last executing test programs: 6m19.072782995s ago: executing program 0 (id=1487): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="010000001e00060000084d74f9345ca1", 0x10) close(r0) 6m18.663205933s ago: executing program 0 (id=1491): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 6m17.153753264s ago: executing program 0 (id=1505): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x2}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000001240)={0xfe, "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"}) 6m16.974441884s ago: executing program 0 (id=1507): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 6m16.789561743s ago: executing program 0 (id=1509): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb86dd00017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 6m10.849616831s ago: executing program 0 (id=1539): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x557ca6f3}]}]}]}, 0x44}}, 0x0) 6m10.278377105s ago: executing program 32 (id=1539): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x557ca6f3}]}]}]}, 0x44}}, 0x0) 5m41.648055941s ago: executing program 4 (id=1961): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a00000800000500"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000850) 5m41.425997769s ago: executing program 4 (id=1966): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 5m40.39839592s ago: executing program 4 (id=1981): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 5m39.930739971s ago: executing program 4 (id=1988): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 5m39.72585807s ago: executing program 4 (id=1992): msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001440)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0xff}, 0x0, 0x0, 0x8000000000000001, 0x9, 0x2, 0x4, 0x4, 0x800, 0x81b0, 0x7fff, 0x0, 0xffffffffffffffff}) 5m39.353466152s ago: executing program 4 (id=2000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="180000008000000000000000ad00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000002300008500000086000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5m38.935891618s ago: executing program 33 (id=2000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="180000008000000000000000ad00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000002300008500000086000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m31.781546358s ago: executing program 1 (id=3191): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 4m31.757936037s ago: executing program 1 (id=3193): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x39f494df748967f7, 0x0, 0x0, 0x0, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0xbf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 4m31.660904829s ago: executing program 1 (id=3195): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x9, @none}, 0xe) 4m31.528837607s ago: executing program 1 (id=3197): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f2, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7ff, 0x0, "5dee00ffffff004000"}) 4m31.269306849s ago: executing program 1 (id=3201): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m31.099942583s ago: executing program 1 (id=3206): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) 4m16.005003198s ago: executing program 34 (id=3206): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) 4m1.05760695s ago: executing program 7 (id=3625): r0 = semget$private(0x0, 0x20000000102, 0x200) semop(r0, &(0x7f0000000240)=[{0x1, 0x20, 0x800}, {0x3, 0x0, 0x1800}, {0x1, 0x800, 0x1800}, {0x0, 0xe65b}], 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)) 4m0.186746014s ago: executing program 7 (id=3644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000100000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 4m0.0815356s ago: executing program 7 (id=3646): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) 3m56.939919066s ago: executing program 7 (id=3708): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x6, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0xfffffffffffffe72, 0x2}) 3m56.850362349s ago: executing program 7 (id=3709): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3m56.849721842s ago: executing program 7 (id=3710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) 3m41.790907814s ago: executing program 35 (id=3710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) 23.498963366s ago: executing program 6 (id=7553): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f0000001080)=""/4125, 0x80000001, 0x101d}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f00000002c0)={0xb, 0x4}) 23.335852276s ago: executing program 6 (id=7558): syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 23.119163357s ago: executing program 6 (id=7563): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x700}]}}]}, 0x48}}, 0x0) 22.902850486s ago: executing program 6 (id=7570): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 22.765861797s ago: executing program 6 (id=7573): r0 = syz_io_uring_setup(0x7e4b, &(0x7f0000000000)={0x0, 0xa994, 0x40, 0x1, 0x3e}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3fd6, 0x800, 0x4, 0xc}, &(0x7f0000000340), &(0x7f0000000140)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) 22.383903503s ago: executing program 6 (id=7582): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001280)='W', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={r1, 0x2}, 0x8) 21.984065601s ago: executing program 36 (id=7582): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001280)='W', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={r1, 0x2}, 0x8) 3.043713758s ago: executing program 2 (id=7883): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000280)="3dfb0e", 0x3, 0x400c000, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010102}, 0x10) sendto$inet(r0, &(0x7f0000000440)="f8", 0x1, 0x4012, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="bc", 0x1}], 0x1, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x5, 0x41, 0x0, 0xfffffffe}}], 0x20}, 0x0) 2.961960816s ago: executing program 5 (id=7884): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100009800aef0400aaaaaaaaaa2e000008000500", @ANYRES32=r1], 0x84}}, 0x20008040) 2.700026014s ago: executing program 5 (id=7889): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, &(0x7f0000000140)=ANY=[], 0x11f0}, 0x0) 2.506520943s ago: executing program 5 (id=7892): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x24, 0x1) setreuid(0xffffffffffffffff, 0xee01) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') 2.356068308s ago: executing program 5 (id=7895): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18) nanosleep(&(0x7f00000001c0)={0x77359400}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) 2.297060716s ago: executing program 9 (id=7896): r0 = epoll_create(0x80) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x11}) epoll_wait(r0, &(0x7f0000002240)=[{}], 0x1, 0xfffffffb) 2.05054887s ago: executing program 3 (id=7898): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=@newqdisc={0x90, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x3, 0x0, 0x2, 0x0, 0xfffffffd, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x10, 0x0, 0x3}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x30, 0x1, 0xade}}]}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x40000d0) 2.026694564s ago: executing program 2 (id=7899): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.773629461s ago: executing program 2 (id=7901): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents(r0, &(0x7f00000003c0)=""/202, 0xca) getdents64(r0, &(0x7f0000000000)=""/181, 0xb5) getdents64(r0, 0x0, 0x0) 1.724005076s ago: executing program 3 (id=7902): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x0) 1.617796493s ago: executing program 2 (id=7903): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r1 = dup(r0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000002c0)={0x60, 0x3, &(0x7f0000205000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x792, 0x0, 0x0, 0x5c, 0x0, 0x66, 0x11, 0x40}) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) 1.566915474s ago: executing program 9 (id=7905): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x338}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa8}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[]) 1.457653725s ago: executing program 2 (id=7906): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r1, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000000)) 1.421223282s ago: executing program 3 (id=7907): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 1.205699114s ago: executing program 9 (id=7909): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x1ef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}]}, 0x54}}, 0x0) 1.205082126s ago: executing program 2 (id=7910): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, 0x0, 0x0) 951.028426ms ago: executing program 5 (id=7912): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x101) 931.082368ms ago: executing program 9 (id=7913): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x502) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x400454a4, &(0x7f0000000040)) 787.981556ms ago: executing program 8 (id=7914): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x0, 0x9, 0xd9}, 0x14) 747.932316ms ago: executing program 3 (id=7915): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000010640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) 660.019352ms ago: executing program 9 (id=7916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)) 541.160013ms ago: executing program 8 (id=7917): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0xf00, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 455.433462ms ago: executing program 3 (id=7918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x0) 331.605118ms ago: executing program 8 (id=7919): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000020601020000000000000000050000000900020073797a310000000005000400020000000d00031b8200686173683a6e657400000000050005000a0000000500010300000000d18e5386befe9dd9740393175ad481122fd5e222bf5fc22705a055c5bb57e455d5606506716b12126b3acb7fd5957878043a47c8c3b0da13a9c75c0b8a8041979f24c6a5100d9e80da95c344a7985ad9c17181ef7321f82f382420400e9e40d8f1e89f428a851259f7ec0b5d8784eb25f1719002d70c8499"], 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f00000003c0)) 330.091541ms ago: executing program 5 (id=7920): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}], 0x1c) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 203.458594ms ago: executing program 3 (id=7921): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000004400)=[{{&(0x7f0000001780), 0x6e, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000001580)=""/186, 0xba}], 0x1}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 153.525196ms ago: executing program 8 (id=7922): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000000c0)=0x10) 140.34682ms ago: executing program 9 (id=7923): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r1, 0x11, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000380)={r1, 0x11, 0x6, @local}, 0x10) 71.086157ms ago: executing program 8 (id=7924): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) 0s ago: executing program 8 (id=7925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): USB disconnect, device number 39 [ 503.648487][ T24] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 503.821538][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 503.851835][ T24] usb 9-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 503.888667][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.907820][ T24] usb 9-1: config 0 descriptor?? [ 503.917526][T17682] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 504.347094][ T24] belkin 0003:050D:3201.0062: unbalanced collection at end of report description [ 504.377516][ T24] belkin 0003:050D:3201.0062: parse failed [ 504.384821][ T24] belkin 0003:050D:3201.0062: probe with driver belkin failed with error -22 [ 504.542535][ T24] usb 9-1: USB disconnect, device number 15 [ 504.835547][T17722] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5512'. [ 504.855470][T17720] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5512'. [ 505.318818][ T24] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 505.478981][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 505.513692][ T24] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 505.539304][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.547444][ T24] usb 4-1: Product: syz [ 505.569709][ T24] usb 4-1: Manufacturer: syz [ 505.581966][ T24] usb 4-1: SerialNumber: syz [ 505.603494][ T24] usb 4-1: config 0 descriptor?? [ 505.633820][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 505.659505][ T24] usb 4-1: setting power ON [ 505.670514][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 505.695996][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 505.725200][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 505.770409][ T24] usb 4-1: media controller created [ 505.813910][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.856721][ T24] usb 4-1: selecting invalid altsetting 6 [ 505.889972][ T24] usb 4-1: digital interface selection failed (-22) [ 505.909790][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 505.936427][ T24] usb 4-1: setting power OFF [ 505.943874][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 505.952525][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 505.966127][T17753] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 505.973998][T17753] IPv6: NLM_F_CREATE should be set when creating new route [ 505.981486][T17753] IPv6: NLM_F_CREATE should be set when creating new route [ 505.988826][T17753] IPv6: NLM_F_CREATE should be set when creating new route [ 505.998036][ T1209] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 506.007472][ T24] (NULL device *): no alternate interface [ 