last executing test programs: 3.632812441s ago: executing program 2 (id=1609): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000f400000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) 3.547390695s ago: executing program 2 (id=1610): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @private2, @mcast1, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00b295", 0x0, 0x3a, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}}, 0x0) 3.276118398s ago: executing program 2 (id=1612): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 1.624149059s ago: executing program 3 (id=1628): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x20000000000001c3, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="4e8fc38e71", 0x5}]) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 1.28826169s ago: executing program 3 (id=1633): set_mempolicy(0x4003, &(0x7f00000001c0)=0x8000000100000003, 0xe1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 957.928946ms ago: executing program 0 (id=1635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000003000040"]) 952.954917ms ago: executing program 1 (id=1636): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1001, @ipv4={'\x00', '\xff\xff', @local}, 0x23c2d18d}, 0x1c) sendmmsg$alg(r0, &(0x7f0000001dc0)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000cc0)=[@iv={0x10}], 0x10}], 0x1, 0x8000) 951.08723ms ago: executing program 3 (id=1645): connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1}}}, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 836.809133ms ago: executing program 1 (id=1637): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) r2 = dup(r0) inotify_rm_watch(r2, r1) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) 836.636952ms ago: executing program 3 (id=1639): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000f400000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) 748.315858ms ago: executing program 1 (id=1640): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x30}}, 0x0) 738.042718ms ago: executing program 3 (id=1641): openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000002000040"]) 706.189756ms ago: executing program 0 (id=1642): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80}, [@FRA_DST={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f0000005180)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 681.403422ms ago: executing program 1 (id=1644): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x7) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0'}, 0xb) splice(r0, 0x0, r2, 0x0, 0x800, 0x0) 601.234452ms ago: executing program 1 (id=1646): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 594.27096ms ago: executing program 0 (id=1654): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x7) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0'}, 0xb) splice(r0, 0x0, r2, 0x0, 0x800, 0x0) 409.690155ms ago: executing program 3 (id=1647): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00000001090212"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 398.580899ms ago: executing program 0 (id=1656): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 396.998134ms ago: executing program 1 (id=1648): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) 268.296638ms ago: executing program 0 (id=1649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)={@val={0xa}, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x8100, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x46) 57.684271ms ago: executing program 2 (id=1650): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1001, @ipv4={'\x00', '\xff\xff', @local}, 0x23c2d18d}, 0x1c) sendmmsg$alg(r0, &(0x7f0000001dc0)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000cc0)=[@iv={0x10}], 0x10}], 0x1, 0x8000) 57.346343ms ago: executing program 2 (id=1651): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) sendfile(r0, r0, 0x0, 0x8) 7.006073ms ago: executing program 2 (id=1652): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200), &(0x7f00000001c0)=0x8) 0s ago: executing program 0 (id=1653): prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): e_slave_1) entered disabled state [ 65.460831][ T1101] bridge_slave_0: left allmulticast mode [ 65.463538][ T1101] bridge_slave_0: left promiscuous mode [ 65.466172][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.740950][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.749025][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.753861][ T5355] Bluetooth: hci1: command tx timeout [ 65.758927][ T1101] bond0 (unregistering): Released all slaves [ 66.329647][ T1101] hsr_slave_0: left promiscuous mode [ 66.333838][ T1101] hsr_slave_1: left promiscuous mode [ 66.337317][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.340737][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.346323][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.349623][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.429089][ T1101] veth1_macvtap: left promiscuous mode [ 66.440054][ T1101] veth0_macvtap: left promiscuous mode [ 66.440468][ T1101] veth1_vlan: left promiscuous mode [ 66.440736][ T1101] veth0_vlan: left promiscuous mode [ 66.725069][ T8] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 66.926274][ T8] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 66.942722][ T8] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 66.946682][ T8] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 66.952084][ T8] usb 8-1: config 0 interface 0 has no altsetting 0 [ 66.956523][ T8] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 66.960662][ T8] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 66.965618][ T8] usb 8-1: config 0 interface 0 has no altsetting 0 [ 66.972890][ T8] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 66.976957][ T8] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 66.982591][ T8] usb 8-1: config 0 interface 0 has no altsetting 0 [ 66.988052][ T8] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 66.992366][ T8] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 66.997097][ T8] usb 8-1: config 0 interface 0 has no altsetting 0 [ 67.008867][ T8] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.012948][ T8] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.017680][ T8] usb 8-1: config 0 interface 0 has no altsetting 0 [ 67.025763][ T8] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.029708][ T8] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.034698][ T8] usb 8-1: config 0 interface 0 has no altsetting 0 [ 67.039661][ T8] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.044437][ T8] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.048159][ T8] usb 8-1: config 0 interface 0 has no altsetting 0 [ 67.051478][ T8] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.054476][ T8] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 67.058276][ T8] usb 8-1: config 0 interface 0 has no altsetting 0 [ 67.062969][ T8] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 67.066140][ T8] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 67.069394][ T8] usb 8-1: Product: syz [ 67.070844][ T8] usb 8-1: Manufacturer: syz [ 67.072919][ T8] usb 8-1: SerialNumber: syz [ 67.076482][ T8] usb 8-1: config 0 descriptor?? [ 67.101650][ T8] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 67.182420][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 67.264513][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 67.318238][ T58] usb 8-1: USB disconnect, device number 3 [ 67.326024][ T58] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 67.761261][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 67.831372][ T5355] Bluetooth: hci1: command tx timeout [ 67.918898][ T5502] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.925556][ T5502] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.936078][ T5502] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.944253][ T5502] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.962537][ T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.966412][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 67.976734][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 67.980925][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.986036][ T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.989065][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.994658][ T25] usb 6-1: config 0 descriptor?? [ 68.042262][ T5502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.054241][ T5502] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.063585][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.066859][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.079054][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.081801][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.236693][ T5502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.280613][ T5502] veth0_vlan: entered promiscuous mode [ 68.292872][ T5502] veth1_vlan: entered promiscuous mode [ 68.343125][ T5502] veth0_macvtap: entered promiscuous mode [ 68.343667][ T5628] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.348500][ T5502] veth1_macvtap: entered promiscuous mode [ 68.377201][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.381302][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.384802][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.389159][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.393570][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.398018][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.404839][ T5502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.415811][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.420094][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.428714][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.434325][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.439214][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.444280][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.450569][ T5502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.460975][ T5502] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.469651][ T5502] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.477108][ T5502] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.480844][ T5502] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.488508][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.491415][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.494024][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.496548][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.499147][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.502497][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.505315][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.508117][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.513570][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.516416][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.522259][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.525265][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.528402][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.532469][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.534941][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 68.537769][ T25] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 68.543936][ T25] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 68.569647][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.576577][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.602524][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.605895][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.755894][ T981] usb 6-1: USB disconnect, device number 3 [ 68.776734][ T39] audit: type=1326 audit(1725970692.325:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.0.89" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 68.790406][ T39] audit: type=1326 audit(1725970692.325:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.0.89" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 68.800073][ T39] audit: type=1326 audit(1725970692.325:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.0.89" exe="/syz-executor" sig=0 arch=40000003 syscall=123 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 68.828671][ T39] audit: type=1326 audit(1725970692.325:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.0.89" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 68.842441][ T39] audit: type=1326 audit(1725970692.325:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5640 comm="syz.0.89" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 69.011163][ T56] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 69.191622][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 69.201740][ T56] usb 7-1: config 0 has no interfaces? [ 69.206922][ T56] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.211024][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.215630][ T56] usb 7-1: Product: syz [ 69.217465][ T56] usb 7-1: Manufacturer: syz [ 69.219522][ T56] usb 7-1: SerialNumber: syz [ 69.223749][ T56] usb 7-1: config 0 descriptor?? [ 69.381167][ T5496] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.462514][ T56] usb 7-1: USB disconnect, device number 2 [ 69.561311][ T5496] usb 5-1: Using ep0 maxpacket: 16 [ 69.566625][ T5496] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.571533][ T5496] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 69.577200][ T5496] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 69.581917][ T5496] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.587403][ T5496] usb 5-1: config 0 descriptor?? [ 69.791241][ T5391] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 69.911156][ T5355] Bluetooth: hci1: command tx timeout [ 69.992132][ T5391] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.996234][ T5391] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.999836][ T5391] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.009948][ T5391] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.013914][ T5391] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.022195][ T5391] usb 6-1: config 0 descriptor?? [ 70.031991][ T5496] usbhid 5-1:0.0: can't add hid device: -71 [ 70.034801][ T5496] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 70.040635][ T5496] usb 5-1: USB disconnect, device number 2 [ 70.448822][ T5391] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 70.454609][ T5391] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 70.891175][ T56] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.091156][ T56] usb 5-1: Using ep0 maxpacket: 32 [ 71.097898][ T56] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.111143][ T56] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.114449][ T56] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.134609][ T56] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 71.138437][ T56] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 71.141295][ T56] usb 5-1: Product: syz [ 71.142720][ T56] usb 5-1: Manufacturer: syz [ 71.144288][ T56] usb 5-1: SerialNumber: syz [ 71.164855][ T56] input: appletouch as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input7 [ 71.276485][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.280203][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.380404][ T56] usb 5-1: USB disconnect, device number 3 [ 71.395493][ T56] appletouch 5-1:1.0: input: appletouch disconnected [ 71.752441][ C1] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 71.756890][ T5496] usb 6-1: USB disconnect, device number 4 [ 71.760204][ T5689] unknown channel width for channel at 909000KHz? [ 71.767851][ T5689] unknown channel width for channel at 909000KHz? [ 71.770062][ T5689] unknown channel width for channel at 909000KHz? [ 71.985108][ T5697] netlink: 56 bytes leftover after parsing attributes in process `syz.0.114'. [ 71.991242][ T5355] Bluetooth: hci1: command tx timeout [ 72.389339][ T5717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 72.447159][ T5721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 72.491454][ T5723] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 72.931244][ T1415] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 73.111371][ T1415] usb 7-1: Using ep0 maxpacket: 8 [ 73.114686][ T1415] usb 7-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 73.118625][ T1415] usb 7-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 73.125160][ T1415] usb 7-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 73.129283][ T1415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.133320][ T1415] usb 7-1: Product: syz [ 73.135346][ T1415] usb 7-1: Manufacturer: syz [ 73.137432][ T1415] usb 7-1: SerialNumber: syz [ 73.145526][ T1415] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 73.151980][ T1415] dvb-usb: bulk message failed: -22 (3/0) [ 73.194317][ T1415] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 73.200352][ T1415] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 73.207860][ T1415] usb 7-1: media controller created [ 73.233698][ T1415] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 73.254191][ T1415] dvb-usb: bulk message failed: -22 (6/0) [ 73.256368][ T1415] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 73.262936][ T1415] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input9 [ 73.270249][ T1415] dvb-usb: schedule remote query interval to 150 msecs. [ 73.276204][ T1415] dvb-usb: bulk message failed: -22 (3/0) [ 73.311203][ T1415] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 73.322263][ T5756] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.141'. [ 73.327878][ T5756] openvswitch: netlink: Key type 29 is not supported [ 73.432122][ T1415] dvb-usb: bulk message failed: -22 (1/0) [ 73.434309][ T1415] dvb-usb: error while querying for an remote control event. [ 73.602078][ T1415] dvb-usb: bulk message failed: -22 (1/0) [ 73.604327][ T1415] dvb-usb: error while querying for an remote control event. [ 73.761771][ T58] dvb-usb: bulk message failed: -22 (1/0) [ 73.764361][ T58] dvb-usb: error while querying for an remote control event. [ 73.788377][ T25] usb 7-1: USB disconnect, device number 3 [ 73.834312][ T25] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 74.560904][ T5790] trusted_key: syz.0.156 sent an empty control message without MSG_MORE. [ 75.690521][ T5838] batadv_slave_1: entered allmulticast mode [ 75.694607][ T5838] batadv_slave_1: left allmulticast mode [ 75.989848][ T5853] Bluetooth: MGMT ver 1.23 [ 76.062237][ T56] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.246179][ T5863] netlink: 'syz.2.189': attribute type 15 has an invalid length. [ 76.271304][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 76.283920][ T56] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 76.287517][ T56] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.301348][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.305624][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.309914][ T56] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.331325][ T56] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 76.335350][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.567642][ T56] usb 5-1: usb_control_msg returned -32 [ 76.571387][ T56] usbtmc 5-1:16.0: can't read capabilities [ 76.935888][ T5891] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 77.138724][ T56] usb 5-1: USB disconnect, device number 4 [ 78.071228][ T4790] Bluetooth: hci0: command 0x0c1a tx timeout [ 78.074136][ T5355] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 79.070960][ T66] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.077382][ T66] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.083292][ T66] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.088651][ T66] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.093456][ T66] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.097110][ T66] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.172237][ T39] audit: type=1326 audit(1725970958.720:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 79.201839][ T39] audit: type=1326 audit(1725970958.720:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 79.210420][ T39] audit: type=1326 audit(1725970958.720:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.227" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 79.226797][ T39] audit: type=1326 audit(1725970958.720:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 79.237425][ T39] audit: type=1326 audit(1725970958.720:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 79.424700][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 79.650654][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.670722][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.676807][ T5945] bridge_slave_0: entered allmulticast mode [ 79.698340][ T5945] bridge_slave_0: entered promiscuous mode [ 79.720698][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.733249][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.735880][ T5945] bridge_slave_1: entered allmulticast mode [ 79.748542][ T5945] bridge_slave_1: entered promiscuous mode [ 79.894387][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.906656][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.024745][ T5979] Bluetooth: MGMT ver 1.23 [ 80.031201][ T5945] team0: Port device team_slave_0 added [ 80.037416][ T5945] team0: Port device team_slave_1 added [ 80.161759][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.164852][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.192612][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.199822][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.209805][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.231525][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.369638][ T5945] hsr_slave_0: entered promiscuous mode [ 80.381483][ T5945] hsr_slave_1: entered promiscuous mode [ 80.426975][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.430011][ T5945] Cannot create hsr debugfs directory [ 80.774702][ T6011] input: syz1 as /devices/virtual/input/input10 [ 80.889904][ T5945] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.930221][ T6014] syzkaller1: entered promiscuous mode [ 80.934722][ T6014] syzkaller1: entered allmulticast mode [ 80.977966][ T5945] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.991701][ T56] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 81.085408][ T6016] syz.2.255[6016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.085594][ T6016] syz.2.255[6016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.106886][ T5945] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.192552][ T5355] Bluetooth: hci4: command tx timeout [ 81.198523][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.203628][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.208029][ T56] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.225504][ T56] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.230644][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.233403][ T5945] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.245736][ T56] usb 6-1: config 0 descriptor?? [ 81.284158][ T6024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.259'. [ 81.447013][ T5945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.464294][ T5945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.475938][ T5945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.484015][ T5945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.527107][ T10] cfg80211: failed to load regulatory.db [ 81.665505][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.682156][ T56] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 81.685183][ T56] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 81.686036][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.696964][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.700205][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.701138][ T56] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 81.706369][ T56] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 81.709185][ T56] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 81.716504][ T56] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 81.719740][ T56] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 81.724337][ T56] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 81.727886][ T56] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 81.731553][ T56] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 81.732605][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.734803][ T56] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 81.738018][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.750964][ T56] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 81.755773][ T56] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 81.759041][ T56] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 81.769967][ T56] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 81.774580][ T56] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 81.787785][ T56] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 81.792304][ T5355] Bluetooth: hci1: unexpected event for opcode 0x080e [ 81.955562][ T56] usb 6-1: USB disconnect, device number 5 [ 81.997440][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.063713][ T5945] veth0_vlan: entered promiscuous mode [ 82.078723][ T5945] veth1_vlan: entered promiscuous mode [ 82.115762][ T5945] veth0_macvtap: entered promiscuous mode [ 82.124606][ T5945] veth1_macvtap: entered promiscuous mode [ 82.148310][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.156042][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.161483][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.166022][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.170286][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.175653][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.179796][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.184357][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.190905][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.210105][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.215085][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.219194][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.223567][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.227447][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.231409][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.234724][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.238235][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.244374][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.254368][ T5945] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.258201][ T5945] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.262699][ T5945] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.266709][ T5945] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.323069][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.331159][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.386710][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.391428][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.500991][ T39] audit: type=1326 audit(1725970962.040:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.3.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 82.518960][ T39] audit: type=1326 audit(1725970962.040:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.3.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 82.543098][ T39] audit: type=1326 audit(1725970962.050:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.3.222" exe="/syz-executor" sig=0 arch=40000003 syscall=46 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 82.556416][ T39] audit: type=1326 audit(1725970962.050:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.3.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 82.565166][ T39] audit: type=1326 audit(1725970962.050:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.3.