last executing test programs: 1m0.583873995s ago: executing program 0 (id=696): syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) openat$nvram(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r0], 0x0) 59.107754961s ago: executing program 0 (id=701): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x274, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1fc, 0xffffffff, 0xffffffff, 0x1fc, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa4, 0xc8, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2d0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 58.975357791s ago: executing program 0 (id=703): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x201, 0x20, 0xe4, 0x8, 0x5c}) 58.744796631s ago: executing program 0 (id=706): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 58.657161049s ago: executing program 0 (id=708): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 58.267822811s ago: executing program 0 (id=714): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) 57.880028166s ago: executing program 32 (id=714): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) 28.881406463s ago: executing program 4 (id=973): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) read$hidraw(r1, 0x0, 0x0) 26.899469067s ago: executing program 4 (id=995): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff, 0x0, 0x2}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xfc}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 26.010763211s ago: executing program 4 (id=1004): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 25.885145049s ago: executing program 4 (id=1005): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 25.675073125s ago: executing program 4 (id=1010): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x2) 25.233959672s ago: executing program 4 (id=1019): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0xffffffffffffffda, r1, {0x7, 0x1f, 0x80000, 0x2f0c07f996e5f8c, 0xc, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x100}}, 0x50) open$dir(&(0x7f0000000240)='./file0/file0\x00', 0x41, 0x2) 24.81498105s ago: executing program 33 (id=1019): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0xffffffffffffffda, r1, {0x7, 0x1f, 0x80000, 0x2f0c07f996e5f8c, 0xc, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x100}}, 0x50) open$dir(&(0x7f0000000240)='./file0/file0\x00', 0x41, 0x2) 3.758182486s ago: executing program 5 (id=1204): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x9, 0x31, 0xffffffffffffffff, 0xf983e000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3.509168312s ago: executing program 5 (id=1207): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x4000050) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x5d6aff9e) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c) 3.336690043s ago: executing program 3 (id=1209): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000480)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) sendto$packet(r2, &(0x7f0000000140)="330320000a0014000b007e752f555f2a0c9fe67025c1d97bfbf719143baa111f1f858ce632f470421974491df1c66de7bde38026da459996ffce57c38839980700e666ee78784016f37fe8", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r1, 0x1, 0x62}, 0x14) 2.615270072s ago: executing program 1 (id=1214): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.548989228s ago: executing program 5 (id=1215): unshare(0x4000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$kcm(0x2d, 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 2.490056575s ago: executing program 3 (id=1217): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 2.384437127s ago: executing program 3 (id=1218): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) 2.237498656s ago: executing program 1 (id=1220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x3, 0x6, 0x0, &(0x7f00000000c0)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0xa}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r3, 0x4068aea3, &(0x7f0000000680)) 2.234231234s ago: executing program 2 (id=1221): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f4, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) 1.435575573s ago: executing program 5 (id=1223): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) prlimit64(r0, 0x4, 0x0, 0x0) 1.435109374s ago: executing program 6 (id=1224): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000318e00383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) 1.427988214s ago: executing program 2 (id=1225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000000400)=""/4097, 0x1001}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1.29472653s ago: executing program 1 (id=1226): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}]}, 0x40}}, 0x20) 1.241246377s ago: executing program 6 (id=1227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}}, 0x0) 1.091770345s ago: executing program 1 (id=1228): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x2, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffbfd, 0x0, 0x100000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4, 0x3, 0x0, 0x80, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x8], [0x3, 0xbfffffff, 0x0, 0x0, 0x3, 0x0, 0x400000, 0xedc0, 0x0, 0x5ee, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x4, 0x0, 0xa0000000, 0xfffffffe, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0xa, 0xfffffffe, 0x9, 0x8, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0xffffbffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x36, 0xffffffff, 0x0, 0x0, 0x4771, 0x400000], [0xffffffff, 0x7f, 0x0, 0x0, 0x3, 0xfffffff3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7, 0x4, 0x0, 0x26, 0x1, 0x0, 0x6, 0x100000, 0x0, 0xffffffff, 0x4, 0x2, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x6, 0x0, 0x0, 0x0, 0xd041, 0x3c, 0x80000000, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x1, 0xf, 0x0, 0x0, 0x0, 0xd53, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0xc79], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x6, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0xb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x101, 0x4, 0x0, 0x0, 0xc, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 1.035556843s ago: executing program 3 (id=1229): r0 = socket(0x2, 0x805, 0x0) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f00000001c0)={r2, 0xb, 0x1}, &(0x7f0000000200)=0x8) 843.791022ms ago: executing program 1 (id=1230): r0 = syz_open_dev$midi(&(0x7f0000000180), 0x2, 0x148900) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0xc0305720, &(0x7f0000000580)) connect$unix(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 731.830828ms ago: executing program 3 (id=1231): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x3, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 726.545204ms ago: executing program 2 (id=1232): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r0}) 633.273452ms ago: executing program 6 (id=1233): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}], 0x1, 0x1000000, 0x0) 479.695196ms ago: executing program 2 (id=1234): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 406.668402ms ago: executing program 3 (id=1235): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) 343.800971ms ago: executing program 6 (id=1236): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000003c0)={0xff, 0x699, 0x3, 0x2, 0x5298cc8e, 0x9, 0x6, 0x10000, r3}, &(0x7f0000000400)=0x20) 308.297803ms ago: executing program 2 (id=1237): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x4800) recvmmsg$unix(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001500)=""/4096, 0x1000}], 0x1}}], 0x1, 0x1, 0x0) 171.888937ms ago: executing program 1 (id=1238): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 163.714171ms ago: executing program 6 (id=1239): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42}, 0x94) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x20, 0x0, 0x0, 0x0) 118.226667ms ago: executing program 5 (id=1240): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x17, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) 59.825791ms ago: executing program 2 (id=1241): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) io_setup(0xbc, &(0x7f0000000280)=0x0) io_submit(r3, 0x2, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 6.510515ms ago: executing program 6 (id=1242): syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}]}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 0s ago: executing program 5 (id=1243): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0xe0c}}, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/163, 0xa3}], 0x1}, 0x4}], 0x1, 0x10000, 0x0) kernel console output (not intermixed with test programs): umber 3 using dummy_hcd [ 110.993480][ T5950] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 111.027117][ T5950] usb 5-1: config 0 has no interface number 0 [ 111.048369][ T5950] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 111.087141][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.096761][ T5950] usb 5-1: Product: syz [ 111.102427][ T5950] usb 5-1: Manufacturer: syz [ 111.107761][ T5950] usb 5-1: SerialNumber: syz [ 111.125681][ T5950] usb 5-1: config 0 descriptor?? [ 111.145343][ T980] usb 4-1: USB disconnect, device number 12 [ 111.730205][ T1212] usb 3-1: USB disconnect, device number 7 [ 111.814295][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.268'. [ 111.970989][ T5950] usb 5-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 111.995059][ T5950] usb 5-1: Firmware version (0.0) predates our first public release. [ 112.013564][ T5950] usb 5-1: Please update to version 0.2 or newer [ 112.341424][ T5950] usb 5-1: USB disconnect, device number 3 [ 113.140145][ T6743] netlink: 'syz.1.283': attribute type 12 has an invalid length. [ 113.232084][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 113.491377][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.290'. [ 113.561159][ T6759] vxlan0: entered promiscuous mode [ 113.580078][ T60] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.628008][ T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.726842][ T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.745210][ T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.415331][ T6785] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 114.503123][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 114.503139][ T30] audit: type=1326 audit(1755000678.589:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.303" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f67539 code=0x0 [ 115.277294][ T1212] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 115.358459][ T980] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.438805][ T1212] usb 3-1: Using ep0 maxpacket: 16 [ 115.452895][ T1212] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.464314][ T1212] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.473906][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.484446][ T6819] kvm: kvm [6818]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1020000000800 [ 115.500575][ T1212] usb 3-1: config 0 descriptor?? [ 115.527273][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.545066][ T980] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 115.554753][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.571525][ T980] usb 5-1: config 0 descriptor?? [ 115.746868][ T6809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.311'. [ 115.762958][ T1212] usb 3-1: USB disconnect, device number 8 [ 115.797971][ T980] usbhid 5-1:0.0: can't add hid device: -71 [ 115.804004][ T980] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 115.861617][ T980] usb 5-1: USB disconnect, device number 4 [ 116.689375][ T980] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.760455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.848108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 116.881476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.962420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 116.979348][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 117.028383][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.070014][ T980] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 117.151795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.164646][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.225158][ T980] usb 5-1: config 0 descriptor?? [ 117.297521][ T5950] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 117.363861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 117.379348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 117.417943][ T6829] syz.1.319 (6829): drop_caches: 2 [ 117.480917][ T5950] usb 3-1: Using ep0 maxpacket: 8 [ 117.517828][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.528082][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 117.550143][ T5950] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 117.579075][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.620863][ T5950] usb 3-1: config 0 descriptor?? [ 117.636048][ T5950] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 117.709252][ T43] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.737293][ T43] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 117.760787][ T43] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.764919][ T980] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 117.815751][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.879829][ T6842] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 117.898980][ T43] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.995819][ T1212] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 118.142202][ T43] usb 4-1: USB disconnect, device number 13 [ 118.168694][ T1212] usb 1-1: Using ep0 maxpacket: 16 [ 118.186281][ T1212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.205387][ T1212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.232358][ T1212] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.252107][ T1212] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.263942][ T980] usb 5-1: USB disconnect, device number 5 [ 118.284814][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.316379][ T1212] usb 1-1: config 0 descriptor?? [ 118.742256][ T1212] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 118.756658][ T1212] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0008/input/input10 [ 118.758742][ T980] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 118.866975][ T5950] gspca_vc032x: reg_w err -71 [ 118.876910][ T5950] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 118.902110][ T5950] usb 3-1: USB disconnect, device number 9 [ 118.936018][ T980] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 118.962940][ T1212] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 118.992119][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.043815][ T980] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 119.107110][ T980] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 119.132376][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.174234][ T980] usb 2-1: config 0 descriptor?? [ 119.271126][ T9] usb 1-1: USB disconnect, device number 8 [ 119.547420][ T5917] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 119.567427][ T5948] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.626929][ T980] holtek_kbd 0003:04D9:A055.0009: unknown main item tag 0x0 [ 119.636581][ T980] holtek_kbd 0003:04D9:A055.0009: unknown main item tag 0x0 [ 119.648339][ T980] holtek_kbd 0003:04D9:A055.0009: unknown main item tag 0x0 [ 119.655779][ T980] holtek_kbd 0003:04D9:A055.0009: unknown main item tag 0x0 [ 119.666656][ T980] holtek_kbd 0003:04D9:A055.0009: unknown main item tag 0x0 [ 119.692418][ T980] holtek_kbd 0003:04D9:A055.0009: unknown main item tag 0x0 [ 119.701071][ T980] holtek_kbd 0003:04D9:A055.0009: unknown main item tag 0x0 [ 119.715325][ T5917] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 119.726580][ T5917] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 119.738474][ T980] holtek_kbd 0003:04D9:A055.0009: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0 [ 119.750729][ T5948] usb 5-1: Using ep0 maxpacket: 8 [ 119.756251][ T5917] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 119.772287][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.791977][ T5917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 119.813473][ T5948] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.837223][ T5917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 119.851691][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.881688][ T5917] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.901697][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.914177][ T5948] usb 5-1: config 0 descriptor?? [ 119.950521][ T5917] usb 4-1: Product: syz [ 119.965055][ T5917] usb 4-1: Manufacturer: syz [ 119.994007][ T5917] cdc_wdm 4-1:1.0: skipping garbage [ 120.000599][ T5917] cdc_wdm 4-1:1.0: skipping garbage [ 120.020113][ T5950] usb 2-1: USB disconnect, device number 6 [ 120.041323][ T5917] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 120.058324][ T5917] cdc_wdm 4-1:1.0: Unknown control protocol [ 120.169102][ T5948] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 120.219556][ T5948] usb 4-1: USB disconnect, device number 14 [ 120.252674][ T6878] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.591488][ T5948] usb 5-1: USB disconnect, device number 6 [ 120.813587][ T6901] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.351'. [ 120.876265][ T6904] veth0_to_team: entered promiscuous mode [ 120.878235][ T980] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 121.043024][ T980] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 121.072980][ T980] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 121.093624][ T980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 121.117252][ T980] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 121.175081][ T980] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 121.209520][ T980] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 121.231450][ T980] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 121.243478][ T980] usb 4-1: Product: syz [ 121.251911][ T980] usb 4-1: Manufacturer: syz [ 121.274411][ T980] cdc_wdm 4-1:1.0: skipping garbage [ 121.281651][ T980] cdc_wdm 4-1:1.0: skipping garbage [ 121.287708][ T5917] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 121.314607][ T980] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 121.324436][ T980] cdc_wdm 4-1:1.0: Unknown control protocol [ 121.477401][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.509121][ T5917] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 121.547517][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.582803][ T980] usb 4-1: USB disconnect, device number 15 [ 121.595047][ T5917] usb 3-1: config 0 descriptor?? [ 121.767222][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.788962][ T6933] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.796865][ T6933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.843531][ T5917] usbhid 3-1:0.0: can't add hid device: -71 [ 121.858541][ T5917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 121.899315][ T5917] usb 3-1: USB disconnect, device number 10 [ 122.025376][ T6941] input: syz1 as /devices/virtual/input/input11 [ 122.298935][ T6947] loop7: detected capacity change from 0 to 7 [ 122.377329][ T5917] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 122.550128][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 122.569747][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.595349][ T5917] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 122.643554][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.684265][ T5917] usb 3-1: config 0 descriptor?? [ 122.784477][ T6956] input: syz1 as /devices/virtual/input/input12 [ 122.883351][ T6947] Dev loop7: unable to read RDB block 7 [ 122.889792][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 122.897489][ T6947] loop7: unable to read partition table [ 122.899592][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 122.933447][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 122.943301][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 122.952260][ T6947] loop7: partition table beyond EOD, truncated [ 122.994860][ T6947] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 123.191915][ T5917] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 123.640237][ T5917] usb 3-1: USB disconnect, device number 11 [ 124.267377][ T5917] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 124.447377][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 124.462577][ T5917] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 124.477358][ T5917] usb 2-1: config 0 has no interface number 0 [ 124.495476][ T5917] usb 2-1: config 0 interface 184 has no altsetting 0 [ 124.516612][ T5917] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 124.540760][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.557275][ T5917] usb 2-1: Product: syz [ 124.561544][ T5917] usb 2-1: Manufacturer: syz [ 124.566214][ T5917] usb 2-1: SerialNumber: syz [ 124.572372][ T5948] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 124.592086][ T5917] usb 2-1: config 0 descriptor?? [ 124.604671][ T5917] smsc75xx v1.0.0 [ 124.727243][ T5948] usb 3-1: Using ep0 maxpacket: 8 [ 124.743326][ T5948] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 124.761041][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.789247][ T5948] usb 3-1: config 0 descriptor?? [ 125.041769][ T5948] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 125.114396][ T6988] loop7: detected capacity change from 0 to 7 [ 125.419879][ T5917] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 125.429997][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 125.440058][ T5917] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 125.440885][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 125.458340][ T5948] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 125.458801][ T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 125.475069][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 125.477447][ T6988] Dev loop7: unable to read RDB block 7 [ 125.486464][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 125.492559][ T6988] loop7: unable to read partition table [ 125.511882][ T5948] asix 3-1:0.0: probe with driver asix failed with error -71 [ 125.514620][ T6988] loop7: partition table beyond EOD, truncated [ 125.526053][ T5948] usb 3-1: USB disconnect, device number 12 [ 125.535032][ T6988] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 125.647349][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 125.652642][ T5917] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 125.654409][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.669858][ T5917] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 125.683738][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 125.694841][ T5917] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 125.706490][ T5917] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 125.713259][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 125.730702][ T5917] usb 2-1: USB disconnect, device number 7 [ 125.750018][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 125.768016][ T43] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 125.797265][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.829253][ T43] hub 5-1:1.0: bad descriptor, ignoring hub [ 125.835211][ T43] hub 5-1:1.0: probe with driver hub failed with error -5 [ 125.853284][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 125.861716][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 125.878328][ T43] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 125.884266][ T43] cdc_wdm 5-1:1.0: Unknown control protocol [ 126.643330][ T43] usb 5-1: USB disconnect, device number 7 [ 126.887347][ T5948] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 126.997332][ T43] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 127.037553][ T5948] usb 1-1: Using ep0 maxpacket: 32 [ 127.049570][ T5948] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 127.076865][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 127.119272][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 127.142335][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 127.165075][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 127.180398][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.196008][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 127.204882][ T5948] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 127.204910][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.204928][ T5948] usb 1-1: Product: syz [ 127.204941][ T5948] usb 1-1: Manufacturer: syz [ 127.204954][ T5948] usb 1-1: SerialNumber: syz [ 127.208898][ T5948] usb 1-1: config 0 descriptor?? [ 127.217052][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 127.300345][ T43] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 127.314969][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.333975][ T7027] binder: 7026:7027 ioctl c0306201 80000240 returned -14 [ 127.335057][ T6991] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 127.369089][ T43] hub 5-1:1.0: bad descriptor, ignoring hub [ 127.390367][ T43] hub 5-1:1.0: probe with driver hub failed with error -5 [ 127.401461][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 127.414827][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 127.439756][ T43] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 127.455250][ T43] cdc_wdm 5-1:1.0: Unknown control protocol [ 127.691894][ T5948] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 127.723934][ T5948] input input13: Device does not respond to id packet M [ 127.750807][ T5948] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 127.757542][ T30] audit: type=1326 audit(1755000691.839:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 127.764687][ T5948] input input13: Device does not respond to id packet P [ 127.798686][ T30] audit: type=1326 audit(1755000691.839:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 127.842371][ T5948] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 127.861239][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 127.862384][ T5948] input input13: Device does not respond to id packet B [ 127.868073][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 127.882693][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 127.886091][ T5948] input input13: Device does not respond to id packet N [ 127.889323][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 127.889556][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 127.908986][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 127.915799][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 127.922422][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 127.929447][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 127.936079][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 127.942283][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 127.963505][ T30] audit: type=1326 audit(1755000691.879:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 128.038544][ T30] audit: type=1326 audit(1755000691.889:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 128.090809][ T5948] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 128.163434][ T5948] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 128.180379][ T5948] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 128.209387][ T5948] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 128.237780][ T5948] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 128.267295][ T30] audit: type=1326 audit(1755000691.889:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 128.338371][ T9] usb 5-1: USB disconnect, device number 8 [ 128.363631][ T5948] usb 1-1: USB disconnect, device number 9 [ 128.453076][ T30] audit: type=1326 audit(1755000691.909:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 128.568280][ T7051] netlink: 14 bytes leftover after parsing attributes in process `syz.2.408'. [ 128.606024][ T30] audit: type=1326 audit(1755000691.909:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 128.712201][ T30] audit: type=1326 audit(1755000691.909:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 128.742142][ T30] audit: type=1326 audit(1755000691.919:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 128.773469][ T30] audit: type=1326 audit(1755000691.919:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f67558 code=0x7ffc0000 [ 129.343905][ T7051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.433558][ T7051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.622375][ T7051] bond0 (unregistering): Released all slaves [ 130.467331][ T5917] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 130.629411][ T5917] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.647802][ T5917] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.674239][ T5917] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.694591][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.720615][ T7064] syz.0.413 (7064): drop_caches: 2 [ 130.877423][ T5948] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 130.936678][ T5917] usb 5-1: usb_control_msg returned -32 [ 130.967496][ T5917] usbtmc 5-1:16.0: can't read capabilities [ 131.004966][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 131.024944][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 131.043799][ T5948] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.074913][ T7096] netlink: 104 bytes leftover after parsing attributes in process `syz.1.424'. [ 131.089557][ T5948] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.103177][ T7096] netlink: 104 bytes leftover after parsing attributes in process `syz.1.424'. [ 131.123106][ T5948] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.135094][ T5948] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 131.155072][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.174277][ T7090] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 131.358946][ T7103] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -32 [ 131.379711][ T9] usb 5-1: USB disconnect, device number 9 [ 131.562063][ T7108] netlink: 'syz.0.430': attribute type 1 has an invalid length. [ 131.666695][ T7108] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 131.744317][ T7108] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 131.841615][ T7108] bond1: (slave wireguard0): making interface the new active one [ 131.885855][ T7108] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 132.298643][ T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 132.307419][ T5950] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 132.467393][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 132.479279][ T43] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 132.488473][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.509948][ T43] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.531089][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.556456][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.578835][ T5950] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.602020][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.629462][ T5950] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.644830][ T43] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.672278][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.688072][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.713814][ T5950] usb 2-1: config 0 descriptor?? [ 132.726015][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.783289][ T5948] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 132.809439][ T5948] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input14 [ 132.933133][ T5948] usb 3-1: USB disconnect, device number 13 [ 132.939373][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 132.988022][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.994374][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.041403][ T43] usb 1-1: GET_CAPABILITIES returned 0 [ 133.070149][ T43] usbtmc 1-1:16.0: can't read capabilities [ 133.182051][ T5950] plantronics 0003:047F:FFFF.000B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 133.310351][ T7147] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.390618][ T1212] usb 1-1: USB disconnect, device number 10 [ 133.397811][ T7122] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 133.413558][ T7148] usb 1-1: usbtmc_ioctl_clear_in_halt returned -19 [ 134.327455][ T5948] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 134.507398][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 134.523910][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.549607][ T1212] IPVS: starting estimator thread 0... [ 134.556010][ T7192] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 134.556838][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.600717][ T5948] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.620085][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.641957][ T5948] usb 5-1: config 0 descriptor?? [ 134.657553][ T7194] IPVS: using max 32 ests per chain, 76800 per kthread [ 134.658971][ T5948] hub 5-1:0.0: USB hub found [ 134.740159][ T7196] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 134.746947][ T7196] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 134.851352][ T7198] loop6: detected capacity change from 0 to 7 [ 134.860560][ T7198] Dev loop6: unable to read RDB block 7 [ 134.869348][ T5948] hub 5-1:0.0: 9 ports detected [ 134.873292][ T7198] loop6: AHDI p3 p4 [ 134.889154][ T5948] hub 5-1:0.0: insufficient power available to use all downstream ports [ 134.901107][ T7198] loop6: partition table partially beyond EOD, truncated [ 134.911099][ T7198] loop6: p3 start 1869967406 is beyond EOD, truncated [ 135.077320][ T5948] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 135.084053][ T5948] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 135.122085][ T5950] usb 2-1: USB disconnect, device number 8 [ 135.140512][ T7204] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 135.172940][ T5948] usbhid 5-1:0.0: can't add hid device: -71 [ 135.179562][ T5948] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 135.244531][ T5948] usb 5-1: USB disconnect, device number 10 [ 136.013188][ T7230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.484'. [ 136.048995][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 136.084181][ T7230] netlink: 104 bytes leftover after parsing attributes in process `syz.3.484'. [ 136.107583][ T7230] netlink: 104 bytes leftover after parsing attributes in process `syz.3.484'. [ 136.572858][ T7249] sctp: [Deprecated]: syz.4.492 (pid 7249) Use of int in max_burst socket option. [ 136.572858][ T7249] Use struct sctp_assoc_value instead [ 137.574083][ T1212] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 137.757302][ T1212] usb 1-1: Using ep0 maxpacket: 32 [ 137.772063][ T1212] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 137.797323][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.828104][ T1212] usb 1-1: Product: syz [ 137.833306][ T1212] usb 1-1: Manufacturer: syz [ 137.842531][ T1212] usb 1-1: SerialNumber: syz [ 137.863280][ T1212] usb 1-1: config 0 descriptor?? [ 137.884195][ T1212] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 138.538973][ T7307] sctp: [Deprecated]: syz.2.516 (pid 7307) Use of int in max_burst socket option. [ 138.538973][ T7307] Use struct sctp_assoc_value instead [ 138.709416][ T7310] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 139.102727][ T1212] gspca_topro: reg_w err -71 [ 139.137367][ T1212] gspca_topro: Sensor soi763a [ 139.167836][ T1212] usb 1-1: USB disconnect, device number 11 [ 139.187817][ T5917] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 139.368989][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 139.401179][ T5917] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 139.434526][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.475482][ T5917] usb 3-1: Product: syz [ 139.496642][ T5917] usb 3-1: Manufacturer: syz [ 139.505354][ T5917] usb 3-1: SerialNumber: syz [ 139.540060][ T5917] usb 3-1: config 0 descriptor?? [ 139.779722][ T5917] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 139.788333][ T5948] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 139.969527][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.007207][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.036491][ T5948] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.087959][ T5948] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.117523][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.161384][ T5948] usb 4-1: config 0 descriptor?? [ 140.381644][ T7346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.531'. [ 140.434297][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'. [ 140.599608][ T5948] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 140.637546][ T43] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 140.795260][ T5917] gspca_sunplus: reg_w_riv err -71 [ 140.800791][ T5917] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 140.811813][ T5917] usb 3-1: USB disconnect, device number 14 [ 140.813548][ T43] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 140.834260][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.875285][ T43] usb 1-1: config 0 descriptor?? [ 141.300157][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 141.306197][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 141.324301][ T43] usb 1-1: USB disconnect, device number 12 [ 141.727689][ T1212] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 141.797774][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 141.897624][ T1212] usb 5-1: Using ep0 maxpacket: 16 [ 141.950958][ T1212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.986127][ T1212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.989616][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.015731][ T1212] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.028728][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.030048][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 142.085487][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.086725][ T1212] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 142.114012][ T9] usb 3-1: SerialNumber: syz [ 142.127103][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.194383][ T1212] usb 5-1: config 0 descriptor?? [ 142.304401][ T7389] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.547'. [ 142.346727][ T9] usb 3-1: 0:2 : does not exist [ 142.372954][ T9] usb 3-1: USB disconnect, device number 15 [ 142.490167][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.632286][ T1212] HID 045e:07da: Invalid code 65791 type 1 [ 142.650998][ T43] usb 4-1: USB disconnect, device number 16 [ 142.681223][ T1212] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000D/input/input15 [ 142.732787][ T1212] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 142.748848][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 143.006389][ T43] usb 5-1: USB disconnect, device number 11 [ 144.337455][ T5917] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 144.497307][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 144.531139][ T5917] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.543124][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.552645][ T5917] usb 2-1: Product: syz [ 144.556951][ T5917] usb 2-1: Manufacturer: syz [ 144.563615][ T5917] usb 2-1: SerialNumber: syz [ 144.700243][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.762671][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.799212][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.847480][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.856625][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.880464][ T9] usb 1-1: config 0 descriptor?? [ 145.310775][ T9] plantronics 0003:047F:FFFF.000E: reserved main item tag 0xd [ 145.378285][ T9] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 145.616115][ T5917] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 145.631098][ T980] usb 1-1: USB disconnect, device number 13 [ 145.650283][ T5917] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 145.824000][ T5917] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 145.891260][ T5917] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 145.941044][ T5917] usb 2-1: USB disconnect, device number 9 [ 145.972313][ T5917] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 146.392504][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.584'. [ 146.566691][ T7484] vxlan1: entered promiscuous mode [ 147.409401][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'. [ 147.439250][ T7513] netlink: 'syz.3.596': attribute type 1 has an invalid length. [ 147.446925][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 147.532196][ T7520] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 148.177304][ T43] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 148.237782][ T980] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 148.348036][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 148.381859][ T43] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 148.397357][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 148.402552][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.424407][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.433202][ T980] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 148.437308][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.453275][ T980] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.460226][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.475694][ T980] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.495991][ T980] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.506327][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.524637][ T980] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.534978][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.547344][ T980] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.571384][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.794003][ T43] usb 5-1: GET_CAPABILITIES returned 0 [ 148.802873][ T43] usbtmc 5-1:16.0: can't read capabilities [ 148.854349][ T7561] loop2: detected capacity change from 0 to 7 [ 148.891214][ T980] usb 3-1: usb_control_msg returned -32 [ 148.896953][ T980] usbtmc 3-1:16.0: can't read capabilities [ 148.906955][ T7561] Dev loop2: unable to read RDB block 7 [ 148.913436][ T7561] loop2: unable to read partition table [ 148.921287][ T7561] loop2: partition table beyond EOD, truncated [ 148.944627][ T7561] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 149.254963][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 149.282981][ T7536] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 149.283346][ T980] usb 5-1: USB disconnect, device number 12 [ 149.322137][ T7568] usb 5-1: usbtmc_ioctl_clear_in_halt returned -19 [ 149.460373][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 149.476958][ T24] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 149.493245][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.584842][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.626532][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.677353][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.706101][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.728216][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.974293][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 149.982207][ T24] usbtmc 1-1:16.0: can't read capabilities [ 150.287365][ T24] usb 1-1: USB disconnect, device number 14 [ 150.293643][ T7564] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 151.030806][ T980] usb 3-1: USB disconnect, device number 16 [ 152.367505][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 153.065594][ T43] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 153.229283][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.250972][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.280557][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.314030][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.344500][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.367922][ T43] usb 3-1: config 0 descriptor?? [ 153.538973][ T980] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 153.709963][ T980] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 153.722737][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.738948][ T980] usb 2-1: config 0 descriptor?? [ 153.795507][ T43] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd [ 153.829806][ T43] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 154.130645][ T5948] usb 3-1: USB disconnect, device number 17 [ 154.248033][ T30] kauditd_printk_skb: 237 callbacks suppressed [ 154.248050][ T30] audit: type=1326 audit(1755000718.329:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.3.678" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f67539 code=0x0 [ 154.257336][ T5917] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 154.302133][ T980] usbhid 2-1:0.0: can't add hid device: -71 [ 154.330459][ T980] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 154.342657][ T980] usb 2-1: USB disconnect, device number 10 [ 154.427393][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 154.439949][ T5917] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 154.473789][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.499293][ T5917] usb 5-1: Product: syz [ 154.509404][ T5917] usb 5-1: Manufacturer: syz [ 154.526245][ T5917] usb 5-1: SerialNumber: syz [ 154.550442][ T5917] usb 5-1: config 0 descriptor?? [ 154.566837][ T5917] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 154.866677][ T7720] loop2: detected capacity change from 0 to 7 [ 154.881678][ T5916] Dev loop2: unable to read RDB block 7 [ 154.887505][ T5916] loop2: AHDI p2 p3 [ 154.891525][ T5916] loop2: partition table partially beyond EOD, truncated [ 154.917529][ T5916] loop2: p3 start 335544320 is beyond EOD, truncated [ 154.928613][ T7720] Dev loop2: unable to read RDB block 7 [ 154.937068][ T7720] loop2: AHDI p2 p3 [ 154.955036][ T7720] loop2: partition table partially beyond EOD, truncated [ 154.980081][ T7720] loop2: p3 start 335544320 is beyond EOD, truncated [ 155.418106][ T7740] loop2: detected capacity change from 0 to 7 [ 155.442791][ T7740] Dev loop2: unable to read RDB block 7 [ 155.456203][ T7740] loop2: unable to read partition table [ 155.463423][ T7740] loop2: partition table beyond EOD, truncated [ 155.485953][ T7740] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 155.597327][ T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 155.719522][ T5948] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 155.759454][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.770641][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.781985][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.783342][ T5917] gspca_topro: reg_w err -71 [ 155.795016][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.795044][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.797754][ T43] usb 4-1: config 0 descriptor?? [ 155.857457][ T5917] gspca_topro: Sensor soi763a [ 155.882176][ T5948] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.893094][ T5917] usb 5-1: USB disconnect, device number 13 [ 155.926359][ T5948] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.971636][ T5948] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.995555][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.026056][ T5948] usb 1-1: Product: syz [ 156.034035][ T5948] usb 1-1: Manufacturer: syz [ 156.054681][ T5948] usb 1-1: SerialNumber: syz [ 156.067401][ T1212] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 156.175157][ T30] audit: type=1326 audit(1755000720.259:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd3558 code=0x7ffc0000 [ 156.237073][ T30] audit: type=1326 audit(1755000720.259:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 156.247333][ T1212] usb 3-1: Using ep0 maxpacket: 8 [ 156.263626][ T30] audit: type=1326 