T8343] loop2: unable to read partition table [ 200.338640][ T8343] loop2: partition table beyond EOD, truncated [ 200.406208][ T8343] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 201.278950][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'. [ 201.322461][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'. [ 201.355552][ T8384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.916'. [ 201.375455][ T8381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.916'. [ 204.101831][ T31] kauditd_printk_skb: 42 callbacks suppressed [ 204.101860][ T31] audit: type=1326 audit(1754484395.730:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8456 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af498ebe9 code=0x7ffc0000 [ 204.243559][ T31] audit: type=1326 audit(1754484395.770:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8456 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f5af498ebe9 code=0x7ffc0000 [ 204.369716][ T31] audit: type=1326 audit(1754484395.770:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8456 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af498ebe9 code=0x7ffc0000 [ 204.391560][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.482469][ T31] audit: type=1326 audit(1754484395.770:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8456 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af498ebe9 code=0x7ffc0000 [ 204.584687][ T31] audit: type=1326 audit(1754484395.770:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8456 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5af498ebe9 code=0x7ffc0000 [ 204.606176][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.770536][ T31] audit: type=1326 audit(1754484395.770:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8456 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af498ebe9 code=0x7ffc0000 [ 204.792079][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.924302][ T31] audit: type=1326 audit(1754484395.770:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8456 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af498ebe9 code=0x7ffc0000 [ 205.053015][ T31] audit: type=1326 audit(1754484395.770:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8456 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5af498ebe9 code=0x7ffc0000 [ 205.074391][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.183076][ T31] audit: type=1326 audit(1754484395.770:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8456 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af498ebe9 code=0x7ffc0000 [ 205.284583][ T31] audit: type=1326 audit(1754484395.770:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8456 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af498ebe9 code=0x7ffc0000 [ 205.306005][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.695834][ T8525] netlink: 'syz.2.966': attribute type 10 has an invalid length. [ 206.727835][ T8526] ======================================================= [ 206.727835][ T8526] WARNING: The mand mount option has been deprecated and [ 206.727835][ T8526] and is ignored by this kernel. Remove the mand [ 206.727835][ T8526] option from the mount to silence this warning. [ 206.727835][ T8526] ======================================================= [ 206.795938][ T8525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.845909][ T8525] team0: Port device bond0 added [ 207.784172][ T8550] bridge0: port 2(gretap0) entered blocking state [ 207.810989][ T8550] bridge0: port 2(gretap0) entered disabled state [ 207.828922][ T8550] gretap0: entered allmulticast mode [ 207.875663][ T8550] gretap0: entered promiscuous mode [ 207.910690][ T8550] bridge0: port 2(gretap0) entered blocking state [ 207.917754][ T8550] bridge0: port 2(gretap0) entered forwarding state [ 207.983693][ T8553] gretap0: left allmulticast mode [ 208.004135][ T8553] gretap0: left promiscuous mode [ 208.038117][ T8553] bridge0: port 2(gretap0) entered disabled state [ 208.251032][ T8562] binder: 8561:8562 ioctl c0306201 0 returned -14 [ 208.280532][ T8562] binder: 8561:8562 ioctl 541b 0 returned -22 [ 209.109141][ T8586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.726946][ T43] kernel write not supported for file /snd/midiC2D0 (pid: 43 comm: kworker/1:1) [ 210.896445][ T8635] netlink: 'syz.4.1003': attribute type 11 has an invalid length. [ 211.510402][ T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 211.697701][ T8659] overlay: filesystem on ./bus not supported as upperdir [ 211.709413][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 211.768177][ T43] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 211.787766][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.812218][ T43] usb 1-1: config 0 descriptor?? [ 212.792731][ T5962] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 212.932620][ T43] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 212.973733][ T43] asix 1-1:0.0: probe with driver asix failed with error -71 [ 212.982861][ T5962] usb 3-1: Using ep0 maxpacket: 16 [ 213.047034][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.078304][ T43] usb 1-1: USB disconnect, device number 9 [ 213.119527][ T5962] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 213.196339][ T5962] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 213.267238][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.309680][ T5949] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 213.353272][ T5962] usb 3-1: config 0 descriptor?? [ 213.500284][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 213.528051][ T5949] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 213.569800][ T5949] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.638235][ T5949] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.692310][ T5949] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.751500][ T5949] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.814472][ T8671] raw-gadget.1 gadget.2: fail, usb_ep_set_halt returned -11 [ 213.843588][ T5949] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 213.889998][ T5962] usbhid 3-1:0.0: can't add hid device: -71 [ 213.903201][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.930439][ T5962] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 214.010960][ T5962] usb 3-1: USB disconnect, device number 6 [ 214.178125][ T5949] usb 2-1: GET_CAPABILITIES returned 0 [ 214.212713][ T5949] usbtmc 2-1:16.0: can't read capabilities [ 214.476537][ T43] usb 2-1: USB disconnect, device number 9 [ 215.026117][ T8712] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1029'. [ 216.297898][ T8742] netlink: 'syz.5.1041': attribute type 9 has an invalid length. [ 217.414211][ T43] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 217.555262][ T8774] loop5: detected capacity change from 0 to 2967 [ 217.642091][ T8774] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 217.696473][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.396057][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.421019][ T5847] Buffer I/O error on dev loop5, logical block 370, async page read [ 218.491378][ T43] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 218.562157][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.591197][ T43] usb 2-1: config 0 descriptor?? [ 218.613455][ T5207] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 219.127620][ T43] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 219.394267][ T5962] usb 2-1: USB disconnect, device number 10 [ 219.418979][ T8796] fido_id[8796]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 