last executing test programs: 13.837496399s ago: executing program 0 (id=1506): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000008c0)=r3, 0x4) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0x40000451) rmdir(&(0x7f0000000100)='./control\x00') syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000001c0)={0x20, 0x13, 0x29, "2ddf2b1601f896f2877f115d10ae5a8527d61bb94f65db3f68feff7596ef532ea8b0fba64c8539dfc9"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.698544438s ago: executing program 0 (id=1512): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x11b) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) utimes(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6}]}) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1148}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r0, &(0x7f00000017c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r4, &(0x7f00000001c0)={0x28, 0x0, r5, {{0x9, 0xf5ba, 0x2, r1}}}, 0x28) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x40fe, 0x49}, {0xd4, 0x2, 0x7, 0xa0}, {0x3, 0x5, 0x4, 0x2}]}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4) ioctl$sock_proto_private(r3, 0x89e0, &(0x7f0000001080)) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) io_cancel(0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r6 = accept4(r0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched_retired(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001240)=@newtclass={0x58, 0x28, 0x231, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0x6}}, [@c_cbq={{0x8}, {0x2c, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xb, 0xc}, 0x8, 0x4}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x1b, 0x3, 0xc, 0x10, 0x4, 0x0, 0x8, 0x200}}]}}]}, 0x58}}, 0x800) 9.400453113s ago: executing program 0 (id=1516): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000280)={0x0, 0x1, 0xffffffffffffffff}) sendfile(r0, 0xffffffffffffffff, &(0x7f00000002c0)=0xfe, 0x4) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)) msgsnd(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000000000008aa8d391b412c9d0215529f2dd3ac6d"], 0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="c1", 0x1}], 0x1}, 0x0) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x4, 0x4e20, 0x8}}}}}, 0x0) 9.111240434s ago: executing program 0 (id=1517): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = io_uring_setup(0x448ae, &(0x7f0000000380)={0x0, 0x2beb, 0x100, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ff2000/0x1000)=nil, 0x1000}) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000040)=0x200, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x840, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xffffc000) 6.599538006s ago: executing program 0 (id=1524): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080500c80002"], 0xfffffffffffffd2a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket(0x80000000000000a, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='source', &(0x7f00000006c0)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/\xb0\t/\x00\x00\x00\x00\x00U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/\xb4\x00\x80_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b7\x8aH\xd6\xd8\xbf\xe7\xc4|y\x1b\xd3\x88\x139\x8a/L;)?\x80J\x85\xf0[?\x01\xa3\x02~5*\x94`\x1a\"g\x8aV\xb6q{\xbc\x18\x99Y\x12\xd2\xc2\n>\xbb)\xf6|*\xbb\x14F\nZ\xact\xc5\x12\xdd\xda\xe4\x91\x0f\xdf\xb1\xf4\xf7\xa8?tO\xa6|\x11clY\x02\x17 \xf6\xe7\x8a\x93vr\x80A\xbc\xdd#\xd5y\v\xf5\xd6\xe7B\xf1@\xe1w\xfa[\xa4;\xf6\x99\x02\xa8\xcbu\xf1jdV<\xe4y\xf6\xb9\xadHN\a_w ?\xe7\x83\"\xf5\x1f\xb2\x04\x80\xcay\x03`\xa3\xf0+i2jQ\xea\x00um\xe1g\xa4\xd4\xec;\x87\x9c\xef\xc9\x91\xa8\xb2\xef\xee\x98\x12\xd2!\x89\x98T\xdb%R\'\x01\f\xb4\xf4a\x81\x00X\xea\x1c\x03<\xc05\x0e\xd8\xfe9\xd9\x99\xe7\xf5\xc3\x97.\xf4Y\xb7!/yy\xee\x84\xef\bw=\xab\xea\x18\xdaS\xf2\'S:\x86\xf6o\x89\xf1\xe0\xcc\x13P\xa7\x06\xc6\xe9\xfe\xed\xf7\x04\xadJ\xfd:\x9fL>=\xdbQ\xde\xb0\x1e$\xd1\x17\f\xddiN\xf5\xca\x84\xf3\xd5[\x1e\xb2\x9d6\x89\xc7w\x14\xb6\xb9G\x80\xb3\xd4C', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000006e90025c0f0003000000c3935d007cebb8bca8ff0fb0c31889d159a000c74b5a285af09faf0363b2d4321299806823da4003fa59f7ac47b8619be7e680beab5402e538e19b2be3f39e962289f834523c14962045282e4a223c9bfb4246590dd1da4b97651103daa11de2b4f7e10d116db4a1ed1ca9170d00000000000000400724"], 0x28}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x22010, r2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f00000001c0)=@hopopts={0x2c, 0x12, '\x00', [@generic={0x80, 0x1a, "22a893a3ee773b458b15b43d28b2942c3d641c5e059be42ef927"}, @generic={0x7c, 0x62, "8fe46fa47d89e9229c8f5d112278a0ab797592c462471aad2fcc6fa7825c13154e89daa520402540fb9b9eec42861b7a4074a9572f78607f65a3157b75cb1f63f0e1ce19d22a2ad406b1aa08f8b2e6fe04d82d0054c1c0f6a6fd46b2131a6a72736a"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0xa0) 5.723509083s ago: executing program 2 (id=1528): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x6400, 0xb2, 0xffffffd4, 0x0, 0x0, 0x20}, [], {0x95, 0x0, 0x0, 0x10000000}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5.524469772s ago: executing program 2 (id=1530): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x100, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x20) syz_io_uring_setup(0x690b, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x3, 0x3}, &(0x7f0000000200), &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0x1866, &(0x7f0000000140), &(0x7f0000000500)=0x0, &(0x7f0000000240)=0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4ee6fa", 0x0, 0x0, 0x0, @dev, @mcast2}}}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x6000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) syz_usb_control_io$hid(r6, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "d32052f2"}]}}, 0x0}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r7, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) r8 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000010100)={0x24, &(0x7f0000010340)=ANY=[@ANYBLOB="210712000000120500e8e79323d2ce158cd17b620e6d1b5f166e27f4acec2ae86ac10e9f2b5542a179457105c1ed090000000000000092974a72257691e85620c1f90ed5e4c6eeeb527867b0bfa93bd2cd0a240df1622626aa936662a398ad767ccd01ec20296b47d89587d22f110452bbfa278b7f41f45947dcb1629e0463f20cb93eed78e88aaaafadc5aa65dee2ff22117d1ea490b116f4ae99f608554e9eef5e6c0d7ec94e99e9324ff30b84e98517dd9c1ce38451e62bfaccc265a98a5c0be77a077fe3a6b986d1ec17bd2e7115e0989b169bdfbe8e1d3ad7a1e0c9acafb7d29eeb503de2a1a89052102f4d53214a01bd2e2dbafda1b16827fc6fd845a972211685cab1d6162443ffd4b003d3ccdecbc7a4c1b68477fcbbca550104452103701e634cb4653e46bdf058d133125ef632d575ee2e5319d02d09"], &(0x7f0000010040)={0x0, 0x3, 0x22, @string={0x22, 0x3, "4b7876227609e05ce3b693ddc7550c87953099664ed01ec9446ca74aa79ce893"}}, &(0x7f0000010080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "05719c16"}]}}, &(0x7f00000100c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0xd99}}}}, &(0x7f0000010300)={0x2c, &(0x7f0000010140)={0x0, 0x7, 0x6f, "8c234dd084d52e58e8e05b8f991aa9c17a8cf262cbcd951355084cf2d4ffbd4dc90a8b73b986ebf57c13f49a9e869139d0e6069794dc862d713098073f44cd50f36f1733add4e3b32a87c9fa1af494541bedc8479649b30e0461c6d123834f0a3b84b912a30e42c20d5a165debb8e7"}, &(0x7f0000010000)={0x0, 0xa, 0x1, 0xc0}, &(0x7f0000010200)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000010240)={0x20, 0x1, 0x76, "b3eb7f79e10796882c0640ac3bc1a5bd5120d88a432a4ea79bf3bf057a7a1afc352d7ce4ec9ada4ce38fcd2c497e355aa76e7a50828472b5bcc272a16df603ff925c3587777eaed59cf5c2a94c8b606ea4b4da284b264a03764e7bdbf1523ab092da0ce96dd9eb0203fd08d85cc1dffd44b6b425049a"}, &(0x7f00000102c0)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io(r6, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r8, 0xc040480c, &(0x7f0000000b80)={0x0, "80e21d3f6c946c4b77ca1ec78558619c83df381ea2e6acaaedabfbe5f9695fd2d5e3b1577598bb5b0f3bc3bccd35091df07c0d5633c59fc830306b2e5454126f"}) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}) r9 = syz_mount_image$fuse(0x0, &(0x7f0000010500)='./file0\x00', 0x1008020, &(0x7f0000020780)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8000000000000008}}]}}, 0x0, 0x0, &(0x7f0000010680)="4a8441365446ed0e9f51e19b66074e248bd2e7b5a042a707d35e3a004e1c3f655914f17e73a18d65b3c6b84b46ae73ff69b49539cb49236ec3f1d13fbee2c819551ccd35e21cb2f5d4fa0b0a72d8d7150ae1186197899b1ace8536eaffcb3371e273999b3cb366efe4bb224c62c665d2746eaa756b5ffe1e36a318a94d951383acec88c8ecc210654abe49e72118d93844598f35") r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000020740)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x200, 0x0, {0x0, r10}}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000f, 0x11, r1, 0x0) 5.226905895s ago: executing program 4 (id=1533): openat$kvm(0xffffffffffffff9c, 0x0, 0x456100, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x4002890, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) bind$unix(r4, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x5, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200380, 0x0) sendmsg$unix(r5, &(0x7f0000000680)={&(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r6, @ANYRES8=r5], 0x30}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) syz_extract_tcp_res(0x0, 0x0, 0x0) r7 = add_key$user(&(0x7f0000000180), &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r7, r7, r7}, 0x0, 0xffffffde, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r9, 0x400454c9, 0xba98575a95aeb70d) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000100)) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 4.925504739s ago: executing program 4 (id=1534): unshare(0x400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) 3.898012897s ago: executing program 4 (id=1537): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000280)={0x0, 0x1, 0xffffffffffffffff}) sendfile(r0, 0xffffffffffffffff, &(0x7f00000002c0)=0xfe, 0x4) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)) msgsnd(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000000000008aa8d391b412c9d0215529f2dd3ac6d"], 0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="c1", 0x1}], 0x1}, 0x0) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x4, 0x4e20, 0x8}}}}}, 0x0) 3.845660192s ago: executing program 1 (id=1538): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001400000000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001400000000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) utimes(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'ip6gretap0\x00', 0x0}) fallocate(r2, 0x8, 0x2, 0x36) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x8}, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x8}, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x40}}, 0x0) 3.570830055s ago: executing program 4 (id=1539): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x39, 0x107, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x06\xdd'}]}, @typed={0x9, 0x2, 0x0, 0x0, @binary="e55272fb64"}]}, 0x30}, 0x1, 0x0, 0x60000000}, 0x0) 3.468983054s ago: executing program 1 (id=1540): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000ff0000000000000000d17d000000000000000000000000000000000000000000ffffffff0000000000000000000000000000001200000000000000000000000000080000000000000800000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000006e72300000000000000000000000000079616d3000000001000000000000b40079616d30000000000000000000000000766574b7708ad56f5f7465616d0000000180c2000000000000000000aaaaaaaaaa000000000000000000b0000000b0000000e000000071756f746100000000000000000000000000000000000000000000000000000018"]}, 0x199) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0xfeffff07], 0x0, 0x0, 0x0}, 0x1e8) 3.225682955s ago: executing program 4 (id=1541): unshare(0x68060200) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080207000000110000a1180002000000000000000e1208000f0100810401a8001600200064400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x2010, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400000000000077, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 3.163594863s ago: executing program 1 (id=1542): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000400)=""/147, 0x93}], 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x38, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x9, @private0, 0x9}, @in6={0xa, 0x4e20, 0x1, @private0, 0x1}]}, &(0x7f00000003c0)=0x10) 3.057976103s ago: executing program 2 (id=1543): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000770000/0x2000)=nil, 0x2000, 0x4001, 0x0, 0x7, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x85f, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800000000000000000000000200000000000000000000000c001680080404"], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000090000000c000180080001"], 0x20}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003d00010027bd82000000000002"], 0x14d8}, 0x1, 0x300000000000000}, 0x0) 2.38163933s ago: executing program 2 (id=1544): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x610, 0x420, 0x338, 0xf8, 0x420, 0x0, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [0x0, 0x0, 0x0, 0x52020000], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xf3dd}}}, {{@ipv6={@mcast1, @remote, [], [], '\x00', 'dummy0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local, @empty}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) 2.090066638s ago: executing program 2 (id=1546): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000084) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) recvmsg$kcm(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x61) recvmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2.013712391s ago: executing program 3 (id=1547): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x204480, 0x0) pwritev2(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="f9c4de7d09e401f42119dac4092e618d186378433212767d4acb776a6be51c1f05c6af35637bed498a0e672649c8263af15828e452499f99ce7c627e256b1cb032b4f13257821c02d823af0d6f0b708f31afaa0018a8", 0x56}, {&(0x7f0000000100)="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", 0xfa}, {&(0x7f0000000200)="ec1937ae404bba8cbcce7ea93ace6c18d0f10dad6ad2093f820fccddb5163d63cd18fd7c010749e92379210d32d84aa50abdce5c66148f706d6575b889828869d7af5ed5353b955680f689d357d96c7cb6540602827850625e1edfa3157aa262df28e3d0c504", 0x66}], 0x3, 0x1, 0xa1, 0xb) ioctl$VT_ACTIVATE(r1, 0x5606, 0x40) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000b00"], 0x10b8}, 0xff00) 1.880464788s ago: executing program 3 (id=1548): fsopen(&(0x7f0000000040)='virtiofs\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050a00000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.864646172s ago: executing program 1 (id=1549): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000180)=[{r0, 0x4047}], 0x1, 0x0, 0x0, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') socket(0x1e, 0x4, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012801100010300724b6467655f736c6176650006000000000580"], 0x3c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x50}, {0x5, 0x0, 0x0, 0x4}]}) write$ppp(r2, &(0x7f0000000140)="1627", 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000008000000000000000ff02000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socket$netlink(0x10, 0x3, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x60500, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d", 0x12}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r6, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6d}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r5, 0x3b8c, &(0x7f0000000240)={0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f00000001c0)={0x30, r7, 0x0, 0x0, 0x81, 0x6, 0x5, &(0x7f0000000240)=""/4096}) 1.698684232s ago: executing program 0 (id=1550): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140220102030109029a0003010000000000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000000024030000000001"], 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0xfbff}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}, 0x1, 0x7}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r3 = dup(r2) fallocate(r3, 0x10, 0x0, 0x62000) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r4, 0x5521) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.690102391s ago: executing program 3 (id=1551): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}, [], {0x95, 0x0, 0xd00}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.553649521s ago: executing program 3 (id=1552): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x684402, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r6}}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1b, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r6}}) io_uring_enter(r3, 0x47fc, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffffffbffff8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x6, 0x1, 0x804}}}, 0x7) getpid() ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, 0x0) 1.425807332s ago: executing program 1 (id=1553): r0 = syz_usb_connect(0x0, 0x116, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "bdf76c6f", {0x3, 0x104, 0x0, 0x0, 0x1, 0x25, 0x7}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/mdstat\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x6) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/67, 0x43}], 0x1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x224, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) 1.17248858s ago: executing program 2 (id=1554): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket(0x80000000000000a, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000006e90025c0f0003000000c3935d007cebb8bca8ff0fb0c31889d159a000c74b5a285af09faf0363b2d4321299806823da4003fa59f7ac47b8619be7e680beab5402e538e19b2be3f39e962289f834523c14962045282e4a223c9bfb4246590dd1da4b97651103daa11de2b4f7e10d116db4a1ed1ca9170d000000000000004007246e67d9cd91178dd60c94"], 0x28}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x22010, r2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4800000010002104000001000000000000000000", @ANYRES32=0x0, @ANYBLOB="adffa88800000000180012800e000100776972656775617264000000040002800800", @ANYRES32, @ANYBLOB="080004"], 0x48}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x496800, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f00000001c0)=@hopopts={0x2c, 0x12, '\x00', [@generic={0x80, 0x1a, "22a893a3ee773b458b15b43d28b2942c3d641c5e059be42ef927"}, @generic={0x7c, 0x65, "8fe46fa47d89e9229c8f5d112278a0ab797592c462471aad2fcc6fa7825c13154e89daa520402540fb9b9eec42861b7a4074a9572f78607f65a3157b75cb1f63f0e1ce19d22a2ad406b1aa08f8b2e6fe04d82d0054c1c0f6a6fd46b2131a6a72736a44e0e6"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0xa0) 630.049105ms ago: executing program 3 (id=1555): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}, 0x1, 0x7}, 0x0) 453.032024ms ago: executing program 3 (id=1556): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x408100, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="10010000640420022cbd7000fbdbdf25e3d546a8fbe2cd8852d61fec436a22cd4424437f461205e71efae5c8c92cb92d00000000b9091a540479dbbca3d1edcd3a3adc8ff860b63cb3544274865056ab34a41aa191fe34d7fb377f73cb9829113e6b8a6afffffffffa8e97c321f4ab525f6d7869e287a84b1c90bca9dad4effa5ce79af63a904437caa666090000005a2790a900d7709d2b1a5163e65d06036194a22237335b5f4f173df2db464bb1e58b44e6b9919a61e53eb04341f146f31b09158b5204c797976f04321612f52ef266c1b0eed08402d559924726371d214fb477b476b74973ae967a0f3f791f631f384035c1aa4f624a4a7af37779ffc24fdf940d77d80741ea7b240b6116dd8100"], 0x110}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="b635a23a2016a72187bea6f49af69fc50e62be9b91036831bdeecb48c13bb131c346c3e92f08dc3e906534c965dc3029c871de321968e3788fa100e23ffcf4070c9b5731c9e315676713c5668adcb232058a72dd3f9dcc3393a54b66f68e5013e2e74bea3da949fc18e58f7df102ad2f65aa31a773ef5c353b7f3c623a575938ff845618fd087df36099d5ca1d7d6f038c546fb310bb3178bc9a693e6cac76ca27f8afec8f31c9a8d5bca4a31a7ae7dc0cb36afe6165ec1206172879c342d63c402f7e40b6a80dffd8b53b37c7c6dd80d3032019c28cbfb59a2f9def205c9ae2523de159bf7e367b1dbdf3876a29c6dab82b439251424cfb62e9cc83178036852558af1ce423a4e05f196e061d5a25a83571b7165033e1f383acd2d854ee70ed2510a3e48f318bebe7381415a12697523e93a617b0946dfaed978c334f15b5a3453e69cf879a8c655f2066fc4bbe5ac4453118bab0be6f6130d1a1e152be82c67e9e79b51308d6a11b6b0a28d0683f4cee3a515d094f34cd7e265de644974c75598d69d42c23d6287bde741cc04419c95262e4857feb0961a04a05815bc39a36f44f5af86927075ba9770afc6d292077bab454e333c2071c7c3cbec060b9a1971de44fe264dbcdf855c6ccdd0e352dcb6829c0bca7944a71ba92290ab85d19c0da056cb03a5cfe64961a8009b29881a19e5875df770af2e8a01c83aaa6987102bf4333d47ef6163f4dd459de363c2fe2a45b1c7b884a058aa78aa24bda266734dda02c483484658f2be92b2a62f9c670415d710e10a6abc8545a84e7f63ee8b1bb030abdd2f25089c57a014b67f0c769d18f3339eddd70289ce779b374c7f811fae76c38d057e0f71fd7c53bd8f18491293c390ab97c3a9490e6b3cc6482990393b1248166e68dc532b2f0c2c375c014e738c0833d109c66c97cc1b318b44b2664aa94ae689452707465b08f5d0df59fc1662c9a96365a9a01f5de018abe3c035e069e928d7dbf1f010cb9b0c30ee806414e8cc3d2c010087892280735686d2c4fbf42bec52487ab0a8f5c46882860a51549b97c6c6cd5bafe0059ecb52963a89a4e45041041b2c7a544c09e258d757db52942943a6a091d57764d1c200c787012229bd224964ade40e3c26a11b8a73b38fdb9efd4f43affbec9d94b86fddb18ad22b7308c4722c98648e2ee10bd19a0ddff955c001eeeb27391fd19cc9e75ecc281ab175c92becf420aee960e99702d83b1fdbd6cb14b64a3f2b01a2949dfaaa2cd21c83b456721cda5fc55f2fbd4d79739c9d515d4e17a5cbee63fd7781806525107471dca76fb8630780d71737890587d64446dd8f683421647024ee0d4743d3a1c40a36dd775050b1eae69ca0b2a3eb064a8e1c24a3d465ef3fd470f844294ab23b8e6a8e88ce7ecafe84c4e31c08f3444c1a9cf8527f50f11b809235e54f4704222a473c87e3209fdc615d5a01d5dee3178c7175d2f0464042157c6249261050ca66f07635ee324535c524ed7e199d2df42666f07047069ee7bc72a788140a4aef44bd258d01a3ed28be4089f797022022f3a7e30c2e50af2888782bfd8e410d41452165e3c86cc703455fb811947defd3462621c665ae555c9bc75ce4dcdaffa3241d140774dce1d1213f0b9200813db316fe70dbb7c518cf393daad90dba2f79bc8665da6f55e0a4e309fe2ea95868af4258df212e3ffe3ecd56a847378c4b6349c4ecf165b07521ff4d272fdb07745d5bcdd02685cb9d7833002cd9edb6331ca8f6f877df03621b67308246b7a552e61c9820fb108a9a0c89c9774956a23e2ad56fc40fa8da59f6fc6ffc21fba200ad858fe0ec974100a878552d9ff24fb80bef586375e3bbd15c72f40cd66e1eec9de67800fdcf00b2b88c4c07b27a0db91a467ee1a1294cdb077a327cf8ecafa211b60208d56d1732b87b448b039c7b5271270ed46d507a6a81716fdff750127a50e7f5b34b5b3d4e99140ce6b933be3b021cbad405d4a1d50668163b1064b879fcf267cd1ff40261aa410ee086643bf43687992b094045e409db0ad7b8b9070fef8b9b618d138f377d6eca58ba46b419ee787e35d351dd196f18645970724768122e6e7b272080b217c68d47d14cbd240811a23fecf0d580eca7e05da64d8a438479f70eae43cd676f92f8b0e77bd829c4b2b3f7e96e180b6113b1528cc13ce684f864d808210d4a8ed4f9a73005ad761ad46307413d493bf7452907c17af88a4628040c37ebd2fbb5cd7b382621105a7af874f0cf7c99ff478d7f5800b5be59d3b74ec160f22a586ba9a017cc4fe0c1cc58e289fc060ce3a415d55660e28f92eee2ace1c4b3a0cc700de3b8f617b0ece1415e2b917d906303ce018af05661a261690d3b2b1c738981791f9e5f2abf97beaa27e4deb3e12b2ffacaf68798945ee7ee7a955969ef6e7c71f6f85609c6485500e18f39f9ea927ccd26dbfd28269750149a44ab81a739a5367549364b71ea8c3f4275e0041261e356c21f58527a704af6828df7a209a4ba2a42c96b506d04000adfd16df424624a6981276a4fe4777c2d91e516195c56c8b7cbf88a091c903049d5563db8a62f39cc0c29824779fac1d8a4899d1cdac16f076202f587ae05333d208bdb3b4dfe52e65fb1ffdb740667032960114a06967910f4c8bea2e3d93f438b4e6a3b5c1144cb95d2137e508e575c49cf114d06a56bf9336548a09a8b82374622d58084fd4f740aca1704f44ec359525bfaa23058ff4fc5c3f50e1f7bf8d05abe5467f77b03c3f6188afeccc15dc0b2fd51e5f699a67475de8302fb1585f6b2e7e5c3c470efdc51fe58787417304ab43cda673883b689b3e00fab6328b40af8a0194d56ad91bb7195bdeec56eece40c5269f275bca2e23748838446a0f7d4219bce3d96038fc4f20b7272604c8f9b7c6ce4fd2b91d104c23b6e2e59c2efea536536f332cb7f2d113c7ad1613ebe9ec50c86be7acde5c703dd663f6b821c7408917a62adb7795f6508408fdb327f2a3bcecf9892bd815ba7373dd80548b92afb12ce395577ba3a638189eb9978d1941b836f7785dae64e62c5d7b0e46b62ba639b0c6a790dfa850104e0413ae0b386438e0eb87c4acababc30eb376f6f47485a11c884a187d67ea7d679a367e32337a1bbb07ec05324a3dbc2586bc0991a304aaf035ec99abf8bcad6b10295d9f832d8879b9690447ed3854806095565689e7655ba7ada3c41b814b436615dd491b13613cc8cd6e826b159c0b07d86841904d8db164b2d95b77dd8cee127e33e9f72697af5bdac028586bd580548bab55d712aa656cf9fa86f07e0bf6394b5b9e78a2f0ee6de2ce7f1f4764787fccbfd7df104b50099205e14a7e65c2fe0afa688aef20043841767e1cc18c058bd83db3d5efba9c2f40aed1712730177124f71664b00112c2a801e3f7632fd9aa67bc9b2b6fa494c1596cf96f277f50d51bba6441733f0a7d73bd8055c88068c8e566e1dd4121ec95ca6df211a7cac1c6f3dc67270b86b6bdf1b2a98db3756796d8ca726be861bf70c90151eba75ff30b8fa17e5640f6bec0a042593f2f113875b9e18114e55be082083dfb8799d9c5d0a5828cebaea60f7fad3c98c078c09c245ed56a4fc7f9a7bb407daac2cc9d4bf8d3ed454cc022ab10ce4d41a2d4c6bc1ec3d6925426a5f4eca2e9bded77515c0896ffb0001adf51d9f43462222f7e06ad6cd69c4d02a384c4d8bce93638a24364d6ba8d17a537ea78655c3305bf069e07691a78aaa3ac03dd987972cd3c79b32b90a0376b9bbe0a6fe95ebe1e95de12fd0e53f5bc9b047146ef5ff4b40a2bdcf0bd53a6887b37107b6d37c86aacfee3478d3d81a5ca8be63559ea5276a64d88657c0d59859a2d1b76c0a382ad851ba8411a7e6e17d838694b156c5550c5cc14212e65e3b3231e5837cd7866381705db015245cc258ff1bd66517feaaa4f7d154b24c51ae54dc5466846b5e9a64ba88d3bc799f6118dcb2e5a972aa3823ddf5bd2a39109e56b820194c172c7e87ef1240701659149f7b05897aa7945fe5040d7e67c635ac0dca05e5ef0e9d6f542f8b1f15fec8897667587fe7db94fe36d73e51c8ab6f2b0ae3f6c51325b27ffd344a91bcd174adaa4569b9d52c0d31191ad191c3a52129e425307dd9ec1d1dea3bccd3fd7e5774915012b0369704f3d298c175d58accb97ac897153146e7f3b1982aaa9af9433b7d3cc40a2804e8246d06ffcee41f5c771c5cfc327acd8061303acd961a22fe2483f375d5c249214aadd9c8ccc3831e31f19ebfb124df863b9809f767cdec9905257b8dfb1a4c7e78db768daf6bbb6863f649a6f3023d1d5b32bb746fab105a25b07395b10d539c691710c6f80182ec0029844881f0d41b856f8a576339d16fcf1462af2ca95125d6f4771fdb3a880bbd240b671f9d904b8740f88b691c8fd783f1bbd22679beb7170cf07c85773ebd8363e75f4343b1579c7a40a9744f1f505b9a956faaccedc1df39d1e3c7d0912640afd4f666aea9363a8d84eccdcf3cda738443640aac65baf492fffc5643e87e6922867db2037cc927ebb30398334f4f9ce3b304d4a0ffda5b7de5ce781633dabd8eebe44a6feb454414d6e766608ba9f6b1ec8ac5ca11ea6438db7d86902d99b7d0749a646bbe3b0a988ef9a9a1f2ded7e238a31ea7241ad6de45d8f33d084520c8a68334de96c32948b9baf68333d5b51ca4bd0c91b75487c00b41dc2070b8b3d8923af1bb358e64bac194e8aff8645993b018f9e8c63917d220cc7a49980c920109e62c042fc4b757422724ff875a54bc3fd1cc278c4ae08f225d4da56e2e3c5056126681c8592bd195c438ff06afd66026cd08c5ede98b7a700dd3bd5fada703baaebbb1f96c49ce5c1263de39a5c5cbb56e610e43091b4e8af3448404d8d84d9a29430949d51f141e1f12451c71f4c07af6558d987b000f1a14cc33a26a4a80da7827fa536fd78fb8878b498ae174f2e8a5b9666d2c6e6ef678bb1b81b58e1bf26a64a1d73fd49005bf6b04f7a22b17f324c10b60a20da359f4df247ebc59a0895dd4559f17dc6f08e063ec8033b25d8cb0ab49c6bb302038889f15dfbaf21208e737ca121894b29d915bff2ea53ca74e67fd4adc802c3e839e586bbe2a65e843614dd96ef1c121d9989a56e2ad321d8ef5006882a8a03de4f192e057fb40ae6332e40934e78dabf392085dff93eebfe6072fca2e31603c988dd5bbdb16d95aa8a8cddcd1635905d1e347a51d2ec219b2e7581ce7d060c0de274cfbd9e6d9d132c4fc0149ca5a13c9e41fc46b88da841fb0a301c050d21f80938651029fd5dc2fce4a06e524f540a89e53eb93fe04dff0853505cc3299a97370581c7fdb8159f95f44629ca7a9e34bb447f7e5f549c18ffd06da6ccbc2d48c5bf3537360c4b185a5284dd4988dc0a6f2381e640b900cb56e0ec43ffa95b23d70f6a7b73dc29e41c710968f0ad01717aee92abfd67cde9cdea149b47641602014318998d675a141a2d3ab75e718ab382d305b4a961c9e8b621861e435d006faccc5929c0365d890b3d3973babe159e8db74d6c61d07f55b6fc49b5dcca788eddfb28916a36c80eae7c2554882ec31d1813dce2034ba8973a2919405e94589c24c3cdfa1bf2fcc0feefb87d1af27a2f80316d4462ea309a30eec785c3a597c6107897df297d930a686426b6afc2277e3c9929d00d9000ca9388427f060af654e8c4bb3993b01cf8eac473e7215f0e5cbe75e91c245a746b86a6d876bb7e624e690384cc0be32d3fad30640af8befe0f39ea10fc578214fb7db22b0b8d4a797d56335da88ae9c7a74dd685234178a4e49b8ca81893c30bb33fb3d8db2ed69c69fc2ba7ad04df26f49018088798906471f9b29392bc3fe78d612be345d838a72a00741af079446a5fc6fc7b779c0a4d8f75eb945c65e60f2894bfd9a526bdc29e277f15481b82f10dc8329d6b3f27f352a49dee12e435aaaf8e832aed574b17fc029ecfbf8862d0dfab18bf095d70b1f226c932f8ce3ccaec100477e2071dd1ca48af36ecf96cd063c9708216fd9d65d0e69658911e157cf47c64060acdb28cb05b9757db3da23b8a57705559b59667158862168d25b44b4b6e6b92f0ed2d6df1d08e328889c16da0bb46bb751b5cbb008f66493d5ab425284ade4d6a181ab708489efa3afab44511df1e217e5ae255026394ec9d89d8e8cffb9e32494ddb0fdcea1c53a6d1a962a0a886dca255cd0b58ad7ba90701a1f826c4febfd444c5d92a302fe9c99f085741dfe5082dcdb442174e825b5baa790fc03fb23f7a20f82d259fdf6708398fca2c9a9d28c953282e3c8db92b12afe96cbef7ddcde5d0552af596bc367c7a3f4ac5dcc93b885fe2ff9ad008527820524b8601313703665de05ebe7ff3f22e2cc6d6294a7732a11dbc5f82951c97bc78c2875f12265ee0762c42cc0e27c3c7e6242b70a2b98e3990d0a4c337795a26e63976b470b1b4ee0e338bd8565d317f21744a3a26e8ade2685cee223dd29472ba5b9e8e83cc7e1ab322cb79274573bbedbe8d8d7194fc2d4098f3a1716e07cafa7fd89a229e278851373dc71ecd7f4ea6d1d2936e8553a95c37ce51d33878004515e84780fd9720b71c745c3248b4ea2fe1a5572908b79242d41314412b414cb303d5f30af096774632994aac2be64472215c96c5d680f3c5dcc8b148f7facc44420adf727857a0ef912b6834672ff2d6ddfcd6ff64667635c724a7294ff3bb61ccabf1c00e13c1070d000febf9ccbd8bb111827ca9d30db4ec554953db59d93e555a9502f09eef63bbe4de97de381aad868bb9fd7d6586d4c8d0dfbb200cf87295b3ae9a8f10da508dd34392f601bcf7c6e58e737a0e25a00059550b4e2b6d490d854eb209f0cbb332a59e582acc01431d250e1199c91c7f840962d1b8648938e23bf1937b61afbaf0f38af84dacaa0585d749ef7c53bef067c09fddacf3349af13f3d265e7281164d085c845bc2396ee5d02f02f619f4dbb8acdaa66fa36910582b83a49421d1494b1cb20f7b26f692c4e3f314884b79cc49962e364ab5be2d411cfbc90e235c03a2c6e505eec9a42fe5eb90bb14cd24ab483ea7113b69d1eafca2fa96d4a92c4f5ff75391f3eefb12a2ac90faeddbc8041e5c836a46a345cc4bf0c4c2f7c9cb3ada8b35b05c15e8a36aeff8becc43c71ea0499e09aa8e21866c7e6887e24ebab1ca5f8d16389a4c4238727cea23eff3daeb5ddb960b1754087dc716c576e06c05febfd949fd7d57342036cfc6e4aa0d8712b53abaf0e644c4ca7d3734707a3f49c251178a94804aad6352ddaa22b4f27f5fb42b03537493e37c3948fba46a61f27b4017fc0e2b14a8e42b6526d341dade056f462f19cd7c950c7453fb8110cc16a731d3201a2a91279de59c18a1c1626a3dec8e21164521756b5e05913c119cb10910b4fbb6985b8fffd58b801db77f94d1f49a1e7def0eb9182c6b8e5335854020a570f0c62698b28f54cc034d67ec016374387ed340a1fee896b681916522fa9d6808af508b156629e2b59a43ea8fa8038bd42dab28592bae496170156d335949087d05399c64ff83437ecded598382d57288dc09f3fb19ee29328bfde4f600dafa49d462c8a305190044bf998495585b4812b5a2d7bbad8fb539bf65d40ec96bf14d19f20b94cb4f837bb59af74e0819a10d38978df3e06112ed6dbbfd057f52a24622050f6b59c90aadc20aca0a624cd14b65287c75222e32de6f169ef50d83a3c870fb1a119aba1b86ecc49e90511f0a038c85a36273638f791779517b525ec7e5dccec04ba74db44e81e5fb010371a9ee60eeea324ccf3dfce9f29ececc9c2e78f5e0b65ef38a472f61a747103decfb4be0932f36f1dd13f960251fb1371d1583b4a5c9d266e1dbab3fcd0a316c90cc9f52640fb8578324acc4bda0ed316ee891c2f64f573f163f05753e39197b97f119b96f0a8761a27ed952761aa9e37928037cca04069ec57f232067c6e8155c5e648f78a795eff6ddc33b8964bf6fe490f86fca8a7a269c877406032df2ae120afbf8a714910049b70b5e0355a81967a7b745d3e3d02b52ddfc105caed8f0dd2e38523a5918e920dfd024a276d00921251a48e380b09559fdf9c21a242608c2be5eb95740dfdb17f150f66704e752a23794980dcf51c6c5403a9ccb6cd1da068acb385061a4c7e195b0f3eb47ed7d4388a5fc8c039316783563d02bcd7cd33be35d91c35c4c6a68dd43b072735eb86fc01c650a2457d4d77a2c9a21878aee24ac379af9c73f3dc5e76de7516abb3b7d45c755ebbf9eb72d0ea4c97b3c34bf2609060fb20409706b82cd59aac37a392008e1e0df08bd17b56e8127ba631b0c57b2a7d6bc6c03ee347c00b4858ac0867d650db51b8e0ebed1ac770726190cc2fbb8bea49824b5286ffdf7897336863cb7900f34950c141444c784f9b787d77e8bf083c138cffdbe548569faf553aeb2ea26039a1bdd5e31ea649f69a838cf2c5134dabd1f9f2d3f4b92bd5f9728ed92fa10d750c4eb0b2e5f93a7eaeeb50c01f3af6f2b2500b0b2d8b3adf59ad0ec247d4dacd048bbba6dd28e57babef6a93a4e8eeece780225c14956a47a6f21db0077045359acd4f60686eeca084f02c57ec2724da1096c97ba635091a5ec9ddae8b60988055a456e8cf2146852e3526e2de46ba6b63f1d0c6df52af897674a09d1ed9efee6c510f893b79ae374a1bb0167356ce9741015f99b2aaecea7476c9a3922da674da08ed3e5cadfbccebfb7f651521db771c4d3e692e37d7035a7134a7baa8c7bb4f3f063cc67757236c38cb11e2ed1497e3f1c6db6921d19fb13606a51a78f6c4ec63f6dc23d77a5d1c0de680b104fb67b42b0cc550eada029cd67a7b4bd4aa4a5479ac5c9c7bf98c08c8ad7009cf5087e6556ec54e66af1ab3f96ce74a8abf5420ff52b0390d5c40aa372c1ca53b5a0e72960a4db4da2b2fa318effcb6069d7d24f29977fbf4219be9e95299dbed5bdaa998bb00ef8d6e5310c365568b5570b5a715a325dfb9eed5d12be78e0728141d866ff0c4f21a2085499d1cfb1b68a6733bad33384a258fa2465e41e45b44a2fc243127b6070fb4b56e8ff73702751d1f39967ead0155649ef2fd15abee559756014dfcb99cd37c70d387af273971a72a230638b13a18847ec72dbd27084b19b2db9fc60ce4e35ce1df93dc6d2270fb12887fd3323241444d45e2e6dc1044e6528bbc92da13f3e2c2b5b8165e6701d05d10a516f9e0186b4c642da2aa36d7bee3cc9fdc335c6bf490cf612c78e90ac299d8b796a301c6b64a932161559642b6c2d110cb37f89facfb95d5225abf15650bbc488918f40ec0b5b3200bb51ff3b26f7717c69e3117da1b1e78b2723ad96268196a5b90fa19fc0d3e7193749182582305b220d0b10a893882efee2f52e1f518a94216ddfde785dc64a430b1e40a458e035e0957cdb47d2694540e5954908a3db963a18014f3b039a59ad7e36e375f2da6030224e21a7fc368d09b911c86e5ed0a6826bbead358aaa5fa6a8d6de3ed1b2c03cd1803e9a20af367badbf0f8398613eb18f176932a970d8faa5fb3e1084c13e80985ed2f2bc8b40f9678f9c6b9c06b78eaff781fb0cebe251d3b803288fc9a5f0e3521c72bb5bda8d56d42fe82fe22c2cca2bab39f50c98a830f55fd92a69b9f82ffd4d3666770a9d67bce8d17a336c7fcef0f72ecb9098c55d36fba7d1926b91dda03ce015d9c2dab5789ba4e06e92374631a2aa3e2d3bbe8cc418b5158bd782fa9f7a934b006ab68ddff40d68912686259ee1d4b237faefc836abce067bea39fcba8190728e554a0e6b871876a70acd5f54bff40570ff6fdea36b07b23d66464810d7346c0fd1ae15338deecf6435938e1dec0e050ff405ea2c920a47c5cfb3d28c60b58a237b2f585e6046718c86f4c174d938be859454c0620a3e45db73b9120013b588916f4c6bcc4d10031d292850aeb51be2eb5d9bb84de911ccb0e583277c2f49084466d4c56bd276cbbf2d300484da635e2d37adfedb86cb16e8df8cfb18607a56ef4a5e7b57051102b166ec1c5312920ac5a5775e6b0b4ef935fd9a210d2e245a2611fdacce530079dbe3da30df27f1a758b4ed7d22f38ae0a96b556c0df0ebb7353f034d1c704252a00442b2160ade3c7d167f10f20b613a7a9dda06ae98b08e108a209bba8cfb8aca037cc83ca78ceca58f109c0ea7ae10e82474b071d261a5edfc27928c3a928949e32056eab09808542908f72d59101f2b86439e9fc67f97330dd7fb184be394dbe63c92b005be7cd567874e9903b927a76c1b709cbbaba204c679ea0a6aae1adc158cba623c1650e13fed834f413feb644e4c767255b25270f417ac80bb48e172335041d5b2b9f468eb0eaba4a9a4288bfcfeb1421efa1394a9e46c0d5e1e2d549a6ea4644b09ea2feaef5aba678ad24032ff4bee46ce1e4bbe0d06fbd7a754b1c4ac92a3093b103c78e4b5aff6e3c91fccc72d4c51e24d81e50ac1ac0b236c0cd635801746e5f84fde70f8adf69bac0c983440004c7155461a7e3cf9c38594a7f96ccafedd634126d6e85696625e8ef65ce11c051dbd66af7f448837b2871ca21f6aa5521c108ee1ab88ebab414f1e60cbddc0d07dfb98720ab7e8ec3bc1a145b1ace1807379b79123d60da7e7525f7f15e2f71341774dd11f76f3d6b179613174cb703091c11ca173a41d56111deb81235e9c9297a82621905521103d11a421f7dc6a62815ac14675de433e8a030db12505dda28b3cdd7098436c0bea1b30ae7fbd728a7bdd7fa7e96946774ca3f9a00eac6fb71ad49b597c55bca7ca6ba7fc6883ad000a29ba7be6765af00da3573a34eb29c1ec117f76103d508825c1a2f74fd04b07b0af10842fe3e54778220b4b98d14ee1919dd542ae59c7febef84d13f8b58853935736fbbd79ea4747bdbb91421a7af922378a522382b6aa96db3a72d18cc144f6c5151a9cfc677cc2933188f78c78953ed345cee4f9a55bee94ef23a37ef4caafba79aff21aa9f34d753b3f1fb85a7a30028a41b1be9099a2711c62fbdd1f9fa02d1ddde2bc859a84c26285a5243d429136ae19c9053057e99a66cfa279484d2a9ffd4f2a87837a215d3c2a64967b30e2188ecf1e71f78f221fdef3eeb7b6e260071144f7e6dc6fc511c29dc9f05a2e351de14520d474b12566800f2cc80eabcd6ab6da47ffa4fee7b6cff648dff503b25c99ae9293f71638ef158b8b75c1dc7ae07a6a85bce1f92c4e4c9ff501136a01c444b9699bf04466a577a6ba3d3699eb7bcdbf3209142f8891387f1243a3cf22b1a2f509c475c1ee9c6e7f3ed4bd833432740237d932ac8d60fa0639fed912264347fb255da9729f2e9f07be78a4be7b3723233edda69bf69aa08857e47f413c0500942e2e136d79e21d35abeab638dd7128602a0854f2f73167794418e33d5d07dc9c226bf43822a16481f04a77595220185aa2b4b172a607fb31ac624ac648c31207071274be3cc2a2eed64516efaa9aaab1a62b18dfe1819ef4d6e6cbf75aaed931bbebbc8ee9264337693a20ebef52bf54ea3d2a86ce11e8a36d", 0x2000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f0000000080)={{0x0, @rand_addr, 0x0, 0x0, 'wrr\x00'}}, 0x44) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) munmap(&(0x7f00002fb000/0x3000)=nil, 0x3000) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000007c0)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, &(0x7f0000000700)=[{}], 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f0c81087f180002ad6b0102030109022400010000000009040000023c7f98000905030200000000000905ba"], 0x0) 45.87582ms ago: executing program 4 (id=1557): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r0, 0xfff) (async) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe3, 0x41, 0x40, 0x40, 0xbda, 0x818a, 0xe2d8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bind(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x80) 0s ago: executing program 1 (id=1558): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f00000004c0)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r2}) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @mcast2}], 0xfffffffffffffe83) sendto$inet6(r0, &(0x7f0000000000)="eb", 0x1a000, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001fc0), &(0x7f00000020c0)=0x8) kernel console output (not intermixed with test programs): 1-1: config 0 descriptor?? [ 530.704831][ T55] Bluetooth: hci0: command tx timeout [ 531.025091][T12090] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 531.045812][T12090] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 531.062483][T12090] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 531.082097][T12090] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 531.092062][T12171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.107598][T12171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.321473][ T5281] usb 3-1: USB disconnect, device number 73 [ 531.349473][T12090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.405736][ T5230] gs_usb 1-1:0.0: Couldn't get device config: (err=-71) [ 531.417399][ T5230] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 531.431133][ T5230] usb 1-1: USB disconnect, device number 86 [ 531.432708][T12090] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.457158][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.464415][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.489141][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.496537][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.537072][ T1848] usb 5-1: USB disconnect, device number 106 [ 531.650960][T12195] fuse: Unknown parameter 'çÇ¢ô¯Ë¥EÌmùá—-GÉCæ!v™’M¬¥šê7Ìœ@»§Ó!2_tö™\ã®>îªs ×¿É¸å¢¹—§i!