last executing test programs: 2m49.695405072s ago: executing program 1 (id=14559): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, 0x0, &(0x7f0000000400)=""/154}, 0x20) 2m49.491043777s ago: executing program 1 (id=14564): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 2m49.308273576s ago: executing program 1 (id=14568): r0 = fanotify_init(0x200, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x1, 0x4000101a, r1, 0x0) fanotify_mark(r0, 0x80, 0x8000038, r1, 0x0) 2m49.137821988s ago: executing program 1 (id=14573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000b80)={0x1, 0x0, [{0x40000090, 0x0, 0x7}]}) 2m48.756872278s ago: executing program 1 (id=14582): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2m47.848655675s ago: executing program 1 (id=14595): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000002040)=0x80000001) 2m33.505931326s ago: executing program 32 (id=14595): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000002040)=0x80000001) 3.891139965s ago: executing program 0 (id=17415): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001400)=""/18, 0x1c) 3.649211348s ago: executing program 0 (id=17419): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect$uac1(0x2, 0xb4, &(0x7f0000003b00)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902a20003010460a80904000000010100000a2401f7ff010201020a24080508000549cfbe0c240203ff2540239e3138803f23ca379e3fed7301040a00010a2609240402007532757e1324060402060600080005000a00050009000b0924030402030502"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0x0, 0x0}, 0x10) 3.505294242s ago: executing program 5 (id=17421): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@mcast2, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x9, 0x200000, 0x7, 0xfffffffffffffffd}, {0x0, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 3.393255583s ago: executing program 5 (id=17424): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) 3.309714007s ago: executing program 5 (id=17426): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000280)=[{r1, 0x1252}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003780)={0x2020}, 0x2020) write$binfmt_script(r1, &(0x7f0000020480)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) 2.331481844s ago: executing program 5 (id=17445): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f00000000c0)=[{r1, 0x100}, {r0, 0x102}, {0xffffffffffffffff, 0x130}], 0x3, 0x401) 2.15053676s ago: executing program 0 (id=17448): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 2.120175735s ago: executing program 5 (id=17449): r0 = semget$private(0x0, 0x6, 0x2ef) semop(r0, &(0x7f00000000c0)=[{0x5, 0xc873, 0x1000}], 0x1) semop(r0, &(0x7f0000000240)=[{0x0, 0xffff, 0x1000}, {0x0, 0xffff, 0x1800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)=[0x3]) 1.680407678s ago: executing program 2 (id=17459): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xdc1, &(0x7f0000002a00)=ANY=[], 0x0) 1.583477861s ago: executing program 3 (id=17461): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x1894, 0x4) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10140, 0x0) 1.416081088s ago: executing program 2 (id=17463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "1e"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.336459845s ago: executing program 3 (id=17464): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3d6) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x204000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) 1.22492305s ago: executing program 3 (id=17466): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.194291326s ago: executing program 2 (id=17468): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 1.182094053s ago: executing program 5 (id=17469): eventfd2(0x49d, 0x800) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r0], 0x0) 943.90843ms ago: executing program 3 (id=17470): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa600000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x80100, 0x68}, 0x94) 872.369178ms ago: executing program 2 (id=17471): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) 710.421793ms ago: executing program 3 (id=17474): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x103802, 0x0) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) 682.395775ms ago: executing program 2 (id=17475): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0xb, r2}, 0x10) 589.473966ms ago: executing program 4 (id=17476): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, 0xff, 0x0) 588.399043ms ago: executing program 2 (id=17477): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x21c1, &(0x7f0000000340)={0x0, 0x1a85, 0x100, 0x2, 0x182}, &(0x7f0000000300), &(0x7f0000ff4000)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7fffffff, 0x0, 0x302, 0x0, 0x0, 0xe5}, 0x0, &(0x7f0000000180)={0x8, 0x0, 0x1, 0x800000, 0x0, 0xffffffffffffffff, 0x1}, 0x0, 0x0) 400.024635ms ago: executing program 4 (id=17478): unshare(0x42000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b0000000000010902"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0xfffe, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) 386.016376ms ago: executing program 0 (id=17479): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2) 345.376535ms ago: executing program 4 (id=17480): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 227.298275ms ago: executing program 3 (id=17481): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x40000020, 0x0, 0x8}]}) 227.122909ms ago: executing program 4 (id=17482): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r0, 0x5608, 0x3f) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 85.263513ms ago: executing program 0 (id=17483): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x3, 0x800000, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x0, 0x1, 0x2}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 85.022433ms ago: executing program 4 (id=17484): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'rr\x00', 0x1, 0xa7e, 0x70}, 0x2c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) 67.77112ms ago: executing program 4 (id=17485): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x70bd27, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}}, 0x10) 0s ago: executing program 0 (id=17486): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6ad, 0x3180, 0x8000, 0x400252}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r0, 0xd44, 0x44c1, 0x7, 0x0, 0x0) kernel console output (not intermixed with test programs): nfig 0 descriptor?? [ 878.276337][ T858] usb 1-1: selecting invalid altsetting 0 [ 878.492902][ T10] usb 1-1: USB disconnect, device number 125 [ 878.577013][ T913] udevd[913]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 878.764405][ T5988] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 878.909971][ T5988] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 878.910009][ T5988] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 878.910030][ T5988] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 878.910052][ T5988] usb 4-1: config 220 has no interface number 2 [ 878.910130][ T5988] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 878.910160][ T5988] usb 4-1: config 220 interface 0 has no altsetting 0 [ 878.910181][ T5988] usb 4-1: config 220 interface 76 has no altsetting 0 [ 878.910202][ T5988] usb 4-1: config 220 interface 1 has no altsetting 0 [ 878.922296][ T5988] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 878.922401][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.922458][ T5988] usb 4-1: Product: syz [ 878.922501][ T5988] usb 4-1: Manufacturer: syz [ 878.922544][ T5988] usb 4-1: SerialNumber: syz [ 879.252077][ T5988] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 879.252115][ T5988] uvcvideo 4-1:220.0: No valid video chain found. [ 879.252177][ T5988] usb 4-1: selecting invalid altsetting 0 [ 879.322541][ T5988] usb 4-1: selecting invalid altsetting 0 [ 879.322570][ T5988] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 879.374567][ T5988] usb 4-1: USB disconnect, device number 115 [ 879.831804][ T5988] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 879.995996][ T5988] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 879.996027][ T5988] usb 1-1: config 1 has no interface number 0 [ 879.996074][ T5988] usb 1-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 879.996097][ T5988] usb 1-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 879.996119][ T5988] usb 1-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 880.000108][ T5988] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 880.000140][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.000163][ T5988] usb 1-1: Product: syz [ 880.000178][ T5988] usb 1-1: Manufacturer: syz [ 880.000194][ T5988] usb 1-1: SerialNumber: syz [ 880.100104][ T5988] usb 1-1: Expected 3 endpoints, found: 0 [ 880.136579][ T6170] usb 2-1: new low-speed USB device number 123 using dummy_hcd [ 880.282073][ T6170] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 880.282142][ T6170] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 880.282175][ T6170] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 880.282205][ T6170] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 880.282231][ T6170] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 880.307477][ T6170] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 880.307539][ T6170] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 880.307569][ T6170] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 880.307595][ T6170] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 880.307621][ T6170] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 880.336796][ T6170] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 880.336860][ T6170] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 880.336890][ T6170] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 880.336918][ T6170] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 880.336948][ T6170] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 880.458550][ T6170] usb 2-1: string descriptor 0 read error: -22 [ 880.458694][ T6170] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 880.458722][ T6170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.524847][ T6170] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 880.908152][ T5988] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 881.060859][ T5988] usb 5-1: Using ep0 maxpacket: 32 [ 881.065843][ T5988] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 881.065880][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.065895][ T5988] usb 5-1: Product: syz [ 881.065906][ T5988] usb 5-1: Manufacturer: syz [ 881.065917][ T5988] usb 5-1: SerialNumber: syz [ 881.106949][ T5988] usb 5-1: config 0 descriptor?? [ 881.116961][ T5988] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 881.117037][ T5988] dvb-usb: bulk message failed: -22 (4/0) [ 881.117049][ T5988] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 881.117132][ T5988] dvb-usb: bulk message failed: -22 (5/0) [ 881.117142][ T5988] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 881.195005][ T5988] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 881.204665][ T5988] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 881.204878][ T5988] usb 5-1: media controller created [ 881.258176][ T5988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 881.292543][ T5988] usb 5-1: selecting invalid altsetting 3 [ 881.292565][ T5988] ttusb2: set interface to alts=3 failed [ 881.364150][ T5988] DVB: Unable to find symbol tda10086_attach() [ 881.364168][ T5988] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 881.365146][ T5988] dvb-usb: bulk message failed: -22 (4/0) [ 881.365169][ T5988] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 881.367996][ T5988] dvb-usb: bulk message failed: -22 (5/0) [ 881.368061][ T5988] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 881.368447][ T5988] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 881.407794][ T5988] usb 5-1: USB disconnect, device number 10 [ 881.485595][ T3202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14061'. [ 881.513819][ T5988] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 881.941518][ T3219] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14068'. [ 881.956679][ T6170] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 882.101420][ T6170] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 882.101453][ T6170] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 882.101474][ T6170] usb 4-1: config 220 has no interface number 2 [ 882.101562][ T6170] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 882.101584][ T6170] usb 4-1: config 220 interface 0 has no altsetting 0 [ 882.101598][ T6170] usb 4-1: config 220 interface 76 has no altsetting 0 [ 882.101619][ T6170] usb 4-1: config 220 interface 1 has no altsetting 0 [ 882.104374][ T6170] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 882.104407][ T6170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.104429][ T6170] usb 4-1: Product: syz [ 882.104446][ T6170] usb 4-1: Manufacturer: syz [ 882.104461][ T6170] usb 4-1: SerialNumber: syz [ 882.416360][ T6170] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 882.416400][ T6170] uvcvideo 4-1:220.0: No valid video chain found. [ 882.416462][ T6170] usb 4-1: selecting invalid altsetting 0 [ 882.452958][ T6170] usb 4-1: selecting invalid altsetting 0 [ 882.452997][ T6170] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 882.457579][ T6170] usb 4-1: USB disconnect, device number 116 [ 882.545060][ T5988] usb 1-1: USB disconnect, device number 126 [ 882.610643][ T10] kernel write not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 883.113012][ T3254] netlink: 'syz.0.14085': attribute type 4 has an invalid length. [ 883.113038][ T3254] netlink: 17 bytes leftover after parsing attributes in process `syz.0.14085'. [ 884.669509][ T5988] usb 2-1: USB disconnect, device number 123 [ 884.855782][ T3322] ipvlan2: entered allmulticast mode [ 884.855809][ T3322] dummy0: entered allmulticast mode [ 885.753229][ T3364] bond7: (slave gre0): Device is not bonding slave [ 885.753254][ T3364] bond7: option active_slave: invalid value (gre0) [ 885.816185][ T3364] bond7 (unregistering): Released all slaves [ 885.919536][ T3375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14142'. [ 886.797690][ T6170] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 886.940777][ T6170] usb 3-1: Using ep0 maxpacket: 32 [ 886.942668][ T6170] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.942717][ T6170] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 886.942740][ T6170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.947832][ T6170] usb 3-1: config 0 descriptor?? [ 887.004645][ T6170] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 887.161748][ T3451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14173'. [ 887.393308][ T3465] block nbd3: NBD_DISCONNECT [ 887.593242][ T3476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14184'. [ 887.817371][ T5988] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 887.824719][ T3488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14191'. [ 887.981025][ T5988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.981086][ T5988] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 