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 82.771938][ T6080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.282'. [ 83.281516][ T5355] Bluetooth: hci4: command tx timeout [ 83.685718][ T6129] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.304'. [ 83.935948][ T6137] sctp: [Deprecated]: syz.2.308 (pid 6137) Use of int in maxseg socket option. [ 83.935948][ T6137] Use struct sctp_assoc_value instead [ 84.120631][ T6156] netlink: 36 bytes leftover after parsing attributes in process `syz.1.315'. [ 84.205150][ T39] audit: type=1326 audit(1725970963.740:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.2.319" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x0 [ 84.238706][ T6164] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 84.244051][ T6164] netlink: 9344 bytes leftover after parsing attributes in process `syz.1.318'. [ 84.247975][ T6164] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 84.367630][ T6171] sctp: [Deprecated]: syz.1.322 (pid 6171) Use of int in maxseg socket option. [ 84.367630][ T6171] Use struct sctp_assoc_value instead [ 85.221273][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 85.281199][ T5409] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 85.363180][ T5355] Bluetooth: hci4: command tx timeout [ 85.471367][ T5409] usb 6-1: Using ep0 maxpacket: 8 [ 85.477068][ T5409] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.481794][ T5409] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.486133][ T5409] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.490537][ T5409] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.496539][ T5409] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.500611][ T5409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.601243][ T58] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.726215][ T5409] usb 6-1: GET_CAPABILITIES returned 0 [ 85.728286][ T5409] usbtmc 6-1:16.0: can't read capabilities [ 85.811144][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 85.817375][ T58] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 85.820963][ T58] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.825711][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.829879][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.834643][ T5355] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 85.838407][ T5355] Bluetooth: hci1: Injecting HCI hardware error event [ 85.843038][ T5355] Bluetooth: hci1: hardware error 0x00 [ 85.848207][ T58] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.854800][ T58] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 85.860454][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.938419][ T5409] usb 6-1: USB disconnect, device number 6 [ 86.065115][ T39] audit: type=1326 audit(1725970965.610:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.3.339" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x0 [ 86.087784][ T58] usb 5-1: GET_CAPABILITIES returned 0 [ 86.090292][ T58] usbtmc 5-1:16.0: can't read capabilities [ 86.273097][ T6211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.341'. [ 86.330674][ T6213] Dead loop on virtual device ip6_vti0, fix it urgently! [ 86.335110][ T6213] Dead loop on virtual device ip6_vti0, fix it urgently! [ 86.338715][ T6213] Dead loop on virtual device ip6_vti0, fix it urgently! [ 86.343578][ T6213] Dead loop on virtual device ip6_vti0, fix it urgently! [ 86.347912][ T6213] Dead loop on virtual device ip6_vti0, fix it urgently! [ 86.350479][ T6213] Dead loop on virtual device ip6_vti0, fix it urgently! [ 86.563883][ T6221] Option ' ' to dns_resolver key: bad/missing value [ 86.616714][ T6223] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 87.251346][ T5410] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 87.431229][ T4790] Bluetooth: hci4: command tx timeout [ 87.444108][ T5410] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.448657][ T5410] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.453455][ T5410] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.458412][ T5410] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.462067][ T5410] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.466808][ T5410] usb 8-1: config 0 descriptor?? [ 87.923238][ T5355] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 87.940558][ T5410] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 87.949621][ T5410] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 87.966014][ T5410] plantronics 0003:047F:FFFF.0007: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 88.138906][ T5410] usb 8-1: USB disconnect, device number 4 [ 88.356745][ T57] usb 5-1: USB disconnect, device number 5 [ 88.493087][ T39] audit: type=1326 audit(1725970968.040:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.0.360" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x0 [ 89.947681][ T6301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.382'. [ 90.334916][ T6317] team0: entered promiscuous mode [ 90.337157][ T6317] team_slave_0: entered promiscuous mode [ 90.352424][ T6317] team_slave_1: entered promiscuous mode [ 90.365308][ T6317] team0: left promiscuous mode [ 90.368921][ T6317] team_slave_0: left promiscuous mode [ 90.385412][ T6317] team_slave_1: left promiscuous mode [ 90.546220][ T6329] netlink: 60 bytes leftover after parsing attributes in process `syz.1.394'. [ 90.599437][ T6334] netlink: 'syz.1.396': attribute type 9 has an invalid length. [ 90.603527][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 90.608180][ T6333] netlink: 3068 bytes leftover after parsing attributes in process `syz.3.395'. [ 90.617456][ T6333] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.395'. [ 90.737960][ T5355] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 91.616288][ T6406] process 'syz.0.427' launched './file1' with NULL argv: empty string added [ 91.674855][ T6406] 9pnet_virtio: no channels available for device @ [ 92.173103][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.263777][ T6433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.439'. [ 92.371288][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 92.375314][ T8] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.378690][ T8] usb 5-1: config 0 has no interface number 0 [ 92.382875][ T8] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.387619][ T8] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 92.398397][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.405173][ T8] usb 5-1: config 0 descriptor?? [ 92.414821][ T8] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 92.435034][ T6439] capability: warning: `syz.3.442' uses deprecated v2 capabilities in a way that may be insecure [ 92.640896][ T8] usb 5-1: USB disconnect, device number 6 [ 92.647747][ T8] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 92.661182][ T56] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 92.851617][ T56] usb 6-1: Using ep0 maxpacket: 16 [ 92.855545][ T56] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 92.860843][ T56] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 92.871194][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.877830][ T56] usb 6-1: config 0 descriptor?? [ 92.891866][ T56] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input11 [ 93.192474][ T4827] bcm5974 6-1:0.0: could not read from device [ 93.203745][ T56] usb 6-1: USB disconnect, device number 7 [ 93.206489][ T4827] bcm5974 6-1:0.0: could not read from device [ 93.481416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.580707][ T6480] input: syz1 as /devices/virtual/input/input12 [ 93.786642][ T6492] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 93.921234][ T4790] Bluetooth: hci4: command 0x0405 tx timeout [ 94.068808][ T6508] kernel profiling enabled (shift: 0) [ 94.595555][ T39] audit: type=1326 audit(1725970974.140:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.3.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7fc00000 [ 94.869683][ T6528] input: syz1 as /devices/virtual/input/input13 [ 95.261243][ T39] audit: type=1326 audit(1725970974.800:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.3.477" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf741e579 code=0x7fc00000 [ 95.361352][ T8] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 95.561305][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 95.565947][ T8] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.580966][ T8] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.585368][ T8] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 95.589598][ T8] usb 7-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 95.606207][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 95.609142][ T8] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 95.621147][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.632334][ T8] usb 7-1: config 0 descriptor?? [ 96.108944][ T8] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5010.0008/input/input14 [ 96.211082][ T8] kye 0003:0458:5010.0008: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 96.240954][ T6553] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 96.240954][ T6553] program syz.0.491 not setting count and/or reply_len properly [ 96.688565][ T1103] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.814279][ T1103] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.912009][ T1103] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.009981][ T1103] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.085123][ T4790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.088954][ T4790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.098712][ T4790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.113394][ T4790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.118142][ T4790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 97.123139][ T4790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.241972][ C0] kye 0003:0458:5010.0008: usb_submit_urb(ctrl) failed: -1 [ 97.246368][ T6573] overlayfs: workdir and upperdir must reside under the same mount [ 97.282690][ T1103] bridge_slave_1: left allmulticast mode [ 97.288391][ T1103] bridge_slave_1: left promiscuous mode [ 97.292170][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.315619][ T1103] bridge_slave_0: left allmulticast mode [ 97.318225][ T1103] bridge_slave_0: left promiscuous mode [ 97.321914][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.634486][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.647449][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.653528][ T1103] bond0 (unregistering): Released all slaves [ 98.087581][ T8] usb 7-1: USB disconnect, device number 4 [ 98.196602][ T6570] chnl_net:caif_netlink_parms(): no params data found [ 98.306912][ T1103] hsr_slave_0: left promiscuous mode [ 98.310294][ T1103] hsr_slave_1: left promiscuous mode [ 98.315978][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.319299][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.328594][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.331925][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.361777][ T1103] veth1_macvtap: left promiscuous mode [ 98.364148][ T1103] veth0_macvtap: left promiscuous mode [ 98.366626][ T1103] veth1_vlan: left promiscuous mode [ 98.368760][ T1103] veth0_vlan: left promiscuous mode [ 99.191371][ T5355] Bluetooth: hci4: command tx timeout [ 99.391751][ T6631] overlayfs: workdir and upperdir must reside under the same mount [ 99.570001][ T6643] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 99.570001][ T6643] program syz.1.523 not setting count and/or reply_len properly [ 99.635391][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 99.748222][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 100.564245][ T6570] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.576222][ T6570] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.579911][ T6570] bridge_slave_0: entered allmulticast mode [ 100.597326][ T6570] bridge_slave_0: entered promiscuous mode [ 100.624525][ T6570] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.627880][ T6570] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.637973][ T6570] bridge_slave_1: entered allmulticast mode [ 100.642418][ T6570] bridge_slave_1: entered promiscuous mode [ 100.762808][ T6570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.773529][ T6570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.831210][ T5459] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 100.887741][ T6570] team0: Port device team_slave_0 added [ 100.918617][ T6570] team0: Port device team_slave_1 added [ 101.013250][ T5459] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.018293][ T5459] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 101.024347][ T5459] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.029246][ T5459] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.035872][ T5459] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.039904][ T5459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.048586][ T5459] usb 5-1: config 0 descriptor?? [ 101.050025][ T6570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.057386][ T6570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.061872][ T6650] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 101.068623][ T6570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.079175][ T6570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.082284][ T6570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.094070][ T6570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.274667][ T6570] hsr_slave_0: entered promiscuous mode [ 101.278101][ T6570] hsr_slave_1: entered promiscuous mode [ 101.282585][ T5355] Bluetooth: hci4: command tx timeout [ 101.291485][ T6570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.294280][ T6570] Cannot create hsr debugfs directory [ 101.536802][ T5459] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 101.541701][ T5459] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 101.560297][ T5459] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 101.817278][ T5459] usb 5-1: USB disconnect, device number 7 [ 102.073898][ T6570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.078354][ T6570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.083039][ T6570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.089016][ T6570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.158705][ T6570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.173884][ T6570] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.183877][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.187352][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.198365][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.201690][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.337194][ T6570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.369564][ T6570] veth0_vlan: entered promiscuous mode [ 102.388598][ T6570] veth1_vlan: entered promiscuous mode [ 102.430453][ T6570] veth0_macvtap: entered promiscuous mode [ 102.444450][ T6570] veth1_macvtap: entered promiscuous mode [ 