audit(1755000720.259:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 156.295444][ T30] audit: type=1326 audit(1755000720.259:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd3558 code=0x7ffc0000 [ 156.304708][ T43] plantronics 0003:047F:FFFF.0010: reserved main item tag 0xd [ 156.320144][ T5948] usb 1-1: 0:2 : does not exist [ 156.338269][ T30] audit: type=1326 audit(1755000720.259:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd3558 code=0x7ffc0000 [ 156.365520][ T1212] usb 3-1: config 0 has no interfaces? [ 156.367972][ T5948] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 156.375056][ T43] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 156.412771][ T1212] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 156.425198][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.435026][ T30] audit: type=1326 audit(1755000720.259:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd3558 code=0x7ffc0000 [ 156.447401][ T1212] usb 3-1: Product: syz [ 156.457002][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.487258][ T5948] usb 1-1: USB disconnect, device number 15 [ 156.519207][ T1212] usb 3-1: Manufacturer: syz [ 156.523851][ T1212] usb 3-1: SerialNumber: syz [ 156.585220][ T30] audit: type=1326 audit(1755000720.259:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd3558 code=0x7ffc0000 [ 156.607173][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.672296][ T1212] usb 3-1: config 0 descriptor?? [ 156.696824][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.768426][ T30] audit: type=1326 audit(1755000720.259:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd3558 code=0x7ffc0000 [ 156.790349][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.807490][ T30] audit: type=1326 audit(1755000720.259:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd3558 code=0x7ffc0000 [ 156.861742][ T5917] usb 4-1: USB disconnect, device number 17 [ 156.914286][ T5946] usb 3-1: USB disconnect, device number 18 [ 157.187414][ T980] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 157.377563][ T980] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 157.388577][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.402489][ T980] usb 5-1: config 0 descriptor?? [ 157.456694][ T7770] bond0: entered promiscuous mode [ 157.464249][ T7770] bond_slave_0: entered promiscuous mode [ 157.472158][ T7770] bond_slave_1: entered promiscuous mode [ 157.506383][ T7770] bond0: entered allmulticast mode [ 157.514775][ T7770] bond_slave_0: entered allmulticast mode [ 157.522593][ T7770] bond_slave_1: entered allmulticast mode [ 157.787429][ T5917] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 157.818997][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 157.861292][ T1336] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.870858][ T980] usbhid 5-1:0.0: can't add hid device: -71 [ 157.890159][ T980] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 157.935029][ T980] usb 5-1: USB disconnect, device number 14 [ 157.998095][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 157.999626][ T1336] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.012473][ T5917] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.036904][ T5917] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 158.056110][ T5917] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.065875][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.074422][ T5917] usb 3-1: Product: syz [ 158.082637][ T5917] usb 3-1: Manufacturer: syz [ 158.088611][ T5917] usb 3-1: SerialNumber: syz [ 158.119530][ T1336] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.277864][ T1336] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.334062][ T7772] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.638691][ T1336] bridge_slave_1: left allmulticast mode [ 158.644381][ T1336] bridge_slave_1: left promiscuous mode [ 158.658594][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 158.679375][ T1336] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.720892][ T1336] bridge_slave_0: left allmulticast mode [ 158.737384][ T1336] bridge_slave_0: left promiscuous mode [ 158.749302][ T1336] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.827289][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 158.843696][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.855300][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.863876][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.875372][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.884064][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.896198][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 158.909392][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 158.918765][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.929651][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.937717][ T24] usb 4-1: config 0 descriptor?? [ 158.944325][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.964529][ T7772] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 159.192823][ T5917] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 159.201237][ T5917] cdc_ncm 3-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 159.209940][ T5917] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 159.386113][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 159.395966][ T5917] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 159.404405][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0011/input/input19 [ 159.429329][ T24] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 159.452640][ T1336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.485427][ T1336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.514342][ T1336] bond0 (unregistering): Released all slaves [ 159.551680][ T1336] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 159.562490][ T1336] bond1 (unregistering): Released all slaves [ 159.590045][ T980] usb 4-1: USB disconnect, device number 18 [ 159.760574][ T5917] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 159.802952][ T5917] usb 3-1: USB disconnect, device number 19 [ 159.831171][ T5917] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 160.653332][ T1336] hsr_slave_0: left promiscuous mode [ 160.663526][ T1336] hsr_slave_1: left promiscuous mode [ 160.669003][ T5950] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 160.703082][ T1336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.731164][ T1336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.762674][ T1336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.787429][ T980] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 160.792461][ T1336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.841212][ T1336] veth1_macvtap: left promiscuous mode [ 160.870842][ T5950] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 160.887394][ T1336] veth0_macvtap: left promiscuous mode [ 160.898380][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.906660][ T1336] veth1_vlan: left promiscuous mode [ 160.916712][ T1336] veth0_vlan: left promiscuous mode [ 160.938259][ T5950] usb 3-1: config 0 descriptor?? [ 160.967265][ T980] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.007358][ T980] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 161.024442][ T980] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.043383][ T5868] Bluetooth: hci3: command tx timeout [ 161.050615][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.065790][ T7830] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 161.109439][ T980] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.398346][ T24] usb 4-1: USB disconnect, device number 19 [ 161.633192][ T5950] usbhid 3-1:0.0: can't add hid device: -71 [ 161.648469][ T5950] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 161.736206][ T5950] usb 3-1: USB disconnect, device number 20 [ 161.925166][ T7856] loop2: detected capacity change from 0 to 7 [ 161.951196][ T7856] Dev loop2: unable to read RDB block 7 [ 161.967058][ T7856] loop2: unable to read partition table [ 162.006311][ T7856] loop2: partition table beyond EOD, truncated [ 162.031719][ T7856] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 162.231402][ T30] kauditd_printk_skb: 196 callbacks suppressed [ 162.231420][ T30] audit: type=1326 audit(1755000726.319:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.4.740" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ee539 code=0x0 [ 163.121951][ T5868] Bluetooth: hci3: command tx timeout [ 163.877428][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 163.953902][ T1336] team0 (unregistering): Port device team_slave_1 removed [ 164.061320][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.110341][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 164.136424][ T1336] team0 (unregistering): Port device team_slave_0 removed [ 164.151980][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.177612][ T24] usb 3-1: config 0 descriptor?? [ 164.346452][ T7899] Zero length message leads to an empty skb [ 164.406090][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 164.417459][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 164.439183][ T24] usb 3-1: USB disconnect, device number 21 [ 164.568699][ T1212] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 164.605604][ T30] audit: type=1326 audit(1755000728.689:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 164.660595][ T30] audit: type=1326 audit(1755000728.689:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 164.702748][ T30] audit: type=1326 audit(1755000728.689:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 164.744806][ T1212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.769287][ T1212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.787324][ T30] audit: type=1326 audit(1755000728.689:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 164.820912][ T1212] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.842654][ T1212] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.853224][ T30] audit: type=1326 audit(1755000728.689:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 164.889428][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.915759][ T1212] usb 5-1: config 0 descriptor?? [ 164.924405][ T30] audit: type=1326 audit(1755000728.689:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 164.973789][ T30] audit: type=1326 audit(1755000728.689:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 164.996973][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 165.022056][ T30] audit: type=1326 audit(1755000728.689:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 165.078775][ T30] audit: type=1326 audit(1755000728.719:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 165.179699][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 165.191873][ T5868] Bluetooth: hci3: command tx timeout [ 165.202640][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.234555][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 165.277418][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.348633][ T24] usb 3-1: config 0 descriptor?? [ 165.366304][ T24] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 165.414374][ T24] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 165.445969][ T1212] plantronics 0003:047F:FFFF.0012: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 165.614350][ C1] ldusb 3-1:0.0: Ring buffer overflow, 8 bytes dropped [ 165.933843][ C0] ldusb 3-1:0.0: Ring buffer overflow, 8 bytes dropped [ 166.563758][ T7798] chnl_net:caif_netlink_parms(): no params data found [ 167.026160][ T980] usb 3-1: USB disconnect, device number 22 [ 167.032423][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.081232][ T980] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 167.098889][ T7798] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.120286][ T7798] bridge_slave_0: entered allmulticast mode [ 167.154697][ T7798] bridge_slave_0: entered promiscuous mode [ 167.200233][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.243827][ T7798] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.266018][ T7798] bridge_slave_1: entered allmulticast mode [ 167.272164][ T5868] Bluetooth: hci3: command tx timeout [ 167.280832][ T7798] bridge_slave_1: entered promiscuous mode [ 167.404051][ T5917] usb 5-1: USB disconnect, device number 15 [ 167.708548][ T7798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.754154][ T7798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.160762][ T7798] team0: Port device team_slave_0 added [ 168.265504][ T7798] team0: Port device team_slave_1 added [ 168.532450][ T7798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.553378][ T7798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.627396][ T7798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.674793][ T7798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.697402][ T7798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.782959][ T7798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.069192][ T7798] hsr_slave_0: entered promiscuous mode [ 169.098286][ T7798] hsr_slave_1: entered promiscuous mode [ 169.104749][ T7798] debugfs: 'hsr0' already exists in 'hsr' [ 169.143387][ T7798] Cannot create hsr debugfs directory [ 169.776461][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 169.867409][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 170.028002][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 170.036757][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.073621][ T24] usb 4-1: config 0 has no interfaces? [ 170.093993][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 170.121882][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.145635][ T24] usb 4-1: config 0 descriptor?? [ 170.151230][ T7798] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.184086][ T7798] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 170.231236][ T7798] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.282773][ T7798] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 170.444405][ T1212] usb 4-1: USB disconnect, device number 20 [ 170.608934][ T980] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 170.628498][ T7798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.754581][ T7798] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.789333][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.800632][ T980] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 170.817930][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.839311][ T980] usb 3-1: config 0 descriptor?? [ 170.886641][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.894031][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.966657][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.973871][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.072198][ T980] usbhid 3-1:0.0: can't add hid device: -71 [ 171.099530][ T980] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 171.167597][ T980] usb 3-1: USB disconnect, device number 23 [ 171.275082][ T7798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.440096][ T7798] veth0_vlan: entered promiscuous mode [ 171.530782][ T7798] veth1_vlan: entered promiscuous mode [ 171.677691][ T980] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 171.685732][ T7798] veth0_macvtap: entered promiscuous mode [ 171.706982][ T7798] veth1_macvtap: entered promiscuous mode [ 171.720667][ T5948] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 171.743635][ T5948] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 171.778737][ T5948] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 171.800706][ T7798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.806632][ T5948] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 171.815393][ T5948] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 171.869615][ T7798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.877584][ T5948] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 171.887261][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 171.904743][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.922230][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.941927][ T5948] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 171.965266][ T980] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 171.986717][ T5948] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 171.994796][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.016980][ T5948] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 172.024552][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.037415][ T5948] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 172.048738][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.070836][ T980] usb 3-1: config 0 descriptor?? [ 172.086202][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.121624][ T5948] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [] on [ 172.132099][ T980] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 172.180974][ T980] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 172.424365][ C1] ldusb 3-1:0.0: Ring buffer overflow, 8 bytes dropped [ 172.583924][ T775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.608606][ T775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.715521][ T775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.742650][ C1] ldusb 3-1:0.0: Ring buffer overflow, 8 bytes dropped [ 172.748787][ T775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.146966][ T8094] loop2: detected capacity change from 0 to 7 [ 173.211280][ T8094] Dev loop2: unable to read RDB block 7 [ 173.224591][ T8094] loop2: AHDI p1 p2 [ 173.230642][ T8094] loop2: partition table partially beyond EOD, truncated [ 173.241156][ T8094] loop2: p1 start 8388608 is beyond EOD, truncated [ 173.797337][ T5978] usb 3-1: USB disconnect, device number 24 [ 173.847022][ T5978] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 173.937285][ T1212] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 174.073539][ T8136] team0: entered promiscuous mode [ 174.093810][ T8136] team_slave_0: entered promiscuous mode [ 174.116712][ T8136] team_slave_1: entered promiscuous mode [ 174.132894][ T1212] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 174.145772][ T8142] batadv_slave_0: entered promiscuous mode [ 174.170707][ T1212] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 174.171370][ T8135] batadv_slave_0: left promiscuous mode [ 174.206560][ T1212] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 174.208146][ T8145] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.825'. [ 174.232852][ T8135] team0: left promiscuous mode [ 174.237140][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.256170][ T8135] team_slave_0: left promiscuous mode [ 174.268780][ T8118] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 174.268817][ T8135] team_slave_1: left promiscuous mode [ 174.285688][ T1212] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.614918][ T980] usb 5-1: USB disconnect, device number 16 [ 175.021139][ T8171] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.833'. [ 175.447317][ T980] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 175.624015][ T980] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 175.682620][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.729770][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.772361][ T980] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 175.825434][ T980] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 175.842818][ T980] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 175.874837][ T980] usb 6-1: Manufacturer: syz [ 175.913975][ T980] usb 6-1: config 0 descriptor?? [ 176.056659][ T8209] gretap1: entered promiscuous mode [ 176.425211][ T980] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 176.779778][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 176.779796][ T30] audit: type=1326 audit(1755000740.859:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8220 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7fc00000 [ 177.286665][ T980] usb 6-1: USB disconnect, device number 2 [ 177.341037][ T30] audit: type=1326 audit(1755000741.429:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8220 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f67539 code=0x7fc00000 [ 177.877371][ T5946] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 177.977449][ T980] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 178.048982][ T5946] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.075692][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 178.077585][ T5946] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1536, setting to 64 [ 178.104604][ T5946] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.147727][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 178.170515][ T5946] usb 3-1: config 1 interface 0 has no altsetting 0 [ 178.178314][ T980] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 178.186755][ T980] usb 4-1: config 0 has no interface number 0 [ 178.200928][ T5946] usb 3-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.40 [ 178.216506][ T980] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 178.230904][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.245976][ T980] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 178.258308][ T5946] usb 3-1: Product: syz [ 178.264004][ T5946] usb 3-1: Manufacturer: syz [ 178.276727][ T980] usb 4-1: config 0 interface 41 has no altsetting 0 [ 178.283889][ T5946] usb 3-1: SerialNumber: syz [ 178.300555][ T980] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 178.315179][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.325820][ T980] usb 4-1: Product: syz [ 178.326230][ T8263] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.330694][ T980] usb 4-1: Manufacturer: syz [ 178.355725][ T980] usb 4-1: SerialNumber: syz [ 178.376364][ T980] usb 4-1: config 0 descriptor?? [ 178.393705][ T8268] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 178.405712][ T8268] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 178.625375][ T8268] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 178.630291][ T5946] usbhid 3-1:1.0: can't add hid device: -71 [ 178.668697][ T8268] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 178.676174][ T5946] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 178.737742][ T5946] usb 3-1: USB disconnect, device number 25 [ 178.790833][ T24] hid_parser_main: 7 callbacks suppressed [ 178.790862][ T24] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 178.865358][ T24] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 179.026315][ T8306] netlink: 72 bytes leftover after parsing attributes in process `syz.1.873'. [ 179.107449][ T980] Error reading MAC address [ 179.126907][ T8304] fido_id[8304]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 179.129051][ T8268] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 179.154972][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'. [ 179.185828][ T8268] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 179.528004][ T980] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 179.647832][ T980] usb 4-1: USB disconnect, device number 21 [ 179.717295][ T1212] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 179.920392][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.933068][ T30] audit: type=1326 audit(1755000744.019:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.5.876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 179.971828][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.012210][ T1212] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.032588][ T30] audit: type=1326 audit(1755000744.019:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.5.876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 180.056239][ T1212] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.060761][ T5946] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 180.079728][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.088112][ T30] audit: type=1326 audit(1755000744.019:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.5.876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 180.172082][ T1212] usb 2-1: config 0 descriptor?? [ 180.239130][ T30] audit: type=1326 audit(1755000744.049:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.5.876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 180.314405][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.335999][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.370643][ T30] audit: type=1326 audit(1755000744.049:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.5.876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 180.397391][ T5946] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.449933][ T8342] syzkaller1: entered promiscuous mode [ 180.471878][ T30] audit: type=1326 audit(1755000744.049:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.5.876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 180.477471][ T5946] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.497340][ T8342] syzkaller1: entered allmulticast mode [ 180.522083][ T30] audit: type=1326 audit(1755000744.049:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.5.876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 180.621384][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.628651][ T1212] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd [ 180.645593][ T30] audit: type=1326 audit(1755000744.049:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.5.876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 180.710481][ T5946] usb 5-1: config 0 descriptor?? [ 180.755691][ T1212] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 180.980929][ T5978] usb 2-1: USB disconnect, device number 11 [ 181.034646][ T8346] loop6: detected capacity change from 0 to 524287999 [ 181.139280][ T5946] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xd [ 181.195172][ T5946] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 181.664365][ T8367] input: syz1 as /devices/virtual/input/input21 [ 182.488793][ T5946] usb 5-1: USB disconnect, device number 17 [ 182.607911][ T5978] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 182.781278][ T5978] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.790014][ T5978] usb 3-1: config 0 has no interface number 0 [ 182.796990][ T5978] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 182.821762][ T5978] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 182.837409][ T5948] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 182.840827][ T5978] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 182.854491][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.876272][ T5978] usb 3-1: config 0 descriptor?? [ 182.893753][ T8396] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.905797][ T5978] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 183.017956][ T5948] usb 6-1: Using ep0 maxpacket: 32 [ 183.041525][ T5948] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 183.052224][ T5948] usb 6-1: config 0 has no interface number 0 [ 183.067587][ T5948] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 183.082904][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.111915][ T5948] usb 6-1: Product: syz [ 183.116155][ T5948] usb 6-1: Manufacturer: syz [ 183.133237][ T5978] usb 3-1: USB disconnect, device number 26 [ 183.137274][ T5948] usb 6-1: SerialNumber: syz [ 183.139403][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 183.155348][ T5948] usb 6-1: config 0 descriptor?? [ 183.203729][ T5948] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 183.414609][ T5948] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 183.453749][ T5948] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 183.627918][ T1212] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 183.798847][ T1212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.821581][ T1212] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.846087][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 183.857335][ T980] usb 6-1: USB disconnect, device number 3 [ 183.865856][ T1212] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 183.878432][ T980] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 183.902982][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.916627][ T980] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 183.946286][ T980] quatech2 6-1:0.51: device disconnected [ 183.946468][ T1212] usb 2-1: config 0 descriptor?? [ 184.426236][ T1212] usb 2-1: string descriptor 0 read error: -71 [ 184.457105][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.932'. [ 184.458410][ T1212] usb 2-1: USB disconnect, device number 12 [ 184.653522][ T8474] netlink: 210968 bytes leftover after parsing attributes in process `syz.4.936'. [ 185.129777][ T8493] syzkaller1: entered promiscuous mode [ 185.152201][ T8493] syzkaller1: entered allmulticast mode [ 185.222652][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 185.238303][ T8499] netlink: 104 bytes leftover after parsing attributes in process `syz.3.948'. [ 185.249703][ T8499] netlink: 104 bytes leftover after parsing attributes in process `syz.3.948'. [ 185.521325][ T8504] netlink: 48 bytes leftover after parsing attributes in process `syz.3.950'. [ 185.727075][ T8516] binder: 8515:8516 ioctl c0306201 800003c0 returned -14 [ 186.527390][ T1212] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 186.734854][ T1212] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.779244][ T1212] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 186.816363][ T1212] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 186.852694][ T1212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.891895][ T1212] usb 6-1: config 0 descriptor?? [ 187.336015][ T1212] Bluetooth: Can't get version to change to load ram patch err [ 187.354558][ T1212] Bluetooth: Loading patch file failed [ 187.373449][ T1212] ath3k 6-1:0.0: probe with driver ath3k failed with error -32 [ 187.394395][ T1212] usb 6-1: USB disconnect, device number 4 [ 187.507729][ T980] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 187.651780][ T5948] hid-generic 0000:007F:0005.0018: unknown main item tag 0x0 [ 187.664979][ T5948] hid-generic 0000:007F:0005.0018: unknown main item tag 0x0 [ 187.686814][ T5948] hid-generic 0000:007F:0005.0018: unknown main item tag 0x0 [ 187.697411][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.731776][ T5948] hid-generic 0000:007F:0005.0018: unknown main item tag 0x0 [ 187.742753][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.754573][ T5948] hid-generic 0000:007F:0005.0018: unknown main item tag 0x0 [ 187.763467][ T980] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 187.774981][ T5948] hid-generic 0000:007F:0005.0018: unknown main item tag 0x0 [ 187.776358][ T8587] tipc: Started in network mode [ 187.783024][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.785975][ T980] usb 5-1: config 0 descriptor?? [ 187.806788][ T5948] hid-generic 0000:007F:0005.0018: unknown main item tag 0x0 [ 187.824751][ T5948] hid-generic 0000:007F:0005.0018: unknown main item tag 0x0 [ 187.841498][ T8587] tipc: Node identity 4, cluster identity 4711 [ 187.846446][ T5948] hid-generic 0000:007F:0005.0018: unknown main item tag 0x0 [ 187.870014][ T5948] hid-generic 0000:007F:0005.0018: unknown main item tag 0x0 [ 187.901541][ T5948] hid-generic 0000:007F:0005.