887.981111][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.990652][ T5988] usb 4-1: config 0 descriptor?? [ 888.048905][ T5988] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 888.080956][ T3498] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 888.197530][ T3504] GUP no longer grows the stack in syz.4.14198 (3504): 200000007000-200000008000 (200000004000) [ 888.197594][ T3504] CPU: 1 UID: 0 PID: 3504 Comm: syz.4.14198 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 888.197626][ T3504] Tainted: [L]=SOFTLOCKUP [ 888.197635][ T3504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 888.197653][ T3504] Call Trace: [ 888.197667][ T3504] [ 888.197691][ T3504] dump_stack_lvl+0xe8/0x150 [ 888.197732][ T3504] fixup_user_fault+0x637/0x6f0 [ 888.197770][ T3504] fault_in_user_writeable+0x71/0xd0 [ 888.197809][ T3504] futex_lock_pi+0x80c/0xb00 [ 888.197848][ T3504] ? __pfx_futex_lock_pi+0x10/0x10 [ 888.197870][ T3504] ? get_futex_key+0x8cd/0x1690 [ 888.197931][ T3504] ? __pfx_futex_wake_mark+0x10/0x10 [ 888.198003][ T3504] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 888.198041][ T3504] do_futex+0x292/0x420 [ 888.198070][ T3504] ? __pfx_do_futex+0x10/0x10 [ 888.198092][ T3504] ? __vm_munmap+0x2e6/0x3d0 [ 888.198126][ T3504] __se_sys_futex+0x3a8/0x450 [ 888.198157][ T3504] ? __pfx___se_sys_futex+0x10/0x10 [ 888.198179][ T3504] ? rcu_is_watching+0x15/0xb0 [ 888.198211][ T3504] ? __x64_sys_futex+0x21/0xf0 [ 888.198236][ T3504] do_syscall_64+0x14d/0xf80 [ 888.198268][ T3504] ? trace_irq_disable+0x3b/0x150 [ 888.198294][ T3504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.198319][ T3504] ? clear_bhb_loop+0x40/0x90 [ 888.198348][ T3504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.198371][ T3504] RIP: 0033:0x7f28cc92c799 [ 888.198400][ T3504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.198421][ T3504] RSP: 002b:00007f28cab7e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 888.198449][ T3504] RAX: ffffffffffffffda RBX: 00007f28ccba5fa0 RCX: 00007f28cc92c799 [ 888.198467][ T3504] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 888.198482][ T3504] RBP: 00007f28cc9c2bd9 R08: 0000000000000000 R09: 0000000000000082 [ 888.198498][ T3504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.198512][ T3504] R13: 00007f28ccba6038 R14: 00007f28ccba5fa0 R15: 00007ffeb089dad8 [ 888.198549][ T3504] [ 888.633477][ T3519] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 889.455498][ T6170] usb 3-1: USB disconnect, device number 116 [ 890.252009][ T3584] kAFS: unable to lookup cell 'էKyy [ 890.252009][ T3584] [ 890.252009][ T3584] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qG jnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5 !G3{K,' [ 890.476090][ T6170] usb 4-1: USB disconnect, device number 117 [ 890.681376][ T5988] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 890.746852][ T5988] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 890.903499][ T3613] fido_id[3613]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 892.395182][ T3689] netlink: 71 bytes leftover after parsing attributes in process `syz.2.14284'. [ 893.077315][ T5988] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 893.230272][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 893.230440][ T5988] usb 5-1: Using ep0 maxpacket: 32 [ 893.236335][ T5988] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.236396][ T5988] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 893.236421][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.273758][ T5988] usb 5-1: config 0 descriptor?? [ 893.295883][ T5988] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 893.344809][ T6170] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 893.372788][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 893.374813][ T10] usb 4-1: config 0 has no interfaces? [ 893.374851][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 893.374877][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.395451][ T10] usb 4-1: config 0 descriptor?? [ 893.487529][ T6170] usb 1-1: Using ep0 maxpacket: 16 [ 893.490411][ T6170] usb 1-1: config index 0 descriptor too short (expected 64967, got 165) [ 893.490445][ T6170] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.490467][ T6170] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 893.494362][ T6170] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 893.494393][ T6170] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.494415][ T6170] usb 1-1: Product: syz [ 893.494430][ T6170] usb 1-1: Manufacturer: syz [ 893.494445][ T6170] usb 1-1: SerialNumber: syz [ 893.625018][ T10] usb 4-1: USB disconnect, device number 118 [ 893.659294][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 893.684942][ T3743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14309'. [ 893.685009][ T3743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14309'. [ 893.796954][ T6170] usb 1-1: 0:2 : does not exist [ 893.797055][ T6170] usb 1-1: unit 32 not found! [ 893.871778][ T6170] usb 1-1: USB disconnect, device number 127 [ 893.953647][T32531] udevd[32531]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 894.204992][ T37] audit: type=1326 audit(1145.469:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3765 comm="syz.3.14319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 894.205167][ T37] audit: type=1326 audit(1145.469:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3765 comm="syz.3.14319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 894.209075][ T37] audit: type=1326 audit(1145.469:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3765 comm="syz.3.14319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 894.209726][ T37] audit: type=1326 audit(1145.469:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3765 comm="syz.3.14319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 894.210226][ T37] audit: type=1326 audit(1145.469:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3765 comm="syz.3.14319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 894.210903][ T37] audit: type=1326 audit(1145.469:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3765 comm="syz.3.14319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 894.225691][ T37] audit: type=1326 audit(1145.469:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3765 comm="syz.3.14319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 894.891878][ T3794] netlink: 'syz.0.14333': attribute type 1 has an invalid length. [ 894.891904][ T3794] netlink: 96 bytes leftover after parsing attributes in process `syz.0.14333'. [ 894.891922][ T3794] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14333'. [ 895.009816][ T3802] vivid-000: disconnect [ 895.011162][ T3801] vivid-000: reconnect [ 895.219982][ T1474] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.220021][ T1474] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.736530][ T6170] usb 5-1: USB disconnect, device number 11 [ 896.810907][ T3895] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14381'. [ 897.337483][ T6170] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 897.480195][ T6170] usb 2-1: Using ep0 maxpacket: 32 [ 897.482610][ T6170] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.482647][ T6170] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 897.485617][ T6170] usb 2-1: New USB device found, idVendor=0d83, idProduct=28bc, bcdDevice=7a.80 [ 897.485655][ T6170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.485678][ T6170] usb 2-1: Product: syz [ 897.485694][ T6170] usb 2-1: Manufacturer: syz [ 897.485710][ T6170] usb 2-1: SerialNumber: syz [ 897.552103][ T6170] usb 2-1: config 0 descriptor?? [ 897.679677][ T37] audit: type=1326 audit(1149.110:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3931 comm="syz.3.14400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 897.680037][ T37] audit: type=1326 audit(1149.110:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3931 comm="syz.3.14400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 897.752407][ T37] audit: type=1326 audit(1149.194:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3931 comm="syz.3.14400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 898.261762][ T6170] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 898.404908][ T6170] usb 3-1: Using ep0 maxpacket: 8 [ 898.408311][ T6170] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 898.408354][ T6170] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 898.408396][ T6170] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 898.408426][ T6170] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 898.408453][ T6170] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 898.408480][ T6170] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 898.408508][ T6170] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 898.408536][ T6170] usb 3-1: config 168 interface 0 has no altsetting 0 [ 898.423571][ T6170] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 898.423619][ T6170] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 898.423675][ T6170] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 898.423704][ T6170] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 898.423732][ T6170] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 898.423759][ T6170] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 898.423789][ T6170] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 898.423818][ T6170] usb 3-1: config 168 interface 0 has no altsetting 0 [ 898.463154][ T6170] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 898.463200][ T6170] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 898.463252][ T6170] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 898.463283][ T6170] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 898.463309][ T6170] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 898.463342][ T6170] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 898.463372][ T6170] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 898.463401][ T6170] usb 3-1: config 168 interface 0 has no altsetting 0 [ 898.547756][ T6170] usb 3-1: string descriptor 0 read error: -22 [ 898.603112][ T6170] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 898.603147][ T6170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.767838][ T6170] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 899.634020][ T6170] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 899.779501][ T6170] usb 1-1: Using ep0 maxpacket: 8 [ 899.783887][ T6170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.783923][ T6170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.789748][ T6170] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice=ff.00 [ 899.789780][ T6170] usb 1-1: New USB device strings: Mfr=3, Product=0, SerialNumber=0 [ 899.789802][ T6170] usb 1-1: Manufacturer: syz [ 899.849586][ T6170] usb 1-1: config 0 descriptor?? [ 900.018319][ T5988] usb 2-1: USB disconnect, device number 124 [ 900.259794][ T6170] waltop 0003:172F:0037.0015: item fetching failed at offset 0/3 [ 900.260570][ T6170] waltop 0003:172F:0037.0015: probe with driver waltop failed with error -22 [ 900.433948][ T5988] usb 1-1: USB disconnect, device number 2 [ 900.904028][ T5988] usb 3-1: USB disconnect, device number 117 [ 902.045449][ T6170] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 902.187982][ T6170] usb 2-1: Using ep0 maxpacket: 8 [ 902.190474][ T6170] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 902.192983][ T6170] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 902.193013][ T6170] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 902.193061][ T6170] usb 2-1: Product: syz [ 902.193077][ T6170] usb 2-1: Manufacturer: syz [ 902.193093][ T6170] usb 2-1: SerialNumber: syz [ 902.378865][ T5988] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 902.458401][ T6170] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 902.458429][ T6170] usb 2-1: Handspring Visor / Palm OS: port 76, is for unknown use [ 902.458450][ T6170] usb 2-1: Handspring Visor / Palm OS: port 111, is for HotSync use [ 902.458470][ T6170] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 902.526727][ T5988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.526766][ T5988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.526791][ T5988] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 902.526837][ T5988] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 902.526862][ T5988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.547655][ T5988] usb 1-1: config 0 descriptor?? [ 902.651769][ T6170] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 902.673558][ T6170] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 902.690121][ T6170] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 902.847288][ T5820] usb 2-1: USB disconnect, device number 125 [ 902.903835][ T5820] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 902.962083][ T5820] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 902.992822][ T5820] visor 2-1:1.0: device disconnected [ 903.011529][ T5988] kye 0003:0458:501A.0016: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 903.012256][ T5988] kye 0003:0458:501A.0016: unknown main item tag 0x0 [ 903.012290][ T5988] kye 0003:0458:501A.0016: unknown main item tag 0x0 [ 903.012320][ T5988] kye 0003:0458:501A.0016: unknown main item tag 0x0 [ 903.012349][ T5988] kye 0003:0458:501A.0016: unknown main item tag 0x0 [ 903.012378][ T5988] kye 0003:0458:501A.0016: unknown main item tag 0x0 [ 903.012407][ T5988] kye 0003:0458:501A.0016: unknown main item tag 0x0 [ 903.012437][ T5988] kye 0003:0458:501A.0016: unknown main item tag 0x0 [ 903.012466][ T5988] kye 0003:0458:501A.0016: unknown main item tag 0x0 [ 903.012496][ T5988] kye 0003:0458:501A.0016: unknown main item tag 0x0 [ 903.012525][ T5988] kye 0003:0458:501A.0016: unknown main item tag 0x0 [ 903.086936][ T5988] kye 0003:0458:501A.0016: hidraw0: USB HID vff.fc Device [HID 0458:501a] on usb-dummy_hcd.0-1/input0 [ 903.087069][ T5988] kye 0003:0458:501A.0016: tablet-enabling feature report not found [ 903.087111][ T5988] kye 0003:0458:501A.0016: tablet enabling failed [ 903.218906][ T5988] usb 1-1: USB disconnect, device number 3 [ 903.545722][ T4100] fido_id[4100]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 904.369988][ T4127] sp0: Synchronizing with TNC [ 904.448551][ T4126] [U] [ 905.917267][ T4181] loop6: detected capacity change from 0 to 7 [ 905.951491][ T858] hid-generic 0001:2E76778F:0076.0017: hidraw0: HID v0.04 Device [syz0] on syz1 [ 906.008480][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 906.008524][ C0] buffer_io_error: 23 callbacks suppressed [ 906.008538][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 906.009774][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 906.132831][ T4181] Buffer I/O error on dev loop6, logical block 0, async page read [ 906.132904][ T4181] Buffer I/O error on dev loop6, logical block 0, async page read [ 906.132944][ T4181] Buffer I/O error on dev loop6, logical block 0, async page read [ 906.133006][ T4181] Buffer I/O error on dev loop6, logical block 0, async page read [ 906.133057][ T4181] Buffer I/O error on dev loop6, logical block 0, async page read [ 906.133093][ T4181] Buffer I/O error on dev loop6, logical block 0, async page read [ 906.133114][ T4181] ldm_validate_partition_table(): Disk