last executing test programs: 5m50.262230689s ago: executing program 1 (id=2211): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10c}}, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m49.890551902s ago: executing program 1 (id=2212): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x20, r0, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x20000804) 5m49.78811477s ago: executing program 1 (id=2215): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xffffffffffffffff, 0x4}}, 0x28) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) connect$rose(r0, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 5m49.694250428s ago: executing program 1 (id=2217): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000000)='./file0/file0\x00') r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x9, {0x8, 0x5, 0x80000000, 0x5, 0x0, 0x6}}) mmap(&(0x7f00007f8000/0x4000)=nil, 0x4000, 0x3000005, 0x810, r0, 0xf648e000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x10020, 0x0) stat(&(0x7f0000000200)='./file0/../file0/file0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) read$FUSE(r2, &(0x7f000000e280)={0x2020}, 0x2069) mlock(&(0x7f0000904000/0x1000)=nil, 0x1000) mlock(&(0x7f00005c6000/0x2000)=nil, 0x2000) 5m49.453720551s ago: executing program 1 (id=2223): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x20, r0, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x20000804) 5m48.189919538s ago: executing program 1 (id=2238): creat(&(0x7f0000001380)='./file0\x00', 0x4) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) socket$inet6(0xa, 0x5, 0x0) (async) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 5m47.918663323s ago: executing program 32 (id=2238): creat(&(0x7f0000001380)='./file0\x00', 0x4) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) socket$inet6(0xa, 0x5, 0x0) (async) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 4.23592892s ago: executing program 4 (id=4615): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)={0x0, 0x10, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, '\x00\x00\x00'}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.782100993s ago: executing program 3 (id=4636): r0 = socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x24020400) getsockopt$bt_hci(r0, 0x11e, 0x1, 0x0, 0x0) 2.748738337s ago: executing program 3 (id=4638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000240)=0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 2.631643055s ago: executing program 3 (id=4639): clock_adjtime(0x3, &(0x7f0000000040)={0xffffffffffffa63e, 0x5, 0xc, 0xa, 0x7b, 0xfffffffffffffff7, 0xf77, 0xf, 0x7ff8000000000, 0x7, 0x1, 0x10000, 0x9d9, 0x4, 0x8000000000000001, 0x0, 0x7, 0xfffffffffffff800, 0x4, 0xfffffffc, 0x5, 0x2, 0x8b9d, 0x0, 0x6, 0xb}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x2, 0xfffffffd, 0x2}) 1.237233846s ago: executing program 2 (id=4644): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x2a}, @flat=@binder={0x73622a85, 0xa, 0x80000000001}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.174871476s ago: executing program 4 (id=4645): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001d80)={'geneve0\x00', &(0x7f0000001d40)=@ethtool_cmd={0xa}}) 1.153461774s ago: executing program 2 (id=4646): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x4}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000), 0x8) sendto$inet6(r0, &(0x7f0000847fff)="03", 0x1, 0x1, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3", 0x11}], 0x2}}], 0x2, 0x0) 1.050258043s ago: executing program 4 (id=4647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.04979889s ago: executing program 2 (id=4648): syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040ff3ff0006"], 0x7) 1.007994882s ago: executing program 4 (id=4649): socket(0x11, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) timerfd_create(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/ip_tables_targets\x00') syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) pselect6(0xc, &(0x7f0000000600)={0x100000000000009, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000100)={0x100000007fc, 0x2, 0x800000, 0x0, 0x2000002, 0xc3ad, 0xe, 0x2}, 0x0, 0x0) 999.198678ms ago: executing program 2 (id=4650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x24}}, 0x0) 898.193995ms ago: executing program 2 (id=4651): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0x80, 0x0, 0x0) 887.933655ms ago: executing program 3 (id=4652): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) 880.303343ms ago: executing program 2 (id=4653): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf00b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0xffffffffffffffdb, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "cd3f02d7"}, @global=@item_012={0x0, 0x1, 0x4}]}}, 0x0}, 0x0) 702.259581ms ago: executing program 3 (id=4654): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 628.350809ms ago: executing program 3 (id=4655): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r2, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000140)={0x9, 0x5, 0xb, 0x5, 0x3, 0xae88, 0xc350, 0x2}, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x16, {{0x3, 0x0, 0x4, 0x0, 0xfffffffb, 0x3, {0x0, 0x7fff, 0x6, 0xffff, 0x4, 0x1, 0x1ff, 0x9, 0x0, 0x8000, 0x0, r2, 0xee01, 0xfffffff9, 0x1}}, {0x0, 0x2}}}, 0x0, 0x0}) 411.387548ms ago: executing program 0 (id=4658): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) 318.874962ms ago: executing program 0 (id=4659): unshare(0x400) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 218.241689ms ago: executing program 0 (id=4660): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000200)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x71e5b319, 0xfffffffc, 0x2000000, 0x791, 0x9}) fstat(r0, 0x0) 193.250992ms ago: executing program 0 (id=4661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x5, 0x6, 0x801, 0x0, 0x0, {0x6a0286804a18f103, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0xff00000000000000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000010640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) msgsnd(0x0, &(0x7f0000000980)={0x1, "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"}, 0x401, 0x0) msgsnd(0x0, &(0x7f0000000480)={0x2, "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"}, 0x3fa, 0x0) sendto$inet(r2, 0x0, 0x0, 0x4, &(0x7f0000000540)={0x2, 0x4e24, @remote}, 0x10) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000ec0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x95, 0x8}, 0x0, 0x0, 0x3, 0xfffffffffffffff6, 0x5, 0x0, 0x0, 0x9, 0x8001, 0xbb}) readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 93.675522ms ago: executing program 4 (id=4662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001e40)=ANY=[@ANYBLOB="240000000406010200001000000000000000000105000100070000000500"], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) 38.252058ms ago: executing program 0 (id=4663): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003b0007010000000000001100017c00000400fc800c00018006000600800a00000800028004007280"], 0x38}}, 0xc000) 18.573151ms ago: executing program 4 (id=4664): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000040)={0x14, r0, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x12) 0s ago: executing program 0 (id=4665): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='ntfs3\x00', 0x8000, 0x0) kernel console output (not intermixed with test programs): 04896][T17703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 698.604909][T17703] Call Trace: [ 698.604918][T17703] [ 698.604927][T17703] dump_stack_lvl+0x189/0x250 [ 698.604959][T17703] ? __pfx____ratelimit+0x10/0x10 [ 698.604988][T17703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 698.605016][T17703] ? __pfx__printk+0x10/0x10 [ 698.605051][T17703] ? __pfx___might_resched+0x10/0x10 [ 698.605076][T17703] ? fs_reclaim_acquire+0x7d/0x100 [ 698.605107][T17703] should_fail_ex+0x414/0x560 [ 698.605137][T17703] should_failslab+0xa8/0x100 [ 698.605165][T17703] __kmalloc_noprof+0xcb/0x4f0 [ 698.605186][T17703] ? kfree+0x4d/0x440 [ 698.605202][T17703] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 698.605239][T17703] tomoyo_realpath_from_path+0xe3/0x5d0 [ 698.605259][T17703] ? tomoyo_domain+0xd9/0x130 [ 698.605284][T17703] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 698.605309][T17703] tomoyo_path_number_perm+0x1e8/0x5a0 [ 698.605337][T17703] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 698.605386][T17703] ? __lock_acquire+0xab9/0xd20 [ 698.605428][T17703] ? __fget_files+0x2a/0x420 [ 698.605458][T17703] ? __fget_files+0x2a/0x420 [ 698.605483][T17703] ? __fget_files+0x3a0/0x420 [ 698.605509][T17703] ? __fget_files+0x2a/0x420 [ 698.605540][T17703] security_file_ioctl+0xcb/0x2d0 [ 698.605566][T17703] __se_sys_ioctl+0x47/0x170 [ 698.605608][T17703] do_syscall_64+0xfa/0x3b0 [ 698.605637][T17703] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.605695][T17703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.605715][T17703] ? clear_bhb_loop+0x60/0xb0 [ 698.605740][T17703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.605760][T17703] RIP: 0033:0x7fc0d2f8e9a9 [ 698.605789][T17703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.605805][T17703] RSP: 002b:00007fc0d3e5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 698.605825][T17703] RAX: ffffffffffffffda RBX: 00007fc0d31b5fa0 RCX: 00007fc0d2f8e9a9 [ 698.605839][T17703] RDX: 0000200000000040 RSI: 0000000000004b72 RDI: 0000000000000003 [ 698.605851][T17703] RBP: 00007fc0d3e5b090 R08: 0000000000000000 R09: 0000000000000000 [ 698.605863][T17703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.605874][T17703] R13: 0000000000000000 R14: 00007fc0d31b5fa0 R15: 00007ffcdccad1c8 [ 698.605903][T17703] [ 698.605911][T17703] ERROR: Out of memory at tomoyo_realpath_from_path. [ 698.923682][T17711] random: crng reseeded on system resumption [ 698.924063][ T985] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 699.098151][ T985] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 699.107265][ T985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.115711][ T5941] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 699.123333][ T985] usb 1-1: Product: syz [ 699.128088][ T985] usb 1-1: Manufacturer: syz [ 699.132696][ T985] usb 1-1: SerialNumber: syz [ 699.139424][ T985] usb 1-1: config 0 descriptor?? [ 699.306778][ T5941] usb 3-1: config 7 has an invalid interface number: 39 but max is 1 [ 699.314987][ T5941] usb 3-1: config 7 has an invalid interface number: 221 but max is 1 [ 699.323164][ T5941] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 699.333348][ T5941] usb 3-1: config 7 has no interface number 0 [ 699.339477][ T5941] usb 3-1: config 7 has no interface number 1 [ 699.347064][ T5941] usb 3-1: config 7 interface 39 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 699.358020][ T5941] usb 3-1: config 7 interface 221 altsetting 215 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 699.371378][ T985] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 699.379860][ T5941] usb 3-1: config 7 interface 39 has no altsetting 0 [ 699.387369][ T5941] usb 3-1: config 7 interface 221 has no altsetting 0 [ 699.398412][ T5941] usb 3-1: New USB device found, idVendor=04e6, idProduct=000f, bcdDevice=59.7e [ 699.407569][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.415952][ T5941] usb 3-1: Product: syz [ 699.420168][ T5941] usb 3-1: Manufacturer: syz [ 699.424822][ T5941] usb 3-1: SerialNumber: syz [ 699.721003][ T5941] usb-storage 3-1:7.39: USB Mass Storage device detected [ 699.735705][ T5941] usb-storage 3-1:7.39: Quirks match for vid 04e6 pid 000f: 4 [ 699.776548][ T5941] usb-storage 3-1:7.221: USB Mass Storage device detected [ 699.786558][ T5941] usb-storage 3-1:7.221: Quirks match for vid 04e6 pid 000f: 4 [ 699.832452][ T5941] usb 3-1: USB disconnect, device number 56 [ 700.160790][T17695] /dev/rnullb0: Can't open blockdev [ 700.167945][ T985] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 700.180302][ T985] usb 1-1: USB disconnect, device number 64 [ 700.417715][T17731] /dev/rnullb0: Can't open blockdev [ 700.810141][T17747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4055'. [ 700.960082][T17753] FAULT_INJECTION: forcing a failure. [ 700.960082][T17753] name failslab, interval 1, probability 0, space 0, times 0 [ 700.972989][T17753] CPU: 0 UID: 0 PID: 17753 Comm: syz.3.4057 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 700.973012][T17753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 700.973024][T17753] Call Trace: [ 700.973031][T17753] [ 700.973038][T17753] dump_stack_lvl+0x189/0x250 [ 700.973071][T17753] ? __pfx____ratelimit+0x10/0x10 [ 700.973103][T17753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.973132][T17753] ? __pfx__printk+0x10/0x10 [ 700.973171][T17753] ? __pfx___might_resched+0x10/0x10 [ 700.973210][T17753] should_fail_ex+0x414/0x560 [ 700.973241][T17753] should_failslab+0xa8/0x100 [ 700.973268][T17753] kmem_cache_alloc_noprof+0x73/0x3c0 [ 700.973289][T17753] ? create_new_namespaces+0x31/0x720 [ 700.973317][T17753] create_new_namespaces+0x31/0x720 [ 700.973340][T17753] ? __fget_files+0x2a/0x420 [ 700.973369][T17753] ? __fget_files+0x3a0/0x420 [ 700.973396][T17753] ? __fget_files+0x2a/0x420 [ 700.973434][T17753] __se_sys_setns+0x2dc/0x17a0 [ 700.973458][T17753] ? do_sys_openat2+0x154/0x1c0 [ 700.973487][T17753] ? ksys_write+0x22a/0x250 [ 700.973511][T17753] ? __pfx___se_sys_setns+0x10/0x10 [ 700.973542][T17753] ? do_syscall_64+0xbe/0x3b0 [ 700.973576][T17753] do_syscall_64+0xfa/0x3b0 [ 700.973604][T17753] ? lockdep_hardirqs_on+0x9c/0x150 [ 700.973631][T17753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.973653][T17753] ? clear_bhb_loop+0x60/0xb0 [ 700.973677][T17753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.973696][T17753] RIP: 0033:0x7fc0d2f901d7 [ 700.973715][T17753] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.973732][T17753] RSP: 002b:00007fc0d3e5afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 700.973754][T17753] RAX: ffffffffffffffda RBX: 00007fc0d31b5fa0 RCX: 00007fc0d2f901d7 [ 700.973767][T17753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 700.973780][T17753] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 700.973791][T17753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 700.973804][T17753] R13: 0000000000000001 R14: 00007fc0d31b5fa0 R15: 00007ffcdccad1c8 [ 700.973834][T17753] [ 701.179578][T17757] /dev/rnullb0: Can't open blockdev [ 701.327199][ T24] usb 4-1: [UEAGLE-ATM] firmware is not available [ 701.335221][T10744] usb 4-1: [UEAGLE-ATM] firmware is not available [ 701.483022][T17763] FAULT_INJECTION: forcing a failure. [ 701.483022][T17763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.543937][T17763] CPU: 0 UID: 0 PID: 17763 Comm: syz.3.4062 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 701.543964][T17763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 701.543976][T17763] Call Trace: [ 701.543983][T17763] [ 701.543991][T17763] dump_stack_lvl+0x189/0x250 [ 701.544021][T17763] ? __pfx____ratelimit+0x10/0x10 [ 701.544047][T17763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 