506.051367][T17753] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.077916][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 506.104134][ T24] usb 4-1: USB disconnect, device number 54 [ 506.182827][ T1209] usb 6-1: Using ep0 maxpacket: 8 [ 506.195390][ T1209] usb 6-1: unable to get BOS descriptor or descriptor too short [ 506.215401][ T1209] usb 6-1: config 4 interface 0 has no altsetting 0 [ 506.236597][ T1209] usb 6-1: string descriptor 0 read error: -22 [ 506.243925][ T1209] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 506.257606][ T1209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.281839][ T1209] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 506.301655][ T1209] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 506.313657][ T1209] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 506.322425][ T1209] usb 6-1: media controller created [ 506.362625][ T1209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 506.755504][ T1209] usb 6-1: USB disconnect, device number 40 [ 506.837868][T17786] tipc: Bearer : already 2 bearers with priority 10 [ 506.851273][T17786] tipc: Bearer : trying with adjusted priority [ 506.860142][T17786] tipc: Enabled bearer , priority 9 [ 506.906413][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.912941][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.468219][ T926] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 507.632952][ T926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.647503][T17821] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5560'. [ 507.658397][ T926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.679192][T17821] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5560'. [ 507.680640][ T926] usb 9-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 507.710670][ T926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.726830][ T926] usb 9-1: config 0 descriptor?? [ 508.072369][T17843] netlink: 'syz.6.5568': attribute type 4 has an invalid length. [ 508.087535][T17843] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5568'. [ 508.192099][ T926] uclogic 0003:5543:0522.0063: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.8-1/input0 [ 508.370797][ T5923] usb 9-1: USB disconnect, device number 16 [ 508.665803][T17875] random: crng reseeded on system resumption [ 508.878223][ T5923] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 509.028625][ T8772] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 509.062954][ T5923] usb 3-1: config 0 has an invalid interface number: 30 but max is 0 [ 509.081509][ T5923] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 509.100558][ T5923] usb 3-1: config 0 has no interface number 0 [ 509.117399][ T5923] usb 3-1: config 0 interface 30 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 509.148125][ T5923] usb 3-1: config 0 interface 30 has no altsetting 0 [ 509.155009][ T5923] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=74.47 [ 509.164546][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.179144][ T5923] usb 3-1: config 0 descriptor?? [ 509.198621][ T5923] usb 3-1: unknown interface protocol 0x41, assuming v1 [ 509.212685][ T8772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.236083][ T5923] usb 3-1: 30:2 : does not exist [ 509.241211][ T8772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.276834][ T8772] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 509.287799][ T8772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.300045][ T8772] usb 4-1: config 0 descriptor?? [ 509.335519][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5601'. [ 509.345037][T17906] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5601'. [ 509.354645][T17906] netlink: 'syz.8.5601': attribute type 6 has an invalid length. [ 509.450779][ T5923] usb 3-1: USB disconnect, device number 48 [ 509.728488][ T8772] hid_mf 0003:0079:1846.0064: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 509.749616][ T8772] hid_mf 0003:0079:1846.0064: Invalid report, this should never happen! [ 509.771729][ T8772] hid_mf 0003:0079:1846.0064: Force feedback init failed. [ 509.954897][ T1209] usb 4-1: USB disconnect, device number 55 [ 509.967559][T17934] CIFS mount error: No usable UNC path provided in device string! [ 509.967559][T17934] [ 509.998581][T17934] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 510.320398][T17953] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5623'. [ 510.632912][T17968] netlink: 'syz.3.5628': attribute type 2 has an invalid length. [ 512.058593][ T1209] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 512.161735][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 512.161757][ T30] audit: type=1326 audit(1751651958.802:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18021 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639ab8e929 code=0x7ffc0000 [ 512.218754][ T1209] usb 9-1: Using ep0 maxpacket: 32 [ 512.241986][ T1209] usb 9-1: config index 0 descriptor too short (expected 164, got 36) [ 512.257749][ T30] audit: type=1326 audit(1751651958.802:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18021 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639ab8e929 code=0x7ffc0000 [ 512.284755][ T1209] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.306287][ T1209] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.330091][ T30] audit: type=1326 audit(1751651958.802:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18021 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f639ab8e929 code=0x7ffc0000 [ 512.361073][ T1209] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 512.363815][ T30] audit: type=1326 audit(1751651958.802:5908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18021 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639ab8e929 code=0x7ffc0000 [ 512.394538][ T1209] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.436933][ T30] audit: type=1326 audit(1751651958.802:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18021 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639ab8e929 code=0x7ffc0000 [ 512.470987][ T1209] usb 9-1: config 0 descriptor?? [ 512.507031][ T30] audit: type=1326 audit(1751651958.802:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18021 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f639ab8e929 code=0x7ffc0000 [ 512.544227][ T30] audit: type=1326 audit(1751651958.802:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18021 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639ab8e929 code=0x7ffc0000 [ 512.782576][T18039] tipc: Enabling of bearer rejected, failed to enable media [ 512.970720][ T1209] logitech 0003:046D:C29C.0065: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.8-1/input0 [ 513.161733][ T1209] logitech 0003:046D:C29C.0065: no inputs found [ 513.194313][ T1209] usb 9-1: USB disconnect, device number 17 [ 513.461755][T18067] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5676'. [ 513.600680][T18076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5677'. [ 513.943278][T18091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5685'. [ 513.977603][T18090] sp0: Synchronizing with TNC [ 513.980918][T18088] delete_channel: no stack [ 514.084591][T18095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 514.458822][T18113] sp0: Synchronizing with TNC [ 514.716776][T18126] [U] Ϧ:Kț.G8X4QTZ.