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.929807][ T8587] tipc: Node number set to 4 [ 188.048245][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.078080][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.227136][ T8590] fido_id[8590]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 188.333059][ T980] hid-steam 0003:28DE:1142.0019: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 188.355978][ T8605] netlink: 'syz.5.985': attribute type 29 has an invalid length. [ 188.418391][ T8605] netlink: 'syz.5.985': attribute type 29 has an invalid length. [ 188.456056][ T980] hid-steam 0003:28DE:1142.0019: Steam wireless receiver connected [ 188.497686][ T980] hid-steam 0003:28DE:1142.0019: No HID_FEATURE_REPORT submitted - nothing to read [ 188.569098][ T980] hid-steam 0003:28DE:1142.001A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 188.614859][ T980] usb 5-1: USB disconnect, device number 18 [ 188.719978][ T980] hid-steam 0003:28DE:1142.0019: Steam wireless receiver disconnected [ 188.834562][ T8615] fido_id[8615]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 188.909347][ T8621] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.988'. [ 189.653374][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.999'. [ 191.736377][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.748936][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.757040][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.772793][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.784433][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.085743][ T8708] chnl_net:caif_netlink_parms(): no params data found [ 192.192396][ T8708] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.199934][ T8708] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.207132][ T8708] bridge_slave_0: entered allmulticast mode [ 192.215095][ T8708] bridge_slave_0: entered promiscuous mode [ 192.223785][ T8708] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.231423][ T8708] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.240540][ T8708] bridge_slave_1: entered allmulticast mode [ 192.247857][ T8708] bridge_slave_1: entered promiscuous mode [ 192.278330][ T8708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.291186][ T8708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.323602][ T8708] team0: Port device team_slave_0 added [ 192.332594][ T8708] team0: Port device team_slave_1 added [ 192.364135][ T8708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.371932][ T8708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.398892][ T8708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.412386][ T8708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.419388][ T8708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.446336][ T8708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.495250][ T8708] hsr_slave_0: entered promiscuous mode [ 192.501666][ T8708] hsr_slave_1: entered promiscuous mode [ 192.507959][ T8708] debugfs: 'hsr0' already exists in 'hsr' [ 192.513691][ T8708] Cannot create hsr debugfs directory [ 192.665952][ T8708] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 192.675873][ T8708] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 192.687463][ T8708] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 192.697083][ T8708] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 192.729723][ T8708] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.736888][ T8708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.745013][ T8708] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.752252][ T8708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.812394][ T8708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.828942][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.837520][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.856647][ T8708] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.876983][ T775] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.884151][ T775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.899070][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.906210][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.981027][ T8708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.025672][ T8708] veth0_vlan: entered promiscuous mode [ 193.037218][ T8708] veth1_vlan: entered promiscuous mode [ 193.070932][ T8708] veth0_macvtap: entered promiscuous mode [ 193.082616][ T8708] veth1_macvtap: entered promiscuous mode [ 193.099937][ T8708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.116432][ T8708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.132015][ T7858] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.143006][ T7858] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.159504][ T7858] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.168476][ T7858] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.235501][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.248860][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.278550][ T7858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.286442][ T7858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.355747][ T8730] netlink: 'syz.5.1034': attribute type 12 has an invalid length. [ 193.389485][ T8730] netlink: 'syz.5.1034': attribute type 29 has an invalid length. [ 193.413622][ T8730] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1034'. [ 193.437729][ T8730] netlink: 'syz.5.1034': attribute type 2 has an invalid length. [ 193.454189][ T8730] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1034'. [ 193.828686][ T5868] Bluetooth: hci2: command tx timeout [ 194.117292][ T5946] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 194.292174][ T5946] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.335088][ T5946] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 194.371121][ T5946] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 194.394534][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.402414][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.419916][ T5946] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 194.441286][ T5946] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 194.464843][ T5946] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.474371][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.506432][ T5946] usb 4-1: Product: syz [ 194.523383][ T5946] usb 4-1: Manufacturer: syz [ 194.590366][ T5946] cdc_wdm 4-1:1.0: skipping garbage [ 194.624086][ T5946] cdc_wdm 4-1:1.0: skipping garbage [ 194.644811][ T5946] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 194.661179][ T5946] cdc_wdm 4-1:1.0: Unknown control protocol [ 194.843063][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 194.849714][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 194.856120][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 194.862742][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 194.871071][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 194.877704][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 194.885125][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 194.891748][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 194.898986][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 194.905797][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 194.913401][ T980] usb 4-1: USB disconnect, device number 22 [ 194.920179][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 194.920204][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 194.920222][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 195.861188][ T980] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 195.907463][ T5872] Bluetooth: hci2: command tx timeout [ 195.944893][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'. [ 195.965355][ T8809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1050'. [ 196.057600][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 196.080020][ T980] usb 4-1: config 0 has no interfaces? [ 196.106621][ T980] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 196.136869][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.187368][ T980] usb 4-1: Product: syz [ 196.191568][ T980] usb 4-1: Manufacturer: syz [ 196.196172][ T980] usb 4-1: SerialNumber: syz [ 196.240103][ T980] usb 4-1: config 0 descriptor?? [ 196.471305][ T5872] Bluetooth: hci0: command 0x0406 tx timeout [ 196.472807][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 196.477825][ T5872] Bluetooth: hci4: command 0x0406 tx timeout [ 196.658349][ T5950] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 196.827390][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 196.846878][ T5950] usb 3-1: unable to get BOS descriptor or descriptor too short [ 196.872722][ T5950] usb 3-1: config 0 has no interfaces? [ 196.891251][ T5950] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.936122][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.961947][ T5950] usb 3-1: Product: syz [ 196.970605][ T5950] usb 3-1: Manufacturer: syz [ 196.980004][ T5950] usb 3-1: SerialNumber: syz [ 197.000679][ T5950] usb 3-1: config 0 descriptor?? [ 197.252244][ T8817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.282239][ T8817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.325688][ T980] usb 3-1: USB disconnect, device number 27 [ 197.787329][ T5978] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 197.957092][ T5978] usb 3-1: config index 0 descriptor too short (expected 159, got 149) [ 197.987865][ T5865] Bluetooth: hci2: command tx timeout [ 197.996227][ T5978] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.016666][ T5978] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.039689][ T5978] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 1.40 [ 198.061975][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.096904][ T5978] usb 3-1: Product: syz [ 198.108187][ T5978] usb 3-1: Manufacturer: syz [ 198.113037][ T5978] usb 3-1: SerialNumber: syz [ 198.217368][ T5946] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 198.377486][ T5946] usb 6-1: Using ep0 maxpacket: 32 [ 198.430333][ T5946] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 198.444224][ T5946] usb 6-1: config 0 has no interface number 0 [ 198.462834][ T5946] usb 6-1: config 0 interface 184 has no altsetting 0 [ 198.489794][ T5946] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 198.512204][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.537443][ T5946] usb 6-1: Product: syz [ 198.546119][ T5946] usb 6-1: Manufacturer: syz [ 198.558225][ T5946] usb 6-1: SerialNumber: syz [ 198.579416][ T5946] usb 6-1: config 0 descriptor?? [ 198.642920][ T5946] smsc75xx v1.0.0 [ 198.688154][ T980] usb 4-1: USB disconnect, device number 23 [ 198.788429][ T5978] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 198.846310][ T5978] usb 3-1: Warning! Unlikely big volume range (=29101), cval->res is probably wrong. [ 198.884677][ T5978] usb 3-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = -29101/0/1 [ 198.937597][ T5978] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 198.966791][ T5978] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 199.013181][ T5978] usb 3-1: 5:0: cannot get min/max values for control 8 (id 5) [ 199.056293][ T5978] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 199.105874][ T5978] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 199.161910][ T5978] usb 3-1: USB disconnect, device number 28 [ 199.320795][ T8875] netlink: 'syz.3.1065': attribute type 3 has an invalid length. [ 199.332475][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.880000][ T5946] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 199.897442][ T5946] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 199.926210][ T5946] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 199.963652][ T8894] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 199.966963][ T5946] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 200.025060][ T5946] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 200.067665][ T5865] Bluetooth: hci2: command tx timeout [ 200.078515][ T5946] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 200.141968][ T5946] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 200.196171][ T5946] usb 6-1: USB disconnect, device number 5 [ 200.533948][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 200.533967][ T30] audit: type=1326 audit(1755000764.619:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8909 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 200.652579][ T30] audit: type=1326 audit(1755000764.679:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8909 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 200.771290][ T30] audit: type=1326 audit(1755000764.679:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8909 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 200.793218][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.870548][ T8923] loop7: detected capacity change from 0 to 7 [ 200.899134][ T30] audit: type=1326 audit(1755000764.679:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8909 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 200.927346][ T8923] Dev loop7: unable to read RDB block 7 [ 200.953668][ T8923] loop7: unable to read partition table [ 200.986266][ T8923] loop7: partition table beyond EOD, truncated [ 201.054514][ T8923] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 201.159065][ T8930] IPv4: Oversized IP packet from 127.202.26.0 [ 202.243456][ T8968] tls_set_device_offload_rx: netdev not found [ 202.952227][ T8991] netlink: 'syz.5.1106': attribute type 1 has an invalid length. [ 202.975138][ T8991] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1106'. [ 203.070677][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1107'. [ 203.171486][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 203.177998][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.185936][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.193830][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.201776][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.209671][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.217843][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.225732][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.233761][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.241727][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.249777][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.257668][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.265605][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.273620][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.281606][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.289489][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.297442][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.305278][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.313352][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.321206][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.329182][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.336997][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.345053][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.352913][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.360867][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.368719][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.376715][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.384555][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.392484][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.400326][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.408325][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.416237][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.424191][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.432047][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.440037][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.447885][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.455841][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.463793][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.471751][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.479649][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.487610][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.495490][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.503453][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.511315][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.519448][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.527328][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.535243][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.543223][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.551177][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.559061][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.566962][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.574822][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.582797][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.590803][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.598819][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.606841][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.614802][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.622776][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.630734][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.638569][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.646469][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.654305][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.662242][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.670105][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.678145][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.685983][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 