read failed. [ 906.133145][ T4181] Buffer I/O error on dev loop6, logical block 0, async page read [ 906.133181][ T4181] Buffer I/O error on dev loop6, logical block 0, async page read [ 906.133216][ T4181] Buffer I/O error on dev loop6, logical block 0, async page read [ 906.133256][ T4181] Dev loop6: unable to read RDB block 0 [ 906.133336][ T4181] loop6: unable to read partition table [ 906.133536][ T4181] loop6: partition table beyond EOD, truncated [ 906.133573][ T4181] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 906.276366][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 906.276401][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.276422][ T10] usb 5-1: Product: syz [ 906.276437][ T10] usb 5-1: Manufacturer: syz [ 906.276453][ T10] usb 5-1: SerialNumber: syz [ 906.358754][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 906.417335][ T4187] fido_id[4187]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 906.509529][ T5820] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 906.956062][ T858] usb 5-1: USB disconnect, device number 12 [ 907.302758][ T4214] program syz.0.14516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 907.412603][ T4219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14518'. [ 907.414625][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 907.414644][ T37] audit: type=1326 audit(1159.331:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4217 comm="syz.1.14518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a736c799 code=0x7ffc0000 [ 907.414691][ T37] audit: type=1326 audit(1159.331:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4217 comm="syz.1.14518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a736c799 code=0x7ffc0000 [ 907.415327][ T37] audit: type=1326 audit(1159.331:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4217 comm="syz.1.14518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ff4a736c799 code=0x7ffc0000 [ 907.425115][ T37] audit: type=1326 audit(1159.331:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4217 comm="syz.1.14518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a736c799 code=0x7ffc0000 [ 907.617297][ T5820] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 907.617472][ T5820] ath9k_htc: Failed to initialize the device [ 907.618837][ T858] usb 5-1: ath9k_htc: USB layer deinitialized [ 908.017777][ T4245] bridge_slave_1: default FDB implementation only supports local addresses [ 908.123954][ T4248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14531'. [ 908.305583][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 908.820099][ T4272] netlink: 'syz.0.14541': attribute type 32 has an invalid length. [ 908.820125][ T4272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14541'. [ 908.922518][ T4272] bond0: option coupled_control: invalid value (46) [ 908.958038][ T4272] bond0 (unregistering): Released all slaves [ 909.512877][ T4291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14551'. [ 910.894487][ T4354] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14580'. [ 911.097576][ T4363] delete_channel: no stack [ 911.956352][ T6170] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 912.108547][ T6170] usb 5-1: Using ep0 maxpacket: 32 [ 912.111748][ T6170] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 912.111778][ T6170] usb 5-1: config 0 has no interface number 0 [ 912.114767][ T6170] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 912.114800][ T6170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.114823][ T6170] usb 5-1: Product: syz [ 912.114838][ T6170] usb 5-1: Manufacturer: syz [ 912.114855][ T6170] usb 5-1: SerialNumber: syz [ 912.176442][ T6170] usb 5-1: config 0 descriptor?? [ 912.182179][ T6170] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 912.347867][ T4408] program syz.0.14604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.393127][ T6170] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 912.430801][ T6170] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 912.785493][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 912.794585][ T5820] usb 5-1: USB disconnect, device number 13 [ 912.819079][ T5820] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 912.851707][ T5820] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 912.852468][ T5820] quatech2 5-1:0.51: device disconnected [ 913.613992][ T5820] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 913.728644][ T6170] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 913.781025][ T5820] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 913.781055][ T5820] usb 5-1: config 0 has no interface number 0 [ 913.781102][ T5820] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 913.781139][ T5820] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 913.781182][ T5820] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 913.781206][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.823682][ T5820] usb 5-1: config 0 descriptor?? [ 913.831255][ T4419] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 913.883569][ T6170] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 913.883608][ T6170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 913.886632][ T6170] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 913.886662][ T6170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.886684][ T6170] usb 4-1: Product: syz [ 913.886700][ T6170] usb 4-1: Manufacturer: syz [ 913.886716][ T6170] usb 4-1: SerialNumber: syz [ 913.925760][ T5820] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 913.960052][ T6170] usb 4-1: config 0 descriptor?? [ 913.960862][ T4422] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 914.092851][ T5820] usb 5-1: USB disconnect, device number 14 [ 914.092949][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 914.166620][ T6170] powermate: unknown product id 0240 [ 914.166640][ T6170] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 914.219462][ T6170] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input78 [ 914.226763][ T4424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14611'. [ 914.443907][ T4426] netlink: 'syz.2.14612': attribute type 10 has an invalid length. [ 914.443929][ T4426] netlink: 256 bytes leftover after parsing attributes in process `syz.2.14612'. [ 914.463854][ C1] powermate: config urb returned -71 [ 914.467924][ C1] powermate: config urb returned -71 [ 914.468143][ C1] powermate: config urb returned -71 [ 914.468351][ C1] powermate: config urb returned -71 [ 914.470083][ T5820] usb 4-1: USB disconnect, device number 119 [ 914.470120][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 915.294982][ T4449] cgroup: fork rejected by pids controller in /syz3 [ 916.048869][ T37] audit: type=1326 audit(1168.398:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4577 comm="syz.3.14636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 916.051764][ T37] audit: type=1326 audit(1168.398:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4577 comm="syz.3.14636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 916.057833][ T37] audit: type=1326 audit(1168.398:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4577 comm="syz.3.14636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 916.057885][ T37] audit: type=1326 audit(1168.408:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4577 comm="syz.3.14636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 916.058687][ T37] audit: type=1326 audit(1168.408:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4577 comm="syz.3.14636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 916.058954][ T37] audit: type=1326 audit(1168.408:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4577 comm="syz.3.14636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 916.065258][ T37] audit: type=1326 audit(1168.408:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4577 comm="syz.3.14636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 916.066537][ T37] audit: type=1326 audit(1168.408:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4577 comm="syz.3.14636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 916.070215][ T37] audit: type=1326 audit(1168.408:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4577 comm="syz.3.14636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 916.070334][ T37] audit: type=1326 audit(1168.408:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4577 comm="syz.3.14636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 916.292916][ T4584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14638'. [ 917.406777][ T10] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 917.460355][ T4659] bond4: invalid ARP target 0.0.0.0 specified for addition [ 917.460383][ T4659] bond4: option arp_ip_target: invalid value (0) [ 917.496512][ T4659] bond4 (unregistering): Released all slaves [ 917.525477][ T4664] vcan0: tx address claim with dest, not broadcast [ 917.560223][ T10] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 917.560254][ T10] usb 3-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 917.560277][ T10] usb 3-1: config 0 has no interface number 0 [ 917.560325][ T10] usb 3-1: config 0 interface 66 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 917.560354][ T10] usb 3-1: config 0 interface 66 has no altsetting 0 [ 917.560389][ T10] usb 3-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.00 [ 917.560413][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.578707][ T10] usb 3-1: config 0 descriptor?? [ 917.662417][ T4666] netlink: 'syz.0.14667': attribute type 2 has an invalid length. [ 917.745670][ T4668] netlink: 'syz.0.14667': attribute type 2 has an invalid length. [ 917.832049][ T10] usb 3-1: string descriptor 0 read error: -71 [ 917.847147][ T4666] !9: entered promiscuous mode [ 917.875685][ T10] usb 3-1: USB disconnect, device number 118 [ 918.253809][ T4689] tun0: tun_chr_ioctl cmd 1074025677 [ 918.254007][ T4689] tun0: linktype set to 773 [ 918.462183][ T4693] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.622484][ T4693] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.744998][ T4693] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.889055][ T4693] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.140098][ T1474] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.168869][ T1474] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.236712][ T1182] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.281525][ T1474] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.891732][ T4765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14714'. [ 920.603722][ T4791] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 921.331159][ T4817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14739'. [ 923.286103][ T5870] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 923.457709][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 923.460137][ T5870] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 923.460168][ T5870] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 923.460196][ T5870] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 923.460222][ T5870] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 923.460265][ T5870] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 923.460289][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.770736][ T5870] usb 4-1: GET_CAPABILITIES returned 0 [ 923.770790][ T5870] usbtmc 4-1:16.0: can't read capabilities [ 923.977717][ T5870] usb 4-1: USB disconnect, device number 120 [ 924.422087][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 924.422107][ T37] audit: type=1326 audit(1177.181:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4959 comm="syz.2.14804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422499c799 code=0x7ffc0000 [ 924.423645][ T37] audit: type=1326 audit(1177.181:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4959 comm="syz.2.14804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422499c799 code=0x7ffc0000 [ 924.423698][ T37] audit: type=1326 audit(1177.181:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4959 comm="syz.2.14804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422499c799 code=0x7ffc0000 [ 924.423744][ T37] audit: type=1326 audit(1177.181:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4959 comm="syz.2.14804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422499c799 code=0x7ffc0000 [ 924.429965][ T37] audit: type=1326 audit(1177.191:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4959 comm="syz.2.14804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f422499c799 code=0x7ffc0000 [ 924.485059][ T37] audit: type=1326 audit(1177.244:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4959 comm="syz.2.14804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422499c799 code=0x7ffc0000 [ 924.485211][ T37] audit: type=1326 audit(1177.244:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4959 comm="syz.2.14804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f422499c502 code=0x7ffc0000 [ 924.485328][ T37] audit: type=1326 audit(1177.244:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4959 comm="syz.2.14804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f422499c597 code=0x7ffc0000 [ 924.485448][ T37] audit: type=1326 audit(1177.244:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4959 comm="syz.2.14804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4224959491 code=0x7ffc0000 [ 924.485566][ T37] audit: type=1326 audit(1177.244:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4959 comm="syz.2.14804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f422499d589 code=0x7ffc0000 [ 925.406453][ T5004] program syz.2.14826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 926.269541][ T5870] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 926.435784][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 926.435823][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 926.435869][ T5870] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 926.435895][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.486842][ T5870] usb 1-1: config 0 descriptor?? [ 926.661348][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 926.685399][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 926.685896][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 926.714948][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 926.715837][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 926.721797][ T5870] ath6kl: Failed to submit usb control message: -71 [ 926.721842][ T5870] ath6kl: unable to send the bmi data to the device: -71 [ 926.721857][ T5870] ath6kl: Unable to send get target info: -71 [ 926.759366][ T5870] ath6kl: Failed to init ath6kl core: -71 [ 926.760813][ T5870] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 926.841492][ T5870] usb 1-1: USB disconnect, device number 4 [ 926.886640][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 926.901533][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 926.904801][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 926.936813][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 926.960152][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 927.150684][ T5056] wlan1 speed is unknown, defaulting to 1000 [ 927.153355][ T5056] lo speed is unknown, defaulting to 1000 [ 927.188340][ T5056] wg1 speed is