|| [ 514.788330][ T8772] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 514.864268][T18135] overlayfs: missing 'lowerdir' [ 514.942306][ T8772] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 514.942344][ T8772] usb 9-1: config 0 interface 0 has no altsetting 0 [ 514.946048][ T8772] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 514.946085][ T8772] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 514.946108][ T8772] usb 9-1: Product: syz [ 514.946124][ T8772] usb 9-1: Manufacturer: syz [ 514.946140][ T8772] usb 9-1: SerialNumber: syz [ 514.958773][ T8772] usb 9-1: config 0 descriptor?? [ 514.965109][T18140] netlink: 'syz.2.5711': attribute type 2 has an invalid length. [ 514.965137][T18140] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5711'. [ 514.985146][ T8772] usb 9-1: selecting invalid altsetting 0 [ 515.217455][ T926] usb 9-1: USB disconnect, device number 18 [ 515.814982][T18177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5729'. [ 516.909730][T18238] netlink: 'syz.2.5758': attribute type 23 has an invalid length. [ 516.977188][ T926] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 516.990373][ T926] hid-generic 0000:0000:0000.0066: hidraw0: HID v0.00 Device [syz0] on syz0 [ 517.023709][ T30] audit: type=1326 audit(1751651963.662:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18241 comm="syz.8.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 517.053544][ T30] audit: type=1326 audit(1751651963.662:5913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18241 comm="syz.8.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 517.089285][ T1209] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 517.132675][ T30] audit: type=1326 audit(1751651963.692:5914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18241 comm="syz.8.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 517.184386][ T30] audit: type=1326 audit(1751651963.692:5915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18241 comm="syz.8.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 517.207643][ T30] audit: type=1326 audit(1751651963.692:5916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18241 comm="syz.8.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 517.234967][ T30] audit: type=1326 audit(1751651963.722:5917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18241 comm="syz.8.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 517.284744][ T1209] usb 4-1: Using ep0 maxpacket: 32 [ 517.307125][ T30] audit: type=1326 audit(1751651963.722:5918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18241 comm="syz.8.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7fe1b858e7 code=0x7ffc0000 [ 517.334752][ T1209] usb 4-1: config 0 has an invalid interface number: 226 but max is 0 [ 517.349188][ T1209] usb 4-1: config 0 has no interface number 0 [ 517.355566][ T1209] usb 4-1: config 0 interface 226 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.373543][ T1209] usb 4-1: config 0 interface 226 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.413263][ T1209] usb 4-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 517.424320][ T30] audit: type=1326 audit(1751651963.722:5919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18241 comm="syz.8.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7fe1b2ab19 code=0x7ffc0000 [ 517.452762][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.464876][ T30] audit: type=1326 audit(1751651963.722:5920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18241 comm="syz.8.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 517.488297][ T926] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 517.490817][ T1209] usb 4-1: config 0 descriptor?? [ 517.507440][ T30] audit: type=1326 audit(1751651963.722:5921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18241 comm="syz.8.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 517.688275][ T926] usb 9-1: Using ep0 maxpacket: 8 [ 517.723908][ T926] usb 9-1: unable to get BOS descriptor or descriptor too short [ 517.759031][ T926] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 517.778764][ T926] usb 9-1: can't read configurations, error -71 [ 517.963969][ T1209] uclogic 0003:5543:0081.0067: interface is invalid, ignoring [ 518.226274][ T5923] usb 4-1: USB disconnect, device number 56 [ 518.456639][T18283] netlink: 'syz.6.5779': attribute type 3 has an invalid length. [ 518.592534][ T30] audit: type=1800 audit(1751651965.232:5922): pid=18291 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.5783" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 519.218837][ T926] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 519.398310][ T926] usb 4-1: Using ep0 maxpacket: 8 [ 519.425564][ T926] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 519.458188][ T926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.478541][ T926] usb 4-1: Product: syz [ 519.482875][ T926] usb 4-1: Manufacturer: syz [ 519.487531][ T926] usb 4-1: SerialNumber: syz [ 519.513988][ T926] usb 4-1: config 0 descriptor?? [ 519.532746][ T926] gspca_main: se401-2.14.0 probing 047d:5003 [ 519.838296][ T10] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 519.953858][ T926] gspca_se401: Wrong descriptor type [ 520.000162][ T10] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.018579][ T10] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.030289][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 520.036997][ T10] usb 9-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 520.046503][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.060155][ T10] usb 9-1: config 0 descriptor?? [ 520.172955][ T926] usb 4-1: USB disconnect, device number 57 [ 520.493446][ T10] hid-generic 0003:0463:1215.0068: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.8-1/input0 [ 520.597123][T18362] netlink: 16162 bytes leftover after parsing attributes in process `syz.5.5816'. [ 520.697770][ T1209] usb 9-1: USB disconnect, device number 21 [ 520.784064][T18368] [U]  [ 520.786937][T18368] [U] K{ [ 520.789999][T18368] [U] t 1ŠFfˊ`GJgo/mC [ 520.796989][T18368] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 520.812565][T18368] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 520.823021][T18368] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 520.858862][T18368] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 520.882434][T18368] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 520.893591][T18368] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 520.905344][T18368] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 521.000700][T18368] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 521.009236][T18368] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 521.022809][T18368] [U] 