203.694014][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 203.701858][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 204.080730][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 204.148215][ T5978] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 204.319756][ T5978] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 204.346884][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.364793][ T5978] usb 4-1: config 0 descriptor?? [ 204.393810][ T5978] usb 4-1: selecting invalid altsetting 1 [ 204.526167][ T5978] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 204.608092][ T5978] usb 4-1: USB disconnect, device number 24 [ 204.748409][ T9035] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1124'. [ 204.769612][ T9035] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1124'. [ 204.786578][ T9037] binder: 9036:9037 ioctl 40046205 0 returned -22 [ 204.828210][ T5948] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 204.997363][ T5948] usb 7-1: Using ep0 maxpacket: 8 [ 205.013922][ T5948] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 205.026721][ T5948] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 205.046943][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055c0d400: rx timeout, send abort [ 205.083396][ T5948] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 205.107328][ T5948] usb 7-1: config 0 has no interface number 0 [ 205.123790][ T5948] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.147329][ T5948] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 205.177242][ T5948] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 205.209849][ T5948] usb 7-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 205.241519][ T5948] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.295941][ T5948] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 205.316213][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.342909][ T5948] usb 7-1: Product: syz [ 205.347117][ T5948] usb 7-1: Manufacturer: syz [ 205.367449][ T5948] usb 7-1: SerialNumber: syz [ 205.382889][ T5948] usb 7-1: config 0 descriptor?? [ 205.408105][ T9031] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 205.420632][ T5948] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 205.556346][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055c0d400: abort rx timeout. Force session deactivation [ 205.693174][ T5978] usb 7-1: USB disconnect, device number 2 [ 206.137583][ T980] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 206.289317][ T980] usb 3-1: config 0 has an invalid interface number: 152 but max is 0 [ 206.307465][ T980] usb 3-1: config 0 has no interface number 0 [ 206.313611][ T980] usb 3-1: config 0 interface 152 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 206.341257][ T980] usb 3-1: config 0 interface 152 has no altsetting 0 [ 206.350976][ T980] usb 3-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=a3.17 [ 206.360311][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.370264][ T980] usb 3-1: Product: syz [ 206.374705][ T980] usb 3-1: Manufacturer: syz [ 206.379504][ T980] usb 3-1: SerialNumber: syz [ 206.408443][ T980] usb 3-1: config 0 descriptor?? [ 206.414177][ T9067] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 206.632761][ T9067] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 206.662110][ T980] cdc_subset 3-1:0.152 usb0: register 'cdc_subset' at usb-dummy_hcd.2-1, Yopy, de:f6:ca:c7:f6:d6 [ 206.853172][ T980] usb 3-1: USB disconnect, device number 29 [ 206.865902][ T980] cdc_subset 3-1:0.152 usb0: unregister 'cdc_subset' usb-dummy_hcd.2-1, Yopy [ 207.825850][ T9128] trusted_key: syz.2.1158 sent an empty control message without MSG_MORE. [ 208.217823][ T9143] pimreg: entered allmulticast mode [ 208.962766][ T9164] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1168'. [ 209.115092][ T9164] netlink: 'syz.5.1168': attribute type 7 has an invalid length. [ 209.172588][ T9164] netlink: 'syz.5.1168': attribute type 8 has an invalid length. [ 209.223560][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1168'. [ 209.223874][ T9174] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 209.757128][ T9190] sctp: [Deprecated]: syz.1.1176 (pid 9190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.757128][ T9190] Use struct sctp_sack_info instead [ 210.526652][ T9206] syzkaller1: entered promiscuous mode [ 210.577293][ T9206] syzkaller1: entered allmulticast mode [ 210.967897][ T5948] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 211.147353][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 211.173425][ T5948] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 211.210213][ T5948] usb 3-1: config 0 has no interface number 0 [ 211.216365][ T5948] usb 3-1: config 0 interface 184 has no altsetting 0 [ 211.234904][ T5948] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 211.256837][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.284715][ T5948] usb 3-1: Product: syz [ 211.298753][ T5948] usb 3-1: Manufacturer: syz [ 211.309422][ T5948] usb 3-1: SerialNumber: syz [ 211.318561][ T5948] usb 3-1: config 0 descriptor?? [ 211.326587][ T5948] smsc75xx v1.0.0 [ 211.864888][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1197'. [ 211.912404][ T9240] netlink: 'syz.5.1197': attribute type 30 has an invalid length. [ 211.964680][ T5917] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 211.985893][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.034232][ T1336] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.061866][ T1336] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.109752][ T1336] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.137492][ T5917] usb 7-1: Using ep0 maxpacket: 8 [ 212.161581][ T5917] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 212.188143][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.236286][ T5917] usb 7-1: config 0 descriptor?? [ 212.579769][ T5948] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 212.622423][ T5948] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 212.656672][ T5948] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 212.677126][ T5948] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 212.692092][ T5948] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 212.717646][ T5948] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 212.735664][ T5948] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 212.754517][ T5948] usb 3-1: USB disconnect, device number 30 [ 213.479445][ T5917] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 213.514892][ T5917] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 213.556855][ T5917] asix 7-1:0.0: probe with driver asix failed with error -71 [ 213.593427][ T5917] usb 7-1: USB disconnect, device number 3 [ 213.911510][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1218'. [ 213.961533][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 213.968136][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 213.975971][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 213.983932][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 213.991808][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 213.999793][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.007657][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.015569][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.023426][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.031488][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.039362][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.047308][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.055131][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.063183][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.071053][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.079090][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.086920][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.094970][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.102823][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.110803][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.118708][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.126640][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.134596][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.142540][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.150421][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.158384][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.166310][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.174270][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.182213][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.190355][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.198217][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.206134][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.214129][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.222081][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.230034][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.238309][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.246319][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.254278][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.262145][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.270202][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.278139][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.286059][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.293924][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.301880][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.309734][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.317699][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.325522][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.333475][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.341332][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.349273][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.357100][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.365070][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.372933][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.380903][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.388835][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.396928][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.404800][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.412813][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.420678][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.428641][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.436469][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.444535][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.452393][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.460376][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.468244][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.476202][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.484062][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.492001][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.499877][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.507831][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.515650][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.523694][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.531552][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.539492][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.547344][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.555256][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.563121][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.571075][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.579028][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 214.586952][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 214.594837][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 215.032380][ T9315] input: syz1 as /devices/virtual/input/input22 [ 216.103957][ T9347] [ 216.106336][ T9347] ===================================================== [ 216.113267][ T9347] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 216.120727][ T9347] 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 Not tainted [ 216.127931][ T9347] ----------------------------------------------------- [ 216.134841][ T9347] syz.6.1242/9347 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 216.142540][ T9347] ffff888058b19168 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 216.151243][ T9347] [ 216.151243][ T9347] and this task is already holding: [ 216.158590][ T9347] ffff88807de94028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 216.168417][ T9347] which would create a new lock dependency: [ 216.174282][ T9347] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 216.182368][ T9347] [ 216.182368][ T9347] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 216.191807][ T9347] (&dev->event_lock#2){..-.}-{3:3} [ 216.191837][ T9347] [ 216.191837][ T9347] ... which became SOFTIRQ-irq-safe at: [ 216.204727][ T9347] lock_acquire+0x120/0x360 [ 216.209314][ T9347] _raw_spin_lock_irqsave+0xa7/0xf0 [ 216.214585][ T9347] input_inject_event+0xa5/0x340 [ 216.219592][ T9347] led_trigger_event+0x138/0x210 [ 216.224595][ T9347] kbd_bh+0x1c6/0x2e0 [ 216.228683][ T9347] tasklet_action_common+0x369/0x580 [ 216.234040][ T9347] handle_softirqs+0x283/0x870 [ 216.238880][ T9347] __irq_exit_rcu+0xca/0x1f0 [ 216.243564][ T9347] irq_exit_rcu+0x9/0x30 [ 216.247889][ T9347] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 216.253612][ T9347] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.259671][ T9347] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 216.265473][ T9347] evdev_write+0x2fc/0x480 [ 216.269967][ T9347] vfs_write+0x27b/0xb30 [ 216.274285][ T9347] ksys_write+0x145/0x250 [ 216.278700][ T9347] __do_fast_syscall_32+0xb6/0x2b0 [ 216.283894][ T9347] do_fast_syscall_32+0x34/0x80 [ 216.288819][ T9347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.295219][ T9347] [ 216.295219][ T9347] to a SOFTIRQ-irq-unsafe lock: [ 216.302220][ T9347] (tasklist_lock){.+.+}-{3:3} [ 216.302248][ T9347] [ 216.302248][ T9347] ... which became SOFTIRQ-irq-unsafe at: [ 216.315030][ T9347] ... [ 216.315037][ T9347] lock_acquire+0x120/0x360 [ 216.322400][ T9347] _raw_read_lock+0x36/0x50 [ 216.327064][ T9347] __do_wait+0xde/0x740 [ 216.331323][ T9347] do_wait+0x1f8/0x520 [ 216.335469][ T9347] kernel_wait+0xab/0x170 [ 216.339869][ T9347] call_usermodehelper_exec_work+0xbe/0x230 [ 216.345846][ T9347] process_scheduled_works+0xade/0x17b0 [ 216.351477][ T9347] worker_thread+0x8a0/0xda0 [ 216.356157][ T9347] kthread+0x70e/0x8a0 [ 216.360305][ T9347] ret_from_fork+0x3f9/0x770 [ 216.364979][ T9347] ret_from_fork_asm+0x1a/0x30 [ 216.369859][ T9347] [ 216.369859][ T9347] other info that might help us debug this: [ 216.369859][ T9347] [ 216.380183][ T9347] Chain exists of: [ 216.380183][ T9347] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 216.380183][ T9347] [ 216.393842][ T9347] Possible interrupt unsafe locking scenario: [ 216.393842][ T9347] [ 216.402254][ T9347] CPU0 CPU1 [ 216.407615][ T9347] ---- ---- [ 216.412983][ T9347] lock(tasklist_lock); [ 216.417304][ T9347] local_irq_disable(); [ 216.424044][ T9347] lock(&dev->event_lock#2); [ 216.431416][ T9347] lock(&client->buffer_lock); [ 216.438788][ T9347] [ 216.442319][ T9347] lock(&dev->event_lock#2); [ 216.447254][ T9347] [ 216.447254][ T9347] *** DEADLOCK *** [ 216.447254][ T9347] [ 216.455374][ T9347] 7 locks held by syz.6.1242/9347: [ 216.460463][ T9347] #0: ffff88814631b118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 216.469594][ T9347] #1: ffff8881413c8230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 216.479692][ T9347] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 216.489334][ T9347] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 216.498893][ T9347] #4: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 216.508033][ T9347] #5: ffff88807de94028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 216.518218][ T9347] #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 216.527366][ T9347] [ 216.527366][ T9347] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 216.537758][ T9347] -> (&dev->event_lock#2){..