701.544073][T17763] ? __pfx__printk+0x10/0x10 [ 701.544098][T17763] ? __might_fault+0xb0/0x130 [ 701.544128][T17763] should_fail_ex+0x414/0x560 [ 701.544155][T17763] _copy_from_user+0x2d/0xb0 [ 701.544176][T17763] memdup_user+0x5e/0xd0 [ 701.544202][T17763] con_font_op+0x9dd/0x1070 [ 701.544240][T17763] ? __pfx_con_font_op+0x10/0x10 [ 701.544272][T17763] ? __might_fault+0xb0/0x130 [ 701.544311][T17763] vt_ioctl+0x1a8a/0x1f00 [ 701.544339][T17763] ? __pfx_vt_ioctl+0x10/0x10 [ 701.544374][T17763] ? __fget_files+0x2a/0x420 [ 701.544404][T17763] ? __fget_files+0x3a0/0x420 [ 701.544429][T17763] ? __fget_files+0x2a/0x420 [ 701.544457][T17763] tty_ioctl+0x926/0xde0 [ 701.544473][T17763] ? __pfx_tty_ioctl+0x10/0x10 [ 701.544489][T17763] __se_sys_ioctl+0xf9/0x170 [ 701.544513][T17763] do_syscall_64+0xfa/0x3b0 [ 701.544540][T17763] ? lockdep_hardirqs_on+0x9c/0x150 [ 701.544565][T17763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.544582][T17763] ? clear_bhb_loop+0x60/0xb0 [ 701.544605][T17763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.544622][T17763] RIP: 0033:0x7fc0d2f8e9a9 [ 701.544637][T17763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.544653][T17763] RSP: 002b:00007fc0d3e5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 701.544671][T17763] RAX: ffffffffffffffda RBX: 00007fc0d31b5fa0 RCX: 00007fc0d2f8e9a9 [ 701.544685][T17763] RDX: 0000200000000040 RSI: 0000000000004b72 RDI: 0000000000000003 [ 701.544696][T17763] RBP: 00007fc0d3e5b090 R08: 0000000000000000 R09: 0000000000000000 [ 701.544707][T17763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.544717][T17763] R13: 0000000000000000 R14: 00007fc0d31b5fa0 R15: 00007ffcdccad1c8 [ 701.544744][T17763] [ 701.690822][ T30] audit: type=1326 audit(1752853432.933:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2f98e9a9 code=0x7fc00000 [ 701.690873][ T30] audit: type=1326 audit(1752853432.933:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad2f98e9a9 code=0x7fc00000 [ 701.690912][ T30] audit: type=1326 audit(1752853432.933:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2f98e9a9 code=0x7fc00000 [ 701.690950][ T30] audit: type=1326 audit(1752853432.933:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2f98e9a9 code=0x7fc00000 [ 701.690989][ T30] audit: type=1326 audit(1752853432.933:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2f98e9a9 code=0x7fc00000 [ 701.691027][ T30] audit: type=1326 audit(1752853432.933:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2f98e9a9 code=0x7fc00000 [ 701.691066][ T30] audit: type=1326 audit(1752853432.933:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2f98e9a9 code=0x7fc00000 [ 701.691108][ T30] audit: type=1326 audit(1752853432.933:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2f98e9a9 code=0x7fc00000 [ 701.691148][ T30] audit: type=1326 audit(1752853432.933:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2f98e9a9 code=0x7fc00000 [ 701.691186][ T30] audit: type=1326 audit(1752853432.933:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2f98e9a9 code=0x7fc00000 [ 702.023993][T10744] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 702.205146][T10744] usb 3-1: Using ep0 maxpacket: 8 [ 702.219379][T10744] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 702.219403][T10744] usb 3-1: config 0 has no interface number 0 [ 702.219440][T10744] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 702.219479][T10744] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 702.219500][T10744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.222042][T10744] usb 3-1: config 0 descriptor?? [ 702.234541][T10744] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 702.413040][T17780] random: crng reseeded on system resumption [ 702.507962][T10744] usb 3-1: USB disconnect, device number 57 [ 702.559540][T17784] FAULT_INJECTION: forcing a failure. [ 702.559540][T17784] name failslab, interval 1, probability 0, space 0, times 0 [ 702.573361][T17784] CPU: 0 UID: 0 PID: 17784 Comm: syz.2.4071 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 702.573378][T17784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 702.573386][T17784] Call Trace: [ 702.573392][T17784] [ 702.573397][T17784] dump_stack_lvl+0x189/0x250 [ 702.573419][T17784] ? __pfx____ratelimit+0x10/0x10 [ 702.573439][T17784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 702.573457][T17784] ? __pfx__printk+0x10/0x10 [ 702.573479][T17784] ? __pfx___might_resched+0x10/0x10 [ 702.573498][T17784] should_fail_ex+0x414/0x560 [ 702.573518][T17784] should_failslab+0xa8/0x100 [ 702.573535][T17784] kmem_cache_alloc_noprof+0x73/0x3c0 [ 702.573549][T17784] ? mas_alloc_nodes+0x2e9/0x8e0 [ 702.573570][T17784] mas_alloc_nodes+0x2e9/0x8e0 [ 702.573593][T17784] mas_preallocate+0x3ad/0x6f0 [ 702.573613][T17784] ? __pfx_mas_preallocate+0x10/0x10 [ 702.573638][T17784] ? __mas_set_range+0x12f/0x3c0 [ 702.573653][T17784] __split_vma+0x2fa/0xa00 [ 702.573671][T17784] ? __pfx___split_vma+0x10/0x10 [ 702.573696][T17784] vms_gather_munmap_vmas+0x2de/0x12b0 [ 702.573715][T17784] ? move_page_tables+0x57a/0x1f50 [ 702.573736][T17784] ? move_page_tables+0x1da5/0x1f50 [ 702.573761][T17784] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 702.573785][T17784] ? move_page_tables+0x57a/0x1f50 [ 702.573809][T17784] do_vmi_align_munmap+0x25d/0x420 [ 702.573827][T17784] ? __vma_enter_locked+0x1f4/0x380 [ 702.573859][T17784] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 702.573913][T17784] do_vmi_munmap+0x253/0x2e0 [ 702.573945][T17784] do_munmap+0xe1/0x140 [ 702.573967][T17784] ? __pfx_do_munmap+0x10/0x10 [ 702.573993][T17784] ? bpf_lsm_mmap_addr+0x9/0x20 [ 702.574009][T17784] ? security_mmap_addr+0x71/0x270 [ 702.574047][T17784] mremap_to+0x2df/0x7a0 [ 702.574081][T17784] ? __pfx_mremap_to+0x10/0x10 [ 702.574112][T17784] ? check_prep_vma+0x740/0xae0 [ 702.574148][T17784] __se_sys_mremap+0xa0b/0xef0 [ 702.574193][T17784] ? __pfx___se_sys_mremap+0x10/0x10 [ 702.574226][T17784] ? fput+0xa0/0xd0 [ 702.574244][T17784] ? ksys_write+0x22a/0x250 [ 702.574278][T17784] ? do_syscall_64+0xbe/0x3b0 [ 702.574302][T17784] ? __x64_sys_mremap+0x20/0xc0 [ 702.574328][T17784] do_syscall_64+0xfa/0x3b0 [ 702.574353][T17784] ? lockdep_hardirqs_on+0x9c/0x150 [ 702.574376][T17784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.574393][T17784] ? clear_bhb_loop+0x60/0xb0 [ 702.574415][T17784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.574432][T17784] RIP: 0033:0x7fbf8518e9a9 [ 702.574448][T17784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.574463][T17784] RSP: 002b:00007fbf85fb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 702.574482][T17784] RAX: ffffffffffffffda RBX: 00007fbf853b5fa0 RCX: 00007fbf8518e9a9 [ 702.574494][T17784] RDX: 0000000000002000 RSI: 0000000000002000 RDI: 00002000007fd000 [ 702.574505][T17784] RBP: 00007fbf85fb8090 R08: 0000200000ffe000 R09: 0000000000000000 [ 702.574517][T17784] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000002 [ 702.574527][T17784] R13: 0000000000000000 R14: 00007fbf853b5fa0 R15: 00007ffdbae95268 [ 702.574554][T17784] [ 702.884274][ C0] vkms_vblank_simulate: vblank timer overrun [ 702.954058][ T5955] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 703.000204][T17787] /dev/rnullb0: Can't open blockdev [ 703.153995][ T5955] usb 4-1: Using ep0 maxpacket: 16 [ 703.160869][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.174058][ T5955] usb 4-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.00 [ 703.183100][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.205268][ T5955] usb 4-1: config 0 descriptor?? [ 703.295167][T17795] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 703.302140][T17795] /dev/rnullb0: Can't open blockdev [ 703.394117][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 703.448623][T17799] /dev/rnullb0: Can't open blockdev [ 703.524004][ T9] usb 3-1: device descriptor read/64, error -71 [ 703.622279][ T5955] apple 0003:05AC:0236.0015: unknown main item tag 0x0 [ 703.629648][ T5955] apple 0003:05AC:0236.0015: unknown main item tag 0x0 [ 703.640806][ T5955] apple 0003:05AC:0236.0015: unknown main item tag 0x0 [ 703.648264][ T5955] apple 0003:05AC:0236.0015: unknown main item tag 0x0 [ 703.659133][ T5955] apple 0003:05AC:0236.0015: unknown main item tag 0x0 [ 703.666770][ T5955] apple 0003:05AC:0236.0015: unknown main item tag 0x0 [ 703.673760][ T5955] apple 0003:05AC:0236.0015: unknown main item tag 0x0 [ 703.683475][ T5955] apple 0003:05AC:0236.0015: unknown main item tag 0x0 [ 703.690620][ T5955] apple 0003:05AC:0236.0015: unknown main item tag 0x0 [ 703.697987][ T5955] apple 0003:05AC:0236.0015: unknown main item tag 0x0 [ 703.714373][ T5955] apple 0003:05AC:0236.0015: hidraw0: USB HID vff.fd Device [HID 05ac:0236] on usb-dummy_hcd.3-1/input0 [ 703.763970][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 703.820179][T17778] /dev/rnullb0: Can't open blockdev [ 703.830134][ T5955] usb 4-1: USB disconnect, device number 50 [ 703.893998][ T9] usb 3-1: device descriptor read/64, error -71 [ 704.004425][ T9] usb usb3-port1: attempt power cycle [ 704.354120][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 704.398790][ T9] usb 3-1: device descriptor read/8, error -71 [ 704.624434][ T5955] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 704.634040][ T5941] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 704.643991][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 704.664363][ T9] usb 3-1: device descriptor read/8, error -71 [ 704.774281][ T9] usb usb3-port1: unable to enumerate USB device [ 704.781782][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.792744][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.795679][ T5941] usb 1-1: config 0 has an invalid interface number: 123 but max is 0 [ 704.803964][ T5955] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 704.820480][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.828700][ T5941] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.833404][ T5955] usb 4-1: config 0 descriptor?? [ 704.839511][ T5941] usb 1-1: config 0 has no interface number 0 [ 704.852667][ T5941] usb 1-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 704.862512][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.870569][ T5941] usb 1-1: Product: syz [ 704.874968][ T5941] usb 1-1: Manufacturer: syz [ 704.879580][ T5941] usb 1-1: SerialNumber: syz [ 704.887103][ T5941] usb 1-1: config 0 descriptor?? [ 704.894226][ T5941] cdc_acm 1-1:0.123: skipping garbage [ 705.099420][ T5941] usb 1-1: USB disconnect, device number 65 [ 705.304448][ T5955] usbhid 4-1:0.0: can't add hid device: -71 [ 705.317823][ T5955] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 705.336798][ T5955] usb 4-1: USB disconnect, device number 51 [ 705.870839][T17831] /dev/rnullb0: Can't open blockdev [ 705.987758][T17834] /dev/rnullb0: Can't open blockdev [ 706.179719][ T5955] hid (null): unknown global tag 0xd [ 706.197767][ T5955] hid (null): bogus close delimiter [ 706.207275][ T5955] hid (null): unknown global tag 0x24 [ 706.212701][ T5955] hid (null): unknown global tag 0xd [ 706.219823][ T5955] hid (null): bogus close delimiter [ 706.237227][ T5955] hid-generic 09F1:007F:0002.0016: unknown global tag 0xd [ 706.246818][ T5955] hid-generic 09F1:007F:0002.0016: item 0 1 1 13 parsing failed [ 706.257806][ T5955] hid-generic 09F1:007F:0002.0016: probe with driver hid-generic failed with error -22 [ 706.454005][ T5941] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 706.605909][ T5941] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 706.614351][ T5941] usb 4-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 706.624656][ T5941] usb 4-1: config 0 has no interface number 0 [ 706.631000][ T5941] usb 4-1: too many endpoints for config 0 interface 182 altsetting 96: 185, using maximum allowed: 30 [ 706.642314][ T5941] usb 4-1: config 0 interface 182 altsetting 96 has 0 endpoint descriptors, different from the interface descriptor's value: 185 [ 706.655761][ T5941] usb 4-1: config 0 interface 182 has no altsetting 0 [ 706.665218][ T5941] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 706.674602][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.682681][ T5941] usb 4-1: Product: syz [ 706.687039][ T5941] usb 4-1: Manufacturer: syz [ 706.691863][ T5941] usb 4-1: SerialNumber: syz [ 706.710272][ T5941] usb 4-1: config 0 descriptor?? [ 706.724010][ T5955] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 706.888120][ T5955] usb 3-1: config index 0 descriptor too short (expected 65069, got 45) [ 706.899089][ T5955] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 706.913462][ T5955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.933739][ T5955] usb 3-1: config 0 has no interfaces? [ 706.939498][ T5955] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 706.943739][ T5941] imon 4-1:0.182: unable to register, err -19 [ 706.953105][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.979111][ T5955] usb 3-1: config 0 descriptor?? [ 706.983590][ T5941] usb 4-1: USB disconnect, device number 52 [ 707.197637][T17848] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 707.217427][ T5955] usb 3-1: USB disconnect, device number 62 [ 708.437618][T17864] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 708.443747][T17864] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 708.450223][T17864] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 708.456459][T17864] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 708.870661][T17889] /dev/rnullb0: Can't open blockdev [ 709.024010][ T5955] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 709.174150][ T5955] usb 4-1: Using ep0 maxpacket: 8 [ 709.186015][ T5955] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 709.204779][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.212804][ T5955] usb 4-1: Product: syz [ 709.217401][ T5955] usb 4-1: Manufacturer: syz [ 709.222013][ T5955] usb 4-1: SerialNumber: syz [ 709.232343][ T5955] usb 4-1: config 0 descriptor?? [ 709.353926][T17913] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4117'. [ 709.451935][ T5955] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 709.474018][ T5914] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 709.623930][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 709.630301][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.641244][ T5914] usb 1-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 709.651143][ T9] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 709.654052][ T5865] Bluetooth: hci1: command 0x0406 tx timeout [ 709.658668][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.681137][ T5914] usb 1-1: config 0 descriptor?? [ 709.793953][ T9] usb 3-1: device descriptor read/64, error -71 [ 710.034017][ T9] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 710.094824][ T5914] hid_parser_main: 151 callbacks suppressed [ 710.094845][ T5914] wacom 0003:056A:00E5.0017: unknown main item tag 0x0 [ 710.164000][ T9] usb 3-1: device descriptor read/64, error -71 [ 710.284563][ T9] usb usb3-port1: attempt power cycle [ 710.297124][T17911] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž;KZì44§/@®qæ [ 