unknown, defaulting to 1000 [ 927.449828][ T5072] Process accounting resumed [ 928.010122][ T2075] syz_tun (unregistering): left allmulticast mode [ 928.046299][ T2075] bond0: (slave syz_tun): Releasing backup interface [ 928.082204][ T2075] syz_tun (unregistering): left promiscuous mode [ 928.204836][ T5056] chnl_net:caif_netlink_parms(): no params data found [ 928.844720][ T1474] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.960187][ T60] Bluetooth: hci5: command tx timeout [ 929.086796][ T5988] wg1 speed is unknown, defaulting to 1000 [ 929.086829][ T5988] syz2: Port: 1 Link DOWN [ 929.569762][ T1474] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.629003][ T5056] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.629134][ T5056] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.629455][ T5056] bridge_slave_0: entered allmulticast mode [ 929.643118][ T5056] bridge_slave_0: entered promiscuous mode [ 929.679741][ T5056] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.687137][ T5056] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.687846][ T5056] bridge_slave_1: entered allmulticast mode [ 929.711071][ T5056] bridge_slave_1: entered promiscuous mode [ 929.872265][ T5201] evm: overlay not supported [ 930.103427][ T1474] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.149364][ T5212] program syz.3.14914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 930.234752][ T5056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.241599][ T5056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.486211][ T1474] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.554487][ T5056] team0: Port device team_slave_0 added [ 930.584884][ T5056] team0: Port device team_slave_1 added [ 930.749762][ T5056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.749782][ T5056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.749813][ T5056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.760783][ T5056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.760837][ T5056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.760901][ T5056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.938415][ T60] Bluetooth: hci5: command tx timeout [ 931.215964][ T5056] hsr_slave_0: entered promiscuous mode [ 931.232725][ T5056] hsr_slave_1: entered promiscuous mode [ 931.241160][ T5056] debugfs: 'hsr0' already exists in 'hsr' [ 931.241189][ T5056] Cannot create hsr debugfs directory [ 931.312765][ T5250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14932'. [ 931.902031][ T1474] hsr0: left allmulticast mode [ 931.902055][ T1474] hsr_slave_0: left allmulticast mode [ 931.902364][ T1474] hsr0: left promiscuous mode [ 931.930617][ T1474] bridge0: port 3(hsr0) entered disabled state [ 932.037523][ T1474] bridge_slave_1: left allmulticast mode [ 932.037558][ T1474] bridge_slave_1: left promiscuous mode [ 932.038254][ T1474] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.161782][ T1474] bridge_slave_0: left allmulticast mode [ 932.161807][ T1474] bridge_slave_0: left promiscuous mode [ 932.162022][ T1474] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.904764][ T5304] netlink: 276 bytes leftover after parsing attributes in process `syz.3.14957'. [ 932.905251][ T5304] netlink: 276 bytes leftover after parsing attributes in process `syz.3.14957'. [ 932.921000][ T60] Bluetooth: hci5: command tx timeout [ 934.550677][ T5366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 934.829523][ T1474] team0: Port device bridge0 removed [ 934.903189][ T60] Bluetooth: hci5: command tx timeout [ 935.447120][ T1474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 935.485224][ T1474] bond_slave_1: left promiscuous mode [ 935.524533][ T1474] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 935.571660][ T1474] dummy0: left promiscuous mode [ 935.601211][ T1474] bond0 (unregistering): Released all slaves [ 935.618479][ T1474] bond1 (unregistering): Released all slaves [ 935.644121][ T1474] bond2 (unregistering): Released all slaves [ 935.676820][ T1474] bond3 (unregistering): Released all slaves [ 935.698871][ T1474] bond4 (unregistering): Released all slaves [ 935.724439][ T1474] bond5 (unregistering): Released all slaves [ 936.005071][ T5416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15011'. [ 936.005099][ T5416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15011'. [ 936.148110][ T1474] tipc: Disabling bearer [ 936.249311][ T1474] tipc: Disabling bearer [ 936.249546][ T1474] tipc: Left network mode [ 936.577861][ T1474] rxrpc: Call ffff888065d19a40 still in use (1,Complete,1489,0)! [ 936.977215][ T5056] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 937.015086][ T5056] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 937.091356][ T5056] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 937.128417][ T5056] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 937.295216][ T6170] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 937.447599][ T6170] usb 1-1: Using ep0 maxpacket: 16 [ 937.449443][ T6170] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.449479][ T6170] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.449513][ T6170] usb 1-1: config 0 interface 0 has no altsetting 0 [ 937.449548][ T6170] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 937.449573][ T6170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.475659][ T6170] usb 1-1: config 0 descriptor?? [ 937.915252][ T6170] hid (null): unknown global tag 0xd [ 937.915301][ T6170] hid (null): report_id 1606810223 is invalid [ 937.915331][ T6170] hid (null): invalid report_size -1701316020 [ 937.915349][ T6170] hid (null): unknown global tag 0xc [ 937.917719][ T6170] hid (null): unknown global tag 0x88 [ 937.917755][ T6170] hid (null): invalid report_size 10289 [ 937.927542][ T5056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.098930][ T5056] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.106355][ T10] usb 1-1: USB disconnect, device number 5 [ 938.155836][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.162276][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.271311][ T212] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.271452][ T212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.782462][ T5513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15043'. [ 939.061688][ T5056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.526054][ T5545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15051'. [ 939.975488][ T5056] veth0_vlan: entered promiscuous mode [ 940.027310][ T5056] veth1_vlan: entered promiscuous mode [ 940.158630][ T5056] veth0_macvtap: entered promiscuous mode [ 940.178778][ T5056] veth1_macvtap: entered promiscuous mode [ 940.214924][ T5056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.265570][ T5056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.294214][ T44] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.294436][ T44] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.294497][ T44] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.294534][ T44] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.821613][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.821636][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.112922][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.112947][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.259768][T30590] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 941.433552][T30590] usb 4-1: Using ep0 maxpacket: 8 [ 941.436334][T30590] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.436395][T30590] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 941.436422][T30590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.474039][T30590] usb 4-1: config 0 descriptor?? [ 941.506133][T30590] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 942.544819][ T5873] usb 4-1: USB disconnect, device number 121 [ 942.736378][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15090'. [ 943.559260][ T5803] program syz.5.15103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 943.946628][ T10] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 944.099728][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 944.102112][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.102170][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 944.102197][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.143675][ T10] usb 4-1: config 0 descriptor?? [ 944.192391][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 945.294899][ T5873] usb 4-1: USB disconnect, device number 122 [ 945.395404][ T6042] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15134'. [ 945.410489][ T6040] netlink: 7 bytes leftover after parsing attributes in process `syz.5.15133'. [ 946.098107][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15145'. [ 946.702268][ T6098] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15157'. [ 947.298038][ T5873] kernel read not supported for file /vcs (pid: 5873 comm: kworker/1:5) [ 949.231671][ T37] kauditd_printk_skb: 42 callbacks suppressed [ 949.231693][ T37] audit: type=1326 audit(1203.216:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.3.15194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 949.233467][ T37] audit: type=1326 audit(1203.216:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.3.15194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 949.237100][ T37] audit: type=1326 audit(1203.226:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.3.15194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 949.237384][ T37] audit: type=1326 audit(1203.226:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.3.15194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 949.238656][ T37] audit: type=1326 audit(1203.226:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.3.15194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 949.240442][ T37] audit: type=1326 audit(1203.226:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.3.15194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 949.241924][ T37] audit: type=1326 audit(1203.226:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.3.15194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 949.243755][ T37] audit: type=1326 audit(1203.226:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.3.15194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 949.244532][ T37] audit: type=1326 audit(1203.226:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.3.15194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 949.250656][ T37] audit: type=1326 audit(1203.236:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.3.15194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 949.573603][ T6182] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 949.811399][ T6184] "syz.5.15196" (6184) uses obsolete ecb(arc4) skcipher [ 950.170969][ T2590] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 950.312210][ T2590] usb 1-1: Using ep0 maxpacket: 8 [ 950.317231][ T2590] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.317313][ T2590] usb 1-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 950.317340][ T2590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.364217][ T2590] usb 1-1: config 0 descriptor?? [ 950.403040][ T2590] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 951.174937][ T6360] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15228'. [ 951.174965][ T6360] netem: unknown loss type 0 [ 951.174980][ T6360] netem: change failed [ 951.646281][T30590] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 951.797116][T30590] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 951.797148][T30590] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.797170][T30590] usb 6-1: Product: syz [ 951.797187][T30590] usb 6-1: Manufacturer: syz [ 951.797203][T30590] usb 6-1: SerialNumber: syz [ 951.851484][T30590] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 951.884811][ T5873] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 952.280878][ T2590] usb 6-1: USB disconnect, device number 2 [ 952.479975][ T6402] netlink: 'syz.2.15248': attribute type 25 has an invalid length. [ 952.480002][ T6402] netlink: 'syz.2.15248': attribute type 28 has an invalid length. [ 952.631357][ T6410] pim6reg: entered allmulticast mode [ 952.635425][ T6409] pim6reg: left allmulticast mode [ 952.846623][ T10] usb 1-1: USB disconnect, device number 6 [ 952.977992][ T5873] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 952.978166][ T5873] ath9k_htc: Failed to initialize the device [ 952.983491][ T2590] usb 6-1: ath9k_htc: USB layer deinitialized [ 952.998838][ T6425] netlink: 340 bytes leftover after parsing attributes in process `syz.0.15259'. [ 953.933849][ T2590] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 954.082826][ T2590] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 954.082858][ T2590] usb 6-1: config 1 has no interface number 0 [ 954.082906][ T2590] usb 6-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 954.082929][ T2590] usb 6-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 954.082951][ T2590] usb 6-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 954.108129][ T2590] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 954.108209][ T2590] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.108274][ T2590] usb 6-1: Product: syz [ 954.108310][ T2590] usb 6-1: Manufacturer: syz [ 954.108347][ T2590] usb 6-1: SerialNumber: syz [ 954.196711][ T2590] usb 6-1: Expected 3 endpoints, found: 0 [ 955.306217][T30590] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 955.467856][T30590] usb 3-1: Using ep0 maxpacket: 32 [ 955.470417][T30590] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.470474][T30590] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 955.470499][T30590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.522371][T30590] usb 3-1: config 0 descriptor?? [ 955.558822][T30590] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 955.754723][T30590] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 955.945328][T30590] usb 1-1: Using ep0 maxpacket: 32 [ 955.947529][T30590] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 955.947560][T30590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.994139][T30590] usb 1-1: config 0 descriptor?? [ 956.017885][T30590] gspca_main: sq930x-2.14.0 probing 041e:403c [ 956.579830][ T6578] block nbd1: server does not support multiple connections per device. [ 956.622083][ T6578] block nbd1: shutting down sockets [ 956.624151][ T10] usb 6-1: USB disconnect, device number 3 [ 956.783748][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 956.820759][T30590] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 956.887578][T30590] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 956.926475][T30590] usb 1-1: USB disconnect, device number 7 [ 957.782615][ T6627] @: renamed from vlan0 (while UP) [ 958.003080][T30590] usb 3-1: USB disconnect, device number 119 [ 958.114588][ T6643] netlink: 176 bytes leftover after parsing attributes in process `syz.3.15346'. [ 958.526228][ T6663] program syz.0.15354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 961.503703][ T6797] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.15407'. [ 963.531493][ T6877] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.15446'. [ 964.025244][T30590] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 