-.}-{3:3} { [ 216.543393][ T9347] IN-SOFTIRQ-W at: [ 216.547441][ T9347] lock_acquire+0x120/0x360 [ 216.553793][ T9347] _raw_spin_lock_irqsave+0xa7/0xf0 [ 216.560903][ T9347] input_inject_event+0xa5/0x340 [ 216.567672][ T9347] led_trigger_event+0x138/0x210 [ 216.574432][ T9347] kbd_bh+0x1c6/0x2e0 [ 216.580231][ T9347] tasklet_action_common+0x369/0x580 [ 216.587330][ T9347] handle_softirqs+0x283/0x870 [ 216.593899][ T9347] __irq_exit_rcu+0xca/0x1f0 [ 216.600303][ T9347] irq_exit_rcu+0x9/0x30 [ 216.606371][ T9347] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 216.613830][ T9347] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.621631][ T9347] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 216.629172][ T9347] evdev_write+0x2fc/0x480 [ 216.635411][ T9347] vfs_write+0x27b/0xb30 [ 216.641551][ T9347] ksys_write+0x145/0x250 [ 216.647690][ T9347] __do_fast_syscall_32+0xb6/0x2b0 [ 216.654614][ T9347] do_fast_syscall_32+0x34/0x80 [ 216.661277][ T9347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.669411][ T9347] INITIAL USE at: [ 216.673372][ T9347] lock_acquire+0x120/0x360 [ 216.679603][ T9347] _raw_spin_lock_irqsave+0xa7/0xf0 [ 216.686526][ T9347] input_inject_event+0xa5/0x340 [ 216.693182][ T9347] kbd_led_trigger_activate+0xbc/0x100 [ 216.700360][ T9347] led_trigger_set+0x52a/0x950 [ 216.706948][ T9347] led_trigger_set_default+0x260/0x2a0 [ 216.714307][ T9347] led_classdev_register_ext+0x73d/0x930 [ 216.721710][ T9347] input_leds_connect+0x517/0x790 [ 216.728458][ T9347] input_register_device+0xd00/0x1140 [ 216.735552][ T9347] atkbd_connect+0x72e/0xa00 [ 216.741878][ T9347] serio_driver_probe+0x7f/0xd0 [ 216.748460][ T9347] really_probe+0x26d/0x9e0 [ 216.754726][ T9347] __driver_probe_device+0x18c/0x2f0 [ 216.761831][ T9347] driver_probe_device+0x4f/0x430 [ 216.768837][ T9347] __driver_attach+0x452/0x700 [ 216.775339][ T9347] bus_for_each_dev+0x233/0x2b0 [ 216.781917][ T9347] serio_handle_event+0x1f9/0x8d0 [ 216.788667][ T9347] process_scheduled_works+0xade/0x17b0 [ 216.795931][ T9347] worker_thread+0x8a0/0xda0 [ 216.802240][ T9347] kthread+0x70e/0x8a0 [ 216.808038][ T9347] ret_from_fork+0x3f9/0x770 [ 216.814354][ T9347] ret_from_fork_asm+0x1a/0x30 [ 216.820842][ T9347] } [ 216.823585][ T9347] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 216.832764][ T9347] -> (&client->buffer_lock){....}-{3:3} { [ 216.838568][ T9347] INITIAL USE at: [ 216.842445][ T9347] lock_acquire+0x120/0x360 [ 216.848686][ T9347] _raw_spin_lock_irqsave+0xa7/0xf0 [ 216.855523][ T9347] evdev_ioctl_handler+0x1969/0x1f10 [ 216.862362][ T9347] __ia32_compat_sys_ioctl+0x543/0x840 [ 216.869389][ T9347] __do_fast_syscall_32+0xb6/0x2b0 [ 216.876065][ T9347] do_fast_syscall_32+0x34/0x80 [ 216.882488][ T9347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.890460][ T9347] } [ 216.892947][ T9347] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 216.901176][ T9347] ... acquired at: [ 216.904965][ T9347] lock_acquire+0x120/0x360 [ 216.909632][ T9347] _raw_spin_lock+0x2e/0x40 [ 216.914297][ T9347] evdev_pass_values+0xb9/0xbd0 [ 216.919316][ T9347] evdev_events+0x1e6/0x340 [ 216.923987][ T9347] input_pass_values+0x285/0x890 [ 216.929084][ T9347] input_event_dispose+0x330/0x6b0 [ 216.934356][ T9347] input_inject_event+0x1dd/0x340 [ 216.939544][ T9347] evdev_write+0x2fc/0x480 [ 216.944122][ T9347] vfs_write+0x27b/0xb30 [ 216.948523][ T9347] ksys_write+0x145/0x250 [ 216.953012][ T9347] __do_fast_syscall_32+0xb6/0x2b0 [ 216.958372][ T9347] do_fast_syscall_32+0x34/0x80 [ 216.963391][ T9347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.969877][ T9347] [ 216.972195][ T9347] [ 216.972195][ T9347] the dependencies between the lock to be acquired [ 216.972203][ T9347] and SOFTIRQ-irq-unsafe lock: [ 216.985772][ T9347] -> (tasklist_lock){.+.+}-{3:3} { [ 216.991065][ T9347] HARDIRQ-ON-R at: [ 216.995205][ T9347] lock_acquire+0x120/0x360 [ 217.001727][ T9347] _raw_read_lock+0x36/0x50 [ 217.008223][ T9347] __do_wait+0xde/0x740 [ 217.014384][ T9347] do_wait+0x1f8/0x520 [ 217.020479][ T9347] kernel_wait+0xab/0x170 [ 217.026829][ T9347] call_usermodehelper_exec_work+0xbe/0x230 [ 217.034720][ T9347] process_scheduled_works+0xade/0x17b0 [ 217.042248][ T9347] worker_thread+0x8a0/0xda0 [ 217.048824][ T9347] kthread+0x70e/0x8a0 [ 217.054966][ T9347] ret_from_fork+0x3f9/0x770 [ 217.061536][ T9347] ret_from_fork_asm+0x1a/0x30 [ 217.068299][ T9347] SOFTIRQ-ON-R at: [ 217.072451][ T9347] lock_acquire+0x120/0x360 [ 217.078957][ T9347] _raw_read_lock+0x36/0x50 [ 217.085454][ T9347] __do_wait+0xde/0x740 [ 217.091778][ T9347] do_wait+0x1f8/0x520 [ 217.097832][ T9347] kernel_wait+0xab/0x170 [ 217.104151][ T9347] call_usermodehelper_exec_work+0xbe/0x230 [ 217.112032][ T9347] process_scheduled_works+0xade/0x17b0 [ 217.119563][ T9347] worker_thread+0x8a0/0xda0 [ 217.126143][ T9347] kthread+0x70e/0x8a0 [ 217.132201][ T9347] ret_from_fork+0x3f9/0x770 [ 217.138792][ T9347] ret_from_fork_asm+0x1a/0x30 [ 217.145544][ T9347] INITIAL USE at: [ 217.149594][ T9347] lock_acquire+0x120/0x360 [ 217.155998][ T9347] _raw_write_lock_irq+0xa2/0xf0 [ 217.162874][ T9347] copy_process+0x224f/0x3c00 [ 217.169446][ T9347] kernel_clone+0x21e/0x840 [ 217.175841][ T9347] user_mode_thread+0xdd/0x140 [ 217.182522][ T9347] rest_init+0x23/0x300 [ 217.188581][ T9347] start_kernel+0x3a9/0x410 [ 217.195249][ T9347] x86_64_start_reservations+0x24/0x30 [ 217.202606][ T9347] x86_64_start_kernel+0x143/0x1c0 [ 217.209797][ T9347] common_startup_64+0x13e/0x147 [ 217.216632][ T9347] INITIAL READ USE at: [ 217.221119][ T9347] lock_acquire+0x120/0x360 [ 217.227958][ T9347] _raw_read_lock+0x36/0x50 [ 217.234794][ T9347] __do_wait+0xde/0x740 [ 217.241283][ T9347] do_wait+0x1f8/0x520 [ 217.247684][ T9347] kernel_wait+0xab/0x170 [ 217.254347][ T9347] call_usermodehelper_exec_work+0xbe/0x230 [ 217.262667][ T9347] process_scheduled_works+0xade/0x17b0 [ 217.270541][ T9347] worker_thread+0x8a0/0xda0 [ 217.277461][ T9347] kthread+0x70e/0x8a0 [ 217.283865][ T9347] ret_from_fork+0x3f9/0x770 [ 217.290788][ T9347] ret_from_fork_asm+0x1a/0x30 [ 217.297983][ T9347] } [ 217.300637][ T9347] ... key at: [] tasklist_lock+0x18/0x40 [ 217.308517][ T9347] ... acquired at: [ 217.312476][ T9347] lock_acquire+0x120/0x360 [ 217.317155][ T9347] _raw_read_lock+0x36/0x50 [ 217.321825][ T9347] send_sigurg+0x12b/0x420 [ 217.326403][ T9347] sk_send_sigurg+0x6c/0x2e0 [ 217.331153][ T9347] queue_oob+0x420/0x4f0 [ 217.335641][ T9347] unix_stream_sendmsg+0xc3f/0xdf0 [ 217.340999][ T9347] __sock_sendmsg+0x21c/0x270 [ 217.345923][ T9347] ____sys_sendmsg+0x52d/0x830 [ 217.350842][ T9347] ___sys_sendmsg+0x21f/0x2a0 [ 217.355772][ T9347] __sys_sendmmsg+0x28e/0x430 [ 217.360625][ T9347] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 217.366334][ T9347] __do_fast_syscall_32+0xb6/0x2b0 [ 217.371608][ T9347] do_fast_syscall_32+0x34/0x80 [ 217.376621][ T9347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.383117][ T9347] [ 217.385423][ T9347] -> (&f_owner->lock){....}-{3:3} { [ 217.390720][ T9347] INITIAL USE at: [ 217.394697][ T9347] lock_acquire+0x120/0x360 [ 217.400938][ T9347] _raw_write_lock_irq+0xa2/0xf0 [ 217.407607][ T9347] __f_setown+0x67/0x370 [ 217.413572][ T9347] do_fcntl+0x15ff/0x1910 [ 217.419628][ T9347] do_compat_fcntl64+0x477/0x720 [ 217.426551][ T9347] __do_fast_syscall_32+0xb6/0x2b0 [ 217.433394][ T9347] do_fast_syscall_32+0x34/0x80 [ 217.439973][ T9347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.448050][ T9347] INITIAL READ USE at: [ 217.452458][ T9347] lock_acquire+0x120/0x360 [ 217.459163][ T9347] _raw_read_lock_irqsave+0xaf/0x100 [ 217.466649][ T9347] send_sigurg+0x55/0x420 [ 217.473144][ T9347] sk_send_sigurg+0x6c/0x2e0 [ 217.479901][ T9347] queue_oob+0x420/0x4f0 [ 217.486308][ T9347] unix_stream_sendmsg+0xc3f/0xdf0 [ 217.493631][ T9347] __sock_sendmsg+0x21c/0x270 [ 217.500467][ T9347] ____sys_sendmsg+0x52d/0x830 [ 217.507474][ T9347] ___sys_sendmsg+0x21f/0x2a0 [ 217.514304][ T9347] __sys_sendmmsg+0x28e/0x430 [ 217.521148][ T9347] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 217.528862][ T9347] __do_fast_syscall_32+0xb6/0x2b0 [ 217.536145][ T9347] do_fast_syscall_32+0x34/0x80 [ 217.543332][ T9347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.552167][ T9347] } [ 217.554732][ T9347] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 217.563758][ T9347] ... acquired at: [ 217.567728][ T9347] lock_acquire+0x120/0x360 [ 217.572413][ T9347] _raw_read_lock_irqsave+0xaf/0x100 [ 217.577874][ T9347] send_sigio+0x38/0x370 [ 217.582274][ T9347] kill_fasync+0x24d/0x4d0 [ 217.586848][ T9347] sock_wake_async+0x137/0x160 [ 217.591773][ T9347] sock_def_readable+0x3bb/0x550 [ 217.596962][ T9347] queue_oob+0x452/0x4f0 [ 217.601367][ T9347] unix_stream_sendmsg+0xc3f/0xdf0 [ 217.606638][ T9347] __sock_sendmsg+0x21c/0x270 [ 217.611473][ T9347] ____sys_sendmsg+0x52d/0x830 [ 217.616476][ T9347] ___sys_sendmsg+0x21f/0x2a0 [ 217.621394][ T9347] __sys_sendmmsg+0x28e/0x430 [ 217.626223][ T9347] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 217.631932][ T9347] __do_fast_syscall_32+0xb6/0x2b0 [ 217.637214][ T9347] do_fast_syscall_32+0x34/0x80 [ 217.642234][ T9347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.648718][ T9347] [ 217.651048][ T9347] -> (&new->fa_lock){....}-{3:3} { [ 217.656160][ T9347] INITIAL USE at: [ 217.660036][ T9347] lock_acquire+0x120/0x360 [ 217.666093][ T9347] _raw_write_lock_irq+0xa2/0xf0 [ 217.672755][ T9347] fasync_remove_entry+0xf1/0x1c0 [ 217.679329][ T9347] sock_fasync+0x85/0xf0 [ 217.685117][ T9347] __fput+0x8a2/0xa70 [ 217.690643][ T9347] task_work_run+0x1d4/0x260 [ 217.696792][ T9347] exit_to_user_mode_loop+0xec/0x110 [ 217.703629][ T9347] __do_fast_syscall_32+0x1f4/0x2b0 [ 217.710381][ T9347] do_fast_syscall_32+0x34/0x80 [ 217.716781][ T9347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.724747][ T9347] INITIAL READ USE at: [ 217.729058][ T9347] lock_acquire+0x120/0x360 [ 217.735552][ T9347] _raw_read_lock_irqsave+0xaf/0x100 [ 217.742920][ T9347] kill_fasync+0x199/0x4d0 [ 217.749322][ T9347] sock_wake_async+0x137/0x160 [ 217.756073][ T9347] sk_send_sigurg+0x1f1/0x2e0 [ 217.762746][ T9347] queue_oob+0x420/0x4f0 [ 217.768975][ T9347] unix_stream_sendmsg+0xc3f/0xdf0 [ 217.776066][ T9347] __sock_sendmsg+0x21c/0x270 [ 217.782726][ T9347] ____sys_sendmsg+0x52d/0x830 [ 217.789484][ T9347] ___sys_sendmsg+0x21f/0x2a0 [ 217.796140][ T9347] __sys_sendmmsg+0x28e/0x430 [ 217.802797][ T9347] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 217.810424][ T9347] __do_fast_syscall_32+0xb6/0x2b0 [ 217.817541][ T9347] do_fast_syscall_32+0x34/0x80 [ 217.824643][ T9347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.832951][ T9347] } [ 217.835436][ T9347] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 217.844103][ T9347] ... acquired at: [ 217.847975][ T9347] lock_acquire+0x120/0x360 [ 217.852643][ T9347] _raw_read_lock_irqsave+0xaf/0x100 [ 217.858088][ T9347] kill_fasync+0x199/0x4d0 [ 217.862751][ T9347] evdev_pass_values+0x627/0xbd0 [ 217.867856][ T9347] evdev_events+0x1e6/0x340 [ 217.872519][ T9347] input_pass_values+0x285/0x890 [ 217.877617][ T9347] input_event_dispose+0x330/0x6b0 [ 217.882885][ T9347] input_inject_event+0x1dd/0x340 [ 217.888068][ T9347] evdev_write+0x2fc/0x480 [ 217.892642][ T9347] vfs_write+0x27b/0xb30 [ 217.897150][ T9347] ksys_write+0x145/0x250 [ 217.901740][ T9347] __do_fast_syscall_32+0xb6/0x2b0 [ 217.907012][ T9347] do_fast_syscall_32+0x34/0x80 [ 217.912028][ T9347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.918511][ T9347] [ 217.920904][ T9347] [ 217.920904][ T9347] stack backtrace: [ 217.927046][ T9347] CPU: 0 UID: 0 PID: 9347 Comm: syz.6.1242 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 217.927064][ T9347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.927080][ T9347] Call Trace: [ 217.927087][ T9347] [ 217.927094][ T9347] dump_stack_lvl+0x189/0x250 [ 217.927113][ T9347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.927129][ T9347] ? __pfx__printk+0x10/0x10 [ 217.927152][ T9347] validate_chain+0x1f05/0x2140 [ 217.927177][ T9347] __lock_acquire+0xab9/0xd20 [ 217.927199][ T9347] ? kill_fasync+0x199/0x4d0 [ 217.927213][ T9347] lock_acquire+0x120/0x360 [ 217.927231][ T9347] ? kill_fasync+0x199/0x4d0 [ 217.927250][ T9347] _raw_read_lock_irqsave+0xaf/0x100 [ 217.927268][ T9347] ? kill_fasync+0x199/0x4d0 [ 217.927282][ T9347] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 217.927298][ T9347] ? do_raw_spin_lock+0x121/0x290 [ 217.927317][ T9347] kill_fasync+0x199/0x4d0 [ 217.927331][ T9347] ? kill_fasync+0x53/0x4d0 [ 217.927346][ T9347] evdev_pass_values+0x627/0xbd0 [ 217.927368][ T9347] ? evdev_pass_values+0x5a1/0xbd0 [ 217.927388][ T9347] evdev_events+0x1e6/0x340 [ 217.927406][ T9347] ? evdev_events+0x79/0x340 [ 217.927424][ T9347] ? input_pass_values+0x8d/0x890 [ 217.927442][ T9347] input_pass_values+0x285/0x890 [ 217.927462][ T9347] ? input_handle_event+0x70c/0xf30 [ 217.927478][ T9347] input_event_dispose+0x330/0x6b0 [ 217.927495][ T9347] input_inject_event+0x1dd/0x340 [ 217.927510][ T9347] ? input_inject_event+0xb6/0x340 [ 217.927526][ T9347] evdev_write+0x2fc/0x480 [ 217.927546][ T9347] ? __pfx_evdev_write+0x10/0x10 [ 217.927565][ T9347] ? bpf_lsm_file_permission+0x9/0x20 [ 217.927582][ T9347] ? security_file_permission+0x75/0x290 [ 217.927600][ T9347] ? rw_verify_area+0x255/0x4d0 [ 217.927617][ T9347] ? __pfx_evdev_write+0x10/0x10 [ 217.927636][ T9347] vfs_write+0x27b/0xb30 [ 217.927655][ T9347] ? __pfx_vfs_write+0x10/0x10 [ 217.927672][ T9347] ? __fget_files+0x2a/0x420 [ 217.927685][ T9347] ? __fget_files+0x2a/0x420 [ 217.927696][ T9347] ? __fget_files+0x3a0/0x420 [ 217.927707][ T9347] ? __fget_files+0x2a/0x420 [ 217.927727][ T9347] ksys_write+0x145/0x250 [ 217.927745][ T9347] ? __pfx_ksys_write+0x10/0x10 [ 217.927763][ T9347] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.927782][ T9347] __do_fast_syscall_32+0xb6/0x2b0 [ 217.927802][ T9347] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.927821][ T9347] do_fast_syscall_32+0x34/0x80 [ 217.927840][ T9347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.927857][ T9347] RIP: 0023:0xf7f02539 [ 217.927874][ T9347] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 217.927887][ T9347] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 217.927902][ T9347] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 217.927912][ T9347] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.927921][ T9347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.927929][ T9347] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 217.927938][ T9347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.927951][ T9347] [ 218.302189][ T5946] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 218.460411][ T5946] usb 2-1: config 0 interface 0 has no altsetting 0 [ 218.467098][ T5946] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 218.476337][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.485990][ T5946] usb 2-1: config 0 descriptor?? [ 219.528931][ T5946] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 219.738960][ T5946] usb 2-1: USB disconnect, device number 13