710.351079][T17911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.360559][T17911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.373034][ T5914] usb 1-1: USB disconnect, device number 66 [ 710.444744][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 710.524111][ T5865] Bluetooth: hci0: command 0x0c1a tx timeout [ 710.524147][ T5169] Bluetooth: hci3: command 0x0406 tx timeout [ 710.633977][ T9] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 710.654832][ T9] usb 3-1: device descriptor read/8, error -71 [ 710.894028][ T9] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 710.918062][ T9] usb 3-1: device descriptor read/8, error -71 [ 711.034444][ T9] usb usb3-port1: unable to enumerate USB device [ 711.086883][ T5955] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 711.101690][ T5955] usb 4-1: USB disconnect, device number 53 [ 711.305865][T10744] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 711.463939][T10744] usb 1-1: Using ep0 maxpacket: 32 [ 711.470940][T10744] usb 1-1: unable to get BOS descriptor or descriptor too short [ 711.479677][T10744] usb 1-1: config 6 has an invalid interface number: 163 but max is 0 [ 711.489075][T10744] usb 1-1: config 6 has no interface number 0 [ 711.495889][T10744] usb 1-1: config 6 interface 163 altsetting 129 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 711.507873][T10744] usb 1-1: config 6 interface 163 has no altsetting 0 [ 711.516645][T10744] usb 1-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=ec.da [ 711.525723][T10744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.533712][T10744] usb 1-1: Product: syz [ 711.538168][T10744] usb 1-1: Manufacturer: syz [ 711.542771][T10744] usb 1-1: SerialNumber: syz [ 711.685794][T17926] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4123'. [ 711.765258][T10744] HFC-S_USB 1-1:6.163: probe with driver HFC-S_USB failed with error -5 [ 711.779223][T10744] usb 1-1: USB disconnect, device number 67 [ 711.971195][T17934] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4126'. [ 712.495637][ T5955] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 712.516773][T17958] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4136'. [ 712.673999][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 712.688295][ T5955] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 712.704090][ T5955] usb 4-1: config 0 has no interface number 0 [ 712.724276][ T5955] usb 4-1: config 0 interface 184 has no altsetting 0 [ 712.739317][ T5955] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 712.753894][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.768563][ T5955] usb 4-1: Product: syz [ 712.778108][ T5955] usb 4-1: Manufacturer: syz [ 712.782732][ T5955] usb 4-1: SerialNumber: syz [ 712.794823][ T5955] usb 4-1: config 0 descriptor?? [ 712.807589][ T5955] smsc75xx v1.0.0 [ 713.429437][ T5955] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 713.441258][ T5955] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 714.209361][T17976] netlink: 'syz.2.4142': attribute type 12 has an invalid length. [ 714.320986][T17982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4144'. [ 714.340038][T17984] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4145'. [ 714.584214][ T5914] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 714.735786][T18000] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 714.759813][T18000] kvm: pic: non byte read [ 714.764973][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 714.771901][T18000] kvm: pic: level sensitive irq not supported [ 714.771970][T18000] kvm: pic: non byte read [ 714.778405][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.778477][ T5914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 714.778540][ T5914] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 714.778565][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.787348][T18000] kvm: pic: level sensitive irq not supported [ 714.806305][ T5914] usb 1-1: config 0 descriptor?? [ 714.810610][T18000] kvm: pic: non byte read [ 714.841925][T18000] kvm: pic: level sensitive irq not supported [ 714.841986][T18000] kvm: pic: non byte read [ 714.855300][T18000] kvm: pic: level sensitive irq not supported [ 714.855368][T18000] kvm: pic: non byte read [ 715.017574][T18005] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4154'. [ 715.386055][ T5941] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 715.544897][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 715.552705][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.565473][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.575579][ T5941] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 715.584992][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.599360][ T5941] usb 3-1: config 0 descriptor?? [ 715.985975][T18019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.994934][T18019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.026990][T18019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.039411][ T5941] itetech 0003:048D:8595.0018: item fetching failed at offset 5/7 [ 716.048751][T18019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.058553][ T5941] itetech 0003:048D:8595.0018: probe with driver itetech failed with error -22 [ 716.080495][ T5955] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 716.091847][ T5955] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 716.103287][ T5955] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 716.113009][ T5955] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 716.676544][T18027] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4163'. [ 716.751381][T18029] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.4164'. [ 717.262112][ T5955] usb 4-1: USB disconnect, device number 54 [ 717.309037][T18041] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 717.398008][ T5914] usbhid 1-1:0.0: can't add hid device: -71 [ 717.417819][ T5914] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 717.429437][ T5914] usb 1-1: USB disconnect, device number 68 [ 717.523554][T18047] FAULT_INJECTION: forcing a failure. [ 717.523554][T18047] name failslab, interval 1, probability 0, space 0, times 0 [ 717.537040][T18047] CPU: 0 UID: 0 PID: 18047 Comm: syz.0.4173 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 717.537064][T18047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 717.537076][T18047] Call Trace: [ 717.537084][T18047] [ 717.537092][T18047] dump_stack_lvl+0x189/0x250 [ 717.537122][T18047] ? __pfx____ratelimit+0x10/0x10 [ 717.537150][T18047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 717.537175][T18047] ? __pfx__printk+0x10/0x10 [ 717.537207][T18047] ? __pfx___might_resched+0x10/0x10 [ 717.537228][T18047] ? fs_reclaim_acquire+0x7d/0x100 [ 717.537256][T18047] should_fail_ex+0x414/0x560 [ 717.537284][T18047] should_failslab+0xa8/0x100 [ 717.537307][T18047] __kmalloc_cache_noprof+0x70/0x3d0 [ 717.537327][T18047] ? nfnetlink_rcv+0xeff/0x2520 [ 717.537354][T18047] nfnetlink_rcv+0xeff/0x2520 [ 717.537405][T18047] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 717.537443][T18047] ? ref_tracker_free+0x63a/0x7d0 [ 717.537495][T18047] ? __netlink_deliver_tap+0x807/0x850 [ 717.537530][T18047] ? netlink_deliver_tap+0x2e/0x1b0 [ 717.537557][T18047] ? netlink_deliver_tap+0x2e/0x1b0 [ 717.537589][T18047] netlink_unicast+0x759/0x8e0 [ 717.537628][T18047] netlink_sendmsg+0x805/0xb30 [ 717.537670][T18047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.537701][T18047] ? aa_sock_msg_perm+0xf1/0x1d0 [ 717.537731][T18047] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 717.537757][T18047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.537786][T18047] __sock_sendmsg+0x219/0x270 [ 717.537815][T18047] ____sys_sendmsg+0x505/0x830 [ 717.537841][T18047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 717.537870][T18047] ? import_iovec+0x74/0xa0 [ 717.537894][T18047] ___sys_sendmsg+0x21f/0x2a0 [ 717.537917][T18047] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.537971][T18047] ? __fget_files+0x2a/0x420 [ 717.537997][T18047] ? __fget_files+0x3a0/0x420 [ 717.538034][T18047] __x64_sys_sendmsg+0x19b/0x260 [ 717.538057][T18047] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 717.538086][T18047] ? __pfx_ksys_write+0x10/0x10 [ 717.538108][T18047] ? rcu_is_watching+0x15/0xb0 [ 717.538136][T18047] ? do_syscall_64+0xbe/0x3b0 [ 717.538166][T18047] do_syscall_64+0xfa/0x3b0 [ 717.538191][T18047] ? lockdep_hardirqs_on+0x9c/0x150 [ 717.538215][T18047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.538233][T18047] ? clear_bhb_loop+0x60/0xb0 [ 717.538255][T18047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.538272][T18047] RIP: 0033:0x7fad2f98e9a9 [ 717.538288][T18047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.538304][T18047] RSP: 002b:00007fad3070e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.538323][T18047] RAX: ffffffffffffffda RBX: 00007fad2fbb5fa0 RCX: 00007fad2f98e9a9 [ 717.538337][T18047] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 717.538348][T18047] RBP: 00007fad3070e090 R08: 0000000000000000 R09: 0000000000000000 [ 717.538359][T18047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 717.538370][T18047] R13: 0000000000000000 R14: 00007fad2fbb5fa0 R15: 00007ffdae237328 [ 717.538397][T18047] [ 717.865096][T18049] /dev/rnullb0: Can't open blockdev [ 718.201834][ T5941] usb 3-1: USB disconnect, device number 67 [ 718.244388][ T5914] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 718.416085][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 718.424707][ T5914] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 718.433221][ T5914] usb 4-1: config 0 has no interface number 0 [ 718.440550][ T5914] usb 4-1: config 0 interface 184 has no altsetting 0 [ 718.451274][ T5914] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 718.461613][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.470004][ T5914] usb 4-1: Product: syz [ 718.474642][ T5914] usb 4-1: Manufacturer: syz [ 718.479389][ T5914] usb 4-1: SerialNumber: syz [ 718.490435][ T5914] usb 4-1: config 0 descriptor?? [ 718.502824][ T5914] smsc75xx v1.0.0 [ 719.108257][ T5914] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 719.119137][ T5914] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 719.133947][T10744] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 719.283993][T10744] usb 1-1: Using ep0 maxpacket: 32 [ 719.290664][T10744] usb 1-1: config 0 has an invalid interface number: 112 but max is 0 [ 719.299051][T10744] usb 1-1: config 0 has no interface number 0 [ 719.307166][T10744] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=91.32 [ 719.317097][T10744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.325141][T10744] usb 1-1: Product: syz [ 719.329314][T10744] usb 1-1: Manufacturer: syz [ 719.333974][T10744] usb 1-1: SerialNumber: syz [ 719.340960][T10744] usb 1-1: config 0 descriptor?? [ 719.349076][T10744] gspca_main: conex-2.14.0 probing 0572:0041 [ 719.435428][ T30] kauditd_printk_skb: 2481 callbacks suppressed [ 719.435461][ T30] audit: type=1326 audit(1752853450.683:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18073 comm="syz.2.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8518e9a9 code=0x7fc00000 [ 719.843938][ T985] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 719.996996][ T985] usb 3-1: Using ep0 maxpacket: 32 [ 720.006099][ T985] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 720.023923][ T985] usb 3-1: config 0 has no interface number 0 [ 720.038195][ T985] usb 3-1: config 0 interface 184 has no altsetting 0 [ 720.047785][ T985] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 720.057019][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.073898][ T985] usb 3-1: Product: syz [ 720.078116][ T985] usb 3-1: Manufacturer: syz [ 720.082727][ T985] usb 3-1: SerialNumber: syz [ 720.095010][ T985] usb 3-1: config 0 descriptor?? [ 720.107105][ T985] smsc75xx v1.0.0 [ 720.717464][ T985] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 720.730776][ T985] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 721.351847][ T985] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 721.362847][ T985] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 721.372457][ T985] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 721.382162][ T985] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 721.740325][ T5914] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 721.751303][ T5914] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 721.761501][ T5914] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 721.771229][ T5914] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 722.020594][ T985] usb 1-1: USB disconnect, device number 69 [ 722.106763][T18120] net_ratelimit: 169 callbacks suppressed [ 722.106780][T18120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.650632][ T5914] usb 3-1: USB disconnect, device number 68 [ 722.972253][ T9] usb 4-1: USB disconnect, device number 55 [ 723.138649][ T5914] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 723.274252][T18138] random: crng reseeded on system resumption [ 723.314469][ T5914] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 723.354154][ T5914] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.373225][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.403904][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 723.423815][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 723.465157][ T5914] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.495905][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.545137][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 723.583971][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 723.618471][ T5914] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.645389][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.684152][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 723.706129][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 723.729485][ T5914] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.748991][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.770087][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 723.790565][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 723.812680][ T5914] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.840078][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.859664][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 723.869683][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 723.870074][ T5169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 723.888016][ T5169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 723.895475][T10744] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 723.907821][ T5914] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 723.907836][ T5169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 723.925757][ T5169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 723.933086][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 723.944323][ T5169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 723.978596][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 724.010259][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 724.044738][ T5914] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 724.055008][T10744] usb 1-1: Using ep0 maxpacket: 32 [ 724.067026][T10744] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 724.074432][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 724.093923][T10744] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 724.106800][T10744] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 724.121951][T10744] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 724.123915][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 724.149597][T10744] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 724.158163][T10744] usb 1-1: Product: syz [ 724.162349][T10744] usb 1-1: Manufacturer: syz [ 724.167132][T10744] usb 1-1: SerialNumber: syz [ 724.186658][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 724.197550][T10744] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input64 [ 724.220546][ T5914] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 724.246720][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 724.278661][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 724.293799][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 724.314357][ T5914] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 724.328475][ T5914] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 724.338098][ T5914] usb 3-1: Product: syz [ 724.342284][ T5914] usb 3-1: Manufacturer: syz [ 724.351592][ T5914] usb 3-1: SerialNumber: syz [ 724.365477][ T5914] usb 3-1: config 0 descriptor?? [ 724.406518][ T5914] yurex 3-1:0.0: Could not submitting URB [ 724.412474][ T5914] yurex 3-1:0.0: probe with driver yurex failed with error -5 [ 724.448926][ T5900] usb 1-1: USB disconnect, device number 70 [ 724.454927][ C0] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 724.544419][ T5900] appletouch 1-1:1.0: input: appletouch disconnected [ 724.613058][T13863] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.720373][T13851] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x35 [ 724.857467][T13863] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.887219][T18154] chnl_net:caif_netlink_parms(): no params data found [ 724.924199][T13863] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.998006][T13863] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.085060][T18154] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.105614][T18154] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.112927][T18154] bridge_slave_0: entered allmulticast mode [ 725.125101][T18154] bridge_slave_0: entered promiscuous mode [ 725.152248][T18154] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.163746][T18154] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.172319][T18154] bridge_slave_1: entered allmulticast mode [ 725.183528][T18154] bridge_slave_1: entered promiscuous mode [ 725.238582][T18154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.251846][T18154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.371899][T18154] team0: Port device team_slave_0 added [ 725.398601][T13863] bridge0: port 3(batadv0) entered disabled state [ 725.412040][T13863] bridge_slave_1: left allmulticast mode [ 725.418128][T13863] bridge_slave_1: left promiscuous mode [ 725.434238][T13863] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.443712][T13863] bridge_slave_0: left promiscuous mode [ 725.450640][T13863] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.801399][T13863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.813435][T13863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.826987][T13863] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 725.838927][T13863] bond0 (unregistering): Released all slaves [ 725.859771][T18154] team0: Port device team_slave_1 added [ 725.889310][T18128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.920722][T18154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.929223][T18154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.960378][T18154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.986641][T18154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.993814][T18154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.020442][T18154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.045048][ T5169] Bluetooth: hci4: command tx timeout [ 726.088491][ T5914] usb 3-1: USB disconnect, device number 69 [ 726.217555][T18154] hsr_slave_0: entered promiscuous mode [ 726.229449][T18154] hsr_slave_1: entered promiscuous mode [ 726.240640][T18154] debugfs: 'hsr0' already exists in 'hsr' [ 726.246934][T18154] Cannot create hsr debugfs directory [ 726.377874][T13863] hsr_slave_0: left promiscuous mode [ 726.386889][T13863] hsr_slave_1: left promiscuous mode [ 726.392846][T13863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.406144][T13863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.415233][T13863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.422624][T13863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.447004][T13863] veth1_macvtap: left promiscuous mode [ 726.452543][T13863] veth0_macvtap: left promiscuous mode [ 726.461142][T13863] veth1_vlan: left allmulticast mode [ 726.466534][T13863] veth1_vlan: left promiscuous mode [ 726.471876][T13863] veth0_vlan: left promiscuous mode [ 726.723946][T13863] team0 (unregistering): Port device macvlan0 removed [ 726.929594][T13863] team0 (unregistering): Port device team_slave_1 removed [ 726.962967][T13863] team0 (unregistering): Port device team_slave_0 removed [ 727.787588][T18154] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 727.807639][T18154] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 727.821740][T18154] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 727.832807][T18154] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 727.938000][T18154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.961344][T18154] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.973530][T13851] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.981100][T13851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.000640][T13851] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.007863][T13851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.124013][ T5169] Bluetooth: hci4: command tx timeout [ 728.270837][T18154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.320604][T18154] veth0_vlan: entered promiscuous mode [ 728.333535][T18154] veth1_vlan: entered promiscuous mode [ 728.383256][T18154] veth0_macvtap: entered promiscuous mode [ 728.398789][T18154] veth1_macvtap: entered promiscuous mode [ 728.420964][T18154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.438092][T18154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.462146][T13863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.472133][T13863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.486724][T13863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.497192][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.589044][T13851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.605279][T13851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.636890][T13851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.648387][T13851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.860394][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 729.870370][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 729.881166][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 729.894749][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 729.905960][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 729.914317][ T5900] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 730.086128][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 730.103291][ T5900] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 730.119338][ T5900] usb 3-1: config 0 has no interface number 0 [ 730.141366][ T5900] usb 3-1: config 0 interface 184 has no altsetting 0 [ 730.176297][ T5900] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 730.192539][T18325] gfs2: not a GFS2 filesystem [ 730.197668][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.207602][ T5865] Bluetooth: hci4: command tx timeout [ 730.213514][ T5900] usb 3-1: Product: syz [ 730.219115][ T5900] usb 3-1: Manufacturer: syz [ 730.223732][ T5900] usb 3-1: SerialNumber: syz [ 730.240129][ T5900] usb 3-1: config 0 descriptor?? [ 730.251788][ T5900] smsc75xx v1.0.0 [ 730.260404][T18325] gfs2: not a GFS2 filesystem [ 730.288164][T13863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.446248][T13863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.488227][T18339] FAULT_INJECTION: forcing a failure. [ 730.488227][T18339] name failslab, interval 1, probability 0, space 0, times 0 [ 730.488256][T18339] CPU: 0 UID: 0 PID: 18339 Comm: syz.4.4225 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 730.488281][T18339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 730.488292][T18339] Call Trace: [ 730.488300][T18339] [ 730.488308][T18339] dump_stack_lvl+0x189/0x250 [ 730.488337][T18339] ? __pfx____ratelimit+0x10/0x10 [ 730.488364][T18339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 730.488389][T18339] ? __pfx__printk+0x10/0x10 [ 730.488416][T18339] ? __pfx___might_resched+0x10/0x10 [ 730.488439][T18339] ? fs_reclaim_acquire+0x7d/0x100 [ 730.488466][T18339] should_fail_ex+0x414/0x560 [ 730.488500][T18339] should_failslab+0xa8/0x100 [ 730.488523][T18339] __kmalloc_noprof+0xcb/0x4f0 [ 730.488542][T18339] ? fbcon_set_font+0x519/0xe90 [ 730.488572][T18339] fbcon_set_font+0x519/0xe90 [ 730.488612][T18339] con_font_op+0xcaf/0x1070 [ 730.488650][T18339] ? __pfx_con_font_op+0x10/0x10 [ 730.488682][T18339] ? __might_fault+0xb0/0x130 [ 730.488722][T18339] vt_ioctl+0x1a8a/0x1f00 [ 730.488751][T18339] ? __pfx_vt_ioctl+0x10/0x10 [ 730.488786][T18339] ? __fget_files+0x2a/0x420 [ 730.488817][T18339] ? __fget_files+0x3a0/0x420 [ 730.488842][T18339] ? __fget_files+0x2a/0x420 [ 730.488870][T18339] tty_ioctl+0x926/0xde0 [ 730.488887][T18339] ? __pfx_tty_ioctl+0x10/0x10 [ 730.488903][T18339] __se_sys_ioctl+0xf9/0x170 [ 730.488928][T18339] do_syscall_64+0xfa/0x3b0 [ 730.488953][T18339] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.488978][T18339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.488996][T18339] ? clear_bhb_loop+0x60/0xb0 [ 730.489018][T18339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.489035][T18339] RIP: 0033:0x7f14cb38e9a9 [ 730.489051][T18339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.489066][T18339] RSP: 002b:00007f14cc143038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 730.489085][T18339] RAX: ffffffffffffffda RBX: 00007f14cb5b5fa0 RCX: 00007f14cb38e9a9 [ 730.489098][T18339] RDX: 0000200000000040 RSI: 0000000000004b72 RDI: 0000000000000003 [ 730.489110][T18339] RBP: 00007f14cc143090 R08: 0000000000000000 R09: 0000000000000000 [ 730.489121][T18339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.489132][T18339] R13: 0000000000000000 R14: 00007f14cb5b5fa0 R15: 00007fff4d822118 [ 730.489159][T18339] [ 730.523453][T18313] chnl_net:caif_netlink_parms(): no params data found [ 730.583652][T13863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.856427][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 730.869286][ T5900] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 730.886785][ T5900] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 730.901748][T13863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.947009][T18313] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.959956][T18313] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.968375][T18313] bridge_slave_0: entered allmulticast mode [ 730.976504][T18313] bridge_slave_0: entered promiscuous mode [ 730.990331][T18313] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.998555][T18313] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.014553][T18313] bridge_slave_1: entered allmulticast mode [ 731.021798][T18313] bridge_slave_1: entered promiscuous mode [ 731.028352][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 731.036476][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 731.046502][ T9] usb 4-1: config 8 has an invalid interface number: 155 but max is 0 [ 731.055133][ T9] usb 4-1: config 8 has no interface number 0 [ 731.061283][ T9] usb 4-1: config 8 interface 155 has no altsetting 0 [ 731.078887][ T9] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=33.57 [ 731.088634][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.101303][ T9] usb 4-1: Product: syz [ 731.105869][ T9] usb 4-1: Manufacturer: syz [ 731.110599][ T9] usb 4-1: SerialNumber: syz [ 731.135189][T18313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.152949][T18313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.266169][T18313] team0: Port device team_slave_0 added [ 731.274181][T18352] FAULT_INJECTION: forcing a failure. [ 731.274181][T18352] name failslab, interval 1, probability 0, space 0, times 0 [ 731.274209][T18352] CPU: 1 UID: 0 PID: 18352 Comm: syz.4.4230 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 731.274230][T18352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 731.274241][T18352] Call Trace: [ 731.274249][T18352] [ 731.274256][T18352] dump_stack_lvl+0x189/0x250 [ 731.274286][T18352] ? __pfx____ratelimit+0x10/0x10 [ 731.274313][T18352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 731.274338][T18352] ? __pfx__printk+0x10/0x10 [ 731.274365][T18352] ? __pfx___might_resched+0x10/0x10 [ 731.274388][T18352] ? fs_reclaim_acquire+0x7d/0x100 [ 731.274416][T18352] should_fail_ex+0x414/0x560 [ 731.274444][T18352] should_failslab+0xa8/0x100 [ 731.274467][T18352] __kmalloc_noprof+0xcb/0x4f0 [ 731.274486][T18352] ? fbcon_set_font+0x519/0xe90 [ 731.274516][T18352] fbcon_set_font+0x519/0xe90 [ 731.274556][T18352] con_font_op+0xcaf/0x1070 [ 731.274595][T18352] ? __pfx_con_font_op+0x10/0x10 [ 731.274627][T18352] ? __might_fault+0xb0/0x130 [ 731.274668][T18352] vt_ioctl+0x1a8a/0x1f00 [ 731.274698][T18352] ? __pfx_vt_ioctl+0x10/0x10 [ 731.274735][T18352] ? __fget_files+0x2a/0x420 [ 731.274765][T18352] ? __fget_files+0x3a0/0x420 [ 731.274789][T18352] ? __fget_files+0x2a/0x420 [ 731.274818][T18352] tty_ioctl+0x926/0xde0 [ 731.274836][T18352] ? __pfx_tty_ioctl+0x10/0x10 [ 731.274852][T18352] __se_sys_ioctl+0xf9/0x170 [ 731.274876][T18352] do_syscall_64+0xfa/0x3b0 [ 731.274901][T18352] ? lockdep_hardirqs_on+0x9c/0x150 [ 731.274927][T18352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.274945][T18352] ? clear_bhb_loop+0x60/0xb0 [ 731.274966][T18352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.274984][T18352] RIP: 0033:0x7f14cb38e9a9 [ 731.275000][T18352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.275016][T18352] RSP: 002b:00007f14cc143038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 731.275034][T18352] RAX: ffffffffffffffda RBX: 00007f14cb5b5fa0 RCX: 00007f14cb38e9a9 [ 731.275047][T18352] RDX: 0000200000000040 RSI: 0000000000004b72 RDI: 0000000000000003 [ 731.275059][T18352] RBP: 00007f14cc143090 R08: 0000000000000000 R09: 0000000000000000 [ 731.275070][T18352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.275081][T18352] R13: 0000000000000000 R14: 00007f14cb5b5fa0 R15: 00007fff4d822118 [ 731.275109][T18352] [ 