219.723478][ T8810] veth1_macvtap: left promiscuous mode [ 219.766611][ T8810] macsec0: entered promiscuous mode [ 220.200229][ T5840] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 220.371294][ T5840] usb 1-1: Using ep0 maxpacket: 16 [ 220.396618][ T5840] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 220.410629][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.418707][ T5840] usb 1-1: Product: syz [ 220.424960][ T5840] usb 1-1: Manufacturer: syz [ 220.429634][ T5840] usb 1-1: SerialNumber: syz [ 220.444223][ T5840] usb 1-1: config 0 descriptor?? [ 220.454570][ T5840] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 220.463809][ T5840] usb 1-1: Detected FT232H [ 220.675428][ T5840] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 221.153187][ T5840] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 221.349465][ T5948] usb 1-1: USB disconnect, device number 10 [ 221.424093][ T5948] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 221.465652][ T5948] ftdi_sio 1-1:0.0: device disconnected [ 222.294832][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 222.409537][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 222.538581][ T8879] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1088'. [ 224.218029][ T8922] netlink: 'syz.4.1104': attribute type 29 has an invalid length. [ 225.225687][ T8947] binder_alloc: binder_alloc_mmap_handler: 8946 200000ffc000-200001000000 already mapped failed -16 [ 225.299032][ T8951] sp0: Synchronizing with TNC [ 225.331273][ T8954] syzkaller1: entered promiscuous mode [ 225.366444][ T8954] syzkaller1: entered allmulticast mode [ 225.644454][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'. [ 225.720194][ T5962] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 225.931718][ T5962] usb 2-1: Using ep0 maxpacket: 32 [ 225.991566][ T5962] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 226.040719][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.102951][ T5962] usb 2-1: config 0 descriptor?? [ 226.157048][ T5962] gspca_main: sq930x-2.14.0 probing 041e:403c [ 226.630582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 226.640315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 226.716175][ T31] audit: type=1326 audit(1754484674.340:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8987 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af498ebe9 code=0x7ffc0000 [ 226.856707][ T31] audit: type=1326 audit(1754484674.380:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8987 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5af492add9 code=0x7ffc0000 [ 226.880481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 226.952897][ T31] audit: type=1326 audit(1754484674.380:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8987 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af498ebe9 code=0x7ffc0000 [ 227.035522][ T31] audit: type=1326 audit(1754484674.390:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8987 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5af492add9 code=0x7ffc0000 [ 227.141857][ T31] audit: type=1326 audit(1754484674.390:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8987 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5af492add9 code=0x7ffc0000 [ 227.193716][ T5962] gspca_sq930x: ucbus_write failed -71 [ 227.237078][ T5962] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 227.281267][ T5962] usb 2-1: USB disconnect, device number 11 [ 227.300250][ T31] audit: type=1326 audit(1754484674.390:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8987 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5af492add9 code=0x7ffc0000 [ 227.432433][ T31] audit: type=1326 audit(1754484674.390:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8987 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5af492add9 code=0x7ffc0000 [ 227.546113][ T31] audit: type=1326 audit(1754484674.390:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8987 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5af492add9 code=0x7ffc0000 [ 227.628625][ T31] audit: type=1326 audit(1754484674.400:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8987 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f5af498ebe9 code=0x7ffc0000 [ 227.702890][ T31] audit: type=1326 audit(1754484674.400:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8987 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af498ebe9 code=0x7ffc0000 [ 227.860255][ T43] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 228.021127][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 228.034021][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.100163][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.141702][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 228.183613][ T43] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 228.212471][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.271251][ T43] usb 1-1: config 0 descriptor?? [ 228.781963][ T43] HID 045e:07da: Invalid code 65791 type 1 [ 228.816588][ T43] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000E/input/input18 [ 228.979898][ T43] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 229.129887][ T43] usb 1-1: USB disconnect, device number 11 [ 229.400027][ T9037] fido_id[9037]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 229.800256][ T5840] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 230.000589][ T5840] usb 5-1: Using ep0 maxpacket: 16 [ 230.025892][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.077537][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 230.128658][ T5840] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 230.172304][ T5840] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 230.218558][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.272045][ T5840] usb 5-1: config 0 descriptor?? [ 230.748289][ T5840] nintendo 0003:057E:2019.000F: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 231.125741][ T5840] nintendo 0003:057E:2019.000F: Failed to get joycon info; ret=-71 [ 231.171482][ T5840] nintendo 0003:057E:2019.000F: Failed to retrieve controller info; ret=-71 [ 231.203328][ T5840] nintendo 0003:057E:2019.000F: Failed to initialize controller; ret=-71 [ 231.244467][ T5840] nintendo 0003:057E:2019.000F: probe - fail = -71 [ 231.262538][ T5840] nintendo 0003:057E:2019.000F: probe with driver nintendo failed with error -71 [ 231.311174][ T5840] usb 5-1: USB disconnect, device number 14 [ 231.595234][ T9093] overlayfs: invalid origin (00000000d1d3e81a820eee8a94416592a5356da96db48150eae08457fbc30ece5e7e7e318cb2b4b22122226fe65c239a) [ 231.987851][ T9091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.383410][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1165'. [ 232.596700][ T9128] syzkaller1: entered promiscuous mode [ 232.607255][ T9128] syzkaller1: entered allmulticast mode [ 233.058117][ T9141] syzkaller1: entered promiscuous mode [ 233.096869][ T9141] syzkaller1: entered allmulticast mode [ 233.147214][ T9145] netlink: 'syz.4.1177': attribute type 12 has an invalid length. [ 233.156807][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 233.368637][ T9145] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 234.673273][ T9195] binder: 9194:9195 ioctl c0306201 2000000001c0 returned -14 [ 235.260294][ T9221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.303323][ T9212] all (unregistering): Released all slaves [ 235.960198][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 