<•9í­JA_ [ 531.650960][T12195] ¦2œ­°q7²‘’Ú›)UâC©ôµh]–Eg9ùmw™ˆZ·r0xffffffffffffffff' [ 531.668181][T12090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.734246][ T5281] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 531.764736][T12090] veth0_vlan: entered promiscuous mode [ 531.778638][T12090] veth1_vlan: entered promiscuous mode [ 531.850146][T12090] veth0_macvtap: entered promiscuous mode [ 531.880731][T12090] veth1_macvtap: entered promiscuous mode [ 531.907984][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.930118][ T5281] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 531.954017][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.964134][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.979965][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.995070][ T5281] usb 3-1: config 0 descriptor?? [ 532.021650][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.056976][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.086137][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.105526][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.127083][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.151839][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.174355][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.199120][T12090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.251682][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.269974][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.281846][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.292902][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.335209][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.365741][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.407661][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.440069][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.474022][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.498415][ T5281] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 532.512272][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.549160][T12090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.552549][ T5282] usb 4-1: USB disconnect, device number 70 [ 532.657269][T12090] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.680994][T12090] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.700673][T12090] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.729715][T12090] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.774611][ T55] Bluetooth: hci0: command tx timeout [ 532.928677][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.960779][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.036361][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.054147][ T5282] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 533.064231][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.118953][ T55] Bluetooth: Wrong link type (-71) [ 533.125030][ T55] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 533.133528][ T55] Bluetooth: Wrong link type (-22) [ 533.142043][ T55] Bluetooth: hci3: link tx timeout [ 533.148056][ T55] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 533.164002][ T55] Bluetooth: Wrong link type (-71) [ 533.170358][ T55] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 533.177660][ T55] Bluetooth: Wrong link type (-22) [ 533.184341][ T55] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 533.191700][ T55] Bluetooth: hci3: link tx timeout [ 533.197862][ T55] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 533.243922][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 533.253796][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.273878][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.286359][ T5282] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 533.296217][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.308851][ T5282] usb 4-1: config 0 descriptor?? [ 533.318448][ T5282] hub 4-1:0.0: USB hub found [ 533.409811][T12243] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1299'. [ 533.606635][ T5282] hub 4-1:0.0: 1 port detected [ 533.613996][ T5299] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 533.747276][ T5281] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 533.756499][ T5281] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 533.767438][ T5281] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -32 [ 533.773851][ T5299] usb 5-1: device descriptor read/64, error -71 [ 534.022497][ T5299] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 534.175253][ T5299] usb 5-1: device descriptor read/64, error -71 [ 534.257281][ T1166] hub 4-1:0.0: activate --> -90 [ 534.300928][ T5299] usb usb5-port1: attempt power cycle [ 534.313830][ T5282] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 534.404992][ T5230] usb 3-1: USB disconnect, device number 74 [ 534.498120][ T5282] usb 1-1: config 0 has no interfaces? [ 534.525903][ T5282] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 534.557623][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.643886][ T5299] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 534.656052][ T5282] usb 1-1: Product: syz [ 534.690462][ T5299] usb 5-1: device descriptor read/8, error -71 [ 534.697238][ T5282] usb 1-1: Manufacturer: syz [ 534.720248][ T5282] usb 1-1: SerialNumber: syz [ 534.741896][ T5282] usb 1-1: config 0 descriptor?? [ 534.943821][ T5299] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 534.984247][ T5299] usb 5-1: device descriptor read/8, error -71 [ 535.000759][ T5300] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 535.069172][ T3009] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.097699][ T5299] usb usb5-port1: unable to enumerate USB device [ 535.107769][T12229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.141649][T12229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.184097][ T5300] usb 3-1: Using ep0 maxpacket: 16 [ 535.196207][ T5300] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.209288][ T5300] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 535.210705][T12229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.222504][ T5300] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 535.222542][ T5300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.250142][ T5300] usb 3-1: config 0 descriptor?? [ 535.287436][ T5300] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 535.322261][ T3009] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.336419][T12229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.389144][ T5300] usb 4-1: USB disconnect, device number 71 [ 535.412273][ T1166] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 535.421676][ T1166] usb 4-1-port1: config error [ 535.476549][ T3009] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.635156][ T3009] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.787747][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 535.806323][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 535.816858][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 535.829163][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 535.849653][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 535.857488][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 536.091198][ T3009] bridge_slave_1: left allmulticast mode [ 536.123228][ T3009] bridge_slave_1: left promiscuous mode [ 536.144031][ T3009] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.213605][ T3009] bridge_slave_0: left allmulticast mode [ 536.232795][ T3009] bridge_slave_0: left promiscuous mode [ 536.265090][T12287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1333'. [ 536.283556][ T3009] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.123458][ T3009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.141446][ T3009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.158019][ T3009] bond0 (unregistering): Released all slaves [ 537.254261][ T5233] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 537.264891][ T5233] Bluetooth: hci3: Injecting HCI hardware error event [ 537.274036][ T5233] Bluetooth: hci3: hardware error 0x00 [ 537.529314][ T5230] usb 1-1: USB disconnect, device number 87 [ 537.664763][ T1166] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 537.800378][ T5230] usb 3-1: USB disconnect, device number 75 [ 537.888391][ T1166] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 537.912877][ T55] Bluetooth: hci0: command tx timeout [ 537.919704][ T1166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.953853][ T1166] usb 4-1: config 0 descriptor?? [ 537.973248][ T3009] hsr_slave_0: left promiscuous mode [ 538.044235][ T3009] hsr_slave_1: left promiscuous mode [ 538.054269][ T5300] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 538.079944][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.113838][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.176708][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.189716][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.235766][ T5300] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 538.274105][ T5300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.310105][ T5300] usb 5-1: config 0 descriptor?? [ 538.379047][ T3009] veth1_macvtap: left promiscuous mode [ 538.389576][ T3009] veth0_macvtap: left promiscuous mode [ 538.402668][ T3009] veth1_vlan: left promiscuous mode [ 538.423128][ T3009] veth0_vlan: left promiscuous mode [ 538.530534][ T1166] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 538.743867][ T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 538.874253][ T9] usb 1-1: device descriptor read/64, error -71 [ 538.932355][ T5300] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 538.951974][ T1166] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 538.964071][ T1166] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 538.981062][ T1166] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 539.009323][ T1166] usb 4-1: USB disconnect, device number 72 [ 539.134163][ T9] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 539.284167][ T9] usb 1-1: device descriptor read/64, error -71 [ 539.313351][ T3009] team0 (unregistering): Port device team_slave_1 removed [ 539.335249][ T5233] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 539.378393][ T3009] team0 (unregistering): Port device team_slave_0 removed [ 539.403415][ T9] usb usb1-port1: attempt power cycle [ 539.618651][T12345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1344'. [ 539.753794][ T9] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 539.798368][ T9] usb 1-1: device descriptor read/8, error -71 [ 539.975962][ T5233] Bluetooth: hci0: command tx timeout [ 540.074540][ T9] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 540.094581][ T9] usb 1-1: device descriptor read/8, error -71 [ 540.210072][ T9] usb usb1-port1: unable to enumerate USB device [ 540.224199][ T5300] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 540.233384][ T5300] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 540.259709][ T5300] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 540.376617][T12280] chnl_net:caif_netlink_parms(): no params data found [ 540.601932][T12280] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.639836][T12280] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.701778][T12280] bridge_slave_0: entered allmulticast mode [ 540.755652][T12280] bridge_slave_0: entered promiscuous mode [ 540.768624][T12280] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.783796][T12280] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.807860][T12280] bridge_slave_1: entered allmulticast mode [ 540.815999][T12364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1346'. [ 540.825428][T12280] bridge_slave_1: entered promiscuous mode [ 541.041387][T12280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.055869][T12280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.143063][T12280] team0: Port device team_slave_0 added [ 541.170461][T12280] team0: Port device team_slave_1 added [ 541.582199][T12280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.597400][ T5300] usb 5-1: USB disconnect, device number 111 [ 541.674654][T12280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.807126][T12280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.901898][T12280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.925741][T12280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.953161][T12280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.016298][T12280] hsr_slave_0: entered promiscuous mode [ 542.030171][T12280] hsr_slave_1: entered promiscuous mode [ 542.041251][T12280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.053947][ T5233] Bluetooth: hci0: command tx timeout [ 542.076619][T12280] Cannot create hsr debugfs directory [ 542.113953][ T9] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 542.295608][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 542.325516][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.353781][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 542.383774][ T1166] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 542.404714][ T9] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 542.425788][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.460238][ T9] usb 1-1: config 0 descriptor?? [ 542.492262][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 542.563993][ T1166] usb 3-1: Using ep0 maxpacket: 32 [ 542.575104][ T1166] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 542.598796][ T1166] usb 3-1: config 1 interface 0 has no altsetting 0 [ 542.639443][ T1166] usb 3-1: New USB device found, idVendor=1477, idProduct=1023, bcdDevice= 0.40 [ 542.664468][ T1166] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.685991][ T1166] usb 3-1: Product: Ñ‹ [ 542.699621][ T1166] usb 3-1: Manufacturer: ベⱞԸ䪟嫂埧㖟ᕋ竢罡邾ê‰ä”±ä£¯ì™ã£æ”¸è¨„檶濣솕ì†ï™’⭦⮱痨蔻êœè¦Žæ´™èŸ¤î«¡ç˜¼á¦–γ㼵뒎ℎç›å†¯ë“¯ì­Šê±¶ê  ï–ﹰᯮᕲ쯜躢갉䆑î„௤棺æ¡á†„สړ糎弊잷ꀕë˜çŽä‹“ဤ棰ꉊá”ヅ늽â¤â’‰â“‰ëŽªê•åž·ã³·è«á³»å¾®â„§ç‚†ë¿›ã¢¾à®Žî’Ÿ [ 542.728516][ C0] vkms_vblank_simulate: vblank timer overrun [ 542.782901][ T1166] usb 3-1: SerialNumber: à   [ 542.791428][ T1166] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 542.801166][ T1166] usb 3-1: no configuration chosen from 1 choice [ 543.063208][T12280] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 543.074427][T12280] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 543.101040][T12280] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 543.122237][T12280] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 543.276298][T12280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.323214][T12280] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.351869][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.359112][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.405803][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.413012][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.502697][T12280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.604952][ T1166] usb 3-1: USB disconnect, device number 76 [ 543.616833][T12280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.655150][T12280] veth0_vlan: entered promiscuous mode [ 543.667369][T12280] veth1_vlan: entered promiscuous mode [ 543.694448][T12280] veth0_macvtap: entered promiscuous mode [ 543.706040][T12280] veth1_macvtap: entered promiscuous mode [ 543.722643][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.733601][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.744032][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.754623][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.765397][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.775959][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.783818][ T29] audit: type=1326 audit(1729369131.624:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12399 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feb97dff9 code=0x7ffc0000 [ 543.785854][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.819772][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.830228][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.841454][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.853044][T12280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.883868][ T29] audit: type=1326 audit(1729369131.624:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12399 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feb97dff9 code=0x7ffc0000 [ 543.912665][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.923448][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.933758][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.946839][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.956994][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.968829][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.979293][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.990035][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.000765][ T29] audit: type=1326 audit(1729369131.624:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12399 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2feb97dff9 code=0x7ffc0000 [ 544.024752][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.036294][ T29] audit: type=1326 audit(1729369131.624:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12399 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feb97dff9 code=0x7ffc0000 [ 544.062985][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.076706][T12280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.084821][ T29] audit: type=1326 audit(1729369131.624:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12399 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feb97dff9 code=0x7ffc0000 [ 544.117066][T12280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.136073][ T5233] Bluetooth: hci0: command tx timeout [ 544.143110][T12280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.156611][T12280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.165718][ T29] audit: type=1326 audit(1729369131.624:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12399 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2feb97dff9 code=0x7ffc0000 [ 544.191885][T12280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.219818][T12405] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1352'. [ 544.223559][ T29] audit: type=1326 audit(1729369131.624:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12399 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feb97dff9 code=0x7ffc0000 [ 544.252213][ T29] audit: type=1326 audit(1729369131.624:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12399 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feb97dff9 code=0x7ffc0000 [ 