731.306723][T18313] team0: Port device team_slave_1 added [ 731.538016][ T9] hub 4-1:8.155: bad descriptor, ignoring hub [ 731.544266][ T5900] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 731.555215][ T5900] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 731.566321][ T9] hub 4-1:8.155: probe with driver hub failed with error -5 [ 731.575052][ T9] ftdi_sio 4-1:8.155: FTDI USB Serial Device converter detected [ 731.584079][ T5900] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 731.604940][ T9] ftdi_sio ttyUSB0: unknown device type: 0x3357 [ 731.612827][ T5900] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 731.634609][ T9] usb 4-1: USB disconnect, device number 56 [ 731.646486][ T9] ftdi_sio 4-1:8.155: device disconnected [ 731.728845][T18313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.736042][T18313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.760839][T18359] netlink: 'syz.4.4232': attribute type 72 has an invalid length. [ 731.763148][T18313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.782818][T13863] bridge_slave_0: left allmulticast mode [ 731.790166][T13863] bridge_slave_0: left promiscuous mode [ 731.799810][T13863] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.964321][ T5865] Bluetooth: hci3: command tx timeout [ 732.054604][T18313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.061642][T18313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.087862][T18313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.270919][T18313] hsr_slave_0: entered promiscuous mode [ 732.279920][T18313] hsr_slave_1: entered promiscuous mode [ 732.288753][ T5865] Bluetooth: hci4: command tx timeout [ 732.301631][T18313] debugfs: 'hsr0' already exists in 'hsr' [ 732.309130][T18313] Cannot create hsr debugfs directory [ 732.620544][T13863] hsr_slave_0: left promiscuous mode [ 732.630831][T13863] hsr_slave_1: left promiscuous mode [ 732.640300][T13863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.647832][T13863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.659150][T13863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.671207][T13863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.695117][T13863] veth1_macvtap: left promiscuous mode [ 732.700729][T13863] veth0_macvtap: left promiscuous mode [ 732.706468][T13863] veth1_vlan: left promiscuous mode [ 732.711861][T13863] veth0_vlan: left promiscuous mode [ 732.795207][ T24] usb 3-1: USB disconnect, device number 70 [ 732.993639][T18392] netlink: 'syz.2.4240': attribute type 72 has an invalid length. [ 733.298582][T13863] team0 (unregistering): Port device team_slave_1 removed [ 733.336128][T13863] team0 (unregistering): Port device team_slave_0 removed [ 733.354040][ T24] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 733.516804][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 733.527969][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 733.539344][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 733.553483][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 733.570341][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 733.579537][ T24] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 733.591881][ T24] usb 3-1: Product: syz [ 733.596214][ T24] usb 3-1: Manufacturer: syz [ 733.600820][ T24] usb 3-1: SerialNumber: syz [ 733.643000][ T24] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input65 [ 733.839509][T10830] usb 3-1: USB disconnect, device number 71 [ 733.839575][ C0] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 733.890625][T10830] appletouch 3-1:1.0: input: appletouch disconnected [ 734.046460][ T5865] Bluetooth: hci3: command tx timeout [ 734.660433][T18313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 734.685500][T18313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 734.707196][T18313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 734.742664][T18313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 734.932620][T18313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.987928][T18313] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.026737][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.033967][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.050571][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.057788][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.644237][ T5941] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 735.670068][T18313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.747481][ T30] audit: type=1326 audit(1752853466.983:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18459 comm="syz.4.4255" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14cb38e9a9 code=0x0 [ 735.790664][T18313] veth0_vlan: entered promiscuous mode [ 735.827448][T18313] veth1_vlan: entered promiscuous mode [ 735.829158][ T5941] usb 4-1: Using ep0 maxpacket: 32 [ 735.852637][ T5941] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 735.873964][ T5941] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 735.897086][ T5941] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 735.926131][T18467] omfs: Invalid superblock (0) [ 735.931301][T18313] veth0_macvtap: entered promiscuous mode [ 735.932946][ T5941] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 735.960591][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 735.963422][T18313] veth1_macvtap: entered promiscuous mode [ 735.989047][ T5941] usb 4-1: Product: syz [ 736.002648][ T5941] usb 4-1: Manufacturer: syz [ 736.013280][ T5941] usb 4-1: SerialNumber: syz [ 736.028994][T18313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.051919][ T5941] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input66 [ 736.076773][T18313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.132406][ T5865] Bluetooth: hci3: command tx timeout [ 736.141808][T13857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.272449][ C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 736.308195][ T5941] usb 4-1: USB disconnect, device number 57 [ 736.350754][T13866] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.402221][T13866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.423321][ T5941] appletouch 4-1:1.0: input: appletouch disconnected [ 736.436587][T13866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.579157][T13866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.596940][T13866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.648268][T13857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.664170][T13857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.704327][ T5914] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 736.864138][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 736.876081][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.917165][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 736.960199][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 737.016952][ T5914] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 737.036666][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.068411][ T5914] usb 3-1: Product: syz [ 737.072610][ T5914] usb 3-1: Manufacturer: syz [ 737.093185][ T5914] usb 3-1: SerialNumber: syz [ 737.109673][ T5914] usb 3-1: config 0 descriptor?? [ 737.180661][ T5914] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 737.194058][ T5914] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -8) [ 737.344386][ T5914] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -8 [ 737.369280][T18511] qnx4: no qnx4 filesystem (no root dir). [ 737.614252][ T5941] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 737.785543][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 737.806922][ T5941] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 737.839444][ T5941] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 737.861017][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.881441][ T5941] usb 1-1: Product: syz [ 737.892775][ T5941] usb 1-1: Manufacturer: syz [ 737.904476][ T5941] usb 1-1: SerialNumber: syz [ 738.139081][T18505] Mount JFS Failure: -22 [ 738.170159][ T5941] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input67 [ 738.186436][ T5204] bcm5974 1-1:1.0: could not read from device [ 738.203942][ T5204] bcm5974 1-1:1.0: could not read from device [ 738.214658][ T5865] Bluetooth: hci3: command tx timeout [ 738.221956][ T5204] bcm5974 1-1:1.0: could not read from device [ 738.222880][ T5941] usb 1-1: USB disconnect, device number 71 [ 738.237229][ T5204] bcm5974 1-1:1.0: could not read from device [ 738.314025][ T5900] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 738.474114][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 738.483402][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 738.500524][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 738.520296][ T5900] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 738.541481][ T5900] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 738.552394][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 738.563890][ T5900] usb 4-1: Product: syz [ 738.568157][ T5900] usb 4-1: Manufacturer: syz [ 738.572841][ T5900] usb 4-1: SerialNumber: syz [ 738.594641][ T5900] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input68 [ 738.795247][ T5900] usb 4-1: USB disconnect, device number 58 [ 738.801273][ C0] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 738.848359][ T5900] appletouch 4-1:1.0: input: appletouch disconnected [ 739.021758][T18559] netlink: 'syz.0.4274': attribute type 58 has an invalid length. [ 739.195945][T18560] XFS (rnullb0): Invalid superblock magic number [ 739.467430][ T5900] usb 3-1: USB disconnect, device number 72 [ 740.073645][ T5169] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 740.087781][ T5169] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 740.104222][ T5169] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 740.120979][ T5169] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 740.130130][ T5169] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 740.290865][T13866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.344127][T10830] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 740.409414][T13866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.514026][T10830] usb 1-1: Using ep0 maxpacket: 32 [ 740.568565][T13866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.584633][T10830] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 740.593788][T10830] usb 1-1: config 0 has no interface number 0 [ 740.636722][T10830] usb 1-1: config 0 interface 184 has no altsetting 0 [ 740.660099][T10830] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 740.685618][T10830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.706648][T10830] usb 1-1: Product: syz [ 740.710862][T10830] usb 1-1: Manufacturer: syz [ 740.716773][T10830] usb 1-1: SerialNumber: syz [ 740.749320][T10830] usb 1-1: config 0 descriptor?? [ 740.767432][T13866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.781273][T10830] smsc75xx v1.0.0 [ 740.821043][T18572] chnl_net:caif_netlink_parms(): no params data found [ 740.920531][T18587] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.4282'. [ 740.975491][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 740.996166][T18572] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.015749][T18572] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.023085][T18572] bridge_slave_0: entered allmulticast mode [ 741.033251][T18572] bridge_slave_0: entered promiscuous mode [ 741.067187][T18572] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.076799][T18572] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.086435][T18572] bridge_slave_1: entered allmulticast mode [ 741.095192][T18572] bridge_slave_1: entered promiscuous mode [ 741.144425][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 741.158597][ T24] usb 4-1: config 15 has an invalid interface number: 2 but max is 0 [ 741.168514][ T24] usb 4-1: config 15 has no interface number 0 [ 741.179259][ T24] usb 4-1: config 15 interface 2 has no altsetting 0 [ 741.193479][T18572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.208462][ T24] usb 4-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=83.e9 [ 741.218370][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.229535][ T24] usb 4-1: Product: syz [ 741.233727][ T24] usb 4-1: Manufacturer: syz [ 741.240140][T18572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.243402][ T24] usb 4-1: SerialNumber: syz [ 741.260505][T13866] bridge_slave_0: left allmulticast mode [ 741.268365][T13866] bridge_slave_0: left promiscuous mode [ 741.275456][T13866] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.412028][T10830] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 741.427218][T10830] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 741.507986][ T24] uvcvideo 4-1:15.2: probe with driver uvcvideo failed with error -22 [ 741.523409][ T24] usb 4-1: USB disconnect, device number 59 [ 741.562814][T13866] team0: Port device geneve0 removed [ 741.726366][T13866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.737516][T13866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.749255][T13866] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 741.759096][T13866] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 741.771377][T13866] bond0 (unregistering): Released all slaves [ 741.828517][T18572] team0: Port device team_slave_0 added [ 741.844473][T18572] team0: Port device team_slave_1 added [ 741.890943][T18572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.898051][T18572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.927192][T18572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.940354][T18572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.951342][T18572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.985462][T18572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.063016][T18572] hsr_slave_0: entered promiscuous mode [ 742.080299][T18572] hsr_slave_1: entered promiscuous mode [ 742.095967][T18572] debugfs: 'hsr0' already exists in 'hsr' [ 742.104473][T18572] Cannot create hsr debugfs directory [ 742.217749][ T5169] Bluetooth: hci1: command tx timeout [ 742.274842][T10830] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 742.333829][T10830] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 742.369107][T10830] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 742.399367][T10830] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 742.420101][T18609] netlink: 'syz.3.4286': attribute type 15 has an invalid length. [ 742.704110][ T24] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 742.843802][T18572] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 742.865446][T18572] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 742.868447][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.886505][ T24] usb 4-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a [ 742.895714][T18572] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 742.903285][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.910365][T18572] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 742.919982][ T24] usb 4-1: Product: syz [ 742.925151][ T24] usb 4-1: Manufacturer: syz [ 742.929779][ T24] usb 4-1: SerialNumber: syz [ 742.947562][ T24] usb 4-1: config 0 descriptor?? [ 742.958443][ T24] usb 4-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 743.068363][T18572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.094218][ T24] usb 4-1: reset full-speed USB device number 60 using dummy_hcd [ 743.111305][T18572] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.127863][T13857] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.135056][T13857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.158814][T13859] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.166064][T13859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.299776][T10744] usb 1-1: USB disconnect, device number 72 [ 743.308833][T13866] tipc: Left network mode [ 743.450541][ T30] audit: type=1800 audit(1752853474.693:2509): pid=18640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4287" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 743.643827][T18572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.697188][T13866] hsr_slave_0: left promiscuous mode [ 743.703017][T13866] hsr_slave_1: left promiscuous mode [ 743.709813][T13866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.717575][T13866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.726988][T13866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.734736][T13866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.752978][T13866] veth1_macvtap: left promiscuous mode [ 743.758825][T13866] veth0_macvtap: left promiscuous mode [ 743.764529][T13866] veth1_vlan: left promiscuous mode [ 743.770659][T13866] veth0_vlan: left promiscuous mode [ 743.774740][ T24] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 743.784644][ T24] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 743.792948][ T5941] usb 4-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 743.804670][ T24] usb 4-1: USB disconnect, device number 60 [ 743.817647][ T5941] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 743.840815][ T5941] kobject: kobject_add_internal failed for firmware (error: -2 parent: 4-1) [ 743.863421][ T5941] firmware ueagle-atm!eagleI.fw: fw_load_sysfs_fallback: device_register failed [ 743.882281][ T5941] usb 4-1: [UEAGLE-ATM] firmware is not available [ 743.965500][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 744.134003][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 744.150345][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.169674][ T24] usb 4-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a [ 744.197768][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.209957][T18649] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.4290'. [ 744.226413][ T24] usb 4-1: Product: syz [ 744.232178][ T24] usb 4-1: Manufacturer: syz [ 744.238369][ T24] usb 4-1: SerialNumber: syz [ 744.258967][ T24] usb 4-1: config 0 descriptor?? [ 744.278674][ T24] usb 4-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 744.296446][ T5169] Bluetooth: hci1: command tx timeout [ 744.377782][T13866] team0 (unregistering): Port device team_slave_1 removed [ 744.435140][ T24] usb 4-1: reset high-speed USB device number 61 using dummy_hcd [ 744.444946][T13866] team0 (unregistering): Port device C removed [ 745.245464][ T24] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 745.253288][ T24] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 745.261950][ T985] usb 4-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 745.278077][T18572] veth0_vlan: entered promiscuous mode [ 745.285853][ T985] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 745.308659][ T24] usb 4-1: USB disconnect, device number 61 [ 745.378896][T18572] veth1_vlan: entered promiscuous mode [ 745.581129][T18572] veth0_macvtap: entered promiscuous mode [ 745.619866][T18572] veth1_macvtap: entered promiscuous mode [ 745.646170][T18672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.669111][T18572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.695439][T18572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.708113][T18672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.730961][T18672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.742993][T18672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4298'. [ 745.753548][T13857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.773679][T13857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.789661][T13857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.811438][T13857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.931538][T13865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.940806][T13865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.034140][T13857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.042443][T13857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.313701][T18687] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 746.362847][T18687] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 746.371464][ T5169] Bluetooth: hci1: command tx timeout [ 746.568370][T18700] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4306'. [ 746.577716][T18700] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4306'. [ 746.586774][T18700] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4306'. [ 746.595873][T18700] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4306'. [ 747.267417][ T5169] Bluetooth: hci0: unexpected event for opcode 0x203b [ 747.364707][T18729] siw: device registration error -23 [ 747.412750][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.424288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 748.444159][ T5169] Bluetooth: hci1: command tx timeout [ 750.337682][T18759] mpoa:mpoad_close: () going down [ 751.348577][T18784] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 751.919243][T18804] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 751.926069][T18804] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 751.938442][T18804] vhci_hcd vhci_hcd.0: Device attached [ 751.946032][T18804] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 751.962027][T18804] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(14) [ 751.968657][T18804] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 752.029355][T18804] vhci_hcd vhci_hcd.0: Device attached [ 752.057471][T18814] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17) [ 752.064196][T18814] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 752.121695][T10744] vhci_hcd: vhci_device speed not set [ 752.175688][T18814] vhci_hcd vhci_hcd.0: Device attached [ 752.183977][T10744] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 752.196146][T18804] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(16) [ 752.202775][T18804] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 752.596626][T18804] vhci_hcd vhci_hcd.0: Device attached [ 752.597393][T18814] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 752.652396][T18804] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(22) [ 752.659121][T18804] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 752.683964][T18804] vhci_hcd vhci_hcd.0: Device attached [ 752.697110][T18817] vhci_hcd: connection closed [ 752.697232][T18825] vhci_hcd: connection closed [ 752.704416][T13865] vhci_hcd: stop threads [ 752.714262][T18822] vhci_hcd: connection closed [ 752.740058][T18806] vhci_hcd: connection reset by peer [ 752.743937][T18810] vhci_hcd: connection closed [ 752.744926][T13865] vhci_hcd: release socket [ 753.222744][T18800] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 753.226778][T13865] vhci_hcd: disconnect device [ 753.234584][T18800] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 753.242487][T18800] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 753.293592][T13865] vhci_hcd: stop threads [ 753.318485][T18800] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 753.332720][T13865] vhci_hcd: release socket [ 753.343257][T18800] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 753.351342][T13865] vhci_hcd: disconnect device [ 753.361666][T13865] vhci_hcd: stop threads [ 753.367709][T13865] vhci_hcd: release socket [ 753.393278][T13865] vhci_hcd: disconnect device [ 753.406706][T18800] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 753.413086][T13865] vhci_hcd: stop threads [ 753.424394][T18800] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 753.430648][T13865] vhci_hcd: release socket [ 753.435963][T13865] vhci_hcd: disconnect device [ 753.441743][T18800] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 753.452049][T13865] vhci_hcd: stop threads [ 753.457058][T13865] vhci_hcd: release socket [ 753.461952][T13865] vhci_hcd: disconnect device [ 753.527966][T18800] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 753.851562][T18837] GUP no longer grows the stack in syz.2.4343 (18837): 200000005000-200000008000 (200000001000) [ 753.863438][T18837] CPU: 0 UID: 0 PID: 18837 Comm: syz.2.4343 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 753.863480][T18837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 753.863492][T18837] Call Trace: [ 753.863501][T18837] [ 753.863510][T18837] dump_stack_lvl+0x189/0x250 [ 753.863548][T18837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 753.863578][T18837] ? __pfx__printk+0x10/0x10 [ 753.863603][T18837] ? find_vma+0xe7/0x160 [ 753.863638][T18837] __get_user_pages+0x24d0/0x2ce0 [ 753.863657][T18837] ? __lock_acquire+0xab9/0xd20 [ 753.863705][T18837] ? __gup_longterm_locked+0xc68/0x1660 [ 753.863733][T18837] __gup_longterm_locked+0xde9/0x1660 [ 753.863760][T18837] ? try_grab_folio_fast+0x1be/0x4f0 [ 753.863791][T18837] ? gup_fast_fallback+0x195f/0x2010 [ 753.863815][T18837] gup_fast_fallback+0x1e6a/0x2010 [ 753.863870][T18837] ? __pfx_gup_fast_fallback+0x10/0x10 [ 753.863889][T18837] ? __mutex_lock+0x335/0x1360 [ 753.863927][T18837] ? is_valid_gup_args+0x11f/0x200 [ 753.863951][T18837] ? get_user_pages_fast+0x4d/0xb0 [ 753.863973][T18837] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 753.864004][T18837] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 753.864033][T18837] ? wait_for_space+0x24d/0x2d0 [ 753.864063][T18837] iov_iter_get_pages2+0x5e/0xa0 [ 753.864087][T18837] __se_sys_vmsplice+0x548/0x10d0 [ 753.864126][T18837] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 753.864148][T18837] ? __pfx_futex_wait+0x10/0x10 [ 753.864181][T18837] ? __lock_acquire+0xab9/0xd20 [ 753.864225][T18837] ? rcu_is_watching+0x15/0xb0 [ 753.864248][T18837] ? do_syscall_64+0xbe/0x3b0 [ 753.864276][T18837] do_syscall_64+0xfa/0x3b0 [ 753.864297][T18837] ? lockdep_hardirqs_on+0x9c/0x150 [ 753.864317][T18837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.864331][T18837] ? clear_bhb_loop+0x60/0xb0 [ 753.864348][T18837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.864362][T18837] RIP: 0033:0x7f6fecb8e9a9 [ 753.864375][T18837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.864387][T18837] RSP: 002b:00007f6feda1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 753.864402][T18837] RAX: ffffffffffffffda RBX: 00007f6fecdb5fa0 RCX: 00007f6fecb8e9a9 [ 753.864413][T18837] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 753.864422][T18837] RBP: 00007f6fecc10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 753.864431][T18837] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 753.864439][T18837] R13: 0000000000000000 R14: 00007f6fecdb5fa0 R15: 00007ffc65348688 [ 753.864460][T18837] [ 754.044146][ T5169] Bluetooth: hci4: command 0x0c1a tx timeout [ 754.925847][T18845] kvm: pic: non byte write [ 754.955711][T18843] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 755.873067][ T5169] Bluetooth: hci3: command 0x0c1a tx timeout [ 755.873074][ T5865] Bluetooth: hci1: command 0x0c1a tx timeout [ 756.369932][ T5865] Bluetooth: hci4: command 0x0c1a tx timeout [ 756.795262][ T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 756.984458][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 757.018435][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 757.047606][ T24] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 757.068037][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.087734][ T24] usb 3-1: Product: syz [ 757.091940][ T24] usb 3-1: Manufacturer: syz [ 757.096897][ T24] usb 3-1: SerialNumber: syz [ 757.106130][ T24] usb 3-1: config 0 descriptor?? [ 757.336144][T10744] vhci_hcd: vhci_device speed not set [ 757.964417][ T5169] Bluetooth: hci1: command 0x0c1a tx timeout [ 757.970593][ T5169] Bluetooth: hci3: command 0x0c1a tx timeout [ 758.066149][ T24] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 758.575348][ T5169] Bluetooth: hci4: command 0x0c1a tx timeout [ 759.157274][T10744] usb 3-1: USB disconnect, device number 73 [ 760.044359][ T5169] Bluetooth: hci3: command 0x0c1a tx timeout [ 760.051027][ T5865] Bluetooth: hci1: command 0x0c1a tx timeout [ 762.797491][ T5914] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 763.039412][ T5914] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 763.051354][ T5914] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 763.097081][ T5914] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 763.190621][ T5914] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 763.203924][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.211952][ T5914] usb 1-1: Product: syz [ 763.234009][ T5914] usb 1-1: Manufacturer: syz [ 763.238643][ T5914] usb 1-1: SerialNumber: syz [ 763.367656][ T5914] hub 1-1:1.0: bad descriptor, ignoring hub [ 763.374103][ T5914] hub 1-1:1.0: probe with driver hub failed with error -5 [ 764.142303][ T5914] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 764.328135][ T5169] Bluetooth: hci4: unexpected event for opcode 0x0803 [ 764.673216][T10744] usb 1-1: USB disconnect, device number 73 [ 764.712041][T10744] usblp0: removed [ 765.883989][T18974] kAFS: unable to lookup cell '' [ 766.183685][T18976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4389'. [ 766.898658][T18992] bond0: (slave ip6tnl0): Error: Device can not be enslaved while up [ 767.702497][T19005] syzkaller1: entered promiscuous mode [ 767.708092][T19005] syzkaller1: entered allmulticast mode [ 770.686675][ T30] audit: type=1326 audit(1752853501.903:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19015 comm="syz.0.4407" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20b558e9a9 code=0x0 [ 773.009079][T19064] random: crng reseeded on system resumption [ 777.185145][T19107] can0: slcan on ttyS3. [ 777.685743][T19100] can0 (unregistered): slcan off ttyS3. [ 778.193989][ T5900] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 778.348125][ T5900] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 778.515598][ T5900] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 778.538706][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.602726][ T5900] usb 3-1: Product: syz [ 778.886177][ T5900] usb 3-1: Manufacturer: syz [ 778.892462][ T5900] usb 3-1: SerialNumber: syz [ 778.937647][ T5900] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 780.204427][ T5900] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 780.740840][T19160] loop6: detected capacity change from 0 to 524287999 [ 781.329439][ T24] usb 3-1: USB disconnect, device number 74 [ 