236.190849][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.224093][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 236.282500][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 236.328991][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.400203][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.409440][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.516516][ T10] usb 6-1: config 0 descriptor?? [ 236.604179][ T9254] XFS (nullb0): Invalid superblock magic number [ 237.027916][ T10] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 237.084475][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 237.342171][ T5948] usb 6-1: USB disconnect, device number 2 [ 237.382458][ T9272] fido_id[9272]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 239.911108][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 240.080984][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 240.088662][ T9294] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 240.797105][ T9294] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 240.825197][ T9294] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 240.831714][ T9294] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 240.845742][ T9294] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 240.854401][ T9294] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 240.862928][ T9294] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 240.870257][ T9294] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 240.880714][ T9294] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.887012][ T9294] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 240.896762][ T9294] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 241.150475][ T5962] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 241.170590][ T5840] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 241.381053][ T5840] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 241.400203][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.421218][ T5840] usb 1-1: config 0 descriptor?? [ 241.445374][ T5840] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 241.470608][ T5893] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 241.687308][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 241.764007][ T5893] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 241.792715][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.828595][ T5893] usb 5-1: Product: syz [ 241.861811][ T5893] usb 5-1: Manufacturer: syz [ 241.866511][ T5893] usb 5-1: SerialNumber: syz [ 241.878762][ T5840] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 241.911043][ T5893] usb 5-1: config 0 descriptor?? [ 242.160191][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 242.294161][ T5840] gspca_cpia1: usb_control_msg 02, error -71 [ 242.314835][ T5840] gspca_cpia1: usb_control_msg 05, error -71 [ 242.345150][ T5840] cpia1 1-1:0.0: unexpected systemstate: 00 [ 242.357014][ T5893] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 242.365651][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 242.367784][ T5893] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 242.367842][ T5893] usb 5-1: media controller created [ 242.384077][ T5840] usb 1-1: USB disconnect, device number 12 [ 242.486301][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.491476][ T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.687478][ T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.818347][ T9391] sd 0:0:1:0: device reset [ 242.834566][ T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.880595][ T5845] Bluetooth: hci2: command 0x0405 tx timeout [ 242.972931][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 243.052357][ T9395] binder: 9394:9395 ioctl c018620b 200000000700 returned -14 [ 243.072319][ T5893] zl10353_read_register: readreg error (reg=127, ret==0) [ 243.074308][ T9367] dtv5100: wlen = 0, aborting. [ 243.091702][ T5893] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 243.102244][ T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.137071][ T5893] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 243.201750][ T5893] usb 5-1: USB disconnect, device number 15 [ 243.357435][ T5997] udevd[5997]: setting mode of /dev/dvb/adapter1/dvr0 to 020660 failed: No such file or directory [ 243.397691][ T5893] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 243.419988][ T5997] udevd[5997]: setting owner of /dev/dvb/adapter1/dvr0 to uid=0, gid=28 failed: No such file or directory [ 243.850576][ T30] bridge_slave_1: left allmulticast mode [ 243.868548][ T30] bridge_slave_1: left promiscuous mode [ 243.920777][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.013439][ T30] bridge_slave_0: left allmulticast mode [ 244.019181][ T30] bridge_slave_0: left promiscuous mode [ 244.071916][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.211808][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.238966][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.250211][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.258652][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.270357][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.960396][ T5845] Bluetooth: hci2: command 0x0405 tx timeout [ 245.040942][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 245.645279][ T30] team0: Port device bond0 removed [ 245.655776][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.707982][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.740673][ T30] bond0 (unregistering): Released all slaves [ 245.789852][ T9467] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1280'. [ 246.197555][ T9469] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.323209][ T5845] Bluetooth: hci4: command tx timeout [ 246.427902][ T9469] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.634818][ T9469] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.774748][ T30] hsr_slave_0: left promiscuous mode [ 246.812819][ T30] hsr_slave_1: left promiscuous mode [ 246.826870][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.848253][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.873761][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.946660][ T30] veth0_macvtap: left promiscuous mode [ 246.964744][ T30] veth1_vlan: left promiscuous mode [ 246.995045][ T30] veth0_vlan: left promiscuous mode [ 247.040190][ T5845] Bluetooth: hci2: command 0x0405 tx timeout [ 247.120184][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 248.400276][ T5845] Bluetooth: hci4: command tx timeout [ 248.490624][ T30] team0 (unregistering): Port device team_slave_1 removed [ 248.552262][ T30] team0 (unregistering): Port device team_slave_0 removed [ 250.226391][ T9547] netlink: 'syz.1.1307': attribute type 11 has an invalid length. [ 250.380261][ T5949] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 250.484745][ T5845] Bluetooth: hci4: command tx timeout [ 250.556876][ T9469] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.592678][ T5949] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 250.602196][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.613810][ T5949] usb 1-1: config 0 descriptor?? [ 250.832648][ T9560] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 250.848805][ T5949] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 251.059410][ T5949] [drm:udl_init] *ERROR* Selecting channel failed [ 251.129575][ T9469] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.197599][ T5949] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 251.233490][ T5949] [drm] Initialized udl on minor 2 [ 251.253389][ T5949] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 