544.253966][ T1166] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 544.287072][ T29] audit: type=1326 audit(1729369131.624:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12399 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2feb97dff9 code=0x7ffc0000 [ 544.360679][ T29] audit: type=1326 audit(1729369131.624:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12399 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feb97dff9 code=0x7ffc0000 [ 544.486698][ T1166] usb 3-1: config 0 has an invalid interface number: 69 but max is 1 [ 544.496137][ T1166] usb 3-1: config 0 has no interface number 1 [ 544.507840][ T1166] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0157, bcdDevice=a5.17 [ 544.518977][ T1166] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.527863][ T1166] usb 3-1: Product: syz [ 544.532308][ T1166] usb 3-1: Manufacturer: syz [ 544.537936][ T1166] usb 3-1: SerialNumber: syz [ 544.548252][ T1166] usb 3-1: config 0 descriptor?? [ 544.557696][ T1166] hub 3-1:0.69: bad descriptor, ignoring hub [ 544.566310][ T1166] hub 3-1:0.69: probe with driver hub failed with error -5 [ 544.575321][ T1166] ftdi_sio 3-1:0.69: FTDI USB Serial Device converter detected [ 544.584575][ T1166] ftdi_sio ttyUSB0: unknown device type: 0xa517 [ 544.592843][ T1166] hub 3-1:0.0: bad descriptor, ignoring hub [ 544.599576][ T1166] hub 3-1:0.0: probe with driver hub failed with error -5 [ 544.608066][ T1166] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 544.619932][ T1166] ftdi_sio ttyUSB1: unknown device type: 0xa517 [ 544.626167][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.652585][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.743103][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.751657][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.867378][ T5300] usb 1-1: USB disconnect, device number 92 [ 544.914294][ T1166] usb 3-1: USB disconnect, device number 77 [ 544.921354][ T1166] ftdi_sio 3-1:0.69: device disconnected [ 544.956664][ T1166] ftdi_sio 3-1:0.0: device disconnected [ 545.805053][ T5300] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 545.813823][ T47] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 545.901868][T12441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1359'. [ 545.953975][ T47] usb 1-1: device descriptor read/64, error -71 [ 545.975908][ T5300] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 546.002077][ T5300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.019710][ T5300] usb 2-1: config 0 descriptor?? [ 546.225824][ T47] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 546.383866][ T47] usb 1-1: device descriptor read/64, error -71 [ 546.505086][ T47] usb usb1-port1: attempt power cycle [ 546.570947][ T5300] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 546.844395][ T1166] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 546.853949][ T47] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 546.894793][ T47] usb 1-1: device descriptor read/8, error -71 [ 547.001339][ T5300] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 547.012774][ T5300] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 547.015301][ T1166] usb 5-1: Using ep0 maxpacket: 32 [ 547.023769][ T5300] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 547.040449][ T5300] usb 2-1: USB disconnect, device number 68 [ 547.063568][ T1166] usb 5-1: config index 0 descriptor too short (expected 2210, got 1175) [ 547.077022][ T1166] usb 5-1: config 0 has an invalid interface number: 241 but max is 2 [ 547.085612][ T1166] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.097966][ T1166] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 547.120688][ T1166] usb 5-1: config 0 has no interface number 0 [ 547.127472][ T1166] usb 5-1: config 0 interface 241 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 547.138933][ T1166] usb 5-1: config 0 interface 241 altsetting 4 has an endpoint descriptor with address 0xAE, changing to 0x8E [ 547.143858][ T47] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 547.151401][ T1166] usb 5-1: config 0 interface 241 altsetting 4 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 547.194551][ T47] usb 1-1: device descriptor read/8, error -71 [ 547.211945][ T1166] usb 5-1: config 0 interface 241 altsetting 4 endpoint 0x8E has invalid wMaxPacketSize 0 [ 547.236554][ T1166] usb 5-1: config 0 interface 241 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 547.273815][ T1166] usb 5-1: config 0 interface 241 has no altsetting 0 [ 547.315850][ T47] usb usb1-port1: unable to enumerate USB device [ 547.381237][ T1166] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e0.70 [ 547.392367][ T1166] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.400602][ T1166] usb 5-1: Product: syz [ 547.406459][ T1166] usb 5-1: Manufacturer: syz [ 547.411105][ T1166] usb 5-1: SerialNumber: syz [ 547.431225][ T1166] usb 5-1: config 0 descriptor?? [ 547.623764][ T47] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 547.803940][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 547.827332][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.858856][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 547.902693][T12499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.919520][ T47] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 547.939435][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.966287][ T47] usb 4-1: config 0 descriptor?? [ 547.986839][T12499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.000888][ T47] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 548.354015][ T47] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 548.524008][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 548.541971][ T47] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 548.575363][ T47] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 548.596663][ T47] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 548.624559][ T47] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.662146][ T47] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 548.697891][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.965719][ T47] usb 2-1: GET_CAPABILITIES returned 0 [ 548.971335][ T47] usbtmc 2-1:16.0: can't read capabilities [ 549.479581][ T47] usb 2-1: USB disconnect, device number 69 [ 549.495654][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 549.507538][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 549.575279][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 549.657787][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 549.676757][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 549.688713][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 549.839325][ T1166] usb 5-1: USB disconnect, device number 112 [ 550.106582][T12535] chnl_net:caif_netlink_parms(): no params data found [ 550.312120][T12535] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.349182][T12535] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.365079][T12535] bridge_slave_0: entered allmulticast mode [ 550.372434][T12535] bridge_slave_0: entered promiscuous mode [ 550.385464][T12535] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.393491][T12535] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.402465][T12535] bridge_slave_1: entered allmulticast mode [ 550.410395][T12535] bridge_slave_1: entered promiscuous mode [ 550.412588][ T5283] usb 4-1: USB disconnect, device number 73 [ 550.444109][ T1166] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 550.535245][ T9] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 550.570920][T12535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.626762][T12535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.705574][ T1166] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 550.735405][ T1166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.753512][ T9] usb 5-1: config 0 has no interfaces? [ 550.783487][ T1166] usb 2-1: config 0 descriptor?? [ 550.788712][ T5282] usb 1-1: new low-speed USB device number 97 using dummy_hcd [ 550.799233][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 550.828867][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.839113][T12535] team0: Port device team_slave_0 added [ 550.854384][ T9] usb 5-1: Product: syz [ 550.865126][T12535] team0: Port device team_slave_1 added [ 550.871012][ T9] usb 5-1: Manufacturer: syz [ 550.879507][ T9] usb 5-1: SerialNumber: syz [ 550.907624][ T9] usb 5-1: config 0 descriptor?? [ 550.970651][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 550.982401][T12535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.989960][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 551.000638][T12535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.003959][ T47] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 551.041189][T12535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.065192][T12535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.073044][T12535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.105052][T12535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.282577][T12535] hsr_slave_0: entered promiscuous mode [ 551.313880][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 551.321482][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 551.354269][ T47] usb 4-1: New USB device found, idVendor=07ca, idProduct=0337, bcdDevice=97.1e [ 551.368917][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.394548][T12535] hsr_slave_1: entered promiscuous mode [ 551.400454][ T1166] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 551.402157][ T47] usb 4-1: Product: syz [ 551.411399][T12535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 551.419387][T12535] Cannot create hsr debugfs directory [ 551.425596][ T47] usb 4-1: Manufacturer: syz [ 551.451855][ T47] usb 4-1: SerialNumber: syz [ 551.465117][ T47] usb 4-1: config 0 descriptor?? [ 551.734371][ T55] Bluetooth: hci4: command tx timeout [ 551.760441][ T47] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 551.777534][ T47] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 551.828013][ T47] usb 4-1: USB disconnect, device number 74 [ 551.906828][T12535] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.959350][ T1166] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 551.986386][ T1166] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 552.012939][ T1166] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 552.032831][ T1166] usb 2-1: USB disconnect, device number 70 [ 552.112452][T12535] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.207911][T12535] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.385496][T12535] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.653997][ T5283] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 552.678327][T12535] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 552.710799][T12535] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 552.738342][T12535] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 552.773755][T12535] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 552.788576][ T5282] usb 1-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 552.798210][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.861069][ T5282] usb 1-1: config 0 descriptor?? [ 552.869192][ T5283] usb 4-1: device descriptor read/64, error -71 [ 552.926031][ T5282] usb 1-1: can't set config #0, error -71 [ 552.965003][ T5282] usb 1-1: USB disconnect, device number 97 [ 553.049965][T12535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.096735][T12535] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.131900][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.139085][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.180933][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.183824][ T5283] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 553.188162][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.382682][ T5283] usb 4-1: device descriptor read/64, error -71 [ 553.389934][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1383'. [ 553.449092][T12535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.506136][ T5283] usb usb4-port1: attempt power cycle [ 553.563310][T12535] veth0_vlan: entered promiscuous mode [ 553.583921][ T1166] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 553.631916][T12535] veth1_vlan: entered promiscuous mode [ 553.719675][T12535] veth0_macvtap: entered promiscuous mode [ 553.753497][T12535] veth1_macvtap: entered promiscuous mode [ 553.754469][ T1166] usb 1-1: Using ep0 maxpacket: 32 [ 553.760701][ T5300] usb 5-1: USB disconnect, device number 113 [ 553.788674][ T1166] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 553.804812][ T1166] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.812509][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.823309][ T55] Bluetooth: hci4: command tx timeout [ 553.836024][ T1166] usb 1-1: Product: syz [ 553.840266][ T1166] usb 1-1: Manufacturer: syz [ 553.845081][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.845108][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.845130][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.845149][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.845167][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.845187][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.845206][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.845225][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.845244][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.845263][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.845281][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.847041][T12535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.855428][ T5283] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 553.975917][ T1166] usb 1-1: SerialNumber: syz [ 553.983395][ T1166] usb 1-1: config 0 descriptor?? [ 553.991330][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.002937][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.015832][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.017800][ T1166] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 554.036031][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.046863][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.058505][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.065919][ T5283] usb 4-1: device descriptor read/8, error -71 [ 554.068419][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.085185][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.095244][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.105781][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.115670][T12535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.126212][T12535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.137622][T12535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.150145][T12535] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.159112][T12535] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.167939][T12535] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.176766][T12535] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.305564][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.322871][ T5283] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 554.341053][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.370809][ T5283] usb 4-1: device descriptor read/8, error -71 [ 554.374824][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.407560][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.505145][ T5283] usb usb4-port1: unable to enumerate USB device [ 554.604136][ T5299] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 554.663840][ T1848] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 554.768195][ T5299] usb 2-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=c8.d3 [ 554.783814][ T5299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.793021][ T5299] usb 2-1: Product: syz [ 554.805896][ T5299] usb 2-1: Manufacturer: syz [ 554.810553][ T5299] usb 2-1: SerialNumber: syz [ 554.817951][ T5299] usb 2-1: config 0 descriptor?? [ 554.829883][ T1848] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 554.839361][ T1848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.854654][ T1848] usb 5-1: config 0 descriptor?? [ 555.261989][ T1166] gspca_ov534_9: reg_w failed -71 [ 555.367571][ T1848] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 555.510323][T12593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1392'. [ 555.532565][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1392'. [ 555.554050][ T1166] gspca_ov534_9: Unknown sensor 0000 [ 555.554130][ T1166] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 555.599551][ T1166] usb 1-1: USB disconnect, device number 98 [ 555.789249][ T1848] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 555.789663][ T1848] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 555.789854][ T1848] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 555.794127][ T1848] usb 5-1: USB disconnect, device number 114 [ 555.894566][ T55] Bluetooth: hci4: command tx timeout [ 555.928876][ T5299] cdc_subset 2-1:0.0: probe with driver cdc_subset failed with error -71 [ 555.976433][ T5299] usb 2-1: USB disconnect, device number 71 [ 556.013869][ T9] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 556.144698][ T1848] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 556.170706][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.189902][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.243795][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 556.258771][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 556.267962][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.282935][ T9] usb 4-1: config 0 descriptor?? [ 556.299799][ T1848] usb 3-1: Using ep0 maxpacket: 16 [ 556.315647][ T1848] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 58, changing to 9 [ 556.334519][ T1848] usb 3-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 556.384453][ T5282] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 556.396950][ T1848] usb 3-1: config 1 interface 0 has no altsetting 0 [ 556.439913][ T1848] usb 3-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 556.450175][ T1848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.467887][ T1848] usb 3-1: Product: syz [ 556.473826][ T5299] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 556.492976][ T1848] usb 3-1: Manufacturer: ï¯ï¬éº°êŠ¸è¥î»á‚ä‘­ë´î·ªæŸ±è©¸éªˆêµªä°˜ã¶‰è§®çž»è‹”뛾㈋á½è¡­á¬—脿쓲âµï¿•æ¶½ï›„⣚䂗辠푧氊酢ê…ꈫå¯ï§½å¬†ç££ê‘œî‡®ä”€à ¼ê±¾î£‚娑鳀匩åªæ…¡í’…┦㯮è¹æ½®ë¯—ê¸ä›Þ½ë—«á”ŽËŽì•°å®«â½²îŠšçᔡ廟먼┣ᷳ [ 556.561815][ T5282] usb 1-1: config 0 has no interfaces? [ 556.588855][ T1848] usb 3-1: SerialNumber: syz [ 556.589569][ T5282] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 556.613138][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.630322][ T5282] usb 1-1: Product: syz [ 556.635290][ T5282] usb 1-1: Manufacturer: syz [ 556.640020][ T5282] usb 1-1: SerialNumber: syz [ 556.664684][ T5282] usb 1-1: config 0 descriptor?? [ 556.680060][ T5299] usb 2-1: Using ep0 