964.177930][T30590] usb 1-1: Using ep0 maxpacket: 16 [ 964.180611][T30590] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 964.180640][T30590] usb 1-1: config 0 has no interface number 0 [ 964.180688][T30590] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 964.180718][T30590] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 964.182968][T30590] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 964.182999][T30590] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 964.183022][T30590] usb 1-1: Product: syz [ 964.183037][T30590] usb 1-1: SerialNumber: syz [ 964.264226][T30590] usb 1-1: config 0 descriptor?? [ 964.292391][T30590] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 964.298125][T30590] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input79 [ 964.881417][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 964.886311][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 964.886614][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 964.886869][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 964.887113][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 964.887352][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 964.887601][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 964.887835][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 964.888072][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 964.888300][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 964.974660][ T5873] usb 1-1: USB disconnect, device number 8 [ 964.974764][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 965.047892][ T5873] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 965.130935][ T6926] IPv6: NLM_F_CREATE should be specified when creating new route [ 966.824590][ T7002] input: syz0 as /devices/virtual/input/input80 [ 966.858450][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 967.589631][ T6170] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 967.732671][ T6170] usb 3-1: Using ep0 maxpacket: 32 [ 967.735338][ T6170] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 967.735367][ T6170] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.735387][ T6170] usb 3-1: config 0 has no interface number 0 [ 967.735419][ T6170] usb 3-1: config 0 interface 83 has no altsetting 0 [ 967.739924][ T6170] usb 3-1: New USB device found, idVendor=04e8, idProduct=5f02, bcdDevice=ff.27 [ 967.739957][ T6170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.739979][ T6170] usb 3-1: Product: syz [ 967.739995][ T6170] usb 3-1: Manufacturer: syz [ 967.740011][ T6170] usb 3-1: SerialNumber: syz [ 967.829431][ T6170] usb 3-1: config 0 descriptor?? [ 968.092244][ T7052] netlink: 44 bytes leftover after parsing attributes in process `syz.5.15528'. [ 968.261048][ T5873] usb 3-1: USB disconnect, device number 120 [ 969.146035][ T2590] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 969.295074][ T2590] usb 3-1: Using ep0 maxpacket: 16 [ 969.297962][ T2590] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.297996][ T2590] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.298021][ T2590] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 969.298065][ T2590] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 969.298090][ T2590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.335576][ T2590] usb 3-1: config 0 descriptor?? [ 969.748624][ T2590] hid_parser_main: 232 callbacks suppressed [ 969.748654][ T2590] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 969.748686][ T2590] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 969.748715][ T2590] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 969.748743][ T2590] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 969.748770][ T2590] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 969.748798][ T2590] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 969.748825][ T2590] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 969.748853][ T2590] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 969.748880][ T2590] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 969.748908][ T2590] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 970.061068][ T2590] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0019/input/input81 [ 970.111837][ T2590] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 970.163295][ T2590] usb 3-1: USB disconnect, device number 121 [ 970.361340][ T7138] fido_id[7138]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 970.909164][ T7161] netlink: 256 bytes leftover after parsing attributes in process `syz.3.15578'. [ 970.909190][ T7161] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15578'. [ 970.937467][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15579'. [ 971.376769][ T7182] sctp: [Deprecated]: syz.5.15589 (pid 7182) Use of int in maxseg socket option. [ 971.376769][ T7182] Use struct sctp_assoc_value instead [ 971.552461][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15592'. [ 971.811155][ T5873] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 971.975938][ T5873] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 971.975970][ T5873] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 971.975990][ T5873] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 971.976012][ T5873] usb 3-1: config 220 has no interface number 2 [ 971.976085][ T5873] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 971.976114][ T5873] usb 3-1: config 220 interface 0 has no altsetting 0 [ 971.976134][ T5873] usb 3-1: config 220 interface 76 has no altsetting 0 [ 971.976154][ T5873] usb 3-1: config 220 interface 1 has no altsetting 0 [ 972.059469][ T5873] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 972.059504][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.059526][ T5873] usb 3-1: Product: syz [ 972.059543][ T5873] usb 3-1: Manufacturer: syz [ 972.059559][ T5873] usb 3-1: SerialNumber: syz [ 972.319964][ T5873] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 972.320003][ T5873] uvcvideo 3-1:220.0: No valid video chain found. [ 972.320067][ T5873] usb 3-1: selecting invalid altsetting 0 [ 972.400986][ T5873] usb 3-1: selecting invalid altsetting 0 [ 972.401029][ T5873] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 972.440577][ T5873] usb 3-1: USB disconnect, device number 122 [ 972.460643][ T7220] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15608'. [ 973.048270][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 973.048290][ T37] audit: type=1326 audit(1228.201:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7248 comm="syz.2.15622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f422499c799 code=0x0 [ 974.577912][ T7317] program syz.2.15654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 977.608928][ T7434] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15710'. [ 979.076446][ T7499] program syz.2.15740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 980.271779][ T7555] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 981.045563][ T5870] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 981.207568][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 981.209925][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.209953][ T5870] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 981.232826][ T5870] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 981.232910][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.232970][ T5870] usb 4-1: Product: syz [ 981.233006][ T5870] usb 4-1: Manufacturer: syz [ 981.233047][ T5870] usb 4-1: SerialNumber: syz [ 981.306462][ T5870] usb 4-1: config 0 descriptor?? [ 981.951142][ T7631] netlink: 192 bytes leftover after parsing attributes in process `syz.0.15803'. [ 982.048849][ T7635] program syz.2.15805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 982.364410][ T7749] program syz.0.15811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 982.453538][ T6170] usb 4-1: USB disconnect, device number 123 [ 983.507220][ T7798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.508552][ T7798] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 983.917116][ T7819] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15842'. [ 984.743128][ T7853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15857'. [ 985.264625][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15867'. [ 985.264847][ T7869] netlink: 'syz.0.15867': attribute type 1 has an invalid length. [ 985.264866][ T7869] netlink: 'syz.0.15867': attribute type 2 has an invalid length. [ 986.105694][ T6170] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 986.262165][ T6170] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 986.262194][ T6170] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 986.270024][ T6170] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 986.270065][ T6170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 986.270087][ T6170] usb 4-1: SerialNumber: syz [ 986.535973][ T6170] usb 4-1: 0:2 : does not exist [ 986.541482][ T6170] usb 4-1: 0:0: failed to get current value for ch 0 (-22) [ 986.643128][ T6170] usb 4-1: USB disconnect, device number 124 [ 986.725992][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 987.372333][ T7942] 9p: Unknown access argument ffffffffffffffff: -22 [ 990.194364][ T10] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 990.360000][ T10] usb 4-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 990.360030][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 990.360073][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.360099][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.360123][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 990.360160][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 990.360184][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.377711][ T10] usb 4-1: config 0 descriptor?? [ 990.608029][ T8086] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 990.703109][ T8085] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 990.788972][ T8062] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 990.789119][ T8062] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 990.840338][ T10] input: HID 28bd:0909 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0909.001A/input/input82 [ 991.002920][ T10] uclogic 0003:28BD:0909.001A: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.3-1/input0 [ 991.044889][ T10] usb 4-1: USB disconnect, device number 125 [ 991.287706][ T8093] fido_id[8093]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 992.023412][ T8123] geneve0: entered promiscuous mode [ 992.023445][ T8123] geneve0: entered allmulticast mode [ 992.285636][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15990'. [ 992.837701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 992.900235][ T5820] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 993.067250][ T5820] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 993.067280][ T5820] usb 6-1: config 0 has no interface number 0 [ 993.067307][ T5820] usb 6-1: config 0 interface 29 has no altsetting 0 [ 993.067336][ T5820] usb 6-1: New USB device found, idVendor=357d, idProduct=7788, bcdDevice=81.0d [ 993.067357][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.136140][ T8169] netlink: 'syz.3.16006': attribute type 1 has an invalid length. [ 993.136158][ T8169] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16006'. [ 993.161282][ T5820] usb 6-1: config 0 descriptor?? [ 993.166422][ T5820] usb-storage 6-1:0.29: USB Mass Storage device detected [ 993.216623][ T5820] usb-storage 6-1:0.29: Quirks match for vid 357d pid 7788: 4800000 [ 993.475318][ T2590] usb 6-1: USB disconnect, device number 4 [ 994.661148][ T8213] Invalid ELF header magic: != ELF [ 994.987428][ T8224] pimreg: entered allmulticast mode [ 995.012597][ T8223] pimreg: left allmulticast mode [ 995.540477][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16036'. [ 995.666807][ T8246] bridge0: entered promiscuous mode [ 995.693104][ T8246] bridge0: port 3(macvtap1) entered blocking state [ 995.695530][ T8246] bridge0: port 3(macvtap1) entered disabled state [ 995.695827][ T8246] macvtap1: entered allmulticast mode [ 995.695845][ T8246] bridge0: entered allmulticast mode [ 995.773882][ T8246] macvtap1: left allmulticast mode [ 995.773900][ T8246] bridge0: left allmulticast mode [ 995.919385][ T8246] bridge0: left promiscuous mode [ 996.245312][ T5820] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 996.432451][ T5820] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 996.432483][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.467000][ T5820] usb 1-1: config 0 descriptor?? [ 996.484717][ T5820] cp210x 1-1:0.0: cp210x converter detected [ 996.980371][ T5820] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 997.032369][ T5820] usb 1-1: cp210x converter now attached to ttyUSB0 [ 997.180592][ T5820] usb 1-1: USB disconnect, device number 9 [ 997.208952][ T5820] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 997.336657][ T5820] cp210x 1-1:0.0: device disconnected [ 997.380045][ T8289] syz.5.16050 (8289) used greatest stack depth: 16096 bytes left [ 997.503191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 997.560320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 997.561784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 998.427087][ T5870] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 998.584047][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 998.586797][ T5870] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 998.586872][ T5870] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.586896][ T5870] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 998.586923][ T5870] usb 4-1: config 7 interface 0 has no altsetting 0 [ 998.586956][ T5870] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 998.586980][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.686150][ T5870] usbhid 4-1:7.0: couldn't find an input interrupt endpoint [ 998.874450][ T5820] usb 4-1: USB disconnect, device number 126 [ 999.289272][ T8367] input: syz1 as /devices/virtual/input/input83 [ 1001.143740][ T5820] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1001.291590][ T5820] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.291622][ T5820] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1001.291645][ T5820] usb 3-1: config 1 has no interface number 0 [ 1001.291692][ T5820] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1001.305203][ T5820] usb 3-1: New USB device found, idVendor=0525, idProduct=779d, bcdDevice= 0.40 [ 1001.305248][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.305272][ T5820] usb 3-1: Product: syz [ 1001.305289][ T5820] usb 3-1: Manufacturer: syz [ 1001.305305][ T5820] usb 3-1: SerialNumber: syz [ 1001.377426][ T5820] cdc_ncm 3-1:1.1: skipping garbage [ 1001.377451][ T5820] usb 3-1: selecting invalid altsetting 1 [ 1001.718459][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16124'. [ 1002.018801][ T5820] usb 3-1: selecting invalid altsetting 1 [ 1002.018863][ T5820] cdc_ncm 3-1:1.1: bind() failure [ 1002.229381][ T5820] usb 3-1: USB disconnect, device number 123 [ 1004.212514][ T8684] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16155'. [ 1004.294531][ T8685] wlan1 speed is unknown, defaulting to 1000 [ 1004.308753][ T8685] lo speed is unknown, defaulting to 1000 [ 1004.311473][ T8685] wg1 speed is