251.269552][ T9469] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.293706][ T5949] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 251.329032][ T5840] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 251.353027][ T5949] usb 1-1: USB disconnect, device number 13 [ 251.379681][ T5840] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 251.381008][ T9469] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.439158][ T9425] chnl_net:caif_netlink_parms(): no params data found [ 251.535858][ T9469] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.981393][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 252.079299][ T9593] team_slave_0: entered promiscuous mode [ 252.086488][ T9593] team_slave_1: entered promiscuous mode [ 252.145498][ T9593] macsec1: entered promiscuous mode [ 252.168155][ T9593] team0: entered promiscuous mode [ 252.216671][ T9593] macsec1: entered allmulticast mode [ 252.225944][ T9593] team0: entered allmulticast mode [ 252.249773][ T9593] team_slave_0: entered allmulticast mode [ 252.268308][ T9593] team_slave_1: entered allmulticast mode [ 252.286186][ T9593] team0: Device macsec1 is already an upper device of the team interface [ 252.302967][ T9602] overlayfs: workdir and upperdir must reside under the same mount [ 252.311825][ T9593] team0: left allmulticast mode [ 252.330235][ T9593] team_slave_0: left allmulticast mode [ 252.335803][ T9593] team_slave_1: left allmulticast mode [ 252.359343][ T9593] team0: left promiscuous mode [ 252.393982][ T9593] team_slave_0: left promiscuous mode [ 252.399585][ T9593] team_slave_1: left promiscuous mode [ 252.480899][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1321'. [ 252.534947][ T9425] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.560425][ T5845] Bluetooth: hci4: command tx timeout [ 252.561706][ T9425] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.630348][ T9425] bridge_slave_0: entered allmulticast mode [ 252.656323][ T9425] bridge_slave_0: entered promiscuous mode [ 252.684456][ T9425] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.710521][ T9425] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.738390][ T9425] bridge_slave_1: entered allmulticast mode [ 252.772611][ T9425] bridge_slave_1: entered promiscuous mode [ 252.931405][ T5840] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 253.005795][ T9425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.039307][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 253.039327][ T31] audit: type=1326 audit(1754484700.660:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9617 comm="syz.5.1326" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f0bd8ebe9 code=0x0 [ 253.060033][ T9425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.110211][ T5840] usb 2-1: Using ep0 maxpacket: 32 [ 253.142922][ T5840] usb 2-1: config index 0 descriptor too short (expected 95, got 59) [ 253.170636][ T5840] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 253.198100][ T5840] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 253.219152][ T5840] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.239650][ T5840] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.264695][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.282768][ T5840] usb 2-1: Product: syz [ 253.298382][ T5840] usb 2-1: Manufacturer: syz [ 253.309302][ T5840] usb 2-1: SerialNumber: syz [ 253.326804][ T9425] team0: Port device team_slave_0 added [ 253.414635][ T9425] team0: Port device team_slave_1 added [ 253.554203][ T9610] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.572643][ T9425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.574932][ T5840] usb 2-1: 0:2 : does not exist [ 253.579781][ T9425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.579843][ T9425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.596628][ T9425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.662185][ T9425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.710378][ T5840] usb 2-1: USB disconnect, device number 12 [ 253.755174][ T5998] udevd[5998]: setting mode of /dev/bus/usb/002/012 to 020664 failed: No such file or directory [ 253.786089][ T5998] udevd[5998]: setting owner of /dev/bus/usb/002/012 to uid=0, gid=0 failed: No such file or directory [ 253.806485][ T9425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.834764][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.000434][ T5949] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 254.054431][ T9425] hsr_slave_0: entered promiscuous mode [ 254.061602][ T9425] hsr_slave_1: entered promiscuous mode [ 254.069619][ T9425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.077491][ T9425] Cannot create hsr debugfs directory [ 254.160524][ T5949] usb 1-1: Using ep0 maxpacket: 16 [ 254.175993][ T5949] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 254.220311][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 254.247434][ T5949] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 254.269021][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.287996][ T5949] usb 1-1: Product: syz [ 254.309004][ T5949] usb 1-1: Manufacturer: syz [ 254.320476][ T5949] usb 1-1: SerialNumber: syz [ 254.340479][ T5949] usb 1-1: config 0 descriptor?? [ 254.377649][ T5949] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 254.402510][ T5949] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 255.027378][ T5949] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 255.070978][ T5949] em28xx 1-1:0.0: Config register raw data: 0x41 [ 255.284419][ T5949] usb 1-1: USB disconnect, device number 14 [ 255.285911][ T5949] em28xx 1-1:0.0: Disconnecting em28xx [ 255.293340][ T5949] em28xx 1-1:0.0: Freeing device [ 255.354972][ T9425] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 255.398638][ T9425] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 255.419713][ T9425] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 255.469431][ T9425] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 255.750510][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 255.855693][ T9425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.940342][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 255.965613][ T9425] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.967674][ T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 256.006037][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.039488][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.046885][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.064692][ T24] usb 5-1: config 0 descriptor?? [ 256.227130][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.234485][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.306821][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 256.339370][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 256.370915][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 256.379472][ T24] usb 5-1: media controller created [ 256.513017][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.628568][ T24] az6027: usb out operation failed. (-71) [ 256.683774][ T24] az6027: usb out operation failed. (-71) [ 256.689608][ T24] stb0899_attach: Driver disabled by Kconfig [ 256.732089][ T24] az6027: no front-end attached [ 256.732089][ T24] [ 256.761541][ T24] az6027: usb out operation failed. (-71) [ 256.768113][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 256.796126][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 256.839185][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 