maxpacket: 32 [ 556.691925][ T5299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.709251][ T5299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.720029][ T9] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 556.727754][ T5299] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 556.728346][ T9] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 556.736926][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.754958][ T5299] usb 2-1: config 0 descriptor?? [ 556.769423][ T9] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 556.771679][ T5299] hub 2-1:0.0: USB hub found [ 556.871268][ T1848] usbhid 3-1:1.0: can't add hid device: -71 [ 556.894172][ T1848] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 556.955435][ T1848] usb 3-1: USB disconnect, device number 78 [ 556.978785][ T5299] hub 2-1:0.0: 1 port detected [ 556.992221][ T9] usb 4-1: USB disconnect, device number 79 [ 557.025504][T12612] FAULT_INJECTION: forcing a failure. [ 557.025504][T12612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.061333][T12612] CPU: 1 UID: 0 PID: 12612 Comm: syz.4.1399 Not tainted 6.12.0-rc3-syzkaller-00399-g9197b73fd7bb #0 [ 557.072183][T12612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 557.082718][T12612] Call Trace: [ 557.086022][T12612] [ 557.088969][T12612] dump_stack_lvl+0x241/0x360 [ 557.093677][T12612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.098935][T12612] ? __pfx__printk+0x10/0x10 [ 557.103554][T12612] ? kvm_arch_vcpu_load+0x68c/0x910 [ 557.108780][T12612] ? __pfx_lock_release+0x10/0x10 [ 557.113937][T12612] should_fail_ex+0x3b0/0x4e0 [ 557.118664][T12612] _copy_from_user+0x2f/0xe0 [ 557.123283][T12612] kvm_arch_vcpu_ioctl+0xb3d/0x2b50 [ 557.128517][T12612] ? validate_chain+0x11e/0x5920 [ 557.133474][T12612] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 557.139131][T12612] ? __pfx_lock_release+0x10/0x10 [ 557.144186][T12612] ? preempt_count_add+0x93/0x190 [ 557.149238][T12612] ? __pfx_validate_chain+0x10/0x10 [ 557.154455][T12612] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 557.160648][T12612] ? kernel_text_address+0xa7/0xe0 [ 557.165782][T12612] ? __kernel_text_address+0xd/0x40 [ 557.171000][T12612] ? unwind_get_return_address+0x4d/0x90 [ 557.176685][T12612] ? arch_stack_walk+0xfd/0x150 [ 557.181601][T12612] ? stack_trace_save+0x118/0x1d0 [ 557.186844][T12612] ? __pfx_stack_trace_save+0x10/0x10 [ 557.192338][T12612] ? mark_lock+0x9a/0x360 [ 557.196718][T12612] ? __lock_acquire+0x1384/0x2050 [ 557.201834][T12612] ? __mutex_trylock_common+0x183/0x2e0 [ 557.207402][T12612] ? __pfx___might_resched+0x10/0x10 [ 557.212721][T12612] ? __pfx___mutex_trylock_common+0x10/0x10 [ 557.218654][T12612] ? rcu_is_watching+0x15/0xb0 [ 557.223442][T12612] ? trace_contention_end+0x3c/0x120 [ 557.228746][T12612] ? __mutex_lock+0x2ef/0xd70 [ 557.233438][T12612] ? kfree+0x1a0/0x440 [ 557.237528][T12612] ? tomoyo_path_number_perm+0x68d/0x880 [ 557.243207][T12612] ? kvm_vcpu_ioctl+0x1da/0xea0 [ 557.248082][T12612] ? __pfx___mutex_lock+0x10/0x10 [ 557.253128][T12612] ? tomoyo_path_number_perm+0x208/0x880 [ 557.258776][T12612] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 557.264780][T12612] kvm_vcpu_ioctl+0x73e/0xea0 [ 557.269530][T12612] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 557.274797][T12612] ? __fget_files+0x29/0x470 [ 557.279418][T12612] ? __fget_files+0x3f3/0x470 [ 557.284123][T12612] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 557.289346][T12612] __se_sys_ioctl+0xf9/0x170 [ 557.294006][T12612] do_syscall_64+0xf3/0x230 [ 557.298550][T12612] ? clear_bhb_loop+0x35/0x90 [ 557.303256][T12612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.309184][T12612] RIP: 0033:0x7f99df77dff9 [ 557.313623][T12612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.333358][T12612] RSP: 002b:00007f99e0608038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.341800][T12612] RAX: ffffffffffffffda RBX: 00007f99df935f80 RCX: 00007f99df77dff9 [ 557.349819][T12612] RDX: 0000000020000040 RSI: 000000004008ae8a RDI: 0000000000000005 [ 557.357806][T12612] RBP: 00007f99e0608090 R08: 0000000000000000 R09: 0000000000000000 [ 557.365789][T12612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.373769][T12612] R13: 0000000000000000 R14: 00007f99df935f80 R15: 00007f99dfa5fa28 [ 557.381763][T12612] [ 557.799505][ T47] hub 2-1:0.0: activate --> -90 [ 557.970805][T12620] fuse: Unknown parameter 'grou00000000000000000000' [ 557.977858][ T55] Bluetooth: hci4: command tx timeout [ 558.272129][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1404'. [ 558.353776][ T9] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 558.387463][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 558.387486][ T29] audit: type=1326 audit(1729369146.304:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.3.1403" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2feb97dff9 code=0x0 [ 558.494960][ T9] usb 3-1: device descriptor read/64, error -71 [ 558.632254][ T47] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 558.632741][ T1166] usb 2-1: USB disconnect, device number 72 [ 558.639543][ T47] usb 2-1-port1: config error [ 558.663898][ T5230] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 558.765250][ T9] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 558.844850][ T5230] usb 5-1: Using ep0 maxpacket: 32 [ 558.860959][ T5230] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.903786][ T9] usb 3-1: device descriptor read/64, error -71 [ 558.916261][ T5230] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.936271][ T5230] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 558.962150][ T5230] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 558.985160][ T5230] usb 5-1: Product: syz [ 558.989908][ T5230] usb 5-1: Manufacturer: syz [ 559.011539][ T5230] hub 5-1:4.0: USB hub found [ 559.034369][ T9] usb usb3-port1: attempt power cycle [ 559.143571][ T29] audit: type=1326 audit(1729369147.054:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12625 comm="syz.3.1403" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2feb97dff9 code=0x0 [ 559.262894][ T5230] hub 5-1:4.0: 2 ports detected [ 559.393818][ T9] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 559.424592][ T9] usb 3-1: device descriptor read/8, error -71 [ 559.693909][ T9] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 559.722845][ T1848] usb 1-1: USB disconnect, device number 99 [ 559.735298][ T9] usb 3-1: device descriptor read/8, error -71 [ 559.938059][ T9] usb usb3-port1: unable to enumerate USB device [ 560.177062][ T1848] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 560.313818][ T5282] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 560.374236][ T1848] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 560.400135][ T1848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.420202][ T1848] usb 1-1: config 0 descriptor?? [ 560.497600][ T5282] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 560.507259][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.524741][ T5282] usb 4-1: config 0 descriptor?? [ 560.617580][ T5230] hub 5-1:4.0: activate --> -90 [ 560.920906][ T1848] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 560.941256][T12653] FAULT_INJECTION: forcing a failure. [ 560.941256][T12653] name failslab, interval 1, probability 0, space 0, times 0 [ 560.955022][T12653] CPU: 0 UID: 0 PID: 12653 Comm: syz.1.1412 Not tainted 6.12.0-rc3-syzkaller-00399-g9197b73fd7bb #0 [ 560.965850][T12653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 560.975963][T12653] Call Trace: [ 560.979289][T12653] [ 560.982259][T12653] dump_stack_lvl+0x241/0x360 [ 560.986998][T12653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 560.992256][T12653] ? __pfx__printk+0x10/0x10 [ 560.996991][T12653] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 561.003038][T12653] ? __pfx___might_resched+0x10/0x10 [ 561.008399][T12653] should_fail_ex+0x3b0/0x4e0 [ 561.013140][T12653] should_failslab+0xac/0x100 [ 561.017873][T12653] ? __alloc_skb+0x1c3/0x440 [ 561.022506][T12653] kmem_cache_alloc_node_noprof+0x71/0x320 [ 561.028365][T12653] __alloc_skb+0x1c3/0x440 [ 561.032829][T12653] ? mark_lock+0x9a/0x360 [ 561.037191][T12653] ? __pfx___alloc_skb+0x10/0x10 [ 561.042162][T12653] __ip6_append_data+0x2bd1/0x40a0 [ 561.047306][T12653] ? ip6_mtu+0x81/0x3f0 [ 561.051578][T12653] ? __pfx_raw6_getfrag+0x10/0x10 [ 561.056732][T12653] ? __pfx___ip6_append_data+0x10/0x10 [ 561.062229][T12653] ? ip6_setup_cork+0x9fd/0xfb0 [ 561.067127][T12653] ip6_append_data+0x264/0x3a0 [ 561.071933][T12653] ? __pfx_raw6_getfrag+0x10/0x10 [ 561.076987][T12653] rawv6_sendmsg+0x18f1/0x23c0 [ 561.081891][T12653] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 561.087041][T12653] ? aa_sk_perm+0x96d/0xab0 [ 561.091579][T12653] ? __pfx_aa_sk_perm+0x10/0x10 [ 561.096496][T12653] ? inet_sendmsg+0x330/0x390 [ 561.101290][T12653] __sock_sendmsg+0x1a6/0x270 [ 561.106002][T12653] ____sys_sendmsg+0x52a/0x7e0 [ 561.110801][T12653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.116135][T12653] ? rcu_is_watching+0x15/0xb0 [ 561.120967][T12653] ? __might_fault+0xaa/0x120 [ 561.125684][T12653] __sys_sendmmsg+0x3ab/0x730 [ 561.130410][T12653] ? __pfx___sys_sendmmsg+0x10/0x10 [ 561.135678][T12653] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 561.141606][T12653] ? ksys_write+0x229/0x2b0 [ 561.146128][T12653] ? __pfx_lock_release+0x10/0x10 [ 561.151185][T12653] ? vfs_write+0x7bf/0xc90 [ 561.155646][T12653] ? kmem_cache_free+0x1a2/0x420 [ 561.160621][T12653] ? __mutex_unlock_slowpath+0x21d/0x750 [ 561.166291][T12653] ? __fget_files+0x3f3/0x470 [ 561.171009][T12653] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 561.177016][T12653] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 561.183372][T12653] ? do_syscall_64+0x100/0x230 [ 561.188162][T12653] __x64_sys_sendmmsg+0xa0/0xb0 [ 561.193067][T12653] do_syscall_64+0xf3/0x230 [ 561.197602][T12653] ? clear_bhb_loop+0x35/0x90 [ 561.202313][T12653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.208321][T12653] RIP: 0033:0x7f1899d7dff9 [ 561.212754][T12653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.232470][T12653] RSP: 002b:00007f189ab92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 561.240921][T12653] RAX: ffffffffffffffda RBX: 00007f1899f35f80 RCX: 00007f1899d7dff9 [ 561.248919][T12653] RDX: 00000000000002e9 RSI: 0000000020000480 RDI: 0000000000000003 [ 561.256907][T12653] RBP: 00007f189ab92090 R08: 0000000000000000 R09: 0000000000000000 [ 561.264935][T12653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.272925][T12653] R13: 0000000000000000 R14: 00007f1899f35f80 R15: 00007f189a05fa28 [ 561.280934][T12653] [ 561.370159][ T5282] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 561.433075][T12656] fuse: Unknown parameter 'grou00000000000000000000' [ 561.488964][ T1848] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 561.499103][ T1848] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 561.529947][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1414'. [ 561.544919][ T1848] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 561.583334][ T1848] usb 1-1: USB disconnect, device number 100 [ 561.757366][T12630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1405'. [ 561.768396][ T5230] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 561.768697][ T1848] usb 5-1: USB disconnect, device number 115 [ 561.786097][ T5282] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 561.795071][ T5282] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 561.806047][ T5282] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 561.833556][ T5282] usb 4-1: USB disconnect, device number 80 [ 561.933874][ T5299] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 562.084198][ T5299] usb 2-1: device descriptor read/64, error -71 [ 562.334615][ T5299] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 562.443789][ T5282] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 562.534293][ T5299] usb 2-1: device descriptor read/64, error -71 [ 562.650376][ T5282] usb 1-1: config 0 has no interfaces? [ 562.666592][ T5299] usb usb2-port1: attempt power cycle [ 562.714027][ T5282] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 562.777201][T12676] @ÿ: renamed from veth0_vlan (while UP) [ 562.812018][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.862674][ T5282] usb 1-1: Product: syz [ 562.892033][ T5282] usb 1-1: Manufacturer: syz [ 562.922229][ T5282] usb 1-1: SerialNumber: syz [ 562.946548][ T5282] usb 1-1: config 0 descriptor?? [ 563.013886][ T5299] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 563.049111][ T5299] usb 2-1: device descriptor read/8, error -71 [ 563.113961][ T47] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 563.170404][T12686] fuse: Unknown parameter 'grou00000000000000000000' [ 563.180560][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.187147][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.293767][ T47] usb 4-1: device descriptor read/64, error -71 [ 563.314051][ T5299] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 563.345245][ T5299] usb 2-1: device descriptor read/8, error -71 [ 563.464957][ T5299] usb usb2-port1: unable to enumerate USB device [ 563.533945][ T47] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 563.665840][ T47] usb 4-1: device descriptor read/64, error -71 [ 563.784434][ T47] usb usb4-port1: attempt power cycle [ 564.013950][ T5299] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 564.123813][ T47] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 564.154789][ T47] usb 4-1: device descriptor read/8, error -71 [ 564.173771][ T5299] usb 5-1: Using ep0 maxpacket: 32 [ 564.183218][ T5299] usb 5-1: descriptor type invalid, skip [ 564.189313][ T5299] usb 5-1: descriptor type invalid, skip [ 564.202517][ T5299] usb 5-1: descriptor type invalid, skip [ 564.222358][ T5299] usb 5-1: config 1 has an invalid descriptor of length 13, skipping remainder of the config [ 564.247609][ T5299] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 564.259935][ T5299] usb 5-1: New USB device strings: Mfr=93, Product=5, SerialNumber=3 [ 564.281656][ T5299] usb 5-1: Product: syz [ 564.288957][ T5299] usb 5-1: Manufacturer: syz [ 564.303365][ T5299] usb 5-1: SerialNumber: syz [ 564.326942][ T5299] usb 5-1: bad CDC descriptors [ 564.345983][ T5299] gspca_main: spca501-2.14.0 probing 0000:0000 [ 564.403859][ T47] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 564.434593][ T47] usb 4-1: device descriptor read/8, error -71 [ 564.555049][ T47] usb usb4-port1: unable to enumerate USB device [ 564.572344][ T5299] gspca_spca501: reg write: error -71 [ 564.604064][ T5299] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 564.611811][ T5299] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 564.635017][ T5299] usb 5-1: USB disconnect, device number 116 [ 564.981360][T12699] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 564.993211][ T5230] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 565.143253][ T5299] usb 1-1: USB disconnect, device number 101 [ 565.234570][ T5230] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 565.253734][ T5230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.291542][ T5230] usb 3-1: config 0 descriptor?? [ 565.309330][T12709] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1433'. [ 565.819497][ T5230] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 565.826326][T12719] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 566.032099][T12726] fuse: Unknown parameter 'group_i00000000000000000000' [ 566.230614][ T5230] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 566.250996][ T5230] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 566.278466][ T5230] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 566.354293][ T5230] usb 3-1: USB disconnect, device number 83 [ 566.623935][ T5282] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 566.693768][ T47] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 566.804367][ T5282] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.833734][ T5282] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 566.853495][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 566.857668][ T5282] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 566.880205][ T47] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 566.903776][ T1166] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 566.921013][ T47] usb 2-1: config 1 interface 0 has no altsetting 0 [ 566.925745][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.951554][ T47] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 566.954119][ T5282] usb 1-1: Product: syz [ 566.961517][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.977599][ T47] usb 2-1: Product: syz [ 566.981994][ T47] usb 2-1: Manufacturer: syz [ 566.987421][ T47] usb 2-1: SerialNumber: syz [ 566.994037][ T5282] usb 1-1: Manufacturer: syz [ 566.999659][ T5282] usb 1-1: SerialNumber: syz [ 567.006874][T12735] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 567.017648][ T47] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 567.096598][ T1166] usb 4-1: config 0 has no interfaces? [ 567.240778][ T1166] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 567.252624][ T5230] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 567.260490][ T1166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.271294][ T1166] usb 4-1: Product: syz [ 567.275633][ T1166] usb 4-1: Manufacturer: syz [ 567.282324][ T1166] usb 4-1: SerialNumber: syz [ 567.295404][ T1166] usb 4-1: config 0 descriptor?? [ 567.316770][T12735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.344183][T12735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.363603][ T47] usb 2-1: USB disconnect, device number 77 [ 567.414171][ T5230] usb 3-1: Using ep0 maxpacket: 16 [ 567.425427][ T5230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.442108][ T5230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.454313][ T5230] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 567.468152][ T5230] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 567.482799][ T5230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.500334][ T5230] usb 3-1: config 0 descriptor?? [ 567.813885][ T47] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 567.907564][ T5282] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 567.956718][ T5282] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 567.976316][ T5282] usb 1-1: USB disconnect, device number 102 [ 567.995961][ T47] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 568.020451][ T9663] udevd[9663]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.069765][ T47] usb 2-1: config 1 interface 0 has no altsetting 0 [ 568.102299][ T47] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 568.138455][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.181615][ T47] usb 2-1: Product: syz [ 568.191587][ T47] usb 2-1: Manufacturer: syz [ 568.201518][ T47] usb 2-1: SerialNumber: syz [ 568.227545][T12735] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 