102.465772][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.473078][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.476837][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.481034][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.501369][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.505601][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.509662][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.536958][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.547264][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.563320][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.566989][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.570427][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.581798][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.589730][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.599173][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.611351][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.615869][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.622939][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.631369][ T6570] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.635562][ T6570] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.646103][ T6570] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.651271][ T6570] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.792662][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.811267][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.847634][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.855800][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.862319][ T6735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.542'. [ 102.940197][ T6739] netlink: 'syz.2.544': attribute type 9 has an invalid length. [ 102.944369][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 103.137667][ T6747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.546'. [ 103.352832][ T5355] Bluetooth: hci4: command tx timeout [ 103.552436][ T6765] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 103.561068][ T6765] netlink: 9344 bytes leftover after parsing attributes in process `syz.0.554'. [ 103.571161][ T6765] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 104.147976][ T6796] netlink: 'syz.0.567': attribute type 15 has an invalid length. [ 105.431251][ T5355] Bluetooth: hci4: command tx timeout [ 105.991529][ T5496] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 106.205738][ T5496] usb 6-1: Using ep0 maxpacket: 8 [ 106.210002][ T5496] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.214092][ T5496] usb 6-1: config 0 has no interface number 0 [ 106.216847][ T5496] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.223170][ T5496] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 106.226953][ T5496] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.234800][ T5496] usb 6-1: config 0 descriptor?? [ 106.241955][ T5496] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 106.484527][ T5410] usb 6-1: USB disconnect, device number 8 [ 106.489531][ T5410] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected [ 106.665756][ T39] audit: type=1326 audit(1725970986.210:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.0.600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7fc00000 [ 106.731180][ T5496] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 106.913986][ T5496] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.918781][ T5496] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.923402][ T5496] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.929030][ T5496] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.932420][ T5496] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.936423][ T5496] usb 7-1: config 0 descriptor?? [ 107.339621][ T39] audit: type=1326 audit(1725970986.880:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.0.600" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f53579 code=0x7fc00000 [ 107.366603][ T5496] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 107.378718][ T5496] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 107.382036][ T5496] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 107.385248][ T5496] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 107.388423][ T5496] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 107.392876][ T5496] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 107.396082][ T5496] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 107.399280][ T5496] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 107.404877][ T5496] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 107.408074][ T5496] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 107.411994][ T5496] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 107.415352][ T5496] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 107.417232][ T6882] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 107.417232][ T6882] program syz.3.602 not setting count and/or reply_len properly [ 107.418382][ T5496] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 107.418401][ T5496] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 107.418417][ T5496] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 107.419070][ T5496] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 107.444402][ T5496] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 107.643134][ T5496] usb 7-1: USB disconnect, device number 5 [ 107.651381][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 107.862605][ T8] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.869450][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.873851][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 107.878055][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.884895][ T8] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.888877][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.895487][ T8] usb 6-1: config 0 descriptor?? [ 108.264685][ T6894] team0: entered promiscuous mode [ 108.266848][ T6894] team_slave_0: entered promiscuous mode [ 108.270302][ T6894] team_slave_1: entered promiscuous mode [ 108.277456][ T6894] team0: left promiscuous mode [ 108.279399][ T6894] team_slave_0: left promiscuous mode [ 108.283069][ T6894] team_slave_1: left promiscuous mode [ 108.325910][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 108.328784][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 108.332568][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 108.335884][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 108.339150][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 108.342162][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 108.344825][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 108.347990][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 108.351008][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 108.354383][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 108.357458][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 108.360541][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 108.364031][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 108.367430][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 108.370544][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 108.375376][ T8] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 108.386541][ T8] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 108.600308][ T5496] usb 6-1: USB disconnect, device number 9 [ 108.949135][ T6912] netlink: 3068 bytes leftover after parsing attributes in process `syz.2.613'. [ 108.953764][ T6912] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.613'. [ 109.431492][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 109.647444][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.652065][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.656272][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.676631][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.680579][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.691555][ T10] usb 8-1: config 0 descriptor?? [ 110.163990][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 110.167267][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 110.180765][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 110.185019][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 110.188311][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 110.201178][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 110.204602][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 110.207877][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 110.210973][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 110.221230][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 110.224492][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 110.227854][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 110.237995][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 110.241392][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 110.244641][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 110.256783][ T10] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 110.269151][ T10] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 110.447897][ T1293] usb 8-1: USB disconnect, device number 5 [ 111.315878][ T5649] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 111.335552][ T6958] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 111.514222][ T5649] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.522000][ T5649] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.525657][ T5649] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 111.537742][ T5649] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.551157][ T5649] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.554502][ T5649] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.561835][ T5649] usb 8-1: config 0 descriptor?? [ 111.999894][ T5649] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 112.009931][ T5649] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 112.014057][ T5649] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 112.017285][ T5649] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 112.019865][ T5649] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 112.032762][ T5649] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 112.035419][ T5649] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 112.038611][ T5649] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 112.046351][ T5649] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 112.050216][ T5649] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 112.054017][ T5649] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 112.057186][ T5649] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 112.061709][ T5649] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 112.064980][ T5649] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 112.068236][ T5649] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 112.073206][ T5649] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 112.079502][ T5649] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 112.273819][ T5496] usb 8-1: USB disconnect, device number 6 [ 113.843013][ T7033] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 114.901261][ T5649] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 115.122304][ T5649] usb 7-1: Using ep0 maxpacket: 8 [ 115.126187][ T5649] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.131471][ T5649] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 115.135361][ T5649] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.151177][ T5649] usb 7-1: config 0 descriptor?? [ 115.219497][ T7088] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.304251][ T25] hid-generic 0000:0000:0000.000E: unknown main item tag 0x7 [ 115.307147][ T25] hid-generic 0000:0000:0000.000E: ignoring exceeding usage max [ 115.310075][ T25] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 115.313815][ T25] hid-generic 0000:0000:0000.000E: unknown main item tag 0x6 [ 115.316878][ T25] hid-generic 0000:0000:0000.000E: unknown main item tag 0xd [ 115.326666][ T25] hid-generic 0000:0000:0000.000E: hidraw1: HID v0.00 Device [syz0] on syz0 [ 115.392269][ T5649] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 115.545896][ T7108] netlink: 'syz.1.701': attribute type 11 has an invalid length. [ 116.146539][ T5459] usb 7-1: USB disconnect, device number 6 [ 116.153145][ T5459] iowarrior 7-1:0.0: I/O-Warror #0 now disconnected [ 117.701351][ T1293] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 117.911551][ T1293] usb 6-1: Using ep0 maxpacket: 8 [ 117.926715][ T1293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.937504][ T1293] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 117.945917][ T1293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.951657][ T1293] usb 6-1: config 0 descriptor?? [ 118.230435][ T1293] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 118.465000][ T7171] unknown channel width for channel at 909000KHz? [ 118.997259][ T5496] usb 6-1: USB disconnect, device number 10 [ 119.011781][ T5496] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 119.361247][ T57] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 119.411192][ T5459] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 119.552255][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 119.556393][ T57] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 119.561914][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 119.566401][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.570795][ T57] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.577121][ T57] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.581884][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.644439][ T5459] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 119.647251][ T5459] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 119.650920][ T5459] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 119.654823][ T5459] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.659966][ T5459] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.663458][ T5459] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.668711][ T5459] usb 8-1: config 0 descriptor?? [ 119.673985][ T7203] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 119.810599][ T57] usb 5-1: usb_control_msg returned -32 [ 119.813088][ T57] usbtmc 5-1:16.0: can't read capabilities [ 120.093121][ T5459] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 120.096436][ T5459] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 120.099588][ T5459] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 120.107577][ T5459] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 120.110836][ T5459] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 120.114283][ T5459] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 120.118661][ T5459] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 120.126843][ T5459] plantronics 0003:047F:FFFF.000F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 120.173628][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 120.177985][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 120.182039][ T7207] usbtmc 5-1:16.0: Unable to send data, error -71 [ 120.293456][ T57] usb 8-1: USB disconnect, device number 7 [ 120.896914][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x7 [ 120.900087][ T10] hid-generic 0000:0000:0000.0010: ignoring exceeding usage max [ 120.904975][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 120.907936][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x6 [ 120.910895][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0xd [ 120.917581][ T10] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.00 Device [syz0] on syz0 [ 121.378895][ T7240] netlink: 'syz.3.762': attribute type 16 has an invalid length. [ 121.633823][ T7254] futex_wake_op: syz.1.769 tries to shift op by 144; fix this program [ 121.787222][ T7260] binder: 7259:7260 unknown command 1935813253 [ 121.789797][ T7260] binder: 7259:7260 ioctl c0306201 200003c0 returned -22 [ 122.072952][ T8] usb 5-1: USB disconnect, device number 8 [ 122.301304][ T57] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 122.491200][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 122.501218][ T57] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 122.505391][ T57] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.509401][ T57] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.514074][ T57] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.523650][ T57] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.536547][ T57] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 122.548103][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.571364][ T5649] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 122.751155][ T5649] usb 5-1: Using ep0 maxpacket: 8 [ 122.754255][ T5649] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.757907][ T5649] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 122.760915][ T5649] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.765010][ T5649] usb 5-1: config 0 descriptor?? [ 122.814623][ T57] usb 8-1: usb_control_msg returned -32 [ 122.816520][ T57] usbtmc 8-1:16.0: can't read capabilities [ 122.999955][ T5649] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 123.181941][ T7313] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 123.190858][ T5459] usb 8-1: USB disconnect, device number 8 [ 123.228365][ T7316] syz_tun: entered promiscuous mode [ 123.228857][ T7318] fuse: Bad value for 'group_id' [ 123.232947][ T7318] fuse: Bad value for 'group_id' [ 123.655786][ T7341] fuse: Bad value for 'group_id' [ 123.657863][ T7341] fuse: Bad value for 'group_id' [ 124.337905][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.818'. [ 124.526834][ T7376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.823'. [ 124.701634][ T35] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 124.740242][ T7395] nfs: Unknown parameter 'ntext' [ 124.921173][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 124.925521][ T35] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.929752][ T35] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.934564][ T35] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.938937][ T35] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.947053][ T35] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.950992][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.187625][ T35] usb 6-1: GET_CAPABILITIES returned 0 [ 125.190151][ T35] usbtmc 6-1:16.0: can't read capabilities [ 125.323224][ T5649] usb 5-1: USB disconnect, device number 9 [ 125.328481][ T5649] iowarrior 5-1:0.0: I/O-Warror #1 now disconnected [ 125.391468][ T7370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.404574][ T7370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.429087][ T8] usb 6-1: USB disconnect, device number 11 [ 125.919262][ T7423] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.838'. [ 125.923671][ T7423] openvswitch: netlink: Multiple metadata blocks provided [ 125.955438][ T7425] tun0: tun_chr_ioctl cmd 1074025675 [ 125.957971][ T7425] tun0: persist enabled [ 125.960955][ T7425] tun0: tun_chr_ioctl cmd 1074025675 [ 125.963572][ T7425] tun0: persist disabled [ 126.417298][ T7447] netlink: 132 bytes leftover after parsing attributes in process `syz.2.851'. [ 127.331636][ T7494] netlink: 132 bytes leftover after parsing attributes in process `syz.3.872'. [ 127.523988][ T7505] syz.1.877[7505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.524130][ T7505] syz.1.877[7505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.875033][ T7523] netlink: 132 bytes leftover after parsing attributes in process `syz.1.884'. [ 127.891260][ T35] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 128.083037][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 128.087158][ T35] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 128.091761][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 128.098633][ T35] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.121164][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.126747][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.129402][ T7535] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.898'. [ 128.133303][ T35] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 128.136378][ T7535] openvswitch: netlink: Multiple metadata blocks provided [ 128.138975][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 128.151160][ T35] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.156156][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.160707][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.168568][ T35] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 128.178203][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 128.183443][ T35] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.188185][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.202761][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.213315][ T35] usb 7-1: string descriptor 0 read error: -22 [ 128.215764][ T35] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 128.219905][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.235191][ T35] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 128.501256][ T5649] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 128.566950][ T35] usb 7-1: USB disconnect, device number 7 [ 128.567609][ T7542] usb 7-1: Couldn't submit interrupt_out_urb -19 [ 128.681187][ T5649] usb 6-1: Using ep0 maxpacket: 8 [ 128.685346][ T5649] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 128.688554][ T5649] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.692992][ T5649] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.696344][ T5649] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.699716][ T5649] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.704374][ T5649] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.707521][ T5649] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.954945][ T5649] usb 6-1: usb_control_msg returned -32 [ 128.957052][ T5649] usbtmc 6-1:16.0: can't read capabilities [ 128.973084][ T7550] tun0: tun_chr_ioctl cmd 1074025675 [ 128.975677][ T7550] tun0: persist enabled [ 128.978180][ T7550] tun0: tun_chr_ioctl cmd 1074025675 [ 128.980429][ T7550] tun0: persist disabled [ 129.220926][ T7558] netlink: 132 bytes leftover after parsing attributes in process `syz.0.900'. [ 129.310791][ T7562] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 129.317157][ T1293] usb 6-1: USB disconnect, device number 12 [ 129.518371][ T7574] syz.2.906[7574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.518522][ T7574] syz.2.906[7574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.927781][ T7631] netlink: 'syz.3.934': attribute type 10 has an invalid length. [ 131.011158][ T39] audit: type=1326 audit(1725971010.550:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 131.020541][ T39] audit: type=1326 audit(1725971010.550:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53598 code=0x7ffc0000 [ 131.052604][ T39] audit: type=1326 audit(1725971010.550:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 131.102451][ T39] audit: type=1326 audit(1725971010.570:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53598 code=0x7ffc0000 [ 131.119398][ T39] audit: type=1326 audit(1725971010.570:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 131.141840][ T39] audit: type=1326 audit(1725971010.590:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 131.161165][ T39] audit: type=1326 audit(1725971010.590:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53598 code=0x7ffc0000 [ 131.185062][ T39] audit: type=1326 audit(1725971010.590:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53598 code=0x7ffc0000 [ 131.194702][ T39] audit: type=1326 audit(1725971010.590:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53598 code=0x7ffc0000 [ 131.205033][ T39] audit: type=1326 audit(1725971010.590:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53598 code=0x7ffc0000 [ 132.217442][ T7688] input: syz0 as /devices/virtual/input/input16 [ 132.601397][ T5496] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 132.714168][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.716517][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.821167][ T5496] usb 5-1: Using ep0 maxpacket: 16 [ 132.832509][ T5496] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.836895][ T5496] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.841024][ T5496] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 132.851249][ T5496] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.862172][ T5496] usb 5-1: config 0 descriptor?? [ 132.928804][ T7707] binder: 7706:7707 ioctl c0306201 20000140 returned -14 [ 133.295418][ T5496] usbhid 5-1:0.0: can't add hid device: -71 [ 133.298017][ T5496] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 133.314883][ T5496] usb 5-1: USB disconnect, device number 10 [ 133.877749][ T7736] input: syz0 as /devices/virtual/input/input17 [ 133.948356][ T7738] overlayfs: missing 'lowerdir' [ 134.314682][ T7761] overlayfs: missing 'lowerdir' [ 134.859328][ T7788] batadv_slave_1: entered promiscuous mode [ 134.866058][ T7787] batadv_slave_1: left promiscuous mode [ 135.613708][ T58] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 135.803031][ T58] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 135.806932][ T58] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 135.817400][ T58] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.831680][ T58] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 135.836497][ T58] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 135.843735][ T58] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 135.847706][ T58] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.851804][ T58] usb 7-1: Product: syz [ 135.853700][ T58] usb 7-1: Manufacturer: syz [ 135.860580][ T58] cdc_wdm 7-1:1.0: skipping garbage [ 135.864457][ T58] cdc_wdm 7-1:1.0: skipping garbage [ 135.868871][ T58] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 135.871920][ T58] cdc_wdm 7-1:1.0: Unknown control protocol [ 136.083814][ T35] usb 7-1: USB disconnect, device number 8 [ 137.583970][ T7907] syzkaller1: entered promiscuous mode [ 137.586717][ T7907] syzkaller1: entered allmulticast mode [ 137.604731][ T7913] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 138.842977][ T7977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1086'. [ 138.913130][ T7983] binder: 7982:7983 ioctl c018620c 200002c0 returned -22 [ 139.070465][ T7993] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1094'. [ 139.074154][ T7991] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 139.079141][ T7993] gretap0: entered promiscuous mode [ 139.135540][ T7993] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1094'. [ 139.139856][ T7993] 0XD: renamed from gretap0 [ 139.147930][ T7993] 0XD: left promiscuous mode [ 139.150229][ T7993] 0XD: entered allmulticast mode [ 139.155565][ T7993] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 140.318215][ T8026] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 142.755875][ T8094] input: syz0 as /devices/virtual/input/input18 [ 143.588412][ T8153] vcan0: entered allmulticast mode [ 143.592057][ T8153] vcan0: left allmulticast mode [ 143.794326][ T1103] Bluetooth: hci5: Frame reassembly failed (-84) [ 143.798111][ T64] Bluetooth: hci5: Frame reassembly failed (-84) [ 143.944151][ T8177] netlink: 'syz.2.1180': attribute type 29 has an invalid length. [ 143.950630][ T8177] netlink: 'syz.2.1180': attribute type 29 has an invalid length. [ 143.955095][ T8177] netlink: 'syz.2.1180': attribute type 29 has an invalid length. [ 143.959287][ T8177] netlink: 'syz.2.1180': attribute type 29 has an invalid length. [ 145.031281][ T4790] Bluetooth: hci4: command tx timeout [ 145.831240][ T4790] Bluetooth: hci5: command 0xfc11 tx timeout [ 145.831280][ T5355] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 147.060475][ T8263] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 147.227102][ T8269] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1223'. [ 147.336605][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1225'. [ 147.455600][ T8283] syz.0.1229[8283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.455806][ T8283] syz.0.1229[8283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.479192][ T39] kauditd_printk_skb: 1259 callbacks suppressed [ 147.479208][ T39] audit: type=1326 audit(1725971027.020:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.0.1229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 147.523054][ T39] audit: type=1326 audit(1725971027.020:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.0.1229" exe="/syz-executor" sig=0 arch=40000003 syscall=312 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 147.541267][ T39] audit: type=1326 audit(1725971027.020:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.0.1229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 147.577068][ T39] audit: type=1326 audit(1725971027.020:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.0.1229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 147.600580][ T39] audit: type=1326 audit(1725971027.020:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.0.1229" exe="/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 