unknown, defaulting to 1000 [ 1004.771109][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16161'. [ 1004.771132][ T8801] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16161'. [ 1004.832355][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16161'. [ 1004.865129][ T8805] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1005.729110][ T37] audit: type=1326 audit(1262.494:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8940 comm="syz.3.16181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 1005.729165][ T37] audit: type=1326 audit(1262.504:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8940 comm="syz.3.16181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 1005.729211][ T37] audit: type=1326 audit(1262.504:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8940 comm="syz.3.16181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 1005.729368][ T37] audit: type=1326 audit(1262.504:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8940 comm="syz.3.16181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 1005.732152][ T37] audit: type=1326 audit(1262.504:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8940 comm="syz.3.16181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 1005.732429][ T37] audit: type=1326 audit(1262.504:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8940 comm="syz.3.16181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 1006.289277][ T5873] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1006.327508][ T5820] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1006.365565][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1006.434097][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.434157][ T5873] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1006.434183][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.451817][ T5873] usb 3-1: config 0 descriptor?? [ 1006.482154][ T5873] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1006.512043][ T5820] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1006.512076][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.512097][ T5820] usb 1-1: Product: syz [ 1006.512113][ T5820] usb 1-1: Manufacturer: syz [ 1006.512129][ T5820] usb 1-1: SerialNumber: syz [ 1006.518316][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1006.521007][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.521034][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1006.521072][ T10] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1006.521109][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.600401][ T5820] usb 1-1: config 0 descriptor?? [ 1006.630027][ T10] usb 6-1: config 0 descriptor?? [ 1006.804445][ T5820] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1007.190301][ T5820] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1007.213142][ T5820] usb 1-1: USB disconnect, device number 10 [ 1007.719021][ T9013] wlan1 speed is unknown, defaulting to 1000 [ 1007.721471][ T9013] lo speed is unknown, defaulting to 1000 [ 1007.762068][ T9013] wg1 speed is unknown, defaulting to 1000 [ 1008.925044][ T9156] netlink: 'syz.0.16235': attribute type 4 has an invalid length. [ 1008.957323][ T5870] usb 3-1: USB disconnect, device number 124 [ 1009.032047][ T5873] usb 6-1: USB disconnect, device number 5 [ 1010.025140][ T5870] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1010.173982][ T5870] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1010.174017][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.174040][ T5870] usb 6-1: Product: syz [ 1010.174057][ T5870] usb 6-1: Manufacturer: syz [ 1010.174073][ T5870] usb 6-1: SerialNumber: syz [ 1010.242099][ T5870] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1010.328607][ T5873] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1010.595013][ T5820] usb 6-1: USB disconnect, device number 6 [ 1010.769293][ T5460] veth1_macvtap: left promiscuous mode [ 1010.773140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.447446][ T5873] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1011.448286][ T5873] ath9k_htc: Failed to initialize the device [ 1011.449144][ T5820] usb 6-1: ath9k_htc: USB layer deinitialized [ 1013.955377][ T9540] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16306'. [ 1014.425697][ T9549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16310'. [ 1015.000518][ T9568] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1017.309118][ T9851] overlay: Unknown parameter '\' [ 1017.903568][ T9871] pimreg: entered allmulticast mode [ 1017.914022][ T9871] pimreg: left allmulticast mode [ 1020.188673][T10182] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16404'. [ 1020.475386][T30590] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1020.517415][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1020.627128][T30590] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1020.627165][T30590] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.627180][T30590] usb 6-1: Product: syz [ 1020.627191][T30590] usb 6-1: Manufacturer: syz [ 1020.627203][T30590] usb 6-1: SerialNumber: syz [ 1021.260903][T30590] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 1021.260968][T30590] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1021.264015][T30590] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1021.264087][T30590] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1021.338415][T30590] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1021.376476][T30590] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1021.406799][T30590] usb 6-1: USB disconnect, device number 7 [ 1021.695059][T10320] input: syz1 as /devices/virtual/input/input84 [ 1022.314443][T10449] bpf: Bad value for 'gid' [ 1023.280734][ T2590] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1023.439142][ T2590] usb 3-1: Using ep0 maxpacket: 8 [ 1023.448090][ T2590] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.448116][ T2590] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 1023.480573][ T2590] usb 3-1: New USB device found, idVendor=0424, idProduct=4915, bcdDevice=46.ac [ 1023.480606][ T2590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.480627][ T2590] usb 3-1: Product: syz [ 1023.480642][ T2590] usb 3-1: Manufacturer: syz [ 1023.480657][ T2590] usb 3-1: SerialNumber: syz [ 1023.767832][ T2590] usb 3-1: USB disconnect, device number 125 [ 1023.774890][ T5822] udevd[5822]: setting mode of /dev/bus/usb/003/125 to 020664 failed: No such file or directory [ 1023.775074][ T5822] udevd[5822]: setting owner of /dev/bus/usb/003/125 to uid=0, gid=0 failed: No such file or directory [ 1024.358082][ T2590] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1024.503717][ T2590] usb 6-1: config index 0 descriptor too short (expected 1042, got 18) [ 1024.506848][ T2590] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=fc.ee [ 1024.506880][ T2590] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=255 [ 1024.506902][ T2590] usb 6-1: Product: syz [ 1024.506917][ T2590] usb 6-1: Manufacturer: syz [ 1024.506932][ T2590] usb 6-1: SerialNumber: syz [ 1024.559921][ T2590] usb 6-1: config 0 descriptor?? [ 1024.598828][ T2590] usb 6-1: selecting invalid altsetting 1 [ 1024.661142][ T2590] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1024.824733][ T2590] usb 6-1: USB disconnect, device number 8 [ 1024.855457][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1025.403616][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1026.679518][ T37] audit: type=1326 audit(1284.478:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10816 comm="syz.3.16515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 1026.700253][ T37] audit: type=1326 audit(1284.499:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10816 comm="syz.3.16515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 1026.700402][ T37] audit: type=1326 audit(1284.499:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10816 comm="syz.3.16515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 1026.721312][ T37] audit: type=1326 audit(1284.509:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10816 comm="syz.3.16515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 1026.790044][ T37] audit: type=1326 audit(1284.604:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10816 comm="syz.3.16515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 1026.790098][ T37] audit: type=1326 audit(1284.604:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10816 comm="syz.3.16515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd239d4c799 code=0x7ffc0000 [ 1028.340788][ T2590] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1028.397324][ T37] audit: type=1326 audit(1286.283:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11086 comm="syz.0.16548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb974c799 code=0x7ffc0000 [ 1028.400592][ T37] audit: type=1326 audit(1286.283:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11086 comm="syz.0.16548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb974c799 code=0x7ffc0000 [ 1028.406467][ T37] audit: type=1326 audit(1286.293:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11086 comm="syz.0.16548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb974c799 code=0x7ffc0000 [ 1028.411206][ T37] audit: type=1326 audit(1286.293:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11086 comm="syz.0.16548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fadb974c799 code=0x7ffc0000 [ 1028.493468][ T2590] usb 4-1: Using ep0 maxpacket: 8 [ 1028.496060][ T2590] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1028.496111][ T2590] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1028.496137][ T2590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.501379][ T2590] usb 4-1: config 0 descriptor?? [ 1028.743753][ T2590] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1028.953380][ T2590] usb 4-1: USB disconnect, device number 127 [ 1030.294813][ T2590] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1030.439797][ T2590] usb 3-1: Using ep0 maxpacket: 8 [ 1030.442279][ T2590] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1030.442340][ T2590] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1030.442365][ T2590] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1030.442405][ T2590] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1030.442429][ T2590] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1030.442470][ T2590] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1030.442493][ T2590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.692367][ T2590] usb 3-1: GET_CAPABILITIES returned 0 [ 1030.692402][ T2590] usbtmc 3-1:16.0: can't read capabilities [ 1030.821459][T11274] batadv_slave_1: entered promiscuous mode [ 1030.822657][T11273] batadv_slave_1: left promiscuous mode [ 1030.884106][T30590] usb 3-1: USB disconnect, device number 126 [ 1031.999567][T11531] serio: Serial port ttyS3 [ 1032.600760][T30590] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1032.743284][T30590] usb 1-1: Using ep0 maxpacket: 32 [ 1032.748669][T30590] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1032.748696][T30590] usb 1-1: config 0 has no interface number 0 [ 1032.757637][T30590] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1032.757721][T30590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.757782][T30590] usb 1-1: Product: syz [ 1032.757810][T30590] usb 1-1: Manufacturer: syz [ 1032.757851][T30590] usb 1-1: SerialNumber: syz [ 1032.786214][T30590] usb 1-1: config 0 descriptor?? [ 1032.829931][T30590] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1032.829953][T30590] usb 1-1: selecting invalid altsetting 1 [ 1032.829965][T30590] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1032.836684][T30590] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1032.837031][T30590] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1032.837066][T30590] usb 1-1: media controller created [ 1032.904164][T30590] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1033.043792][T30590] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1033.043852][T30590] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1033.048423][T30590] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1033.236100][T30590] usb 1-1: USB disconnect, device number 11 [ 1033.976933][T11722] program syz.3.16657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1034.241519][T11733] loop7: detected capacity change from 0 to 7 [ 1034.254021][T11733] buffer_io_error: 9 callbacks suppressed [ 1034.254384][T11733] Buffer I/O error on dev loop7, logical block 0, async page read [ 1034.254447][T11733] Buffer I/O error on dev loop7, logical block 0, async page read [ 1034.259123][T11733] Buffer I/O error on dev loop7, logical block 0, async page read [ 1034.259170][T11733] Buffer I/O error on dev loop7, logical block 0, async page read [ 1034.259242][T11733] Buffer I/O error on dev loop7, logical block 0, async page read [ 1034.259290][T11733] Buffer I/O error on dev loop7, logical block 0, async page read [ 1034.259368][T11733] Buffer I/O error on dev loop7, logical block 0, async page read [ 1034.259445][T11733] ldm_validate_partition_table(): Disk read failed. [ 1034.259523][T11733] Buffer I/O error on dev loop7, logical block 0, async page read [ 1034.259621][T11733] Buffer I/O error on dev loop7, logical block 0, async page read [ 1034.259728][T11733] Buffer I/O error on dev loop7, logical block 0, async page read [ 1034.259827][T11733] Dev loop7: unable to read RDB block 0 [ 1034.260021][T11733] loop7: unable to read partition table [ 1034.260550][T11733] loop7: partition table beyond EOD, truncated [ 1034.279822][T11733] loop_reread_partitions: partition scan of loop7 (7x~Sj̖P@?X) failed (rc=-5) [ 1034.486074][T11816] program syz.0.16664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1035.668610][T11885] ALSA: seq fatal error: cannot create timer (-19) [ 1036.268840][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16699'. [ 1036.355629][ T5820] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1036.519381][ T5820] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1036.519443][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.519471][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.519493][ T5820] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1036.521007][ T5820] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1036.521034][ T5820] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1036.521055][ T5820] usb 3-1: Manufacturer: syz [ 1036.607014][ T5820] usb 3-1: config 0 descriptor?? [ 1036.916933][T12030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16711'. [ 1036.929684][T12030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16711'. [ 1037.021270][ T5820] hid_parser_main: 5 callbacks suppressed [ 1037.021297][ T5820] appleir 0003:05AC:8243.001B: unknown main item tag 0x0 [ 1037.101701][ T5820] appleir 0003:05AC:8243.001B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1037.339653][T12142] sg_write: process 9547 (syz.3.16714) changed security contexts after opening file descriptor, this is not allowed. [ 1037.345517][ T5873] usb 3-1: USB disconnect, device number 127 [ 1037.383416][T12140] fido_id[12140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1037.842209][T12159] netlink: 128 bytes leftover after parsing attributes in process `syz.0.16723'. [ 1037.842279][T12158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16721'. [ 1039.128060][ T5816] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1039.670474][T12226] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1039.670990][T12226] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1040.678904][T12272] netem: change failed [ 1040.803580][T12275] netlink: 'syz.5.16778': attribute type 1 has an invalid length. [ 1040.803605][T12275] netlink: 'syz.5.16778': attribute type 2 has an invalid length. [ 1042.883496][ T2590] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1043.044730][ T2590] usb 1-1: Using ep0 maxpacket: 32 [ 1043.048110][ T2590] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.048140][ T2590] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1043.048179][ T2590] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1043.048203][ T2590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.098417][ T2590] usb 1-1: config 0 descriptor?? [ 1043.940918][ T2590] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1044.056766][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16841'. [ 1044.099916][ T2590] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1044.099950][ T2590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.099972][ T2590] usb 4-1: Product: syz [ 1044.099987][ T2590] usb 4-1: Manufacturer: syz [ 1044.100003][ T2590] usb 4-1: SerialNumber: syz [ 1044.926876][ T2590] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1044.926937][ T2590] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1044.927998][ T2590] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1044.991724][ T2590] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1045.015062][ T2590] usb 4-1: USB disconnect, device number 2 [ 1045.541158][ T2590] usb 1-1: USB disconnect, device number 12 [ 1046.152919][T12699] program syz.2.16885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1046.248784][ T37] kauditd_printk_skb: 427 callbacks suppressed [ 1046.248805][ T37] audit: type=1326 audit(1305.024:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12704 comm="syz.0.