568.267835][ T47] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 569.132790][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.272992][T12749] netlink: 'syz.4.1445': attribute type 17 has an invalid length. [ 569.440241][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.563571][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.601307][ T5282] usb 2-1: USB disconnect, device number 78 [ 569.807353][T12755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 569.861935][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.889107][T12755] loop0: detected capacity change from 0 to 7 [ 569.918311][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 569.922599][T12755] Dev loop0: unable to read RDB block 7 [ 569.931792][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 569.936207][T12755] loop0: AHDI p4 [ 569.944286][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 569.952759][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 569.985958][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 570.003895][T12755] loop0: partition table partially beyond EOD, truncated [ 570.011381][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 570.150836][ T5230] usbhid 3-1:0.0: can't add hid device: -71 [ 570.161756][ T5230] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 570.176189][ T5230] usb 3-1: USB disconnect, device number 84 [ 570.359847][ T12] bridge_slave_1: left allmulticast mode [ 570.369727][ T1848] usb 4-1: USB disconnect, device number 85 [ 570.374381][ T12] bridge_slave_1: left promiscuous mode [ 570.381531][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.603521][ T12] bridge_slave_0: left allmulticast mode [ 570.609468][ T12] bridge_slave_0: left promiscuous mode [ 570.617635][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.646119][ T12] bridge_slave_1: left allmulticast mode [ 570.652025][ T12] bridge_slave_1: left promiscuous mode [ 570.663842][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.707526][ T12] bridge_slave_0: left allmulticast mode [ 570.722203][ T12] bridge_slave_0: left promiscuous mode [ 570.738545][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.824267][ T1848] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 570.995428][ T1848] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 571.011231][ T1848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.038662][ T1848] usb 5-1: config 0 descriptor?? [ 571.050886][ T5283] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 571.213883][ T5283] usb 2-1: Using ep0 maxpacket: 16 [ 571.257574][ T5283] usb 2-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 571.269160][ T5283] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 571.280504][ T5283] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 571.323800][ T5283] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 571.362354][ T5283] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 571.373825][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.381911][ T5283] usb 2-1: Product: syz [ 571.413759][ T5283] usb 2-1: Manufacturer: syz [ 571.418455][ T5283] usb 2-1: SerialNumber: syz [ 571.548091][ T1848] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 571.658471][T12783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.682608][T12783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.693403][T12783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.704043][T12783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.730312][T12783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.758789][T12783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.802881][ T5283] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 571.828841][ T5283] usb 2-1: USB disconnect, device number 79 [ 571.983141][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.997788][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.009400][ T12] bond0 (unregistering): Released all slaves [ 572.135770][ T5233] Bluetooth: hci3: command tx timeout [ 572.204852][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.217620][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.229991][ T12] bond0 (unregistering): Released all slaves [ 572.278215][T12785] hsr0: entered promiscuous mode [ 572.408171][ T1848] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 572.432118][ T1848] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 572.449733][ T12] tipc: Disabling bearer [ 572.466890][ T12] tipc: Left network mode [ 572.473328][ T1848] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 572.557664][ T1848] usb 5-1: USB disconnect, device number 117 [ 572.881848][ T5230] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 573.020957][T12760] chnl_net:caif_netlink_parms(): no params data found [ 573.095224][ T5230] usb 4-1: Using ep0 maxpacket: 8 [ 573.136281][ T5230] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 573.170976][ T29] audit: type=1326 audit(1729369161.084:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12815 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99df77dff9 code=0x7ffc0000 [ 573.174272][ T5230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.227573][ T5230] usb 4-1: Product: syz [ 573.231934][ T5230] usb 4-1: Manufacturer: syz [ 573.255612][ T5283] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 573.287589][ T29] audit: type=1326 audit(1729369161.124:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12815 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f99df77dff9 code=0x7ffc0000 [ 573.309879][ C0] vkms_vblank_simulate: vblank timer overrun [ 573.353980][ T5230] usb 4-1: SerialNumber: syz [ 573.359885][ T29] audit: type=1326 audit(1729369161.124:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12815 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99df77dff9 code=0x7ffc0000 [ 573.382983][ T29] audit: type=1326 audit(1729369161.124:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12815 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99df77dff9 code=0x7ffc0000 [ 573.408484][ T29] audit: type=1326 audit(1729369161.124:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12815 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99df77dff9 code=0x7ffc0000 [ 573.417417][ T5230] usb 4-1: config 0 descriptor?? [ 573.463470][ T29] audit: type=1326 audit(1729369161.124:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12815 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99df77dff9 code=0x7ffc0000 [ 573.463808][ T9] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 573.495670][ T5283] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 573.513846][ T5283] usb 3-1: can't read configurations, error -61 [ 573.540048][ T5230] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 573.575817][ T29] audit: type=1326 audit(1729369161.124:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12815 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99df77dff9 code=0x7ffc0000 [ 573.673851][ T29] audit: type=1326 audit(1729369161.144:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12815 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99df77ff17 code=0x7ffc0000 [ 573.683967][ T5283] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 573.753855][ T29] audit: type=1326 audit(1729369161.144:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12815 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f99df77fe8c code=0x7ffc0000 [ 573.828979][ T9] usb 2-1: config 0 has no interfaces? [ 573.863907][ T29] audit: type=1326 audit(1729369161.144:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12815 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f99df77fdc4 code=0x7ffc0000 [ 573.907032][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 573.913713][T12794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1461'. [ 573.923395][ T5283] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 573.933019][ T5283] usb 3-1: can't read configurations, error -61 [ 573.939534][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.948156][ T5283] usb usb3-port1: attempt power cycle [ 573.953837][ T9] usb 2-1: Product: syz [ 573.958125][ T9] usb 2-1: Manufacturer: syz [ 573.962808][ T9] usb 2-1: SerialNumber: syz [ 573.969079][T12794] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1461'. [ 573.996634][ T9] usb 2-1: config 0 descriptor?? [ 574.044472][ T5230] gspca_vc032x: reg_r err -71 [ 574.055305][ T5230] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 574.086901][ T5230] usb 4-1: USB disconnect, device number 86 [ 574.155323][T12760] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.179148][T12760] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.212075][T12760] bridge_slave_0: entered allmulticast mode [ 574.218347][ T5233] Bluetooth: hci3: command tx timeout [ 574.254188][T12760] bridge_slave_0: entered promiscuous mode [ 574.304001][ T5283] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 574.325889][ T5283] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 574.335200][ T5283] usb 3-1: can't read configurations, error -61 [ 574.417420][T12760] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.476699][T12760] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.484149][ T5283] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 574.499721][T12760] bridge_slave_1: entered allmulticast mode [ 574.509876][ T5283] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 574.515122][T12760] bridge_slave_1: entered promiscuous mode [ 574.518639][ T5283] usb 3-1: can't read configurations, error -61 [ 574.564425][ T5283] usb usb3-port1: unable to enumerate USB device [ 574.865487][T12835] FAULT_INJECTION: forcing a failure. [ 574.865487][T12835] name failslab, interval 1, probability 0, space 0, times 0 [ 574.921585][T12835] CPU: 1 UID: 0 PID: 12835 Comm: syz.4.1470 Not tainted 6.12.0-rc3-syzkaller-00399-g9197b73fd7bb #0 [ 574.932478][T12835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 574.942579][T12835] Call Trace: [ 574.945878][T12835] [ 574.948825][T12835] dump_stack_lvl+0x241/0x360 [ 574.953567][T12835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.958823][T12835] ? __pfx__printk+0x10/0x10 [ 574.963442][T12835] ? fs_reclaim_acquire+0x93/0x130 [ 574.968679][T12835] ? __pfx___might_resched+0x10/0x10 [ 574.973995][T12835] should_fail_ex+0x3b0/0x4e0 [ 574.978706][T12835] ? tomoyo_encode+0x26f/0x540 [ 574.983486][T12835] should_failslab+0xac/0x100 [ 574.988272][T12835] ? tomoyo_encode+0x26f/0x540 [ 574.993083][T12835] __kmalloc_noprof+0xd8/0x400 [ 574.997909][T12835] tomoyo_encode+0x26f/0x540 [ 575.002547][T12835] tomoyo_realpath_from_path+0x59e/0x5e0 [ 575.008261][T12835] tomoyo_path_number_perm+0x23a/0x880 [ 575.013951][T12835] ? tomoyo_path_number_perm+0x208/0x880 [ 575.019670][T12835] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 575.025828][T12835] ? __fget_files+0x29/0x470 [ 575.030473][T12835] ? __fget_files+0x3f3/0x470 [ 575.035478][T12835] security_file_ioctl+0xc6/0x2a0 [ 575.040633][T12835] __se_sys_ioctl+0x47/0x170 [ 575.045271][T12835] do_syscall_64+0xf3/0x230 [ 575.049914][T12835] ? clear_bhb_loop+0x35/0x90 [ 575.054765][T12835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.060734][T12835] RIP: 0033:0x7f99df77dff9 [ 575.065176][T12835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.085192][T12835] RSP: 002b:00007f99e0608038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.094027][T12835] RAX: ffffffffffffffda RBX: 00007f99df935f80 RCX: 00007f99df77dff9 [ 575.102082][T12835] RDX: 0000000020000040 RSI: 00000000c4c85512 RDI: 0000000000000003 [ 575.110174][T12835] RBP: 00007f99e0608090 R08: 0000000000000000 R09: 0000000000000000 [ 575.118279][T12835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.126380][T12835] R13: 0000000000000000 R14: 00007f99df935f80 R15: 00007f99dfa5fa28 [ 575.134484][T12835] [ 575.154324][T12835] ERROR: Out of memory at tomoyo_realpath_from_path. [ 575.341305][T12760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.354043][T12760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.626944][T12760] team0: Port device team_slave_0 added [ 575.636202][T12760] team0: Port device team_slave_1 added [ 575.689235][ T12] hsr_slave_0: left promiscuous mode [ 575.705748][ T12] hsr_slave_1: left promiscuous mode [ 575.715280][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.722830][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.723830][ T5230] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 575.749200][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.756974][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.792499][ T12] hsr_slave_0: left promiscuous mode [ 575.811338][ T12] hsr_slave_1: left promiscuous mode [ 575.831361][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.854298][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.885292][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.894367][ T5230] usb 4-1: Using ep0 maxpacket: 32 [ 575.912680][ T5230] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 575.933168][ T5230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.943929][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.985848][ T5230] usb 4-1: Product: syz [ 576.004668][ T5230] usb 4-1: Manufacturer: syz [ 576.026816][ T5230] usb 4-1: SerialNumber: syz [ 576.051615][ T5230] usb 4-1: config 0 descriptor?? [ 576.082802][ T5230] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 576.106641][ T12] veth1_macvtap: left promiscuous mode [ 576.123843][ T12] veth0_macvtap: left promiscuous mode [ 576.129534][ T12] veth1_vlan: left promiscuous mode [ 576.149651][ T12] @ÿ: left promiscuous mode [ 576.177841][ T12] veth1_macvtap: left promiscuous mode [ 576.183455][ T12] veth0_macvtap: left promiscuous mode [ 576.217839][ T12] veth1_vlan: left promiscuous mode [ 576.223247][ T12] veth0_vlan: left promiscuous mode [ 576.294018][ T5233] Bluetooth: hci3: command tx timeout [ 577.740502][ T47] usb 2-1: USB disconnect, device number 80 [ 577.948358][ T5230] gspca_ov534_9: reg_w failed -71 [ 578.233739][ T5230] gspca_ov534_9: Unknown sensor 0000 [ 578.233822][ T5230] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 578.261475][ T5230] usb 4-1: USB disconnect, device number 87 [ 578.382527][ T5233] Bluetooth: hci3: command tx timeout [ 578.606693][ T12] team0 (unregistering): Port device team_slave_1 removed [ 578.734900][ T12] team0 (unregistering): Port device team_slave_0 removed [ 578.858883][ T47] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 579.046349][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 579.056938][ T47] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 579.066657][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.075996][ T47] usb 4-1: Product: syz [ 579.090596][ T47] usb 4-1: Manufacturer: syz [ 579.108655][ T47] usb 4-1: SerialNumber: syz [ 579.132693][ T47] usb 4-1: config 0 descriptor?? [ 579.167282][ T47] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 579.695004][ T47] gspca_vc032x: reg_r err -110 [ 579.704070][ T47] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 580.485803][ T12] team0 (unregistering): Port device team_slave_1 removed [ 580.554554][ T12] team0 (unregistering): Port device team_slave_0 removed [ 581.545847][T12881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1478'. [ 581.604196][T12881] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1478'. [ 581.660288][T12760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.671724][T12760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.778137][T12760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.819312][ T5299] usb 4-1: USB disconnect, device number 88 [ 581.827556][T12760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.843804][T12760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.884946][T12760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.307342][T12760] hsr_slave_0: entered promiscuous mode [ 582.339775][T12760] hsr_slave_1: entered promiscuous mode [ 582.375695][T12760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.412006][T12909] vimc link validate: Sensor A:src:16x16 (0x33424752, 11, 1, 0, 0) Raw Capture 0:snk:16x16 (0x33524742, 8, 0, 0, 0) [ 582.424894][ T5299] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 582.474467][T12760] Cannot create hsr debugfs directory [ 582.586832][ T5299] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 582.599852][ T5299] usb 3-1: can't read configurations, error -61 [ 582.781017][ T5299] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 582.803886][ T47] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 582.983813][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 583.002671][ T5299] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 583.024380][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.045495][ T5299] usb 3-1: can't read configurations, error -61 [ 583.053933][ T12] IPVS: stop unused estimator thread 0... [ 583.079654][ T5299] usb usb3-port1: attempt power cycle [ 583.085188][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.121261][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 583.169193][ T47] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 583.207853][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.230891][ T47] usb 5-1: config 0 descriptor?? [ 583.453874][ T5299] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 583.454533][ T1166] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 583.503882][ T5299] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 583.531599][ T5299] usb 3-1: can't read configurations, error -61 [ 583.711020][ T1166] usb 4-1: config 0 has no interfaces? [ 583.773816][ T5299] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 583.827565][ T5299] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 583.879850][ T5299] usb 3-1: can't read configurations, error -61 [ 583.914532][ T1166] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 583.925207][ T5299] usb usb3-port1: unable to enumerate USB device [ 584.000642][ T1166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.030365][ T1166] usb 4-1: Product: syz [ 584.044293][ T1166] usb 4-1: Manufacturer: syz [ 584.088489][ T1166] usb 4-1: SerialNumber: syz [ 584.113885][ T1166] usb 4-1: config 0 descriptor?? [ 584.224745][T12760] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 584.320224][T12760] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 584.406921][T12760] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 584.489856][T12760] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 584.952113][T12760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.023416][T12760] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.085174][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.092336][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.127350][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.134554][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.303869][ T1848] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 585.402972][T12941] loop4: detected capacity change from 0 to 2 [ 585.422214][ T47] usbhid 5-1:0.0: can't