256.861844][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 256.899009][ T24] usb 5-1: USB disconnect, device number 16 [ 256.958451][ T31] audit: type=1326 audit(1754484704.580:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.5.1348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f0bd8ebe9 code=0x0 [ 257.060045][ T9681] netlink: 'syz.0.1343': attribute type 6 has an invalid length. [ 257.079643][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 257.109988][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 257.242970][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 257.278574][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 257.320574][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.328674][ T10] usb 2-1: Product: syz [ 257.354530][ T10] usb 2-1: Manufacturer: syz [ 257.359365][ T10] usb 2-1: SerialNumber: syz [ 257.391310][ T10] usb 2-1: config 0 descriptor?? [ 257.428828][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 257.609906][ T9425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.927834][ T5949] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 258.130207][ T5949] usb 1-1: Using ep0 maxpacket: 16 [ 258.166480][ T5949] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 258.206377][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.235135][ T5949] usb 1-1: Product: syz [ 258.239437][ T5949] usb 1-1: Manufacturer: syz [ 258.290496][ T5949] usb 1-1: SerialNumber: syz [ 258.333440][ T5949] usb 1-1: config 0 descriptor?? [ 258.499987][ T5962] usb 2-1: USB disconnect, device number 13 [ 258.763291][ T9425] veth0_vlan: entered promiscuous mode [ 258.766350][ T5949] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 258.799786][ T9425] veth1_vlan: entered promiscuous mode [ 258.802352][ T5949] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 258.831144][ T5949] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 258.849638][ T5949] usb 1-1: media controller created [ 258.885107][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.938890][ T9425] veth0_macvtap: entered promiscuous mode [ 258.978066][ T9425] veth1_macvtap: entered promiscuous mode [ 259.001021][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 259.042212][ T9425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.164050][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.208103][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.230440][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.262174][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.289930][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.309554][ T9425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.356830][ T24] usb 5-1: config 0 descriptor?? [ 259.429290][ T9425] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.451994][ T5949] zl10353_read_register: readreg error (reg=127, ret==0) [ 259.459905][ T9713] dtv5100: wlen = 0, aborting. [ 259.466019][ T9425] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.486412][ T5949] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 259.500320][ T9425] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.506280][ T5949] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 259.522905][ T9425] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.532065][ T5893] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 259.558318][ T5949] usb 1-1: USB disconnect, device number 15 [ 259.658636][ T5949] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 259.704035][ T5893] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 259.760947][ T5893] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.783339][ T5893] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 259.794884][ T5893] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.879822][ T5893] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 259.913556][ T24] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 259.930196][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.959528][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.989675][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.994992][ T5893] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.130194][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.159215][ T24] usb 5-1: USB disconnect, device number 17 [ 260.185877][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.286038][ T9754] fido_id[9754]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 260.314031][ T5893] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 260.343515][ T5893] usb 2-1: USB disconnect, device number 14 [ 261.289055][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.305158][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.490463][ T9759] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1362'. [ 262.431044][ T9805] random: crng reseeded on system resumption [ 262.792317][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1377'. [ 262.849997][ T9818] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.861535][ T9818] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.870658][ T9818] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.879186][ T9818] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.115239][ T9818] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.124464][ T9818] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.133083][ T9818] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.141691][ T9818] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.688537][ T9869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.696387][ T9869] IPv6: NLM_F_CREATE should be set when creating new route [ 264.703827][ T9869] IPv6: NLM_F_CREATE should be set when creating new route [ 264.711254][ T9869] IPv6: NLM_F_CREATE should be set when creating new route [ 265.314439][ T9884] xt_CT: No such helper "syz0" [ 266.410326][ T5840] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 266.540515][ T5962] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 266.635076][ T5840] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.649809][ T5840] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.702446][ T5840] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 266.718195][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.720823][ T5962] usb 1-1: Using ep0 maxpacket: 16 [ 266.747625][ T5840] usb 2-1: SerialNumber: syz [ 266.773487][ T5962] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 266.795952][ T5962] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.822894][ T5962] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.903207][ T5962] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.926491][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.955455][ T5962] usb 1-1: Product: syz [ 266.959706][ T5962] usb 1-1: Manufacturer: syz [ 266.998775][ T5962] usb 1-1: SerialNumber: syz [ 267.007378][ T5840] usb 2-1: 0:2 : does not exist [ 267.095319][ T5840] usb 2-1: USB disconnect, device number 15 [ 267.259101][ T9948] [ 267.261511][ T9948] ===================================================== [ 267.268553][ T9948] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 267.276080][ T9948] 6.16.0-syzkaller #0 Not tainted [ 267.281134][ T9948] ----------------------------------------------------- [ 267.288105][ T9948] syz.4.1424/9948 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 267.295759][ T9948] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 267.304448][ T9948] [ 267.304448][ T9948] and this task is already holding: [ 267.311866][ T9948] ffff888022adc320 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 267.320758][ T9948] which would create a new lock dependency: [ 267.326681][ T9948] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 267.334325][ T9948] [ 267.334325][ T9948] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 267.344057][ T9948] (&dev->event_lock#2){..