781.803990][ T24] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 781.995735][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 782.084423][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 782.107254][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.137977][ T24] usb 3-1: Product: syz [ 782.142211][ T24] usb 3-1: Manufacturer: syz [ 782.166433][ T24] usb 3-1: SerialNumber: syz [ 782.774213][ T5900] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 782.811615][ T24] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 782.934041][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 782.943489][ T5900] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 782.954339][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.974361][ T5900] usb 1-1: config 0 descriptor?? [ 783.196209][ T5900] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 784.572400][ T5914] usb 3-1: USB disconnect, device number 75 [ 784.585811][ T5914] usblp0: removed [ 786.103216][ T5900] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 786.116262][ T5900] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 786.130113][ T5900] asix 1-1:0.0: probe with driver asix failed with error -71 [ 786.149703][ T5900] usb 1-1: USB disconnect, device number 74 [ 786.692633][T19261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4475'. [ 787.648574][ T5942] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 787.869719][T10830] IPVS: starting estimator thread 0... [ 787.904337][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 787.932401][ T5942] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 788.411237][T19273] IPVS: using max 27 ests per chain, 64800 per kthread [ 788.441724][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.488150][ T5942] usb 3-1: config 0 descriptor?? [ 788.720327][ T5942] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 788.819309][ T5942] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 789.004596][ T5942] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 789.021367][ T5942] usb 3-1: media controller created [ 789.199742][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 789.303463][ T5942] az6027: usb out operation failed. (-71) [ 789.330434][ T5942] az6027: usb out operation failed. (-71) [ 789.352133][ T5942] stb0899_attach: Driver disabled by Kconfig [ 789.372226][ T5942] az6027: no front-end attached [ 789.372226][ T5942] [ 789.410489][ T5942] az6027: usb out operation failed. (-71) [ 789.428406][ T5942] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 789.585626][ T5942] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input69 [ 789.599159][T19283] program syz.3.4483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 789.638601][ T5942] dvb-usb: schedule remote query interval to 400 msecs. [ 789.676361][ T5942] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 789.783615][ T5942] usb 3-1: USB disconnect, device number 76 [ 790.045753][ T5942] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 790.574056][T10830] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 790.593961][T19304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.735430][T10830] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 790.749143][T10830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 790.760266][T10830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 790.771746][T10830] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 790.784883][T10830] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 790.794021][T10830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.811886][T10830] usb 4-1: config 0 descriptor?? [ 791.351673][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4496'. [ 791.443992][T10830] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 791.452181][T10830] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 791.459792][T10830] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 791.467296][T10830] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 791.474918][T10830] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 791.482355][T10830] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 791.498252][T10830] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 792.162168][T10830] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 792.170365][T10830] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 792.178022][T10830] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 792.363777][T10830] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 792.681338][T10830] usb 4-1: USB disconnect, device number 62 [ 794.019476][ T5900] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 795.238011][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 795.731727][ T5900] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 795.747067][T19325] fido_id[19325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 795.794280][ T5900] usb 1-1: config 0 has no interface number 0 [ 795.800561][ T5900] usb 1-1: config 0 interface 89 has no altsetting 0 [ 795.819751][ T5900] usb 1-1: string descriptor 0 read error: -71 [ 795.834013][ T5900] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 795.855537][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.941963][ T5900] usb 1-1: config 0 descriptor?? [ 795.947245][T10830] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 796.020126][ T5900] usb 1-1: can't set config #0, error -71 [ 796.036921][ T5900] usb 1-1: USB disconnect, device number 75 [ 796.451788][T10830] usb 4-1: Using ep0 maxpacket: 16 [ 797.419005][T10830] usb 4-1: device descriptor read/all, error -71 [ 797.851510][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4505'. [ 798.706570][T19317] syz.2.4497 (19317): drop_caches: 1 [ 798.735494][T19335] syz.4.4502 (19335): drop_caches: 1 [ 798.838256][T19356] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4508'. [ 801.531773][ T5900] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 801.978542][ T5900] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 801.994020][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.013531][ T5900] usb 4-1: Product: syz [ 802.024385][ T5900] usb 4-1: Manufacturer: syz [ 802.039171][ T5900] usb 4-1: SerialNumber: syz [ 802.136395][ T5900] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 802.176248][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 802.892574][ T5942] usb 4-1: USB disconnect, device number 65 [ 803.292721][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 803.320889][ T9] ath9k_htc: Failed to initialize the device [ 804.300948][ T5942] usb 4-1: ath9k_htc: USB layer deinitialized [ 804.744221][ T5900] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 804.948923][T19405] sp0: Synchronizing with TNC [ 805.013962][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 805.046026][ T5900] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 805.066164][ T5900] usb 1-1: config 0 has no interface number 0 [ 805.079931][ T5900] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 805.114082][ T5900] usb 1-1: config 0 interface 1 has no altsetting 0 [ 805.145812][ T5900] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 805.168903][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.183937][ T5900] usb 1-1: Product: syz [ 805.194173][ T5900] usb 1-1: Manufacturer: syz [ 805.204276][ T5900] usb 1-1: SerialNumber: syz [ 805.223241][ T5900] usb 1-1: config 0 descriptor?? [ 805.477734][ T5900] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 805.520703][ T5900] cx231xx 1-1:0.1: Failed to read PCB config [ 805.542893][ T5900] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 805.557466][ T5900] usb 1-1: USB disconnect, device number 76 [ 806.318984][ T5169] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 806.326860][ T9] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 806.439323][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 806.452037][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 806.461192][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 806.472515][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 806.481564][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 806.559406][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 806.638106][ T5900] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 806.657272][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 806.677486][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.692798][ T9] usb 4-1: Product: syz [ 806.698292][ T9] usb 4-1: Manufacturer: syz [ 806.702933][ T9] usb 4-1: SerialNumber: syz [ 807.241245][T19418] chnl_net:caif_netlink_parms(): no params data found [ 807.418278][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 807.453090][ T30] audit: type=1800 audit(1752853538.693:2511): pid=19435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4530" name=03 dev="tmpfs" ino=306 res=0 errno=0 [ 807.970570][ C0] usblp0: nonzero write bulk status received: -71 [ 807.992374][ T9] usb 4-1: USB disconnect, device number 66 [ 808.154350][T19418] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.161650][T19418] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.169365][T19418] bridge_slave_0: entered allmulticast mode [ 808.178638][T19418] bridge_slave_0: entered promiscuous mode [ 808.215871][T19418] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.233546][T19418] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.253979][T19418] bridge_slave_1: entered allmulticast mode [ 808.274737][T19418] bridge_slave_1: entered promiscuous mode [ 808.290429][ T9] usblp0: removed [ 808.400826][T19418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.426130][T19418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.527459][ T5865] Bluetooth: hci0: command tx timeout [ 808.540193][T19418] team0: Port device team_slave_0 added [ 808.720320][T19418] team0: Port device team_slave_1 added [ 808.849916][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.918807][ T985] usb 4-1: [UEAGLE-ATM] firmware is not available [ 809.303803][T19418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.323376][T19418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.351115][T19418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.369488][T19418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.379361][T19418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.420566][T19457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4536'. [ 809.424864][T19418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.546883][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 809.994650][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 810.025980][T19418] hsr_slave_0: entered promiscuous mode [ 810.042524][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 810.075086][T19418] hsr_slave_1: entered promiscuous mode [ 810.089590][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 810.123385][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 810.142190][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 810.152395][ T9] usb 4-1: Product: syz [ 810.160178][ T9] usb 4-1: Manufacturer: syz [ 810.181709][ T9] usb 4-1: SerialNumber: syz [ 810.449250][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 810.616207][ T5865] Bluetooth: hci0: command tx timeout [ 810.665900][ T9] usb 4-1: USB disconnect, device number 67 [ 810.708317][ T9] usblp0: removed [ 810.784759][T19418] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.060865][T19418] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.229131][T19418] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.360733][T19471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4540'. [ 811.376995][T19418] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.275906][ T5865] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 812.306293][T19418] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 812.324701][T19418] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 812.341104][T19418] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 812.358073][T19418] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 812.692558][ T5865] Bluetooth: hci0: command tx timeout [ 812.758479][ T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 812.930212][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 812.954063][ T9] usb 1-1: config 0 has an invalid interface number: 61 but max is 1 [ 812.962219][ T9] usb 1-1: config 0 has no interface number 1 [ 812.971199][ T9] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 812.980755][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.990479][ T9] usb 1-1: Product: syz [ 812.998620][ T9] usb 1-1: Manufacturer: syz [ 813.003286][ T9] usb 1-1: SerialNumber: syz [ 813.020649][ T9] usb 1-1: config 0 descriptor?? [ 813.159161][ T9] viperboard 1-1:0.61: version 0.00 found at bus 001 address 078 [ 813.289082][ T9] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 813.298661][T19501] overlayfs: missing 'lowerdir' [ 813.305251][ T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 813.350499][ T9] viperboard 1-1:0.0: version 0.00 found at bus 001 address 078 [ 813.390478][ T9] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 813.405206][ T9] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 813.432889][ T9] usb 1-1: USB disconnect, device number 78 [ 814.772599][ T5865] Bluetooth: hci0: command tx timeout [ 815.411568][ T5865] Bluetooth: hci1: unexpected event for opcode 0x0803 [ 816.294825][ T5865] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 816.303498][ T5865] Bluetooth: hci3: Injecting HCI hardware error event [ 816.315264][ T5865] Bluetooth: hci3: hardware error 0x00 [ 818.378140][ T5865] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 818.629533][T19418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.689405][T19418] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.741861][T13853] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.749467][T13853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.842111][T13853] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.849530][T13853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.224821][T19547] comedi comedi3: ni_at_a2150: I/O port conflict (0x4f27,28) [ 819.586263][T19418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.144081][ T5942] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 820.324300][ T5942] usb 4-1: Using ep0 maxpacket: 32 [ 820.337243][ T5942] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 820.393241][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.425406][ T5942] usb 4-1: config 0 descriptor?? [ 820.588641][T19418] veth0_vlan: entered promiscuous mode [ 820.630885][T19418] veth1_vlan: entered promiscuous mode [ 820.684847][T19568] input: syz1 as /devices/virtual/input/input70 [ 820.707922][T19418] veth0_macvtap: entered promiscuous mode [ 820.730502][T19418] veth1_macvtap: entered promiscuous mode [ 820.782717][T19418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.818733][T19418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.859073][T13853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.880596][ T5942] uclogic 0003:145F:0212.001A: interface is invalid, ignoring [ 