147.612309][ T39] audit: type=1326 audit(1725971027.020:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.0.1229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 147.623068][ T39] audit: type=1326 audit(1725971027.020:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.0.1229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 148.438827][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1238'. [ 148.528892][ T8306] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1239'. [ 148.829661][ T8322] syz.2.1248[8322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.829805][ T8322] syz.2.1248[8322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.859893][ T39] audit: type=1326 audit(1725971028.400:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.2.1248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 148.887231][ T39] audit: type=1326 audit(1725971028.400:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.2.1248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 148.901224][ T39] audit: type=1326 audit(1725971028.410:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.2.1248" exe="/syz-executor" sig=0 arch=40000003 syscall=312 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 150.274131][ T8389] Invalid option length (1047906) for dns_resolver key [ 150.571664][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 151.528836][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'. [ 152.999740][ T8536] Invalid option length (1047906) for dns_resolver key [ 153.009141][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 153.009154][ T39] audit: type=1326 audit(1725971032.560:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.1.1344" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf748e579 code=0x0 [ 153.471190][ T57] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 153.675228][ T57] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.691496][ T57] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 153.695929][ T57] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 153.701638][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.713413][ T8549] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 153.729898][ T57] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.060641][ T5459] usb 7-1: USB disconnect, device number 9 [ 154.151285][ T5496] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 154.333281][ T5496] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.338846][ T5496] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.343633][ T5496] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.349987][ T5496] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.354512][ T5496] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.361494][ T5496] usb 6-1: config 0 descriptor?? [ 154.828756][ T5496] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 154.834650][ T5496] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 154.841929][ T5496] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 154.848884][ T5496] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 154.854674][ T5496] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 154.858158][ T5496] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 154.862809][ T5496] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 154.866327][ T5496] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 154.869760][ T5496] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 154.874591][ T5496] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 154.883487][ T5496] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 154.890467][ T5496] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 154.896564][ T5496] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 154.901863][ T5496] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 154.905471][ T5496] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 154.909794][ T5496] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 154.918108][ T5496] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 155.086233][ T5496] usb 6-1: USB disconnect, device number 13 [ 155.431206][ T5459] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 155.553690][ T39] audit: type=1326 audit(1725971035.100:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8639 comm="syz.3.1385" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2579 code=0x0 [ 155.621251][ T5459] usb 5-1: Using ep0 maxpacket: 8 [ 155.628413][ T5459] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 155.632751][ T5459] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.641393][ T5459] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.645792][ T5459] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.650074][ T5459] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.656154][ T5459] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.659405][ T5459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.895213][ T5459] usb 5-1: usb_control_msg returned -32 [ 155.897731][ T5459] usbtmc 5-1:16.0: can't read capabilities [ 156.271152][ T8661] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 156.277275][ T5409] usb 5-1: USB disconnect, device number 11 [ 156.438868][ T8663] No buffer was provided with the request [ 156.741408][ T5496] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 156.891011][ T8677] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.1400'. [ 156.896376][ T8677] netlink: 'syz.0.1400': attribute type 1 has an invalid length. [ 156.906920][ T8677] netlink: 113 bytes leftover after parsing attributes in process `syz.0.1400'. [ 156.928012][ T5496] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.932721][ T5496] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.936371][ T5496] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.949919][ T5496] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.956406][ T5459] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 156.957703][ T5496] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.976961][ T5496] usb 8-1: config 0 descriptor?? [ 157.168737][ T5459] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.173619][ T5459] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.178173][ T5459] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.184586][ T5459] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.189167][ T5459] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.202056][ T5459] usb 6-1: config 0 descriptor?? [ 157.406271][ T5496] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 157.411056][ T5496] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 157.415448][ T5496] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 157.419771][ T5496] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 157.425498][ T5496] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 157.430184][ T5496] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 157.436618][ T5496] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 157.445047][ T5496] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 157.449748][ T5496] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 157.456466][ T5496] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 157.463880][ T5496] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 157.468537][ T5496] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 157.473426][ T5496] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 157.478069][ T5496] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 157.482966][ T5496] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 157.488324][ T5496] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 157.496051][ T5496] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 157.661458][ T5459] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 157.681684][ T5459] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 157.685495][ T5459] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 157.688717][ T5459] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 157.701176][ T5459] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 157.705064][ T5459] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 157.705955][ T10] usb 8-1: USB disconnect, device number 9 [ 157.709111][ T5459] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 157.709132][ T5459] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 157.709149][ T5459] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 157.709165][ T5459] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 157.746876][ T5459] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 157.762323][ T5459] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 157.934053][ T5459] usb 6-1: USB disconnect, device number 14 [ 158.810695][ T8707] syzkaller1: entered promiscuous mode [ 158.816109][ T8707] syzkaller1: entered allmulticast mode [ 158.921216][ T35] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 159.101166][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 159.105925][ T35] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.107119][ T8715] tipc: Started in network mode [ 159.115125][ T8715] tipc: Node identity ffffffff, cluster identity 4711 [ 159.118852][ T8715] tipc: Node number set to 4294967295 [ 159.121306][ T35] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.131201][ T5410] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 159.131336][ T35] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.151161][ T35] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.169764][ T35] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.221148][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.313308][ T5410] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.317735][ T5410] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.331156][ T5410] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.343709][ T5410] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.361373][ T5410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.367612][ T5410] usb 5-1: Product: syz [ 159.383020][ T5410] usb 5-1: Manufacturer: syz [ 159.385930][ T5410] usb 5-1: SerialNumber: syz [ 159.393223][ T5410] usb 5-1: selecting invalid altsetting 1 [ 159.461702][ T8736] netlink: 'syz.2.1428': attribute type 3 has an invalid length. [ 159.467744][ T8736] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1428'. [ 159.467954][ T35] usb 8-1: GET_CAPABILITIES returned 0 [ 159.480284][ T35] usbtmc 8-1:16.0: can't read capabilities [ 159.600675][ T5410] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 159.607474][ T5410] cdc_ncm 5-1:1.0: bind() failure [ 159.617402][ T5410] usb 5-1: USB disconnect, device number 12 [ 159.661262][ T5409] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 159.679516][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.685475][ T25] usb 8-1: USB disconnect, device number 10 [ 159.861282][ T5409] usb 6-1: Using ep0 maxpacket: 8 [ 159.872580][ T5409] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 159.876352][ T5409] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.880669][ T5409] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.885270][ T5409] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.889582][ T5409] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.897459][ T5409] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 159.901947][ T5409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.145377][ T5409] usb 6-1: usb_control_msg returned -32 [ 160.148069][ T5409] usbtmc 6-1:16.0: can't read capabilities [ 160.177753][ T8742] tipc: Started in network mode [ 160.180054][ T8742] tipc: Node identity ffffffff, cluster identity 4711 [ 160.183767][ T8742] tipc: Node number set to 4294967295 [ 160.385631][ T58] kernel write not supported for file /input/event0 (pid: 58 comm: kworker/1:1) [ 160.511823][ T8763] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 160.513942][ T8764] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 160.518908][ T25] usb 6-1: USB disconnect, device number 15 [ 160.541820][ T5409] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 160.759490][ T5409] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.764450][ T5409] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 160.768845][ T5409] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.772936][ T5409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.781379][ T8746] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.788989][ T5409] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.089625][ T5459] usb 5-1: USB disconnect, device number 13 [ 161.128191][ T8779] netlink: 'syz.2.1454': attribute type 3 has an invalid length. [ 161.132772][ T8779] netlink: 'syz.2.1454': attribute type 4 has an invalid length. [ 161.146754][ T8779] netlink: 'syz.2.1454': attribute type 7 has an invalid length. [ 161.150419][ T8779] netlink: 'syz.2.1454': attribute type 8 has an invalid length. [ 161.155838][ T8779] netlink: 'syz.2.1454': attribute type 7 has an invalid length. [ 161.159961][ T8779] netlink: 198180 bytes leftover after parsing attributes in process `syz.2.1454'. [ 161.264490][ T8788] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 161.353246][ T8791] syzkaller1: entered promiscuous mode [ 161.356111][ T8791] syzkaller1: entered allmulticast mode [ 161.626917][ T39] audit: type=1326 audit(1725971041.170:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.2.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 161.641519][ T39] audit: type=1326 audit(1725971041.170:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.2.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 161.664868][ T39] audit: type=1326 audit(1725971041.180:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.2.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 161.677333][ T39] audit: type=1326 audit(1725971041.180:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.2.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 161.685386][ T39] audit: type=1326 audit(1725971041.190:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.2.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 161.695177][ T39] audit: type=1326 audit(1725971041.200:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.2.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 161.703572][ T39] audit: type=1326 audit(1725971041.200:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.2.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 161.713437][ T39] audit: type=1326 audit(1725971041.200:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.2.