-.}-{3:3} [ 267.344102][ T9948] [ 267.344102][ T9948] ... which became SOFTIRQ-irq-safe at: [ 267.357045][ T9948] lock_acquire+0x120/0x360 [ 267.361767][ T9948] _raw_spin_lock_irqsave+0xa7/0xf0 [ 267.367101][ T9948] input_inject_event+0xab/0x320 [ 267.372243][ T9948] led_trigger_event+0x138/0x210 [ 267.377333][ T9948] kbd_bh+0x1c6/0x2e0 [ 267.381517][ T9948] tasklet_action_common+0x369/0x580 [ 267.386923][ T9948] handle_softirqs+0x283/0x870 [ 267.391809][ T9948] run_ksoftirqd+0x9b/0x100 [ 267.396423][ T9948] smpboot_thread_fn+0x53f/0xa60 [ 267.401463][ T9948] kthread+0x70e/0x8a0 [ 267.405651][ T9948] ret_from_fork+0x3fc/0x770 [ 267.410346][ T9948] ret_from_fork_asm+0x1a/0x30 [ 267.415322][ T9948] [ 267.415322][ T9948] to a SOFTIRQ-irq-unsafe lock: [ 267.422369][ T9948] (tasklist_lock){.+.+}-{3:3} [ 267.422403][ T9948] [ 267.422403][ T9948] ... which became SOFTIRQ-irq-unsafe at: [ 267.435175][ T9948] ... [ 267.435186][ T9948] lock_acquire+0x120/0x360 [ 267.442387][ T9948] _raw_read_lock+0x36/0x50 [ 267.447092][ T9948] __do_wait+0xde/0x740 [ 267.451361][ T9948] do_wait+0x1f8/0x520 [ 267.455547][ T9948] kernel_wait+0xab/0x170 [ 267.460006][ T9948] call_usermodehelper_exec_work+0xbe/0x230 [ 267.466032][ T9948] process_scheduled_works+0xade/0x17b0 [ 267.471698][ T9948] worker_thread+0x8a0/0xda0 [ 267.476429][ T9948] kthread+0x70e/0x8a0 [ 267.480634][ T9948] ret_from_fork+0x3fc/0x770 [ 267.485343][ T9948] ret_from_fork_asm+0x1a/0x30 [ 267.490227][ T9948] [ 267.490227][ T9948] other info that might help us debug this: [ 267.490227][ T9948] [ 267.500475][ T9948] Chain exists of: [ 267.500475][ T9948] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 267.500475][ T9948] [ 267.513660][ T9948] Possible interrupt unsafe locking scenario: [ 267.513660][ T9948] [ 267.522083][ T9948] CPU0 CPU1 [ 267.527647][ T9948] ---- ---- [ 267.533028][ T9948] lock(tasklist_lock); [ 267.537349][ T9948] local_irq_disable(); [ 267.544216][ T9948] lock(&dev->event_lock#2); [ 267.551535][ T9948] lock(&f_owner->lock); [ 267.558413][ T9948] [ 267.561895][ T9948] lock(&dev->event_lock#2); [ 267.566778][ T9948] [ 267.566778][ T9948] *** DEADLOCK *** [ 267.566778][ T9948] [ 267.575208][ T9948] 5 locks held by syz.4.1424/9948: [ 267.580346][ T9948] #0: ffff888011e48e18 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 267.589897][ T9948] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: sk_wake_async+0x7f/0x280 [ 267.599162][ T9948] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 267.608264][ T9948] #3: ffff888033247168 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 267.617533][ T9948] #4: ffff888022adc320 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 267.626648][ T9948] [ 267.626648][ T9948] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 267.637079][ T9948] -> (&dev->event_lock#2){..-.}-{3:3} { [ 267.642887][ T9948] IN-SOFTIRQ-W at: [ 267.647069][ T9948] lock_acquire+0x120/0x360 [ 267.653782][ T9948] _raw_spin_lock_irqsave+0xa7/0xf0 [ 267.661044][ T9948] input_inject_event+0xab/0x320 [ 267.668015][ T9948] led_trigger_event+0x138/0x210 [ 267.674993][ T9948] kbd_bh+0x1c6/0x2e0 [ 267.681004][ T9948] tasklet_action_common+0x369/0x580 [ 267.688312][ T9948] handle_softirqs+0x283/0x870 [ 267.695115][ T9948] run_ksoftirqd+0x9b/0x100 [ 267.701655][ T9948] smpboot_thread_fn+0x53f/0xa60 [ 267.708615][ T9948] kthread+0x70e/0x8a0 [ 267.714755][ T9948] ret_from_fork+0x3fc/0x770 [ 267.721474][ T9948] ret_from_fork_asm+0x1a/0x30 [ 267.728390][ T9948] INITIAL USE at: [ 267.732487][ T9948] lock_acquire+0x120/0x360 [ 267.738931][ T9948] _raw_spin_lock_irqsave+0xa7/0xf0 [ 267.746172][ T9948] input_inject_event+0xab/0x320 [ 267.753158][ T9948] kbd_led_trigger_activate+0xbc/0x100 [ 267.760861][ T9948] led_trigger_set+0x52d/0x950 [ 267.767620][ T9948] led_trigger_set_default+0x260/0x2a0 [ 267.775541][ T9948] led_classdev_register_ext+0x73d/0x930 [ 267.783135][ T9948] input_leds_connect+0x517/0x790 [ 267.790126][ T9948] input_register_device+0xceb/0x10b0 [ 267.797472][ T9948] atkbd_connect+0x70e/0x9c0 [ 267.804009][ T9948] serio_driver_probe+0x82/0xa0 [ 267.810826][ T9948] really_probe+0x26a/0x9a0 [ 267.817292][ T9948] __driver_probe_device+0x18c/0x2f0 [ 267.824547][ T9948] driver_probe_device+0x4f/0x430 [ 267.831705][ T9948] __driver_attach+0x452/0x700 [ 267.838547][ T9948] bus_for_each_dev+0x230/0x2b0 [ 267.845365][ T9948] serio_handle_event+0x1a2/0x860 [ 267.852351][ T9948] process_scheduled_works+0xade/0x17b0 [ 267.859926][ T9948] worker_thread+0x8a0/0xda0 [ 267.866576][ T9948] kthread+0x70e/0x8a0 [ 267.872607][ T9948] ret_from_fork+0x3fc/0x770 [ 267.879312][ T9948] ret_from_fork_asm+0x1a/0x30 [ 267.886014][ T9948] } [ 267.888703][ T9948] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 267.897936][ T9948] -> (&new->fa_lock){....}-{3:3} { [ 267.903180][ T9948] INITIAL USE at: [ 267.907180][ T9948] lock_acquire+0x120/0x360 [ 267.913443][ T9948] _raw_write_lock_irq+0xa2/0xf0 [ 267.920159][ T9948] fasync_remove_entry+0xf1/0x1c0 [ 267.926949][ T9948] lease_modify+0x1ca/0x3c0 [ 267.933219][ T9948] locks_remove_file+0x4bf/0xea0 [ 267.939917][ T9948] __fput+0x3ab/0xa70 [ 267.945654][ T9948] task_work_run+0x1d1/0x260 [ 267.952014][ T9948] exit_to_user_mode_loop+0xec/0x110 [ 267.959055][ T9948] do_syscall_64+0x2bd/0x3b0 [ 267.965405][ T9948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.973146][ T9948] INITIAL READ USE at: [ 267.977588][ T9948] lock_acquire+0x120/0x360 [ 267.984566][ T9948] _raw_read_lock_irqsave+0xaf/0x100 [ 267.992144][ T9948] kill_fasync+0x199/0x4d0 [ 267.999134][ T9948] mousedev_notify_readers+0x6f1/0xc00 [ 268.006841][ T9948] mousedev_event+0x602/0x1320 [ 268.013906][ T9948] input_handle_events_default+0xd4/0x1a0 [ 268.021816][ T9948] input_pass_values+0x285/0x890 [ 268.028957][ T9948] input_event_dispose+0x330/0x6b0 [ 268.036308][ T9948] input_inject_event+0x1fe/0x320 [ 268.043579][ T9948] evdev_write+0x2fc/0x480 [ 268.050194][ T9948] vfs_write+0x27e/0xa90 [ 268.056760][ T9948] ksys_write+0x145/0x250 [ 268.063377][ T9948] do_syscall_64+0xfa/0x3b0 [ 268.070277][ T9948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.078360][ T9948] } [ 268.080962][ T9948] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 268.089760][ T9948] ... acquired at: [ 268.093699][ T9948] lock_acquire+0x120/0x360 [ 268.098403][ T9948] _raw_read_lock_irqsave+0xaf/0x100 [ 268.103971][ T9948] kill_fasync+0x199/0x4d0 [ 268.108587][ T9948] mousedev_notify_readers+0x6f1/0xc00 [ 268.114250][ T9948] mousedev_event+0x602/0x1320 [ 268.119211][ T9948] input_handle_events_default+0xd4/0x1a0 [ 268.125208][ T9948] input_pass_values+0x285/0x890 [ 268.130371][ T9948] input_event_dispose+0x330/0x6b0 [ 268.135722][ T9948] input_inject_event+0x1fe/0x320 [ 268.140948][ T9948] evdev_write+0x2fc/0x480 [ 268.145760][ T9948] vfs_write+0x27e/0xa90 [ 268.150333][ T9948] ksys_write+0x145/0x250 [ 268.154870][ T9948] do_syscall_64+0xfa/0x3b0 [ 268.159578][ T9948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.165669][ T9948] [ 268.168009][ T9948] -> (&f_owner->lock){....