820.894945][T13859] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.909918][T13859] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.934911][T13859] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.093146][ T5942] usb 4-1: USB disconnect, device number 68 [ 821.843351][T19579] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 821.858297][T13857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.866931][T19579] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 821.875748][T19579] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 821.889425][T19579] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 821.912855][T19579] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 821.914411][T13857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.940718][T19579] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 821.978010][T19579] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 822.004653][T19579] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 822.020119][T13857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.028265][T19579] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 822.029728][T13857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.052975][T19579] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 824.228692][T19627] netlink: 'syz.0.4581': attribute type 20 has an invalid length. [ 824.587352][ T5942] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 824.743952][ T5942] usb 1-1: Using ep0 maxpacket: 8 [ 824.751909][ T5942] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 824.798753][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 824.810901][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 824.829455][ T5942] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 824.854023][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.862436][ T5942] usb 1-1: Product: syz [ 824.869222][ T5942] usb 1-1: Manufacturer: syz [ 824.874696][ T5942] usb 1-1: SerialNumber: syz [ 824.899326][ T5942] usb 1-1: config 0 descriptor?? [ 824.921619][ T5942] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 825.125882][ T9] usb 1-1: USB disconnect, device number 79 [ 825.227088][T19638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4585'. [ 825.794072][ T5914] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 825.904241][ T24] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 825.954118][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 825.961513][ T5914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 825.978569][ T5914] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 825.988099][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.998550][ T5914] usb 4-1: Product: syz [ 826.002769][ T5914] usb 4-1: Manufacturer: syz [ 826.007446][ T5914] usb 4-1: SerialNumber: syz [ 826.015056][ T5914] usb 4-1: config 0 descriptor?? [ 826.023664][ T5914] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 826.033347][ T5914] usb 4-1: Detected FT232R [ 826.059854][ T24] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.071363][ T24] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.082809][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 826.089573][ T24] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 826.099188][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.111263][ T24] usb 1-1: config 0 descriptor?? [ 826.428518][ T5914] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 826.729754][ T5914] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 826.757457][ T5914] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 826.778129][ T5914] usb 4-1: USB disconnect, device number 69 [ 826.795293][ T5914] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 826.811801][ T5914] ftdi_sio 4-1:0.0: device disconnected [ 826.922529][ T24] usb 1-1: string descriptor 0 read error: -22 [ 827.161301][ T24] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.001B/input/input71 [ 827.336651][ T24] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.001B/input/input72 [ 827.399794][ T24] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.001B/input/input73 [ 827.517814][ T24] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.001B/input/input74 [ 827.690648][ T24] uclogic 0003:256C:006D.001B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 827.734791][ T982] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 827.785392][ T24] usb 1-1: USB disconnect, device number 80 [ 827.935806][ T982] usb 4-1: Using ep0 maxpacket: 8 [ 827.947925][ T982] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 827.965452][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.995201][ T982] usb 4-1: config 0 descriptor?? [ 828.091704][T19660] fido_id[19660]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 828.225350][ T982] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 828.254005][ T5942] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 828.424436][ T5942] usb 3-1: Using ep0 maxpacket: 8 [ 828.437277][ T5942] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 828.446878][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.457213][ T5942] usb 3-1: Product: syz [ 828.462240][ T5942] usb 3-1: Manufacturer: syz [ 828.469112][ T5942] usb 3-1: SerialNumber: syz [ 828.476325][T19676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4596'. [ 828.479360][ T5942] usb 3-1: config 0 descriptor?? [ 828.702399][ T5942] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 830.438903][ T982] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 830.458991][ T982] asix 4-1:0.0: probe with driver asix failed with error -71 [ 830.472328][ T982] usb 4-1: USB disconnect, device number 70 [ 830.680889][ T5942] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 830.722732][ T5942] usb 3-1: USB disconnect, device number 77 [ 830.826175][T19689] binder_alloc: 19688: binder_alloc_buf size 12280 failed, no address space [ 830.837102][T19689] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 832.844530][ T982] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 832.885111][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 833.024289][ T982] usb 1-1: device descriptor read/64, error -32 [ 833.644155][ T982] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 833.805508][ T982] usb 1-1: Using ep0 maxpacket: 8 [ 833.812656][ T982] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 833.824164][ T982] usb 1-1: config 0 has no interface number 0 [ 833.831127][ T982] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 833.841751][ T982] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 833.851064][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.864236][ T982] usb 1-1: config 0 descriptor?? [ 833.880511][ T982] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 833.923941][T10830] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 834.084874][T10830] usb 4-1: Using ep0 maxpacket: 32 [ 834.091136][ T982] usb 1-1: USB disconnect, device number 82 [ 834.102555][T10830] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.123577][T10830] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 834.144342][T10830] usb 4-1: config 0 interface 0 has no altsetting 0 [ 834.159365][T10830] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 834.168888][T10830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.188478][T10830] usb 4-1: config 0 descriptor?? [ 834.614841][T10830] betop 0003:20BC:5500.001C: unbalanced collection at end of report description [ 834.628695][T10830] betop 0003:20BC:5500.001C: parse failed [ 834.635837][T10830] betop 0003:20BC:5500.001C: probe with driver betop failed with error -22 [ 834.772140][T19750] IPv6: syztnl1: Disabled Multicast RS [ 834.812815][ T982] usb 4-1: USB disconnect, device number 71 [ 835.774067][ T24] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 835.863937][T10830] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 835.924147][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 835.932032][ T24] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 835.940385][ T24] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 835.950648][ T24] usb 3-1: config 6 has no interface number 0 [ 835.956996][ T24] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 835.968763][ T24] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 835.978721][ T24] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 835.994053][ T24] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 836.003173][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.011304][ T24] usb 3-1: Product: syz [ 836.015602][ T24] usb 3-1: Manufacturer: syz [ 836.020324][ T24] usb 3-1: SerialNumber: syz [ 836.027317][T10830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.041810][T10830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.052740][T10830] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 836.052864][ T24] hso 3-1:6.2: Failed to find INT IN ep [ 836.073635][T10830] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 836.083478][T10830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.103687][T10830] usb 4-1: config 0 descriptor?? [ 836.262016][ T24] usb 3-1: USB disconnect, device number 78 [ 836.526198][T10830] plantronics 0003:047F:FFFF.001D: reserved main item tag 0xd [ 836.558100][T10830] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 836.800838][ T5942] usb 4-1: USB disconnect, device number 72 [ 837.204594][ T5865] Bluetooth: hci1: unexpected event for opcode 0x0006 [ 837.644116][ T5914] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 837.787639][T19825] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4657'. [ 837.836365][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 837.847718][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.861064][ T5914] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 837.870498][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.892423][ T5914] usb 3-1: config 0 descriptor?? [ 838.278178][T19842] ------------[ cut here ]------------ [ 838.285185][T19842] kernel BUG at fs/buffer.c:1582! [ 838.314058][T19842] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 838.317069][ T5914] aquacomputer_d5next 0003:0C70:F00B.001E: hidraw0: USB HID v0.00 Device [HID 0c70:f00b] on usb-dummy_hcd.2-1/input0 [ 838.320370][T19842] CPU: 1 UID: 0 PID: 19842 Comm: syz.0.4665 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 838.344710][T19842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 838.354805][T19842] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 838.360126][T19842] Code: 4c 89 e2 e8 36 af be 02 e9 42 ff ff ff e8 1c fa 78 ff 48 89 df 48 c7 c6 60 1a ba 8b e8 7d 7a c0 ff 90 0f 0b e8 05 fa 78 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 838.381435][T19842] RSP: 0018:ffffc90003ee7790 EFLAGS: 00010283 [ 838.387538][T19842] RAX: ffffffff8247070b RBX: ffffea000179f400 RCX: 0000000000080000 [ 838.395537][T19842] RDX: ffffc9001e492000 RSI: 0000000000002148 RDI: 0000000000002149 [ 838.403705][T19842] RBP: dffffc0000000000 R08: ffffea000179f407 R09: 1ffffd40002f3e80 [ 838.411693][T19842] R10: dffffc0000000000 R11: fffff940002f3e81 R12: 0000000000000002 [ 838.419693][T19842] R13: 0000000000004000 R14: ffff88807de5a1d0 R15: 0000000000004000 [ 838.427879][T19842] FS: 00007f20b63e86c0(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000 [ 838.437452][T19842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 838.444457][T19842] CR2: 00007f58528e56c0 CR3: 000000005e9b2000 CR4: 00000000003526f0 [ 838.452478][T19842] Call Trace: [ 838.455800][T19842] [ 838.458854][T19842] folio_alloc_buffers+0x3a0/0x640 [ 838.464010][T19842] bdev_getblk+0x286/0x660 [ 838.468536][T19842] __bread_gfp+0x89/0x3c0 [ 838.472880][T19842] ntfs_bread+0xc2/0x1e0 [ 838.477170][T19842] ntfs_fill_super+0x63d/0x40b0 [ 838.482057][T19842] ? format_decode+0x5ee/0xe30 [ 838.486838][T19842] ? vsnprintf+0xe11/0xf00 [ 838.491281][T19842] ? __pfx_ntfs_fill_super+0x10/0x10 [ 838.496622][T19842] ? sb_set_blocksize+0x85/0x180 [ 838.501594][T19842] ? setup_bdev_super+0x4c1/0x5b0 [ 838.506658][T19842] get_tree_bdev_flags+0x40b/0x4d0 [ 838.511983][T19842] ? __pfx_ntfs_fill_super+0x10/0x10 [ 838.517570][T19842] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 838.523699][T19842] vfs_get_tree+0x8f/0x2b0 [ 838.528660][T19842] do_new_mount+0x2a2/0x9e0 [ 838.533231][T19842] ? ns_capable+0x8a/0xf0 [ 838.537690][T19842] ? __pfx_do_new_mount+0x10/0x10 [ 838.542799][T19842] ? path_mount+0x61c/0xfe0 [ 838.547688][T19842] ? user_path_at+0x44/0x60 [ 838.552310][T19842] __se_sys_mount+0x317/0x410 [ 838.557117][T19842] ? __pfx___se_sys_mount+0x10/0x10 [ 838.562368][T19842] ? rcu_is_watching+0x15/0xb0 [ 838.567406][T19842] ? do_syscall_64+0xbe/0x3b0 [ 838.572140][T19842] ? __x64_sys_mount+0x20/0xc0 [ 838.576980][T19842] do_syscall_64+0xfa/0x3b0 [ 838.581541][T19842] ? lockdep_hardirqs_on+0x9c/0x150 [ 838.586794][T19842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.592968][T19842] ? clear_bhb_loop+0x60/0xb0 [ 838.597707][T19842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.603642][T19842] RIP: 0033:0x7f20b558e9a9 [ 838.608073][T19842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.627863][T19842] RSP: 002b:00007f20b63e8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 838.636314][T19842] RAX: ffffffffffffffda RBX: 00007f20b57b5fa0 RCX: 00007f20b558e9a9 [ 838.644386][T19842] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000200000000040 [ 838.652750][T19842] RBP: 00007f20b5610ca1 R08: 0000000000000000 R09: 0000000000000000 [ 838.660851][T19842] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 838.668881][T19842] R13: 0000000000000000 R14: 00007f20b57b5fa0 R15: 00007ffdd9f47ae8 [ 838.676990][T19842] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 838.680048][T19842] Modules linked in: [ 838.684119][ C1] vkms_vblank_simulate: vblank timer overrun [ 838.692188][T19842] ---[ end trace 0000000000000000 ]--- [ 838.738984][ T5914] usb 3-1: USB disconnect, device number 79 [ 838.758655][T19842] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 838.790340][T19842] Code: 4c 89 e2 e8 36 af be 02 e9 42 ff ff ff e8 1c fa 78 ff 48 89 df 48 c7 c6 60 1a ba 8b e8 7d 7a c0 ff 90 0f 0b e8 05 fa 78 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 838.837777][T19842] RSP: 0018:ffffc90003ee7790 EFLAGS: 00010283 [ 838.862956][T19844] fido_id[19844]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 838.867239][T19842] RAX: ffffffff8247070b RBX: ffffea000179f400 RCX: 0000000000080000 [ 838.904170][T19842] RDX: ffffc9001e492000 RSI: 0000000000002148 RDI: 0000000000002149 [ 838.912318][T19842] RBP: dffffc0000000000 R08: ffffea000179f407 R09: 1ffffd40002f3e80 [ 838.930269][T19842] R10: dffffc0000000000 R11: fffff940002f3e81 R12: 0000000000000002 [ 838.939029][T19842] R13: 0000000000004000 R14: ffff88807de5a1d0 R15: 0000000000004000 [ 838.949322][T19842] FS: 00007f20b63e86c0(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000 [ 838.958826][T19842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 838.966273][T19842] CR2: 00007ffcb87f8eb0 CR3: 000000005e9b2000 CR4: 00000000003526f0 [ 838.974840][T19842] Kernel panic - not syncing: Fatal exception [ 838.982176][T19842] Kernel Offset: disabled [ 838.986610][T19842] Rebooting in 86400 seconds..