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 161.727134][ T39] audit: type=1326 audit(1725971041.200:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.2.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 161.735192][ T39] audit: type=1326 audit(1725971041.200:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.2.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 162.146168][ T8829] dccp_invalid_packet: P.CsCov 3 exceeds packet length 256 [ 162.150438][ T8832] vivid-000: disconnect [ 162.156344][ T8832] vivid-000: reconnect [ 162.551402][ T35] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 162.756618][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.760523][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.771647][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.781151][ T35] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.784779][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.796188][ T35] usb 5-1: config 0 descriptor?? [ 163.021557][ T5459] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 163.201271][ T5459] usb 7-1: Using ep0 maxpacket: 8 [ 163.204807][ T5459] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.208956][ T5459] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.213875][ T5459] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.217229][ T5459] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.223402][ T5459] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.227909][ T5459] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.234135][ T35] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 163.237743][ T35] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 163.243029][ T35] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 163.246414][ T35] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 163.249345][ T35] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 163.256748][ T35] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 163.259312][ T35] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 163.265040][ T35] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 163.268198][ T35] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 163.271869][ T35] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 163.276626][ T35] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 163.282271][ T35] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 163.351677][ T8884] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.1495'. [ 163.356141][ T8884] openvswitch: netlink: IP tunnel dst address not specified [ 163.426443][ T1101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.476019][ T5459] usb 7-1: GET_CAPABILITIES returned 0 [ 163.478068][ T5459] usbtmc 7-1:16.0: can't read capabilities [ 163.518298][ T5459] usb 5-1: USB disconnect, device number 14 [ 163.567622][ T1101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.643011][ T1101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.661970][ T8891] [U] [ 163.663515][ T8891] [U] [ 163.664480][ T8891] [U] n'UUrYՖqՉX@&e~k<7$f [ 163.666742][ T8891] [U] [ 163.667732][ T8891] [U] [ 163.669286][ T8891] [U] [ 163.670236][ T8891] [U] [ 163.671265][ T8891] [U] [ 163.672431][ T8891] [U] [ 163.676595][ T8891] [U] [ 163.677556][ T8891] [U] [ 163.678491][ T8891] [U] [ 163.684926][ T8890] [U] [ 163.692222][ T1293] usb 7-1: USB disconnect, device number 10 [ 163.753365][ T1101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.764678][ T4790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.772167][ T4790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.776588][ T4790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.781069][ T4790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.785366][ T4790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 163.788920][ T4790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.920705][ T1101] bridge_slave_1: left allmulticast mode [ 163.923350][ T1101] bridge_slave_1: left promiscuous mode [ 163.925844][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.930112][ T1101] bridge_slave_0: left allmulticast mode [ 163.932761][ T1101] bridge_slave_0: left promiscuous mode [ 163.935351][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.382712][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.388816][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.411570][ T1101] bond0 (unregistering): Released all slaves [ 164.693714][ T8894] chnl_net:caif_netlink_parms(): no params data found [ 165.053141][ T8894] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.060901][ T8894] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.071378][ T8894] bridge_slave_0: entered allmulticast mode [ 165.079215][ T8894] bridge_slave_0: entered promiscuous mode [ 165.093611][ T8894] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.096434][ T8894] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.099440][ T8894] bridge_slave_1: entered allmulticast mode [ 165.112626][ T8894] bridge_slave_1: entered promiscuous mode [ 165.156754][ T1101] hsr_slave_0: left promiscuous mode [ 165.160113][ T1101] hsr_slave_1: left promiscuous mode [ 165.166274][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.174137][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.184054][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.190794][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.259585][ T1101] veth1_macvtap: left promiscuous mode [ 165.261694][ T1101] veth0_macvtap: left promiscuous mode [ 165.263659][ T1101] veth1_vlan: left promiscuous mode [ 165.265413][ T1101] veth0_vlan: left promiscuous mode [ 165.831487][ T5355] Bluetooth: hci4: command tx timeout [ 166.357106][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 166.471328][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 167.444166][ T8894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.459980][ T8894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.567480][ T8894] team0: Port device team_slave_0 added [ 167.585309][ T8894] team0: Port device team_slave_1 added [ 167.676579][ T8894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.679722][ T8894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.721750][ T8894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.728414][ T8894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.741272][ T8894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.761233][ T8894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.877012][ T8894] hsr_slave_0: entered promiscuous mode [ 167.887970][ T8894] hsr_slave_1: entered promiscuous mode [ 167.891656][ T8894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.895011][ T8894] Cannot create hsr debugfs directory [ 167.921541][ T5355] Bluetooth: hci4: command tx timeout [ 168.711497][ T5496] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 168.827909][ T8894] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 168.840667][ T8894] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 168.848619][ T8894] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.856418][ T8894] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 168.904084][ T5496] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.908634][ T5496] usb 5-1: config 0 has no interfaces? [ 168.912543][ T5496] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 168.921274][ T5496] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.932110][ T5496] usb 5-1: config 0 descriptor?? [ 168.996220][ T8894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.022202][ T8894] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.037107][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.040287][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.083795][ T8894] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 169.087620][ T8894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.098781][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.101966][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.382208][ T8894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.415491][ T5496] usb 5-1: USB disconnect, device number 15 [ 169.463746][ T8894] veth0_vlan: entered promiscuous mode [ 169.475979][ T8894] veth1_vlan: entered promiscuous mode [ 169.550637][ T8894] veth0_macvtap: entered promiscuous mode [ 169.559005][ T8894] veth1_macvtap: entered promiscuous mode [ 169.586732][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.591958][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.596211][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.600672][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.606085][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.610531][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.614992][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.619362][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.628720][ T8894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.642746][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.647112][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.655781][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.660240][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.666491][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.671033][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.679970][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.684523][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.689953][ T8894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.701603][ T8894] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.705302][ T8894] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.708857][ T8894] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.713694][ T8894] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.815277][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.818648][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.865602][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.869236][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.003531][ T5355] Bluetooth: hci4: command tx timeout [ 170.295835][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'. [ 170.302930][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'. [ 171.305766][ T9068] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 171.831233][ T1293] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 172.011199][ T1293] usb 5-1: Using ep0 maxpacket: 8 [ 172.014870][ T1293] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 172.018787][ T1293] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 172.031196][ T1293] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.035323][ T1293] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.040207][ T1293] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.061151][ T1293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.071221][ T4790] Bluetooth: hci4: command tx timeout [ 172.279462][ T1293] usb 5-1: GET_CAPABILITIES returned 0 [ 172.282965][ T1293] usbtmc 5-1:16.0: can't read capabilities [ 172.301361][ T5409] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 172.339861][ T9091] /dev/loop2: Can't open blockdev [ 172.481487][ T5409] usb 8-1: Using ep0 maxpacket: 8 [ 172.484458][ T10] usb 5-1: USB disconnect, device number 16 [ 172.503158][ T5409] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.507015][ T5409] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.509930][ T5409] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.513525][ T5409] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.517653][ T5409] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.520612][ T5409] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.697817][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 172.697831][ T39] audit: type=1326 audit(1725971052.240:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.2.1559" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 172.709200][ T39] audit: type=1326 audit(1725971052.240:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.2.1559" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 172.716269][ T39] audit: type=1326 audit(1725971052.250:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.2.1559" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 172.726487][ T39] audit: type=1326 audit(1725971052.250:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.2.1559" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 172.741216][ T39] audit: type=1326 audit(1725971052.250:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.2.1559" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 172.761720][ T5409] usb 8-1: GET_CAPABILITIES returned 0 [ 172.763906][ T5409] usbtmc 8-1:16.0: can't read capabilities [ 172.977798][ T5410] usb 8-1: USB disconnect, device number 11 [ 173.050370][ T9105] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 173.052654][ T9103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1561'. [ 173.105598][ T9103] Zero length message leads to an empty skb [ 173.271234][ T4790] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.275300][ T5355] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 173.311757][ T9111] kvm: kvm [9110]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000004a) [ 173.696959][ T9132] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1573'. [ 173.998793][ T9150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1584'. [ 174.007696][ T39] audit: type=1326 audit(1725971053.550:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.2.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 174.024711][ T39] audit: type=1326 audit(1725971053.550:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.2.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 174.039709][ T39] audit: type=1326 audit(1725971053.570:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.2.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 174.055267][ T39] audit: type=1326 audit(1725971053.570:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.2.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 174.063673][ T39] audit: type=1326 audit(1725971053.570:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.2.