add hid device: -71 [ 585.446404][T12760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.469925][ T47] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 585.523774][ T1848] usb 2-1: Using ep0 maxpacket: 32 [ 585.559925][ T47] usb 5-1: USB disconnect, device number 118 [ 585.598746][ T1848] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 585.625103][ T1848] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 585.627747][T12760] veth0_vlan: entered promiscuous mode [ 585.642573][ T1848] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 585.712889][ T1848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 585.738445][T12760] veth1_vlan: entered promiscuous mode [ 585.747208][ T1848] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 585.842460][ T1848] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 585.892378][ T1848] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 585.899066][T12760] veth0_macvtap: entered promiscuous mode [ 585.924570][ T1848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.954292][T12760] veth1_macvtap: entered promiscuous mode [ 585.964448][ T1848] usb 2-1: config 0 descriptor?? [ 586.035219][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.059141][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.103797][ T47] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 586.121924][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.176943][T12939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.189276][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.230944][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.253316][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.263754][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 586.277323][ T47] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 586.292056][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.296864][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.331003][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.341266][ T47] usb 3-1: Product: syz [ 586.345811][ T47] usb 3-1: Manufacturer: syz [ 586.361583][ T47] usb 3-1: SerialNumber: syz [ 586.372158][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.384837][ T47] usb 3-1: config 0 descriptor?? [ 586.414697][ T47] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 586.433518][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.455613][T12939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.466192][T12760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.509816][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.518015][ T1848] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 81 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 586.551875][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.655789][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.725896][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.735865][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.746376][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.756333][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.766886][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.777011][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.787639][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.798934][T12760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.810274][T12760] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.819204][T12760] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.828047][T12760] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.836883][T12760] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.963835][ T1848] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 586.971949][ T47] gspca_vc032x: reg_r err -110 [ 586.991959][ T47] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 587.094163][T12950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1491'. [ 587.119609][T12950] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1491'. [ 587.143812][ T1848] usb 5-1: Using ep0 maxpacket: 32 [ 587.200730][ T1848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.258661][ T1848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.279046][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.310769][ T47] usb 3-1: USB disconnect, device number 93 [ 587.320959][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.330414][ T1848] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 587.370288][ T1848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.404713][ T1848] usb 5-1: config 0 descriptor?? [ 587.427416][ T1848] hub 5-1:0.0: USB hub found [ 587.508915][ T2451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.518279][ T2451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.646440][ T1848] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 587.738361][ T47] usb 2-1: USB disconnect, device number 81 [ 587.749976][ T47] usblp0: removed [ 587.780551][ T9] usb 4-1: USB disconnect, device number 89 [ 587.837529][T12981] fuse: Unknown parameter 'group_i00000000000000000000' [ 588.556164][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 588.734563][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 588.743267][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.774679][ T5230] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 588.802871][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.855032][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 588.893919][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.936420][ T9] usb 1-1: config 0 descriptor?? [ 588.958916][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.981120][ T5230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.994849][ T9] hub 1-1:0.0: USB hub found [ 589.024093][ T5230] usb 3-1: config 0 has no interfaces? [ 589.048362][ T5230] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 589.096920][ T5230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.169817][ T9] hub 1-1:0.0: 1 port detected [ 589.190030][ T5230] usb 3-1: Product: syz [ 589.201521][ T5230] usb 3-1: Manufacturer: syz [ 589.221342][ T5230] usb 3-1: SerialNumber: syz [ 589.263093][ T5230] usb 3-1: config 0 descriptor?? [ 589.481487][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.743326][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.784198][ T9] hub 1-1:0.0: activate --> -90 [ 589.852493][ T1848] usbhid 5-1:0.0: can't add hid device: -71 [ 589.870236][ T1848] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 589.924824][ T1848] usb 5-1: USB disconnect, device number 119 [ 590.030998][ T1166] usb 3-1: USB disconnect, device number 94 [ 590.068298][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.244505][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 590.263392][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 590.271856][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 590.282281][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 590.293501][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 590.303253][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 590.394135][ T5283] usb 1-1: USB disconnect, device number 103 [ 590.493843][ T9] usb 1-1-port1: config error [ 590.788122][ T35] bridge_slave_1: left allmulticast mode [ 590.824110][ T35] bridge_slave_1: left promiscuous mode [ 590.829921][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.979951][ T35] bridge_slave_0: left allmulticast mode [ 590.996377][ T35] bridge_slave_0: left promiscuous mode [ 591.002198][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.176905][T13053] fuse: Unknown parameter 'group_i00000000000000000000' [ 591.353810][ T5279] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 591.444077][ T9] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 591.524535][ T5279] usb 5-1: config 0 has no interfaces? [ 591.604606][ T5279] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 591.627325][ T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 591.637391][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.644309][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.677824][ T5279] usb 5-1: Product: syz [ 591.688959][ T5279] usb 5-1: Manufacturer: syz [ 591.695844][ T9] usb 1-1: config 0 descriptor?? [ 591.701966][ T5279] usb 5-1: SerialNumber: syz [ 591.719438][ T5279] usb 5-1: config 0 descriptor?? [ 591.883832][ T5283] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 592.091879][ T5283] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.147078][ T5283] usb 4-1: config 0 has no interfaces? [ 592.165421][ T5283] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 592.179310][ T9] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 592.192160][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.226872][ T5283] usb 4-1: Product: syz [ 592.231125][ T5283] usb 4-1: Manufacturer: syz [ 592.325829][ T5283] usb 4-1: SerialNumber: syz [ 592.364849][ T5283] usb 4-1: config 0 descriptor?? [ 592.464550][ T55] Bluetooth: hci0: command tx timeout [ 592.481189][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.511389][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.581806][ T9] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 592.602547][ T9] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 592.609771][ T35] bond0 (unregistering): Released all slaves [ 592.661770][T13061] netlink: 'syz.2.1509': attribute type 1 has an invalid length. [ 592.665136][ T9] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 592.749866][ T9] usb 1-1: USB disconnect, device number 104 [ 592.927334][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'. [ 593.163307][ T35] hsr_slave_0: left promiscuous mode [ 593.182370][ T35] hsr_slave_1: left promiscuous mode [ 593.191791][ T47] usb 4-1: USB disconnect, device number 90 [ 593.240989][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.277393][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.309278][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.313756][ T1166] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 593.342115][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.354109][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 593.354132][ T29] audit: type=1326 audit(1729369181.274:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13091 comm="syz.0.1512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f104dd7dff9 code=0x0 [ 593.421318][ T35] veth1_macvtap: left promiscuous mode [ 593.457847][ T35] veth0_macvtap: left promiscuous mode [ 593.481875][ T35] veth1_vlan: left promiscuous mode [ 593.504949][ T35] veth0_vlan: left promiscuous mode [ 593.613824][ T1166] usb 3-1: Using ep0 maxpacket: 16 [ 593.626835][ T1166] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.646831][ T1166] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 593.674473][ T1166] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 593.695805][ T1166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.732296][ T1166] usb 3-1: config 0 descriptor?? [ 593.750815][ T1166] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 594.292005][ T1166] usb 5-1: USB disconnect, device number 120 [ 594.544017][ T55] Bluetooth: hci0: command tx timeout [ 594.688428][ T35] team0 (unregistering): Port device team_slave_1 removed [ 594.743151][ T35] team0 (unregistering): Port device team_slave_0 removed [ 594.863867][ T1166] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 595.063925][ T1166] usb 5-1: Using ep0 maxpacket: 8 [ 595.083325][ T1166] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 595.094699][ T1166] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 595.111500][ T1166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.122940][ T1166] usb 5-1: config 0 descriptor?? [ 595.371371][T13027] chnl_net:caif_netlink_parms(): no params data found [ 595.382443][T13106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1514'. [ 595.420998][ T1166] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 595.461914][ T1166] usb 5-1: USB disconnect, device number 121 [ 595.479055][ T1166] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 595.701555][T13027] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.709064][T13027] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.717576][T13027] bridge_slave_0: entered allmulticast mode [ 595.725348][T13027] bridge_slave_0: entered promiscuous mode [ 595.735070][T13027] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.742368][T13027] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.750462][T13027] bridge_slave_1: entered allmulticast mode [ 595.758406][T13027] bridge_slave_1: entered promiscuous mode [ 595.847446][T13027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.879031][T13027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.932414][ T1166] usb 3-1: USB disconnect, device number 95 [ 596.026180][T13027] team0: Port device team_slave_0 added [ 596.068607][T13027] team0: Port device team_slave_1 added [ 596.097175][ T1848] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 596.123366][T13129] fuse: Unknown parameter 'group_id00000000000000000000' [ 596.283999][ T1848] usb 1-1: Using ep0 maxpacket: 32 [ 596.310537][ T1848] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 596.335120][T13027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.342555][ T1848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.353507][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.380429][ T1848] usb 1-1: Product: syz [ 596.386087][ T1848] usb 1-1: Manufacturer: syz [ 596.398300][ T1848] usb 1-1: SerialNumber: syz [ 596.411374][ T1848] usb 1-1: config 0 descriptor?? [ 596.419256][T13027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.441648][ T1848] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 596.451973][T13027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.460266][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.549808][T13027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.564026][ T9] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 596.624581][ T55] Bluetooth: hci0: command tx timeout [ 596.680707][T13027] hsr_slave_0: entered promiscuous mode [ 596.687886][T13027] hsr_slave_1: entered promiscuous mode [ 596.700339][T13027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 596.708117][T13027] Cannot create hsr debugfs directory [ 596.723861][ T9] usb 5-1: device descriptor read/64, error -71 [ 596.783863][ T47] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 596.955577][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 596.965803][ T47] usb 3-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 596.974092][ T9] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 596.985759][ T47] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 597.001656][ T47] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 597.022219][ T47] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 597.064296][ T47] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 597.084656][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.092826][ T47] usb 3-1: Product: syz [ 597.116627][ T47] usb 3-1: Manufacturer: syz [ 597.121376][ T47] usb 3-1: SerialNumber: syz [ 597.175280][ T9] usb 5-1: device descriptor read/64, error -71 [ 597.294392][ T9] usb usb5-port1: attempt power cycle [ 597.380278][T13142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.439845][T13142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.484327][T13027] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 597.486851][ T47] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 597.513539][T13027] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 597.535180][T13027] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 597.550095][ T47] usb 3-1: USB disconnect, device number 96 [ 597.593287][T13027] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 597.612881][ T9723] udevd[9723]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.663013][ T1848] gspca_ov534_9: reg_w failed -71 [ 597.704206][ T9] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 597.735555][ T9] usb 5-1: device descriptor read/8, error -71 [ 597.745804][T13027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.772046][T13027] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.783969][ T1166] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 597.793080][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.800316][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.818295][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.825499][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.938920][T13027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.954283][ T1848] gspca_ov534_9: Unknown sensor 0000 [ 597.954365][ T1848] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 597.956655][ T1166] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.979817][ T1848] usb 1-1: USB disconnect, device number 105 [ 597.994204][ T9] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 598.014825][ T1166] usb 4-1: config 0 has no interfaces? [ 598.025942][ T9] usb 5-1: device descriptor read/8, error -71 [ 598.045667][ T1166] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 598.070511][ T1166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.101314][ T1166] usb 4-1: Product: syz [ 598.105843][T13027] veth0_vlan: entered promiscuous mode [ 598.112755][ T1166] usb 4-1: Manufacturer: syz [ 598.139482][T13027] veth1_vlan: entered promiscuous mode [ 598.144310][ T9] usb usb5-port1: unable to enumerate USB device [ 598.155389][ T1166] usb 4-1: SerialNumber: syz [ 598.174161][ T1166] usb 4-1: config 0 descriptor?? [ 598.202838][ T29] audit: type=1326 audit(1729369186.114:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f237dff9 code=0x7ffc0000 [ 598.232837][T13027] veth0_macvtap: entered promiscuous mode [ 598.272328][T13027] veth1_macvtap: entered promiscuous mode [ 598.305944][ T29] audit: type=1326 audit(1729369186.114:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f237dff9 code=0x7ffc0000 [ 598.346570][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.396187][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.405051][ T29] audit: type=1326 audit(1729369186.134:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f18f237dff9 code=0x7ffc0000 [ 598.426864][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.438713][ T29] audit: type=1326 audit(1729369186.134:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f237dff9 code=0x7ffc0000 [ 598.467363][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.477427][ T29] audit: type=1326 audit(1729369186.134:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f237dff9 code=0x7ffc0000 [ 598.477480][ T29] audit: type=1326 audit(1729369186.134:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f18f237dff9 code=0x7ffc0000 [ 598.534293][ T29] audit: type=1326 audit(1729369186.134:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f237dff9 code=0x7ffc0000 [ 598.557861][ T29] audit: type=1326 audit(1729369186.134:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f237dff9 code=0x7ffc0000 [ 598.593740][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.611707][ T29] audit: type=1326 audit(1729369186.144:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f18f237dff9 code=0x7ffc0000 [ 598.617045][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.673731][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.683711][ T29] audit: type=1326 audit(1729369186.144:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f237dff9 code=0x7ffc0000 [ 598.694326][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.708412][ T55] Bluetooth: hci0: command tx timeout [ 598.734154][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.744680][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.756148][T13027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.766725][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.777400][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.788131][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.799591][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.809526][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.813871][ T29] audit: type=1326 audit(1729369186.144:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f237dff9 code=0x7ffc0000 [ 598.820026][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.820055][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.863424][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.874413][T13027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.887053][T13027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.939944][T13027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.987036][ T5279] usb 4-1: USB disconnect, device number 91 [ 599.016548][ T5281] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 599.049834][T13027] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.086379][T13027] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.127324][T13027] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.158638][T13027] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.214566][ T5281] usb 1-1: config 0 has no interfaces? [ 599.261416][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1527'. [ 599.384068][ T5281] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 599.519078][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.561850][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.650844][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.672115][ T5281] usb 1-1: Product: syz [ 599.712731][ T5281] usb 1-1: Manufacturer: syz [ 599.762530][ T5281] usb 1-1: SerialNumber: syz [ 599.779082][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.785033][ T5279] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 599.823804][ T5281] usb 1-1: config 0 descriptor?? [ 599.857311][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.986946][ T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 600.004136][ T5279] usb 4-1: Using ep0 maxpacket: 16 [ 600.014411][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.051538][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.095157][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 600.128211][ T5279] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 600.138933][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.151358][ T5279] usb 4-1: config 0 descriptor?? [ 600.164384][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 600.215813][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.272333][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.315423][ T9] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 600.349488][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.403934][ T9] usb 3-1: config 0 descriptor?? [ 600.952931][T13222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.963582][T13222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.136806][T13226] netlink: 'syz.1.1538': attribute type 10 has an invalid length. [ 601.154829][T13226] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1538'. [ 601.210782][T13227] netlink: 'syz.1.1538': attribute type 10 has an invalid length. [ 601.232550][T13227] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1538'. [ 601.262870][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 601.269171][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 601.296441][ T9] usb 3-1: USB disconnect, device number 97 [ 602.057648][T13244] netlink: 4272 bytes leftover after parsing attributes in process `syz.2.1543'. [ 602.578228][T13251] Cannot find map_set index 0 as target [ 602.594358][ T5279] usbhid 4-1:0.0: can't add hid device: -71 [ 602.610369][ T5279] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 602.663004][ T5279] usb 4-1: USB disconnect, device number 92 [ 603.140182][ T9] usb 1-1: USB disconnect, device number 106 [ 603.274654][ T55] Bluetooth: hci0: Malformed LE Event: 0x1d [ 603.275837][T13266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 603.613783][ T9] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 603.720415][ T5281] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 603.773797][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 603.780759][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.791300][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 603.807914][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=22.40 [ 603.817455][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.826108][ T9] usb 1-1: Product: syz [ 603.830477][ T9] usb 1-1: Manufacturer: syz [ 603.835636][ T9] usb 1-1: SerialNumber: syz [ 603.884363][ T5281] usb 2-1: Using ep0 maxpacket: 32 [ 603.899165][ T5281] usb 2-1: config 0 has an invalid interface number: 111 but max is 0 [ 603.922945][ T5281] usb 2-1: config 0 has no interface number 0 [ 603.930293][ T5281] usb 2-1: config 0 interface 111 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 603.946827][ T5281] usb 2-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=fa.86 [ 603.959231][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.973260][ T5281] usb 2-1: Product: syz [ 603.979651][ T5281] usb 2-1: Manufacturer: syz [ 603.988527][ T5281] usb 2-1: SerialNumber: syz [ 604.000247][ T5281] usb 2-1: config 0 descriptor?? [ 604.113909][ T47] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 604.224006][ T9] usb 2-1: USB disconnect, device number 82 [ 604.302473][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.319960][ T47] usb 3-1: config 0 has no interfaces? [ 604.340857][ T47] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 604.351690][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.400285][ T47] usb 3-1: Product: syz [ 604.422184][ T47] usb 3-1: Manufacturer: syz [ 604.469616][ T47] usb 3-1: SerialNumber: syz [ 604.487668][ T47] usb 3-1: config 0 descriptor?? [ 604.733878][ T9] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 604.746611][T13281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1554'. [ 604.788302][T13281] wireguard0: entered promiscuous mode [ 604.794168][T13281] wireguard0: entered allmulticast mode [ 604.944861][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 604.952095][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 604.962957][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 605.001635][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 605.080040][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 56945, setting to 64 [ 605.152946][ T9] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 605.164144][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.193471][ T9] usb 4-1: Product: syz [ 605.203200][ T9] usb 4-1: Manufacturer: syz [ 605.223832][ T9] usb 4-1: SerialNumber: syz [ 605.231223][ T9] usb 4-1: config 0 descriptor?? [ 605.263880][ T1848] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 605.275923][ T9] smsusb:smsusb_probe: board id=2, interface number 0 [ 605.323099][ T9] smsusb:siano_media_device_register: media controller created [ 605.345562][ T9] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 605.353586][ T9] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 605.373931][ T9] ------------[ cut here ]------------ [ 605.379551][ T9] WARNING: CPU: 0 PID: 9 at mm/slub.c:4689 free_large_kmalloc+0x38/0x1c0 [ 605.388170][ T9] Modules linked in: [ 605.392122][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc3-syzkaller-00399-g9197b73fd7bb #0 [ 605.402703][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 605.412860][ T9] Workqueue: usb_hub_wq hub_event [ 605.418365][ T9] RIP: 0010:free_large_kmalloc+0x38/0x1c0 [ 605.424199][ T9] Code: 8b 04 25 28 00 00 00 48 89 44 24 08 48 8b 47 08 a8 01 0f 85 78 01 00 00 49 89 f6 0f 1f 44 00 00 49 f7 07 40 00 00 00 75 27 90 <0f> 0b 90 31 db 80 3d 5c f1 13 0e 00 75 21 c6 05 53 f1 13 0e 01 48 [ 605.444719][ T9] RSP: 0018:ffffc900000e6ad0 EFLAGS: 00010246 [ 605.450869][ T9] RAX: 0000000000000000 RBX: ffffffff8737f912 RCX: ffffea0000000000 [ 605.459646][ T9] RDX: ffffc90012e81000 RSI: ffff888053b62000 RDI: ffffea00014ed880 [ 605.467764][ T9] RBP: ffff88807932cd60 R08: ffffffff8142fe9c R09: 1ffff1100f2659a0 [ 605.475892][ T9] R10: dffffc0000000000 R11: ffffed100f2659a1 R12: ffff88805df08000 [ 605.483982][ T9] R13: ffff888053b62000 R14: ffff888053b62000 R15: ffffea00014ed880 [ 605.492012][ T9] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 605.501057][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 605.507995][ T9] CR2: 000000002020a030 CR3: 0000000065a0a000 CR4: 00000000003526f0 [ 605.516085][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 605.524180][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 605.532203][ T9] Call Trace: [ 605.535686][ T9] [ 605.538664][ T9] ? __warn+0x168/0x4e0 [ 605.542878][ T9] ? free_large_kmalloc+0x38/0x1c0 [ 605.544486][ T1848] usb 5-1: New USB device found, idVendor=0bda, idProduct=818a, bcdDevice=e2.d8 [ 605.548777][ T9] ? report_bug+0x2b3/0x500 [ 605.562807][ T9] ? free_large_kmalloc+0x38/0x1c0 [ 605.568188][ T9] ? handle_bug+0x60/0x90 [ 605.570883][ T1848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.572551][ T9] ? exc_invalid_op+0x1a/0x50 [ 605.572589][ T9] ? asm_exc_invalid_op+0x1a/0x20 [ 605.590116][ T1848] usb 5-1: config 0 descriptor?? [ 605.591066][ T9] ? usb_free_urb+0xd2/0x120 [ 605.591109][ T9] ? __phys_addr+0xac/0x170 [ 605.591142][ T9] ? free_large_kmalloc+0x38/0x1c0 [ 605.610723][ T9] ? usb_free_urb+0xd2/0x120 [ 605.615432][ T9] kfree+0x21c/0x440 [ 605.619399][ T9] ? smscore_unregister_device+0x616/0x6e0 [ 605.625374][ T9] usb_free_urb+0xd2/0x120 [ 605.629879][ T9] smsusb_term_device+0x1d3/0x3c0 [ 605.635161][ T9] smsusb_probe+0x1d00/0x2410 [ 605.639916][ T9] ? __pfx_smsusb_probe+0x10/0x10 [ 605.645055][ T9] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 605.651174][ T9] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 605.658131][ T9] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 605.664636][ T9] ? __pm_runtime_set_status+0x6c1/0xa10 [ 605.670352][ T9] usb_probe_interface+0x645/0xbb0 [ 605.675625][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 605.681319][ T9] really_probe+0x2b8/0xad0 [ 605.686021][ T9] __driver_probe_device+0x1a2/0x390 [ 605.691376][ T9] driver_probe_device+0x50/0x430 [ 605.696526][ T9] __device_attach_driver+0x2d6/0x530 [ 605.701968][ T9] bus_for_each_drv+0x24e/0x2e0 [ 605.706964][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 605.712918][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 605.718461][ T9] __device_attach+0x333/0x520 [ 605.723285][ T9] ? __pfx_lock_release+0x10/0x10 [ 605.728447][ T9] ? __pfx___device_attach+0x10/0x10 [ 605.733841][ T9] ? do_raw_spin_unlock+0x13c/0x8b0 [ 605.739132][ T9] bus_probe_device+0x189/0x260 [ 605.744218][ T9] device_add+0x856/0xbf0 [ 605.748712][ T9] usb_set_configuration+0x1976/0x1fb0 [ 605.754956][ T9] usb_generic_driver_probe+0x88/0x140 [ 605.760510][ T9] usb_probe_device+0x1b8/0x380 [ 605.766067][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 605.771518][ T9] really_probe+0x2b8/0xad0 [ 605.776181][ T9] __driver_probe_device+0x1a2/0x390 [ 605.781553][ T9] driver_probe_device+0x50/0x430 [ 605.786760][ T9] __device_attach_driver+0x2d6/0x530 [ 605.792227][ T9] bus_for_each_drv+0x24e/0x2e0 [ 605.797240][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 605.800048][ T47] usb 5-1: USB disconnect, device number 126 [ 605.803178][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 605.814940][ T9] __device_attach+0x333/0x520 [ 605.819787][ T9] ? __pfx___device_attach+0x10/0x10 [ 605.825228][ T9] bus_probe_device+0x189/0x260 [ 605.830166][ T9] device_add+0x856/0xbf0 [ 605.834648][ T9] usb_new_device+0x104a/0x19a0 [ 605.839595][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 605.844962][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 605.850225][ T9] ? lockdep_hardirqs_on+0x99/0x150 [ 605.856118][ T9] hub_event+0x2d6d/0x5150 [ 605.860652][ T9] ? __pfx_hub_event+0x10/0x10 [ 605.865998][ T9] ? __pfx_lock_acquire+0x10/0x10 [ 605.871060][ T9] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 605.877200][ T9] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 605.883572][ T9] ? process_scheduled_works+0x976/0x1850 [ 605.889382][ T9] process_scheduled_works+0xa63/0x1850 [ 605.895067][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 605.901111][ T9] ? assign_work+0x364/0x3d0 [ 605.905794][ T9] worker_thread+0x870/0xd30 [ 605.910426][ T9] ? __kthread_parkme+0x169/0x1d0 [ 605.915529][ T9] ? __pfx_worker_thread+0x10/0x10 [ 605.920670][ T9] kthread+0x2f0/0x390 [ 605.924812][ T9] ? __pfx_worker_thread+0x10/0x10 [ 605.929947][ T9] ? __pfx_kthread+0x10/0x10 [ 605.934609][ T9] ret_from_fork+0x4b/0x80 [ 605.939065][ T9] ? __pfx_kthread+0x10/0x10 [ 605.943749][ T9] ret_from_fork_asm+0x1a/0x30 [ 605.948689][ T9] [ 605.951761][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 605.959073][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc3-syzkaller-00399-g9197b73fd7bb #0 [ 605.969594][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 605.979670][ T9] Workqueue: usb_hub_wq hub_event [ 605.984855][ T9] Call Trace: [ 605.988152][ T9] [ 605.991101][ T9] dump_stack_lvl+0x241/0x360 [ 605.995820][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.001156][ T9] ? __pfx__printk+0x10/0x10 [ 606.005796][ T9] ? _printk+0xd5/0x120 [ 606.009970][ T9] ? __init_begin+0x41000/0x41000 [ 606.015016][ T9] ? vscnprintf+0x5d/0x90 [ 606.019370][ T9] panic+0x349/0x880 [ 606.023282][ T9] ? __warn+0x177/0x4e0 [ 606.027455][ T9] ? __pfx_panic+0x10/0x10 [ 606.031883][ T9] ? show_trace_log_lvl+0x3b2/0x410 [ 606.037106][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 606.042068][ T9] __warn+0x34b/0x4e0 [ 606.046166][ T9] ? free_large_kmalloc+0x38/0x1c0 [ 606.051301][ T9] report_bug+0x2b3/0x500 [ 606.055653][ T9] ? free_large_kmalloc+0x38/0x1c0 [ 606.060800][ T9] handle_bug+0x60/0x90 [ 606.064986][ T9] exc_invalid_op+0x1a/0x50 [ 606.069593][ T9] asm_exc_invalid_op+0x1a/0x20 [ 606.074460][ T9] RIP: 0010:free_large_kmalloc+0x38/0x1c0 [ 606.080204][ T9] Code: 8b 04 25 28 00 00 00 48 89 44 24 08 48 8b 47 08 a8 01 0f 85 78 01 00 00 49 89 f6 0f 1f 44 00 00 49 f7 07 40 00 00 00 75 27 90 <0f> 0b 90 31 db 80 3d 5c f1 13 0e 00 75 21 c6 05 53 f1 13 0e 01 48 [ 606.099996][ T9] RSP: 0018:ffffc900000e6ad0 EFLAGS: 00010246 [ 606.106081][ T9] RAX: 0000000000000000 RBX: ffffffff8737f912 RCX: ffffea0000000000 [ 606.114117][ T9] RDX: ffffc90012e81000 RSI: ffff888053b62000 RDI: ffffea00014ed880 [ 606.122119][ T9] RBP: ffff88807932cd60 R08: ffffffff8142fe9c R09: 1ffff1100f2659a0 [ 606.130127][ T9] R10: dffffc0000000000 R11: ffffed100f2659a1 R12: ffff88805df08000 [ 606.138118][ T9] R13: ffff888053b62000 R14: ffff888053b62000 R15: ffffea00014ed880 [ 606.146108][ T9] ? usb_free_urb+0xd2/0x120 [ 606.150720][ T9] ? __phys_addr+0xac/0x170 [ 606.155247][ T9] ? usb_free_urb+0xd2/0x120 [ 606.159860][ T9] kfree+0x21c/0x440 [ 606.163800][ T9] ? smscore_unregister_device+0x616/0x6e0 [ 606.169648][ T9] usb_free_urb+0xd2/0x120 [ 606.174086][ T9] smsusb_term_device+0x1d3/0x3c0 [ 606.179133][ T9] smsusb_probe+0x1d00/0x2410 [ 606.183839][ T9] ? __pfx_smsusb_probe+0x10/0x10 [ 606.188910][ T9] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 606.194484][ T9] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 606.200402][ T9] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 606.206762][ T9] ? __pm_runtime_set_status+0x6c1/0xa10 [ 606.212426][ T9] usb_probe_interface+0x645/0xbb0 [ 606.217587][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 606.223234][ T9] really_probe+0x2b8/0xad0 [ 606.227769][ T9] __driver_probe_device+0x1a2/0x390 [ 606.233073][ T9] driver_probe_device+0x50/0x430 [ 606.238117][ T9] __device_attach_driver+0x2d6/0x530 [ 606.243508][ T9] bus_for_each_drv+0x24e/0x2e0 [ 606.248388][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 606.254308][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 606.259707][ T9] __device_attach+0x333/0x520 [ 606.264493][ T9] ? __pfx_lock_release+0x10/0x10 [ 606.269551][ T9] ? __pfx___device_attach+0x10/0x10 [ 606.274849][ T9] ? do_raw_spin_unlock+0x13c/0x8b0 [ 606.280072][ T9] bus_probe_device+0x189/0x260 [ 606.284944][ T9] device_add+0x856/0xbf0 [ 606.289292][ T9] usb_set_configuration+0x1976/0x1fb0 [ 606.294797][ T9] usb_generic_driver_probe+0x88/0x140 [ 606.300275][ T9] usb_probe_device+0x1b8/0x380 [ 606.305136][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 606.310520][ T9] really_probe+0x2b8/0xad0 [ 606.315086][ T9] __driver_probe_device+0x1a2/0x390 [ 606.320388][ T9] driver_probe_device+0x50/0x430 [ 606.325427][ T9] __device_attach_driver+0x2d6/0x530 [ 606.330814][ T9] bus_for_each_drv+0x24e/0x2e0 [ 606.335683][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 606.341591][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 606.346989][ T9] __device_attach+0x333/0x520 [ 606.351773][ T9] ? __pfx___device_attach+0x10/0x10 [ 606.357078][ T9] bus_probe_device+0x189/0x260 [ 606.361950][ T9] device_add+0x856/0xbf0 [ 606.366300][ T9] usb_new_device+0x104a/0x19a0 [ 606.371188][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 606.376411][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 606.381628][ T9] ? lockdep_hardirqs_on+0x99/0x150 [ 606.386838][ T9] hub_event+0x2d6d/0x5150 [ 606.391313][ T9] ? __pfx_hub_event+0x10/0x10 [ 606.396099][ T9] ? __pfx_lock_acquire+0x10/0x10 [ 606.401148][ T9] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 606.407151][ T9] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 606.413516][ T9] ? process_scheduled_works+0x976/0x1850 [ 606.419256][ T9] process_scheduled_works+0xa63/0x1850 [ 606.424844][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 606.430886][ T9] ? assign_work+0x364/0x3d0 [ 606.435626][ T9] worker_thread+0x870/0xd30 [ 606.440282][ T9] ? __kthread_parkme+0x169/0x1d0 [ 606.445343][ T9] ? __pfx_worker_thread+0x10/0x10 [ 606.450478][ T9] kthread+0x2f0/0x390 [ 606.454566][ T9] ? __pfx_worker_thread+0x10/0x10 [ 606.459700][ T9] ? __pfx_kthread+0x10/0x10 [ 606.464380][ T9] ret_from_fork+0x4b/0x80 [ 606.468823][ T9] ? __pfx_kthread+0x10/0x10 [ 606.473525][ T9] ret_from_fork_asm+0x1a/0x30 [ 606.478327][ T9] [ 606.481650][ T9] Kernel Offset: disabled [ 606.486060][ T9] Rebooting in 86400 seconds..