}-{3:3} { [ 268.173250][ T9948] INITIAL USE at: [ 268.177254][ T9948] lock_acquire+0x120/0x360 [ 268.183345][ T9948] _raw_write_lock_irq+0xa2/0xf0 [ 268.189950][ T9948] __f_setown+0x67/0x370 [ 268.195887][ T9948] fcntl_dirnotify+0x3fa/0x6a0 [ 268.202256][ T9948] do_fcntl+0x6d0/0x1910 [ 268.208182][ T9948] __se_sys_fcntl+0xc8/0x150 [ 268.214369][ T9948] do_syscall_64+0xfa/0x3b0 [ 268.220462][ T9948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.228035][ T9948] INITIAL READ USE at: [ 268.232403][ T9948] lock_acquire+0x120/0x360 [ 268.238949][ T9948] _raw_read_lock_irqsave+0xaf/0x100 [ 268.246303][ T9948] send_sigio+0x38/0x370 [ 268.252583][ T9948] dnotify_handle_event+0x169/0x440 [ 268.259808][ T9948] fsnotify+0x1671/0x1a80 [ 268.266154][ T9948] __fsnotify_parent+0x3fe/0x540 [ 268.273130][ T9948] vfs_read+0x778/0x980 [ 268.279346][ T9948] ksys_read+0x145/0x250 [ 268.285605][ T9948] do_syscall_64+0xfa/0x3b0 [ 268.292186][ T9948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.300103][ T9948] } [ 268.302630][ T9948] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 268.311535][ T9948] ... acquired at: [ 268.315352][ T9948] lock_acquire+0x120/0x360 [ 268.320048][ T9948] _raw_read_lock_irqsave+0xaf/0x100 [ 268.325528][ T9948] send_sigio+0x38/0x370 [ 268.329980][ T9948] kill_fasync+0x24d/0x4d0 [ 268.334595][ T9948] lease_break_callback+0x26/0x30 [ 268.339828][ T9948] __break_lease+0x6a5/0x1620 [ 268.344722][ T9948] do_dentry_open+0xd62/0x1970 [ 268.349706][ T9948] vfs_open+0x3b/0x340 [ 268.354070][ T9948] path_openat+0x2ee5/0x3830 [ 268.358859][ T9948] do_filp_open+0x1fa/0x410 [ 268.363655][ T9948] do_sys_openat2+0x121/0x1c0 [ 268.368527][ T9948] __x64_sys_openat+0x138/0x170 [ 268.373696][ T9948] do_syscall_64+0xfa/0x3b0 [ 268.378402][ T9948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.384513][ T9948] [ 268.386991][ T9948] [ 268.386991][ T9948] the dependencies between the lock to be acquired [ 268.387003][ T9948] and SOFTIRQ-irq-unsafe lock: [ 268.400555][ T9948] -> (tasklist_lock){.+.+}-{3:3} { [ 268.405814][ T9948] HARDIRQ-ON-R at: [ 268.409900][ T9948] lock_acquire+0x120/0x360 [ 268.416094][ T9948] _raw_read_lock+0x36/0x50 [ 268.422441][ T9948] __do_wait+0xde/0x740 [ 268.428310][ T9948] do_wait+0x1f8/0x520 [ 268.434066][ T9948] kernel_wait+0xab/0x170 [ 268.440079][ T9948] call_usermodehelper_exec_work+0xbe/0x230 [ 268.447671][ T9948] process_scheduled_works+0xade/0x17b0 [ 268.454909][ T9948] worker_thread+0x8a0/0xda0 [ 268.461200][ T9948] kthread+0x70e/0x8a0 [ 268.466949][ T9948] ret_from_fork+0x3fc/0x770 [ 268.473377][ T9948] ret_from_fork_asm+0x1a/0x30 [ 268.479830][ T9948] SOFTIRQ-ON-R at: [ 268.483924][ T9948] lock_acquire+0x120/0x360 [ 268.490118][ T9948] _raw_read_lock+0x36/0x50 [ 268.496299][ T9948] __do_wait+0xde/0x740 [ 268.502265][ T9948] do_wait+0x1f8/0x520 [ 268.508033][ T9948] kernel_wait+0xab/0x170 [ 268.514050][ T9948] call_usermodehelper_exec_work+0xbe/0x230 [ 268.521697][ T9948] process_scheduled_works+0xade/0x17b0 [ 268.528929][ T9948] worker_thread+0x8a0/0xda0 [ 268.535212][ T9948] kthread+0x70e/0x8a0 [ 268.540975][ T9948] ret_from_fork+0x3fc/0x770 [ 268.547266][ T9948] ret_from_fork_asm+0x1a/0x30 [ 268.553739][ T9948] INITIAL USE at: [ 268.557666][ T9948] lock_acquire+0x120/0x360 [ 268.563754][ T9948] _raw_write_lock_irq+0xa2/0xf0 [ 268.570280][ T9948] copy_process+0x21d5/0x3b80 [ 268.576635][ T9948] kernel_clone+0x224/0x7f0 [ 268.582752][ T9948] user_mode_thread+0xdd/0x140 [ 268.589127][ T9948] rest_init+0x23/0x300 [ 268.594898][ T9948] start_kernel+0x47d/0x500 [ 268.601021][ T9948] x86_64_start_reservations+0x24/0x30 [ 268.608117][ T9948] x86_64_start_kernel+0x143/0x1c0 [ 268.614949][ T9948] common_startup_64+0x13e/0x147 [ 268.621499][ T9948] INITIAL READ USE at: [ 268.626311][ T9948] lock_acquire+0x120/0x360 [ 268.632884][ T9948] _raw_read_lock+0x36/0x50 [ 268.639430][ T9948] __do_wait+0xde/0x740 [ 268.646053][ T9948] do_wait+0x1f8/0x520 [ 268.652170][ T9948] kernel_wait+0xab/0x170 [ 268.658639][ T9948] call_usermodehelper_exec_work+0xbe/0x230 [ 268.666720][ T9948] process_scheduled_works+0xade/0x17b0 [ 268.674308][ T9948] worker_thread+0x8a0/0xda0 [ 268.680921][ T9948] kthread+0x70e/0x8a0 [ 268.687012][ T9948] ret_from_fork+0x3fc/0x770 [ 268.693792][ T9948] ret_from_fork_asm+0x1a/0x30 [ 268.700594][ T9948] } [ 268.703109][ T9948] ... key at: [] tasklist_lock+0x18/0x40 [ 268.710862][ T9948] ... acquired at: [ 268.714684][ T9948] lock_acquire+0x120/0x360 [ 268.719405][ T9948] _raw_read_lock+0x36/0x50 [ 268.724117][ T9948] send_sigio+0x101/0x370 [ 268.728654][ T9948] kill_fasync+0x24d/0x4d0 [ 268.733281][ T9948] sock_wake_async+0x137/0x160 [ 268.738257][ T9948] sk_wake_async+0x184/0x280 [ 268.743066][ T9948] mptcp_destroy_common+0x152/0x320 [ 268.748476][ T9948] mptcp_disconnect+0x23d/0x700 [ 268.753704][ T9948] inet_shutdown+0x1c1/0x390 [ 268.758502][ T9948] __x64_sys_shutdown+0x13c/0x1a0 [ 268.763742][ T9948] do_syscall_64+0xfa/0x3b0 [ 268.768450][ T9948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.774583][ T9948] [ 268.777031][ T9948] [ 268.777031][ T9948] stack backtrace: [ 268.783315][ T9948] CPU: 0 UID: 0 PID: 9948 Comm: syz.4.1424 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 268.783340][ T9948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.783359][ T9948] Call Trace: [ 268.783369][ T9948] [ 268.783377][ T9948] dump_stack_lvl+0x189/0x250 [ 268.783404][ T9948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.783425][ T9948] ? __pfx__printk+0x10/0x10 [ 268.783460][ T9948] validate_chain+0x1f05/0x2140 [ 268.783492][ T9948] __lock_acquire+0xab9/0xd20 [ 268.783512][ T9948] ? send_sigio+0x101/0x370 [ 268.783536][ T9948] lock_acquire+0x120/0x360 [ 268.783552][ T9948] ? send_sigio+0x101/0x370 [ 268.783576][ T9948] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 268.783596][ T9948] ? do_raw_read_lock+0x3d/0x90 [ 268.783623][ T9948] _raw_read_lock+0x36/0x50 [ 268.783638][ T9948] ? send_sigio+0x101/0x370 [ 268.783661][ T9948] send_sigio+0x101/0x370 [ 268.783687][ T9948] kill_fasync+0x24d/0x4d0 [ 268.783713][ T9948] ? kill_fasync+0x53/0x4d0 [ 268.783738][ T9948] sock_wake_async+0x137/0x160 [ 268.783761][ T9948] ? sk_wake_async+0x7f/0x280 [ 268.783780][ T9948] sk_wake_async+0x184/0x280 [ 268.783798][ T9948] mptcp_destroy_common+0x152/0x320 [ 268.783831][ T9948] mptcp_disconnect+0x23d/0x700 [ 268.783853][ T9948] inet_shutdown+0x1c1/0x390 [ 268.783875][ T9948] __x64_sys_shutdown+0x13c/0x1a0 [ 268.783905][ T9948] do_syscall_64+0xfa/0x3b0 [ 268.783924][ T9948] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.783943][ T9948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.783961][ T9948] ? clear_bhb_loop+0x60/0xb0 [ 268.783982][ T9948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.784012][ T9948] RIP: 0033:0x7f5af498ebe9 [ 268.784035][ T9948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.784052][ T9948] RSP: 002b:00007f5af573e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 268.784072][ T9948] RAX: ffffffffffffffda RBX: 00007f5af4bb5fa0 RCX: 00007f5af498ebe9 [ 268.784085][ T9948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 268.784096][ T9948] RBP: 00007f5af4a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 268.784107][ T9948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.784118][ T9948] R13: 00007f5af4bb6038 R14: 00007f5af4bb5fa0 R15: 00007ffcb35bcd68 [ 268.784138][ T9948] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 269.176305][ T5962] usb 1-1: 0:2 : does not exist [ 269.811606][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.967914][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.015712][ T5962] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 