22Ʃx?0;3u [ 521.027126][T18368] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 521.052112][T18368] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 521.061957][T18368] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 521.070745][T18368] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 521.076925][T18368] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 521.089722][T18368] [U] ec [ 521.092859][T18368] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 521.174774][T18367] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 521.656038][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5834'. [ 521.672274][T18400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5834'. [ 521.681902][T18400] netlink: 'syz.3.5834': attribute type 11 has an invalid length. [ 521.798723][ T1209] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 521.958951][ T1209] usb 6-1: Using ep0 maxpacket: 32 [ 521.967010][ T1209] usb 6-1: config 1 has an invalid interface number: 242 but max is 0 [ 521.976883][ T1209] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.991965][ T1209] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 522.001922][ T1209] usb 6-1: config 1 has no interface number 1 [ 522.021893][ T1209] usb 6-1: config 1 interface 242 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 522.043117][ T1209] usb 6-1: config 1 interface 242 has no altsetting 0 [ 522.054979][ T1209] usb 6-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 522.065809][ T1209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.079805][ T1209] usb 6-1: Product: syz [ 522.084521][ T1209] usb 6-1: Manufacturer: syz [ 522.091608][ T1209] usb 6-1: SerialNumber: syz [ 522.340681][T18416] futex_wake_op: syz.2.5841 tries to shift op by -1; fix this program [ 522.575721][ T1209] aqc111 6-1:1.242: probe with driver aqc111 failed with error -22 [ 522.829236][ T1209] usb 6-1: USB disconnect, device number 41 [ 522.922486][T18431] vlan2: entered promiscuous mode [ 522.932034][T18431] bridge0: entered promiscuous mode [ 524.030483][T18462] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5864'. [ 524.058162][T18462] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5864'. [ 524.062748][T18464] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5866'. [ 524.083943][T18464] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5866'. [ 524.094232][T18464] netlink: 'syz.5.5866': attribute type 5 has an invalid length. [ 524.103339][T18464] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5866'. [ 525.101359][ T1209] libceph: connect (1)[c::]:6789 error -101 [ 525.108750][ T1209] libceph: mon0 (1)[c::]:6789 connect error [ 525.116581][ T1209] libceph: connect (1)[c::]:6789 error -101 [ 525.125729][ T1209] libceph: mon0 (1)[c::]:6789 connect error [ 525.376590][T18521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5889'. [ 525.396177][ T1209] libceph: connect (1)[c::]:6789 error -101 [ 525.404590][ T1209] libceph: mon0 (1)[c::]:6789 connect error [ 525.849384][ T1209] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 525.864627][T18511] ceph: No mds server is up or the cluster is laggy [ 526.010771][ T1209] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.038867][ T1209] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.057354][ T1209] usb 9-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 526.068750][ T1209] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.082083][ T1209] usb 9-1: config 0 descriptor?? [ 526.532296][ T1209] redragon 0003:0C45:760B.0069: hidraw0: USB HID v0.00 Device [HID 0c45:760b] on usb-dummy_hcd.8-1/input0 [ 526.736969][ T8772] usb 9-1: USB disconnect, device number 22 [ 526.959667][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 527.132266][ T10] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 527.142036][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.153805][ T10] usb 4-1: config 0 descriptor?? [ 527.166163][ T10] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 527.474967][T18610] netlink: 'syz.2.5932': attribute type 6 has an invalid length. [ 527.792133][ T24] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 527.796811][ T10] gspca_sunplus: reg_w_riv err -71 [ 527.820913][ T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 527.834429][ T10] usb 4-1: USB disconnect, device number 58 [ 527.981393][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 528.048901][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 528.118276][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 528.182761][ T24] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 528.237235][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.245828][ T24] usb 3-1: Product: syz [ 528.250746][ T24] usb 3-1: Manufacturer: syz [ 528.255406][ T24] usb 3-1: SerialNumber: syz [ 528.270743][ T24] usb 3-1: config 0 descriptor?? [ 528.276712][T18614] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 528.284640][T18614] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 528.294390][ T24] usb 3-1: ucan: probing device on interface #0 [ 528.904056][ T24] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 528.937016][ T24] usb 3-1: USB disconnect, device number 49 [ 529.288882][ T5847] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 529.457206][ T5847] usb 6-1: Using ep0 maxpacket: 8 [ 529.476944][ T5847] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 529.494872][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.505328][ T5847] usb 6-1: Product: syz [ 529.513496][ T5847] usb 6-1: Manufacturer: syz [ 529.519113][ T5847] usb 6-1: SerialNumber: syz [ 529.534863][ T5847] usb 6-1: config 0 descriptor?? [ 529.556184][ T5847] gspca_main: se401-2.14.0 probing 047d:5003 [ 529.977423][ T5847] gspca_se401: Bayer format not supported! [ 530.196713][ T1209] usb 6-1: USB disconnect, device number 42 [ 530.277394][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5984'. [ 530.298855][T18717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5984'. [ 530.319929][T18717] netlink: 'syz.3.5984': attribute type 5 has an invalid length. [ 530.442499][T18725] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5988'. [ 530.535273][T18727] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 530.696019][T18735] Cannot find add_set index 1 as target [ 530.799713][T18737] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 530.952406][ T30] audit: type=1326 audit(1751651977.592:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18743 comm="syz.6.5998" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ed298e929 code=0x0 [ 531.036120][T18751] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6000'. [ 531.048787][T18751] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6000'. [ 531.369355][ T1209] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 531.540410][ T1209] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 531.551341][ T30] audit: type=1326 audit(1751651978.192:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18779 