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 174.427650][ T9172] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 174.441240][ T35] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 174.535559][ T9181] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1593'. [ 174.633962][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.638318][ T35] usb 6-1: config 0 has no interfaces? [ 174.640739][ T35] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 174.650123][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.661711][ T35] usb 6-1: config 0 descriptor?? [ 174.805170][ T9192] kvm: kvm [9191]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000004a) [ 175.146949][ T5410] usb 6-1: USB disconnect, device number 16 [ 175.361258][ T5355] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.371446][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 175.551212][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 175.555419][ T10] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 175.558583][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.563394][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.567450][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.572089][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.576924][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 175.580696][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.843787][ T10] usb 8-1: usb_control_msg returned -32 [ 175.846245][ T10] usbtmc 8-1:16.0: can't read capabilities [ 176.131186][ T9231] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 176.205742][ T9235] /dev/loop0: Can't open blockdev [ 176.210098][ T9236] usbtmc 8-1:16.0: usb_bulk_msg returned -71 [ 176.413352][ T57] usb 8-1: USB disconnect, device number 12 [ 178.071266][ T4790] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.074497][ T5355] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 179.042412][ T9319] ================================================================== [ 179.045992][ T9319] BUG: KASAN: slab-out-of-bounds in filter_chain+0xf6/0x110 [ 179.049194][ T9319] Read of size 8 at addr ffff888012afa2b0 by task syz.2.1652/9319 [ 179.054852][ T9319] [ 179.055956][ T9319] CPU: 3 UID: 0 PID: 9319 Comm: syz.2.1652 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 179.060602][ T9319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.065295][ T9319] Call Trace: [ 179.066790][ T9319] [ 179.068116][ T9319] dump_stack_lvl+0x116/0x1f0 [ 179.070214][ T9319] print_report+0xc3/0x620 [ 179.072280][ T9319] ? __virt_addr_valid+0x5e/0x590 [ 179.074516][ T9319] ? __phys_addr+0xc6/0x150 [ 179.076531][ T9319] kasan_report+0xd9/0x110 [ 179.078522][ T9319] ? filter_chain+0xf6/0x110 [ 179.080589][ T9319] ? filter_chain+0xf6/0x110 [ 179.082647][ T9319] filter_chain+0xf6/0x110 [ 179.084658][ T9319] uprobe_mmap+0x46b/0x1240 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 179.086694][ T9319] ? __pfx_uprobe_mmap+0x10/0x10 [ 179.089089][ T9319] mmap_region+0x1228/0x2760 [ 179.091179][ T9319] ? __pfx_mmap_region+0x10/0x10 [ 179.093399][ T9319] ? security_mmap_addr+0x8e/0xb0 [ 179.095644][ T9319] ? __get_unmapped_area+0x271/0x3a0 [ 179.097988][ T9319] do_mmap+0xbfb/0xfb0 [ 179.099818][ T9319] ? security_mmap_file+0x192/0x1d0 [ 179.102131][ T9319] vm_mmap_pgoff+0x1ba/0x360 [ 179.104202][ T9319] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 179.106469][ T9319] ksys_mmap_pgoff+0x332/0x5d0 [ 179.108805][ T9319] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 179.111194][ T9319] __do_fast_syscall_32+0x73/0x120 [ 179.113480][ T9319] do_fast_syscall_32+0x32/0x80 [ 179.115654][ T9319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.118444][ T9319] RIP: 0023:0xf743e579 [ 179.120275][ T9319] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 179.128937][ T9319] RSP: 002b:00000000f572656c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 179.132587][ T9319] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000400000 [ 179.136020][ T9319] RDX: 0000000000000001 RSI: 0000000000010012 RDI: 0000000000000004 [ 179.139502][ T9319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.143017][ T9319] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 179.146376][ T9319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.149380][ T9319] [ 179.150720][ T9319] [ 179.151270][ T8] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 179.151733][ T9319] Allocated by task 8894: [ 179.151744][ T9319] kasan_save_stack+0x33/0x60 [ 179.158243][ T9319] kasan_save_track+0x14/0x30 [ 179.159896][ T9319] __kasan_kmalloc+0xaa/0xb0 [ 179.161457][ T9319] dccp_feat_entry_new+0x1a2/0x380 [ 179.163200][ T9319] __feat_register_sp+0x301/0x520 [ 179.164895][ T9319] dccp_feat_init+0x2ae/0x800 [ 179.166514][ T9319] dccp_init_sock+0x327/0x420 [ 179.168113][ T9319] dccp_v6_init_sock+0x1f/0xd0 [ 179.169729][ T9319] inet6_create+0xb53/0x12e0 [ 179.171309][ T9319] __sock_create+0x32e/0x800 [ 179.172888][ T9319] inet_ctl_sock_create+0x96/0x230 [ 179.174606][ T9319] dccp_v6_init_net+0x63/0x90 [ 179.176368][ T9319] ops_init+0xb9/0x650 [ 179.178067][ T9319] setup_net+0x5fc/0xd60 [ 179.179841][ T9319] copy_net_ns+0x4b7/0x920 [ 179.181734][ T9319] create_new_namespaces+0x3ea/0xad0 [ 179.183937][ T9319] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 179.186276][ T9319] ksys_unshare+0x419/0x970 [ 179.188254][ T9319] __ia32_sys_unshare+0x30/0x40 [ 179.190326][ T9319] __do_fast_syscall_32+0x73/0x120 [ 179.192533][ T9319] do_fast_syscall_32+0x32/0x80 [ 179.194457][ T9319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.197136][ T9319] [ 179.198182][ T9319] The buggy address belongs to the object at ffff888012afa280 [ 179.198182][ T9319] which belongs to the cache kmalloc-64 of size 64 [ 179.203997][ T9319] The buggy address is located 8 bytes to the right of [ 179.203997][ T9319] allocated 40-byte region [ffff888012afa280, ffff888012afa2a8) [ 179.210017][ T9319] [ 179.210998][ T9319] The buggy address belongs to the physical page: [ 179.213753][ T9319] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12afa [ 179.217301][ T9319] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 179.220379][ T9319] page_type: 0xfdffffff(slab) [ 179.222409][ T9319] raw: 00fff00000000000 ffff88801ac428c0 ffffea00008a2980 dead000000000003 [ 179.226126][ T9319] raw: 0000000000000000 0000000000200020 00000001fdffffff 0000000000000000 [ 179.229781][ T9319] page dumped because: kasan: bad access detected [ 179.232536][ T9319] page_owner tracks the page as allocated [ 179.234983][ T9319] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5349, tgid 5349 (syz-executor), ts 64686427798, free_ts 64686370010 [ 179.242738][ T9319] post_alloc_hook+0x2d1/0x350 [ 179.244838][ T9319] get_page_from_freelist+0x1351/0x2e50 [ 179.247218][ T9319] __alloc_pages_noprof+0x22b/0x2460 [ 179.249499][ T9319] alloc_slab_page+0x4e/0xf0 [ 179.251484][ T9319] new_slab+0x84/0x260 [ 179.253272][ T9319] ___slab_alloc+0xdac/0x1870 [ 179.255249][ T9319] __slab_alloc.constprop.0+0x56/0xb0 [ 179.257560][ T9319] __kmalloc_cache_node_noprof+0xf1/0x360 [ 179.260027][ T9319] __get_vm_area_node+0xe1/0x2d0 [ 179.262154][ T9319] __vmalloc_node_range_noprof+0x270/0x14e0 [ 179.264710][ T9319] vmalloc_noprof+0x6b/0x90 [ 179.266688][ T9319] xt_compat_init_offsets+0xe1/0x1f0 [ 179.269019][ T9319] translate_compat_table+0x1f0/0x18e0 [ 179.271443][ T9319] compat_do_replace+0x35d/0x500 [ 179.273650][ T9319] do_ip6t_set_ctl+0x686/0xc20 [ 179.275792][ T9319] nf_setsockopt+0x8a/0xf0 [ 179.277770][ T9319] page last free pid 5349 tgid 5349 stack trace: [ 179.280507][ T9319] free_unref_page+0x64a/0xe40 [ 179.282612][ T9319] vfree+0x181/0x7a0 [ 179.284305][ T9319] xt_compat_flush_offsets+0x8f/0x160 [ 179.286523][ T9319] compat_get_entries+0x234/0x850 [ 179.288624][ T9319] do_ip6t_get_ctl+0x596/0xaf0 [ 179.290696][ T9319] nf_getsockopt+0x79/0xe0 [ 179.292611][ T9319] ipv6_getsockopt+0x1fd/0x2c0 [ 179.294735][ T9319] tcp_getsockopt+0x9e/0x100 [ 179.296756][ T9319] do_sock_getsockopt+0x3fe/0x870 [ 179.298902][ T9319] __sys_getsockopt+0x1a1/0x270 [ 179.301019][ T9319] __do_compat_sys_socketcall+0x42b/0x700 [ 179.303436][ T9319] __do_fast_syscall_32+0x73/0x120 [ 179.305636][ T9319] do_fast_syscall_32+0x32/0x80 [ 179.307735][ T9319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.310425][ T9319] [ 179.311475][ T9319] Memory state around the buggy address: [ 179.313874][ T9319] ffff888012afa180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 179.317274][ T9319] ffff888012afa200: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 179.320716][ T9319] >ffff888012afa280: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 179.323704][ T9319] ^ [ 179.325803][ T9319] ffff888012afa300: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 179.328945][ T9319] ffff888012afa380: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 179.332475][ T9319] ================================================================== [ 179.335711][ C3] vkms_vblank_simulate: vblank timer overrun [ 179.341577][ T9319] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 179.344770][ T9319] CPU: 3 UID: 0 PID: 9319 Comm: syz.2.1652 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 179.349228][ T9319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.353728][ T9319] Call Trace: [ 179.355224][ T9319] [ 179.356485][ T9319] dump_stack_lvl+0x3d/0x1f0 [ 179.358511][ T9319] panic+0x6dc/0x7c0 [ 179.360120][ T9319] ? __pfx_panic+0x10/0x10 [ 179.361890][ T9319] ? preempt_schedule_thunk+0x1a/0x30 [ 179.364139][ T9319] ? preempt_schedule_common+0x44/0xc0 [ 179.366395][ T9319] check_panic_on_warn+0xab/0xb0 [ 179.368540][ T9319] end_report+0x117/0x180 [ 179.370284][ T9319] kasan_report+0xe9/0x110 [ 179.372301][ T9319] ? filter_chain+0xf6/0x110 [ 179.374301][ T9319] ? filter_chain+0xf6/0x110 [ 179.376242][ T9319] filter_chain+0xf6/0x110 [ 179.378091][ T9319] uprobe_mmap+0x46b/0x1240 [ 179.380072][ T9319] ? __pfx_uprobe_mmap+0x10/0x10 [ 179.382058][ T9319] mmap_region+0x1228/0x2760 [ 179.384024][ T9319] ? __pfx_mmap_region+0x10/0x10 [ 179.385966][ T9319] ? security_mmap_addr+0x8e/0xb0 [ 179.387937][ T9319] ? __get_unmapped_area+0x271/0x3a0 [ 179.389985][ T9319] do_mmap+0xbfb/0xfb0 [ 179.391717][ T9319] ? security_mmap_file+0x192/0x1d0 [ 179.393970][ T9319] vm_mmap_pgoff+0x1ba/0x360 [ 179.396011][ T9319] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 179.398263][ T9319] ksys_mmap_pgoff+0x332/0x5d0 [ 179.400491][ T9319] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 179.402863][ T9319] __do_fast_syscall_32+0x73/0x120 [ 179.405299][ T9319] do_fast_syscall_32+0x32/0x80 [ 179.407484][ T9319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.410058][ T9319] RIP: 0023:0xf743e579 [ 179.411626][ T9319] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 179.419850][ T9319] RSP: 002b:00000000f572656c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 179.423402][ T9319] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000400000 [ 179.426781][ T9319] RDX: 0000000000000001 RSI: 0000000000010012 RDI: 0000000000000004 [ 179.430119][ T9319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.433518][ T9319] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 179.436877][ T9319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.440100][ T9319] [ 179.442154][ T9319] Kernel Offset: disabled [ 179.443677][ T9319] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:20:02 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000008 RBX=ffffc90000007a08 RCX=0000000000000001 RDX=0000000000000005 RSI=ffffffff8b49d160 RDI=0000000000000005 RBP=ffffffff8b49d160 RSP=ffffc90000007958 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000002 R11=0000000000000000 R12=0000000000000005 R13=0000000000000015 R14=ffffffff90addd08 R15=ffffc90000007a3d RIP=ffffffff818b1cd6 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000fff34fc0 CR3=0000000062fb8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f739bff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=1ffffffff2d77aaf RBX=ffffffff96bbd548 RCX=1ffffffff2b84697 RDX=00000000000003fd RSI=1ffffffff2b84790 RDI=ffffffff96bbd578 RBP=ffffffff96aace18 RSP=ffffc90004eaf4c0 R8 =0000000000000000 R9 =ffffffff9689a018 R10=0000000000000004 R11=00000000000000fc R12=ffffffff81684a20 R13=ffffffff96aace38 R14=dffffc0000000000 R15=ffffffff96aace08 RIP=ffffffff81689751 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2bd8ba CR3=00000000674c8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000001 RBX=0000000000000000 RCX=ffffffff848865bc RDX=ffff888024bf2440 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffc9000308f508 RSP=ffffc9000308f3c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffffff8bb12b94 R13=dffffc0000000000 R14=0000000000000004 R15=0000000000000040 RIP=ffffffff818b1adc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd8e2e90d00 ffffffff 00c00000 GS =0000 ffff88802b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000559d1e74f000 CR3=000000004669c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=33724eb133724eb1 33724eb133724eb1 33724eb133724eb1 33724eb133724eb1 33724eb133724eb1 33724eb133724eb1 33724eb133724eb1 33724eb133724eb1 ZMM22=43088a6843088a68 43088a6843088a68 43088a6843088a68 43088a6843088a68 43088a6843088a68 43088a6843088a68 43088a6843088a68 43088a6843088a68 ZMM23=db110d71db110d71 db110d71db110d71 db110d71db110d71 db110d71db110d71 db110d71db110d71 db110d71db110d71 db110d71db110d71 db110d71db110d71 ZMM24=d3827320d3827320 d3827320d3827320 d3827320d3827320 d3827320d3827320 d3827320d3827320 d3827320d3827320 d3827320d3827320 d3827320d3827320 ZMM25=a6994e20a6994e20 a6994e20a6994e20 a6994e20a6994e20 a6994e20a6994e20 a6994e20a6994e20 a6994e20a6994e20 a6994e20a6994e20 a6994e20a6994e20 ZMM26=4848081948480819 4848081948480819 4848081948480819 4848081948480819 4848081948480819 4848081948480819 4848081948480819 4848081948480819 ZMM27=454cb930454cb930 454cb930454cb930 454cb930454cb930 454cb930454cb930 454cb930454cb930 454cb930454cb930 454cb930454cb930 454cb930454cb930 ZMM28=000001800000017f 0000017e0000017d 0000017c0000017b 0000017a00000179 0000017800000177 0000017600000175 0000017400000173 0000017200000171 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3312000033120000 3312000033120000 3312000033120000 3312000033120000 3312000033120000 3312000033120000 3312000033120000 3312000033120000 info registers vcpu 3 CPU#3 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fc27c5 RDI=ffffffff9a516680 RBP=ffffffff9a516640 RSP=ffffc90002d5f5a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000002f R14=ffffffff84fc2760 R15=0000000000000000 RIP=ffffffff84fc27ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b900000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f6d40000 CR3=00000000664fe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000