270.096110][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.145695][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.156350][ T5962] usb 1-1: USB disconnect, device number 16 [ 270.294972][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.397929][ T67] bridge_slave_1: left allmulticast mode [ 270.404473][ T67] bridge_slave_1: left promiscuous mode [ 270.410997][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.422174][ T67] bridge_slave_0: left allmulticast mode [ 270.427889][ T67] bridge_slave_0: left promiscuous mode [ 270.433866][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.656232][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.667384][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.677299][ T67] bond0 (unregistering): Released all slaves [ 270.902463][ T67] hsr_slave_0: left promiscuous mode [ 270.908458][ T67] hsr_slave_1: left promiscuous mode [ 270.917726][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.928828][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.943270][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.952434][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.967448][ T67] veth1_macvtap: left promiscuous mode [ 270.974823][ T67] veth0_macvtap: left promiscuous mode [ 271.149614][ T67] team0 (unregistering): Port device team_slave_1 removed [ 271.164630][ T67] team0 (unregistering): Port device team_slave_0 removed [ 271.585888][ T67] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.638511][ T67] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.685841][ T67] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.758157][ T67] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.899245][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.949763][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.989165][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.046024][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.133420][ T67] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.187706][ T67] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.244412][ T67] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.305007][ T67] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.382265][ T67] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.447113][ T67] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.499473][ T67] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.566522][ T67] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.671764][ T67] bridge_slave_1: left allmulticast mode [ 272.677635][ T67] bridge_slave_1: left promiscuous mode [ 272.684022][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.698782][ T67] bridge_slave_0: left allmulticast mode [ 272.704913][ T67] bridge_slave_0: left promiscuous mode [ 272.710942][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.721187][ T67] bridge_slave_0: left allmulticast mode [ 272.727022][ T67] bridge_slave_0: left promiscuous mode [ 272.733597][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.751973][ T67] bridge_slave_1: left allmulticast mode [ 272.757707][ T67] bridge_slave_1: left promiscuous mode [ 272.763822][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.772787][ T67] bridge_slave_0: left allmulticast mode [ 272.778724][ T67] bridge_slave_0: left promiscuous mode [ 272.788684][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.798765][ T67] bridge_slave_1: left allmulticast mode [ 272.806834][ T67] bridge_slave_1: left promiscuous mode [ 272.812826][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.826733][ T67] bridge_slave_0: left allmulticast mode [ 272.832803][ T67] bridge_slave_0: left promiscuous mode [ 272.838560][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.057910][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.068193][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.078786][ T67] bond0 (unregistering): Released all slaves [ 273.158280][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.168616][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.183620][ T67] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 273.194233][ T67] bond0 (unregistering): Released all slaves [ 273.276653][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.287053][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.297518][ T67] bond0 (unregistering): Released all slaves [ 273.387807][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.398976][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.411791][ T67] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 273.423767][ T67] bond0 (unregistering): Released all slaves [ 273.559557][ T67] IPVS: stopping backup sync thread 8204 ... [ 274.094779][ T67] hsr_slave_0: left promiscuous mode [ 274.100798][ T67] hsr_slave_1: left promiscuous mode [ 274.106829][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.114726][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.122834][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.133357][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.145036][ T67] hsr_slave_0: left promiscuous mode [ 274.151516][ T67] hsr_slave_1: left promiscuous mode [ 274.159151][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.166860][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.174921][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.183142][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.196568][ T67] hsr_slave_0: left promiscuous mode [ 274.204122][ T67] hsr_slave_1: left promiscuous mode [ 274.210291][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.217770][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.227297][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.235165][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.251904][ T67] hsr_slave_0: left promiscuous mode [ 274.257786][ T67] hsr_slave_1: left promiscuous mode [ 274.264092][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.272601][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.280651][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.288233][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.305584][ T67] veth1_macvtap: left promiscuous mode [ 274.311374][ T67] veth0_macvtap: left promiscuous mode [ 274.316956][ T67] veth1_vlan: left promiscuous mode [ 274.322640][ T67] veth0_vlan: left promiscuous mode [ 274.328740][ T67] veth1_macvtap: left promiscuous mode [ 274.334950][ T67] veth0_macvtap: left promiscuous mode [ 274.340596][ T67] veth1_vlan: left promiscuous mode [ 274.345908][ T67] veth0_vlan: left promiscuous mode [ 274.352705][ T67] veth1_macvtap: left promiscuous mode [ 274.358459][ T67] veth0_macvtap: left promiscuous mode [ 274.364197][ T67] veth1_vlan: left promiscuous mode [ 274.369508][ T67] veth0_vlan: left promiscuous mode [ 274.375680][ T67] veth1_macvtap: left promiscuous mode [ 274.381262][ T67] veth0_macvtap: left promiscuous mode [ 274.704340][ T67] team0 (unregistering): Port device team_slave_1 removed [ 274.729573][ T67] team0 (unregistering): Port device team_slave_0 removed [ 274.952748][ T67] team0 (unregistering): Port device team_slave_1 removed [ 274.984448][ T67] team0 (unregistering): Port device team_slave_0 removed [ 275.197937][ T67] team0 (unregistering): Port device team_slave_1 removed [ 275.225151][ T67] team0 (unregistering): Port device team_slave_0 removed [ 275.408443][ T67] team0 (unregistering): Port device team_slave_1 removed [ 275.435314][ T67] team0 (unregistering): Port device team_slave_0 removed [ 276.463619][ T67] IPVS: stop unused estimator thread 0...