comm="syz.2.6014" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9fb18e929 code=0x0 [ 531.579638][ T1209] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 531.587916][ T1209] usb 6-1: config 0 has no interface number 0 [ 531.599870][ T1209] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 531.620710][ T1209] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 531.641392][ T1209] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 531.655980][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.671449][ T1209] usb 6-1: config 0 descriptor?? [ 531.842526][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6018'. [ 532.134037][T18800] netlink: 348 bytes leftover after parsing attributes in process `syz.3.6023'. [ 532.334848][ T1209] usb 6-1: USB disconnect, device number 43 [ 532.848230][ T10] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 532.963595][T18839] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6042'. [ 533.044302][ T10] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 533.057795][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.087939][ T10] usb 9-1: Product: syz [ 533.094746][ T10] usb 9-1: Manufacturer: syz [ 533.104918][ T10] usb 9-1: SerialNumber: syz [ 533.126581][ T10] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 533.173256][ T8772] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 533.534669][ T30] audit: type=1326 audit(1751651980.172:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18855 comm="syz.5.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7fc00000 [ 533.606065][ T30] audit: type=1326 audit(1751651980.172:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18855 comm="syz.5.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd23c18e929 code=0x7fc00000 [ 533.725946][ T30] audit: type=1326 audit(1751651980.172:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18855 comm="syz.5.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7fc00000 [ 533.747763][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.788745][ T30] audit: type=1326 audit(1751651980.172:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18855 comm="syz.5.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7fc00000 [ 533.813969][ T30] audit: type=1326 audit(1751651980.172:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18855 comm="syz.5.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7fc00000 [ 533.836051][ T30] audit: type=1326 audit(1751651980.172:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18855 comm="syz.5.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7fc00000 [ 533.905123][T18875] program syz.6.6060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.008905][ T10] usb 9-1: USB disconnect, device number 23 [ 534.028993][ T30] audit: type=1326 audit(1751651980.172:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18855 comm="syz.5.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7fc00000 [ 534.050985][ T30] audit: type=1326 audit(1751651980.172:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18855 comm="syz.5.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7fc00000 [ 534.103295][T18879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6061'. [ 534.252242][ T8772] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 534.271789][ T8772] ath9k_htc: Failed to initialize the device [ 534.291587][ T10] usb 9-1: ath9k_htc: USB layer deinitialized [ 534.538733][ T1209] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 534.691423][ T1209] usb 6-1: Using ep0 maxpacket: 32 [ 534.704056][ T1209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.729161][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 534.731234][ T1209] usb 6-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 534.752333][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.773880][ T1209] usb 6-1: config 0 descriptor?? [ 534.898359][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 534.913171][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 534.936421][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.966324][ T10] usb 3-1: config 0 descriptor?? [ 534.984729][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 535.158880][T18931] netlink: 136 bytes leftover after parsing attributes in process `syz.8.6087'. [ 535.168048][T18931] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 535.207113][ T1209] kye 0003:0458:501B.006A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 535.235038][ T1209] kye 0003:0458:501B.006A: unknown main item tag 0x0 [ 535.244153][ T1209] kye 0003:0458:501B.006A: unknown main item tag 0x0 [ 535.255214][ T1209] kye 0003:0458:501B.006A: unknown main item tag 0x0 [ 535.262675][ T1209] kye 0003:0458:501B.006A: unknown main item tag 0x0 [ 535.290811][T18936] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6089'. [ 535.298970][ T1209] kye 0003:0458:501B.006A: unknown main item tag 0x0 [ 535.315153][T18936] vlan3: entered allmulticast mode [ 535.319411][ T1209] kye 0003:0458:501B.006A: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.5-1/input0 [ 535.320428][T18936] gretap0: entered allmulticast mode [ 535.341680][ T1209] kye 0003:0458:501B.006A: tablet-enabling feature report not found [ 535.351942][ T1209] kye 0003:0458:501B.006A: tablet enabling failed [ 535.448852][ T1209] usb 6-1: USB disconnect, device number 44 [ 535.628452][ T10] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 535.635310][ T10] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 535.672736][ T10] usb 3-1: USB disconnect, device number 50 [ 535.854629][T18958] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6099'. [ 535.907182][T18960] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 535.921787][T18960] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 535.990263][T18964] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6103'. [ 536.080176][T18964] team0: Port device team_slave_1 removed [ 536.722795][T18996] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6119'. [ 537.745553][T19048] mkiss: ax0: crc mode is auto. [ 537.953176][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 537.953196][ T30] audit: type=1326 audit(1751651984.582:5992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19053 comm="syz.8.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 538.002814][ T30] audit: type=1326 audit(1751651984.582:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19053 comm="syz.8.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 538.041280][ T30] audit: type=1326 audit(1751651984.592:5994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19053 comm="syz.8.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 538.066802][ T30] audit: type=1326 audit(1751651984.592:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19053 comm="syz.8.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 538.120471][ T30] audit: type=1326 audit(1751651984.592:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19053 comm="syz.8.