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb974c799 code=0x7ffc0000 [ 1046.283961][ T37] audit: type=1326 audit(1305.056:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12704 comm="syz.0.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fadb974c799 code=0x7ffc0000 [ 1046.284302][ T37] audit: type=1326 audit(1305.056:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12704 comm="syz.0.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb974c799 code=0x7ffc0000 [ 1046.332983][ T37] audit: type=1326 audit(1305.077:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12704 comm="syz.0.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fadb974c799 code=0x7ffc0000 [ 1046.333044][ T37] audit: type=1326 audit(1305.077:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12704 comm="syz.0.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb974c799 code=0x7ffc0000 [ 1046.333090][ T37] audit: type=1326 audit(1305.077:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12704 comm="syz.0.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb974c799 code=0x7ffc0000 [ 1046.333135][ T37] audit: type=1326 audit(1305.087:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12704 comm="syz.0.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fadb974c799 code=0x7ffc0000 [ 1046.333180][ T37] audit: type=1326 audit(1305.087:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12704 comm="syz.0.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb974c799 code=0x7ffc0000 [ 1046.333226][ T37] audit: type=1326 audit(1305.087:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12704 comm="syz.0.16889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb974c799 code=0x7ffc0000 [ 1047.355765][T12757] netlink: 'syz.0.16915': attribute type 1 has an invalid length. [ 1049.072145][T13035] tun0: tun_chr_ioctl cmd 1074025675 [ 1049.072170][T13035] tun0: persist enabled [ 1050.249933][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 1051.554845][ T44] wlan1: Trigger new scan to find an IBSS to join [ 1051.697248][T13260] netlink: 'syz.3.17010': attribute type 4 has an invalid length. [ 1051.697277][T13260] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.17010'. [ 1052.136414][T30590] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1052.279327][T30590] usb 1-1: Using ep0 maxpacket: 32 [ 1052.281532][T30590] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1052.281560][T30590] usb 1-1: config 0 has no interface number 0 [ 1052.281604][T30590] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1052.281632][T30590] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1052.283990][T30590] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1052.284019][T30590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.284041][T30590] usb 1-1: Product: syz [ 1052.284057][T30590] usb 1-1: Manufacturer: syz [ 1052.284072][T30590] usb 1-1: SerialNumber: syz [ 1052.375780][T30590] usb 1-1: config 0 descriptor?? [ 1052.979701][T30590] appletouch 1-1:0.85: Geyser mode initialized. [ 1053.000198][T30590] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input86 [ 1053.207124][ T5820] usb 1-1: USB disconnect, device number 13 [ 1053.238563][T13408] kvm_intel: kvm [13407]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 1053.356576][ T5820] appletouch 1-1:0.85: input: appletouch disconnected [ 1053.891937][T13431] netlink: 'syz.5.17045': attribute type 1 has an invalid length. [ 1053.891984][T13431] netlink: 'syz.5.17045': attribute type 2 has an invalid length. [ 1053.891999][T13431] netlink: 'syz.5.17045': attribute type 1 has an invalid length. [ 1053.892013][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17045'. [ 1054.010349][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1054.029270][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1054.030800][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1054.059805][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1054.060732][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1054.183281][T13433] wlan1 speed is unknown, defaulting to 1000 [ 1054.193155][T13433] lo speed is unknown, defaulting to 1000 [ 1054.225297][T13433] wg1 speed is unknown, defaulting to 1000 [ 1054.446055][ T44] wlan1: Trigger new scan to find an IBSS to join [ 1054.718613][T13433] chnl_net:caif_netlink_parms(): no params data found [ 1055.209264][T13433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.224101][T13433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.224378][T13433] bridge_slave_0: entered allmulticast mode [ 1055.228811][T13433] bridge_slave_0: entered promiscuous mode [ 1055.262740][T13433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.262872][T13433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.263138][T13433] bridge_slave_1: entered allmulticast mode [ 1055.265595][T13433] bridge_slave_1: entered promiscuous mode [ 1055.455850][T13433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.460158][T13433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.684948][T13433] team0: Port device team_slave_0 added [ 1055.740287][T13433] team0: Port device team_slave_1 added [ 1055.919801][T13433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.919821][T13433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.919848][T13433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.923345][T13433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.923363][T13433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.923401][T13433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.053045][ T5816] Bluetooth: hci1: command tx timeout [ 1056.187903][T13433] hsr_slave_0: entered promiscuous mode [ 1056.189519][T13433] hsr_slave_1: entered promiscuous mode [ 1056.190609][T13433] debugfs: 'hsr0' already exists in 'hsr' [ 1056.190641][T13433] Cannot create hsr debugfs directory [ 1056.505641][T13523] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.17084'. [ 1056.583411][T13527] program syz.3.17086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1056.857591][T13433] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.857631][T13433] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.053872][ T2590] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1057.209358][ T2590] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1057.209937][ T2590] usb 4-1: not running at top speed; connect to a high speed hub [ 1057.216852][ T2590] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.216879][ T2590] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1057.254739][ T2590] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1057.254772][ T2590] usb 4-1: New USB device strings: Mfr=248, Product=1, SerialNumber=3 [ 1057.254794][ T2590] usb 4-1: Product: syz [ 1057.254808][ T2590] usb 4-1: Manufacturer: syz [ 1057.254823][ T2590] usb 4-1: SerialNumber: syz [ 1057.275037][ T43] wlan1: Creating new IBSS network, BSSID 62:63:82:50:75:79 [ 1057.282094][T30590] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1057.318847][T13433] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.318885][T13433] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.430445][T30590] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.430504][T30590] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1057.430530][T30590] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.482330][T30590] usb 6-1: config 0 descriptor?? [ 1057.512372][T30590] pwc: Askey VC010 type 2 USB webcam detected. [ 1057.676414][ T2590] usb 4-1: cannot find UAC_HEADER [ 1057.840411][ T2590] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1057.868332][ T2590] usb 4-1: USB disconnect, device number 3 [ 1057.894134][T30590] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1057.973497][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1057.999057][T13433] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.999097][T13433] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.026221][ T5816] Bluetooth: hci1: command tx timeout [ 1058.095449][T30590] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1058.095978][T30590] pwc: recv_control_msg error -71 req 04 val 1000 [ 1058.096459][T30590] pwc: recv_control_msg error -71 req 04 val 1300 [ 1058.096943][T30590] pwc: recv_control_msg error -71 req 04 val 1400 [ 1058.100633][T30590] pwc: recv_control_msg error -71 req 02 val 2000 [ 1058.101152][T30590] pwc: recv_control_msg error -71 req 02 val 2100 [ 1058.141638][T30590] pwc: recv_control_msg error -71 req 04 val 1500 [ 1058.142129][T30590] pwc: recv_control_msg error -71 req 02 val 2500 [ 1058.142612][T30590] pwc: recv_control_msg error -71 req 02 val 2400 [ 1058.143072][T30590] pwc: recv_control_msg error -71 req 02 val 2600 [ 1058.143686][T30590] pwc: recv_control_msg error -71 req 02 val 2900 [ 1058.144136][T30590] pwc: recv_control_msg error -71 req 02 val 2800 [ 1058.145601][T30590] pwc: recv_control_msg error -71 req 04 val 1100 [ 1058.146079][T30590] pwc: recv_control_msg error -71 req 04 val 1200 [ 1058.217108][T30590] pwc: Registered as video103. [ 1058.234338][T30590] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input87 [ 1058.255213][T30590] usb 6-1: USB disconnect, device number 9 [ 1059.370396][T13433] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1059.413177][T13433] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1059.490543][T13433] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1059.576240][T13433] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1059.671679][T13726] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17132'. [ 1059.850173][T13433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.916224][T13433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.939660][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.939948][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.009481][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.009647][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.011120][ T5816] Bluetooth: hci1: command tx timeout [ 1060.750620][T13433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1060.921394][T13433] veth0_vlan: entered promiscuous mode [ 1060.956015][T13433] veth1_vlan: entered promiscuous mode [ 1061.064880][T13433] veth0_macvtap: entered promiscuous mode [ 1061.109043][T13433] veth1_macvtap: entered promiscuous mode [ 1061.207756][T13433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.258712][T13433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1061.305848][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.312161][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.390648][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.405649][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.908316][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.908339][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.999604][ T5816] Bluetooth: hci1: command tx timeout [ 1062.048576][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.048600][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.275760][T14102] delete_channel: no stack [ 1062.811374][ T5816] block nbd1: Receive control failed (result -32) [ 1063.364202][T14241] netlink: 'syz.2.17180': attribute type 64 has an invalid length. [ 1063.364227][T14241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17180'. [ 1064.030375][T14261] netlink: 56 bytes leftover after parsing attributes in process `syz.0.17190'. [ 1064.153630][ T5873] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1064.264052][T14268] Bluetooth: hci2: Frame reassembly failed (-84) [ 1064.317258][ T5873] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1064.317291][ T5873] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1064.317313][ T5873] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.317334][ T5873] usb 6-1: config 220 has no interface number 2 [ 1064.317407][ T5873] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1064.317437][ T5873] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1064.317457][ T5873] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1064.317477][ T5873] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1064.325236][ T5873] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1064.325267][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.325289][ T5873] usb 6-1: Product: syz [ 1064.325305][ T5873] usb 6-1: Manufacturer: syz [ 1064.325322][ T5873] usb 6-1: SerialNumber: syz [ 1064.692138][ T5873] uvcvideo 6-1:220.1: Unknown video format 047d4302-0000-0000-0000-00a5e2000004 [ 1064.692214][ T5873] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1064.692244][ T5873] uvcvideo 6-1:220.0: No valid video chain found. [ 1064.692307][ T5873] usb 6-1: selecting invalid altsetting 0 [ 1064.799044][ T5873] usb 6-1: selecting invalid altsetting 0 [ 1064.799084][ T5873] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1064.818575][ T5873] usb 6-1: USB disconnect, device number 10 [ 1065.510342][T14287] wlan1 speed is unknown, defaulting to 1000 [ 1065.529076][T14287] lo speed is unknown, defaulting to 1000 [ 1065.534185][T14287] wg1 speed is unknown, defaulting to 1000 [ 1066.185286][ T60] Bluetooth: hci2: command 0x1003 tx timeout [ 1066.185462][ T5816] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1066.830196][ T6170] IPVS: starting estimator thread 0... [ 1066.918073][T14336] IPVS: using max 7 ests per chain, 16800 per kthread [ 1066.974928][ T6170] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1067.119507][ T6170] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x41, changing to 0x1 [ 1067.119546][ T6170] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1067.119571][ T6170] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1067.123085][ T6170] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1067.123118][ T6170] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1067.123140][ T6170] usb 1-1: Product: syz [ 1067.123156][ T6170] usb 1-1: Manufacturer: syz [ 1067.123172][ T6170] usb 1-1: SerialNumber: syz [ 1067.201871][ T6170] usb 1-1: config 0 descriptor?? [ 1067.221614][ T6170] usb 1-1: selecting invalid altsetting 0 [ 1067.474470][ T6170] usb 1-1: USB disconnect, device number 14 [ 1067.547538][ T4803] udevd[4803]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1068.103499][T14377] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17242'. [ 1069.089295][ T2590] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1069.241950][ T2590] usb 6-1: Using ep0 maxpacket: 16 [ 1069.244414][ T2590] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.244472][ T2590] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1069.244500][ T2590] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.290960][ T2590] usb 6-1: config 0 descriptor?? [ 1069.326935][ T2590] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1070.548407][ T5873] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1070.700600][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 1070.706545][ T5873] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1070.709729][ T5873] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1070.709762][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1070.709785][ T5873] usb 3-1: Product: syz [ 1070.709801][ T5873] usb 3-1: Manufacturer: syz [ 1070.709817][ T5873] usb 3-1: SerialNumber: syz [ 1070.782758][ T5873] usb 3-1: config 0 descriptor?? [ 1070.784018][T14486] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1071.070229][ T5873] usb 3-1: USB disconnect, device number 2 [ 1071.178204][T14522] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17310'. [ 1071.178323][T14522] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17310'. [ 1071.722719][ T10] usb 6-1: USB disconnect, device number 11 [ 1072.444192][ T10] kernel write not supported for file bpf-map (pid: 10 comm: kworker/0:1) [ 1072.527720][T14681] netlink: 71 bytes leftover after parsing attributes in process `syz.2.17338'. [ 1072.937399][T14701] team0: No ports can be present during mode change [ 1073.023927][T14705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17350'. [ 1073.081447][T14707] program syz.0.17353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1073.488876][T14733] program syz.3.17361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1076.043004][T15046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1076.282464][T15059] netlink: 'syz.5.17424': attribute type 3 has an invalid length. [ 1076.446777][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1076.627682][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.627712][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1076.632638][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1076.632672][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.632695][ T10] usb 1-1: Product: syz [ 1076.632711][ T10] usb 1-1: Manufacturer: syz [ 1076.632727][ T10] usb 1-1: SerialNumber: syz [ 1076.883314][T15088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17438'. [ 1076.946664][ T10] usb 1-1: 0:2 : does not exist [ 1076.949487][T15088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17438'. [ 1077.043924][ T10] usb 1-1: USB disconnect, device number 15 [ 1077.180475][T15096] program syz.3.17436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1077.202183][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1077.789492][T15126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17453'. [ 1077.845942][ T5873] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1077.992964][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.993000][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.993027][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1077.993072][ T5873] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1077.993097][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.056478][ T5873] usb 1-1: config 0 descriptor?? [ 1078.192931][T15139] Bluetooth: MGMT ver 1.23 [ 1078.462621][ T5873] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1078.462664][ T5873] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1078.462694][ T5873] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1078.462723][ T5873] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1078.462752][ T5873] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1078.462781][ T5873] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1078.462818][ T5873] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1078.462847][ T5873] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1078.462887][ T5873] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1078.462915][ T5873] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1078.598780][ T5873] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1078.706281][ T2590] usb 1-1: USB disconnect, device number 16 [ 1078.734239][T15156] fido_id[15156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1078.921969][ T5989] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1079.084037][ T5989] usb 6-1: Using ep0 maxpacket: 16 [ 1079.090814][ T5989] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1079.090849][ T5989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.090871][ T5989] usb 6-1: Product: syz [ 1079.090888][ T5989] usb 6-1: Manufacturer: syz [ 1079.090904][ T5989] usb 6-1: SerialNumber: syz [ 1079.140447][ T5989] usb 6-1: config 0 descriptor?? [ 1079.155171][ T5989] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 1079.358052][ T5989] usb 6-1: USB disconnect, device number 12 [ 1079.677369][ T38] INFO: task kworker/u8:12:1474 blocked for more than 143 seconds. [ 1079.677398][ T38] Tai[ 1079.677398][ T38] Tainted: G L syzkaller #0 [ 1079.677411][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1079.677422][ T38] task:kworker/u8:12 state:D stack:21312 pid:1474 tgid:1474 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1079.677488][ T38] Workqueue: netns cleanup_net [ 1079.677520][ T38] Call Trace: [ 1079.677528][ T38] [ 1079.677543][ T38] __schedule+0x14fb/0x52c0 [ 1079.677587][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1079.677626][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1079.677652][ T38] ? __pfx___schedule+0x10/0x10 [ 1079.677690][ T38] ? schedule+0x90/0x360 [ 1079.677720][ T38] schedule+0x164/0x360 [ 1079.677751][ T38] rxrpc_destroy_all_calls+0x57e/0x6a0 [ 1079.677788][ T38] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 1079.677819][ T38] ? __pfx_var_wake_function+0x10/0x10 [ 1079.677853][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1079.677882][ T38] ? __timer_delete_sync+0x53e/0x610 [ 1079.677919][ T38] rxrpc_exit_net+0x6f/0xc0 [ 1079.677946][ T38] ops_undo_list+0x49f/0x940 [ 1079.677976][ T38] ? rt_spin_unlock+0x170/0x200 [ 1079.677999][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 1079.678022][ T38] ? rt_spin_unlock+0x14f/0x200 [ 1079.678049][ T38] ? idr_destroy+0x21b/0x2a0 [ 1079.678076][ T38] ? rt_spin_unlock+0x160/0x200 [ 1079.678103][ T38] cleanup_net+0x56e/0x800 [ 1079.678234][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 1079.678271][ T38] ? process_scheduled_works+0xa25/0x1830 [ 1079.678302][ T38] ? process_scheduled_works+0xa25/0x1830 [ 1079.678336][ T38] process_scheduled_works+0xb02/0x1830 [ 1079.678398][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1079.678436][ T38] ? assign_work+0x3d5/0x5e0 [ 1079.678479][ T38] worker_thread+0xa50/0xfc0 [ 1079.678543][ T38] kthread+0x388/0x470 [ 1079.678586][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1079.678616][ T38] ? __pfx_kthread+0x10/0x10 [ 1079.678641][ T38] ret_from_fork+0x51e/0xb90 [ 1079.678677][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1079.678706][ T38] ? __switch_to+0xc7d/0x1450 [ 1079.678738][ T38] ? __pfx_kthread+0x10/0x10 [ 1079.678763][ T38] ret_from_fork_asm+0x1a/0x30 [ 1079.678804][ T38] [ 1079.678986][ T38] [ 1079.678986][ T38] Showing all locks held in the system: [ 1079.679001][ T38] 1 lock held by khungtaskd/38: [ 1079.679014][ T38] #0: ffffffff8ddcd780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1079.679089][ T38] 3 locks held by kworker/u8:12/1474: [ 1079.679103][ T38] #0: ffff88801aed9138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1079.679163][ T38] #1: ffffc900061c7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1079.679224][ T38] #2: ffffffff8f14ba00 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1079.679292][ T38] 2 locks held by getty/5557: [ 1079.679305][ T38] #0: ffff8880376f60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1079.679359][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1079.681878][ T38] 10 locks held by syz-executor/5808: [ 1079.681920][ T38] 1 lock held by syz.0.17486/15395: [ 1079.681937][ T38] [ 1079.681944][ T38] ============================================= [ 1079.681944][ T38] [ 1079.681965][ T38] NMI backtrace for cpu 0 [ 1079.681985][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1079.682019][ T38] Tainted: [L]=SOFTLOCKUP [ 1079.682027][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1079.682043][ T38] Call Trace: [ 1079.682053][ T38] [ 1079.682063][ T38] dump_stack_lvl+0xe8/0x150 [ 1079.682100][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1079.682125][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1079.682159][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1079.682186][ T38] sys_info+0x135/0x170 [ 1079.682219][ T38] watchdog+0xfd9/0x1030 [ 1079.682253][ T38] ? watchdog+0x21a/0x1030 [ 1079.682290][ T38] kthread+0x388/0x470 [ 1079.682315][ T38] ? __pfx_watchdog+0x10/0x10 [ 1079.682339][ T38] ? __pfx_kthread+0x10/0x10 [ 1079.682364][ T38] ret_from_fork+0x51e/0xb90 [ 1079.682398][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1079.682428][ T38] ? __switch_to+0xc7d/0x1450 [ 1079.682468][ T38] ? __pfx_kthread+0x10/0x10 [ 1079.682493][ T38] ret_from_fork_asm+0x1a/0x30 [ 1079.682533][ T38] [ 1079.682557][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1079.682590][ C1] NMI backtrace for cpu 1 [ 1079.682609][ C1] CPU: 1 UID: 0 PID: 5808 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1079.682636][ C1] Tainted: [L]=SOFTLOCKUP [ 1079.682642][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1079.682654][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80 [ 1079.682678][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d a4 9c bb 0b 48 89 de 5b e9 73 8b 5a 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d c8 ac 89 10 65 8b 35 e9 ac 89 [ 1079.682696][ C1] RSP: 0018:ffffc9000482f308 EFLAGS: 00000246 [ 1079.682720][ C1] RAX: 0000000000000000 RBX: 8000000051319007 RCX: ffff8880417d9e40 [ 1079.682734][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1079.682747][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1079.682758][ C1] R10: dffffc0000000000 R11: fffff940002898c9 R12: ffff888058d167a0 [ 1079.682773][ C1] R13: 8000000051319007 R14: ffff8880358ac4e0 R15: ffff888063356600 [ 1079.682788][ C1] FS: 0000555594566500(0000) GS:ffff888126440000(0000) knlGS:0000000000000000 [ 1079.682805][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1079.682818][ C1] CR2: 0000200000000180 CR3: 0000000044d04000 CR4: 00000000003526f0 [ 1079.682835][ C1] Call Trace: [ 1079.682843][ C1] [ 1079.682849][ C1] __page_table_check_ptes_set+0x65/0x320 [ 1079.682879][ C1] ? page_table_check_set+0x148/0x610 [ 1079.682906][ C1] ? vm_normal_page+0xbe/0x1a0 [ 1079.682928][ C1] copy_pmd_range+0x3ad6/0x7c00 [ 1079.682978][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 1079.683011][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1079.683039][ C1] copy_page_range+0xaf4/0x1120 [ 1079.683072][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1079.683097][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1079.683124][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1079.683149][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1079.683177][ C1] dup_mmap+0xf4c/0x1d50 [ 1079.683218][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1079.683246][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1079.683272][ C1] ? rt_spin_unlock+0x160/0x200 [ 1079.683305][ C1] copy_mm+0x13b/0x4b0 [ 1079.683334][ C1] copy_process+0x18be/0x3d00 [ 1079.683369][ C1] ? copy_process+0x921/0x3d00 [ 1079.683404][ C1] ? __pfx_copy_process+0x10/0x10 [ 1079.683439][ C1] kernel_clone+0x249/0x840 [ 1079.683470][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1079.683512][ C1] __x64_sys_clone+0x1b6/0x230 [ 1079.683543][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1079.683584][ C1] ? do_user_addr_fault+0xc6f/0x1340 [ 1079.683621][ C1] do_syscall_64+0x14d/0xf80 [ 1079.683659][ C1] ? trace_irq_disable+0x3b/0x150 [ 1079.683681][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.683700][ C1] ? clear_bhb_loop+0x40/0x90 [ 1079.683737][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.683756][ C1] RIP: 0033:0x7f28cc955212 [ 1079.683773][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1079.683789][ C1] RSP: 002b:00007ffeb089dcf0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1079.683807][ C1] RAX: ffffffffffffffda RBX: 00007ffeb089dcf0 RCX: 00007f28cc955212 [ 1079.683821][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1079.683833][ C1] RBP: 00007ffeb089de7c R08: 0000000000000000 R09: 0000000000000001 [ 1079.683845][ C1] R10: 00005555945667d0 R11: 0000000000000246 R12: 0000000000000001 [ 1079.683857][ C1] R13: 00000000000927c0 R14: 000000000010f3f1 R15: 00007ffeb089ded0 [ 1079.683881][ C1] [ 1079.692648][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1079.692708][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1079.692778][ T38] Tainted: [L]=SOFTLOCKUP [ 1079.692800][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1079.692843][ T38] Call Trace: [ 1079.692867][ T38] [ 1079.692897][ T38] vpanic+0x56c/0xa60 [ 1079.693001][ T38] ? __pfx___schedule+0x10/0x10 [ 1079.693086][ T38] ? __pfx_vpanic+0x10/0x10 [ 1079.693208][ T38] panic+0xc5/0xd0 [ 1079.693295][ T38] ? __pfx_panic+0x10/0x10 [ 1079.693394][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1079.693492][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1079.693551][ T38] watchdog+0x1023/0x1030 [ 1079.693585][ T38] ? watchdog+0x21a/0x1030 [ 1079.693620][ T38] kthread+0x388/0x470 [ 1079.693645][ T38] ? __pfx_watchdog+0x10/0x10 [ 1079.693670][ T38] ? __pfx_kthread+0x10/0x10 [ 1079.693696][ T38] ret_from_fork+0x51e/0xb90 [ 1079.693816][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1079.693908][ T38] ? __switch_to+0xc7d/0x1450 [ 1079.693979][ T38] ? __pfx_kthread+0x10/0x10 [ 1079.694051][ T38] ret_from_fork_asm+0x1a/0x30 [ 1079.694156][ T38] [ 1079.694792][ T38] Kernel Offset: disabled