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 538.147092][ T30] audit: type=1326 audit(1751651984.592:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19053 comm="syz.8.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 538.198941][ T30] audit: type=1326 audit(1751651984.592:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19053 comm="syz.8.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 538.242249][T19064] netdevsim netdevsim8: Firmware load for '/../file0' refused, path contains '..' component [ 538.285808][ T30] audit: type=1326 audit(1751651984.592:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19053 comm="syz.8.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 538.472807][T19075] can0: slcan on pty36. [ 538.530126][T19074] can0 (unregistered): slcan off pty36. [ 538.585010][T19078] nbd: couldn't find a device at index 135 [ 538.630534][T19084] sg_write: process 1580 (syz.6.6160) changed security contexts after opening file descriptor, this is not allowed. [ 538.702124][T19087] delete_channel: no stack [ 539.196858][T19115] dvmrp0: left allmulticast mode [ 539.294558][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6174'. [ 539.338791][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 539.507822][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.536019][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.581344][ T24] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 539.615584][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.659861][ T24] usb 4-1: config 0 descriptor?? [ 539.949746][ T926] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 540.095015][ T24] hid-steam 0003:28DE:1142.006B: unknown main item tag 0x1 [ 540.095115][ T24] hid-steam 0003:28DE:1142.006B: item fetching failed at offset 4/5 [ 540.095900][ T24] hid-steam 0003:28DE:1142.006B: steam_probe:parse of hid interface failed [ 540.095992][ T24] hid-steam 0003:28DE:1142.006B: probe with driver hid-steam failed with error -22 [ 540.123316][ T926] usb 6-1: Using ep0 maxpacket: 16 [ 540.135765][ T926] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 130, using maximum allowed: 30 [ 540.135814][ T926] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 540.135842][ T926] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.135865][ T926] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 540.135892][ T926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 540.135925][ T926] usb 6-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 540.135949][ T926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.138897][ T926] usb 6-1: config 0 descriptor?? [ 540.161420][ T10] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 540.296987][ T24] usb 4-1: USB disconnect, device number 59 [ 540.332343][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 540.336962][ T10] usb 9-1: config 2 has an invalid interface number: 31 but max is 0 [ 540.337021][ T10] usb 9-1: config 2 has no interface number 0 [ 540.337067][ T10] usb 9-1: config 2 interface 31 has no altsetting 0 [ 540.339921][ T10] usb 9-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 540.339978][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.339999][ T10] usb 9-1: Product: syz [ 540.340015][ T10] usb 9-1: Manufacturer: syz [ 540.340030][ T10] usb 9-1: SerialNumber: syz [ 540.344427][T19151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6191'. [ 540.576486][ T926] nzxt-smart2 0003:1E71:200E.006C: item fetching failed at offset 0/3 [ 540.607962][ T926] nzxt-smart2 0003:1E71:200E.006C: probe with driver nzxt-smart2 failed with error -22 [ 540.776638][ T926] usb 6-1: USB disconnect, device number 45 [ 540.995477][ T10] ch9200 9-1:2.31: probe with driver ch9200 failed with error -22 [ 541.023162][T19178] netlink: 'syz.6.6204': attribute type 10 has an invalid length. [ 541.025322][ T10] usb 9-1: USB disconnect, device number 24 [ 541.063525][T19178] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.073574][T19181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6204'. [ 541.150180][T19178] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.157531][T19178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.193405][T19178] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 541.216909][T19181] bridge_slave_1: left allmulticast mode [ 541.233835][T19181] bridge_slave_1: left promiscuous mode [ 541.257859][T19181] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.279688][T19181] bridge_slave_0: left allmulticast mode [ 541.299383][T19181] bridge_slave_0: left promiscuous mode [ 541.323740][T19181] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.434194][T19181] bond0: (slave bridge0): Releasing backup interface [ 541.670616][T19178] syz.6.6204 (19178) used greatest stack depth: 19992 bytes left [ 542.080944][T19221] netlink: 'syz.8.6225': attribute type 1 has an invalid length. [ 542.118155][T19221] netlink: 216 bytes leftover after parsing attributes in process `syz.8.6225'. [ 542.978635][T19270] netlink: 'syz.3.6248': attribute type 2 has an invalid length. [ 543.774550][T19315] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6269'. [ 543.806143][T19318] vim2m vim2m.0: vidioc_s_fmt queue busy [ 543.935568][T19322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.318564][ T926] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 544.548575][ T926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.579193][ T926] usb 9-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 544.605906][ T926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.649758][ T926] usb 9-1: config 0 descriptor?? [ 544.716961][T19361] mkiss: ax0: crc mode is auto. [ 544.812066][T19366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6290'. [ 545.021679][T19376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.096260][ T926] input: HID 28bd:0933 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:28BD:0933.006D/input/input38 [ 545.148564][ T926] uclogic 0003:28BD:0933.006D: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.8-1/input0 [ 545.187271][T19383] IPVS: Unknown mcast interface: pimreg1 [ 545.272090][ T5930] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 545.299328][ T1209] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 545.300297][ T10] usb 9-1: USB disconnect, device number 25 [ 545.316656][ T5923] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 545.443767][ T5930] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.464816][ T5930] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.483241][ T5923] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 545.491667][ T1209] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.498186][ T5923] usb 3-1: config 0 has no interface number 0 [ 545.514809][ T5930] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 545.514984][ T5923] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 545.527315][ T1209] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.550623][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 545.557250][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.576186][ T5930] usb 6-1: SerialNumber: syz [ 545.588823][ T1209] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 545.604564][ T5923] usb 3-1: config 0 descriptor?? [ 545.619521][ T1209] usb 4-1: config 0 interface 0 has no altsetting 0 [ 545.632356][ T5923] usb 3-1: selecting invalid altsetting 1 [ 545.646817][ T1209] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 545.656459][ T5923] dvb_ttusb_budget: ttusb_init_controller: error [ 545.656497][ T5923] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 545.680951][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.733208][ T1209] usb 4-1: config 0 descriptor?? [ 545.773056][ T5923] DVB: Unable to find symbol cx22700_attach() [ 545.831061][ T5930] usb 6-1: 0:2 : does not exist [ 545.914803][ T5930] usb 6-1: USB disconnect, device number 46 [ 545.970169][ T5923] DVB: Unable to find symbol tda10046_attach() [ 545.990954][ T5923] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 546.038336][ T5923] usb 3-1: USB disconnect, device number 51 [ 546.186958][ T1209] uclogic 0003:28BD:0042.006E: interface is invalid, ignoring [ 546.266361][T19416] netlink: 'syz.6.6306': attribute type 13 has an invalid length. [ 546.417294][ T1209] usb 4-1: USB disconnect, device number 60 [ 546.713056][T19434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6309'. [ 546.846680][T19416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.866764][T19416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.040091][T19416] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.083961][T19416] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.108336][T19416] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.138949][T19416] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.286976][T19416] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.296586][T19416] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.305888][T19416] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.315297][T19416] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.370217][T19459] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6312'. [ 547.382603][T19454] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6312'. [ 547.553026][T19464] bridge0: entered promiscuous mode [ 547.595443][T19464] macvlan2: entered promiscuous mode [ 547.620531][T19464] bridge0: port 3(macvlan2) entered blocking state [ 547.651811][T19464] bridge0: port 3(macvlan2) entered disabled state [ 547.677577][T19464] macvlan2: entered allmulticast mode [ 547.716634][T19464] bridge0: entered allmulticast mode [ 547.759920][T19464] macvlan2: left allmulticast mode [ 547.765152][T19464] bridge0: left allmulticast mode [ 547.790885][T19464] bridge0: left promiscuous mode [ 547.815048][ T30] audit: type=1326 audit(1751651994.442:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19475 comm="syz.2.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb18e929 code=0x7ffc0000 [ 547.889817][ T30] audit: type=1326 audit(1751651994.442:6001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19475 comm="syz.2.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb18e929 code=0x7ffc0000 [ 547.955898][ T30] audit: type=1326 audit(1751651994.482:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19475 comm="syz.2.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fc9fb18e929 code=0x7ffc0000 [ 548.020976][ T30] audit: type=1326 audit(1751651994.482:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19475 comm="syz.2.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb18e929 code=0x7ffc0000 [ 548.060542][ T30] audit: type=1326 audit(1751651994.482:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19475 comm="syz.2.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb18e929 code=0x7ffc0000 [ 548.086491][ T30] audit: type=1326 audit(1751651994.482:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19475 comm="syz.2.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fc9fb18e929 code=0x7ffc0000 [ 548.199152][ T30] audit: type=1326 audit(1751651994.482:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19475 comm="syz.2.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb18e929 code=0x7ffc0000 [ 548.308162][ T30] audit: type=1326 audit(1751651994.482:6007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19475 comm="syz.2.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb18e929 code=0x7ffc0000 [ 548.349403][T19498] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6331'. [ 548.837591][T19521] erofs: Unexpected value for 'acl' [ 549.015926][T19534] delete_channel: no stack [ 549.022222][T19533] delete_channel: no stack [ 549.190510][ T8772] libceph: connect (1)[c::]:6789 error -101 [ 549.201004][ T8772] libceph: mon0 (1)[c::]:6789 connect error [ 549.489701][ T8772] libceph: connect (1)[c::]:6789 error -101 [ 549.510108][ T8772] libceph: mon0 (1)[c::]:6789 connect error [ 549.596473][T19563] can0: slcan on ptm0. [ 549.668786][T19562] can0 (unregistered): slcan off ptm0. [ 549.972222][T19539] ceph: No mds server is up or the cluster is laggy [ 550.028765][T19427] libceph: connect (1)[c::]:6789 error -101 [ 550.038130][T19427] libceph: mon0 (1)[c::]:6789 connect error [ 551.525015][T19666] netlink: 'syz.8.6409': attribute type 1 has an invalid length. [ 551.818829][T19452] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 551.978737][T19452] usb 6-1: Using ep0 maxpacket: 8 [ 551.993325][T19452] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 552.012273][T19452] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 552.038537][T19452] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 552.053900][T19452] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 552.066612][T19452] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 552.084259][T19452] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 552.109210][T19452] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 552.169062][T19452] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 552.194578][T19452] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 552.222060][T19452] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 552.244773][T19452] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 552.256097][T19452] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 552.271417][T19452] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 552.348034][T19452] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 552.391691][T19452] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 552.441909][T19452] usb 6-1: string descriptor 0 read error: -22 [ 552.467868][T19452] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 552.494230][T19452] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.548587][T19715] netlink: 'syz.8.6433': attribute type 178 has an invalid length. [ 552.559385][T19452] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 552.790757][T19728] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 552.842115][T19452] usb 6-1: USB disconnect, device number 47 [ 552.925283][T19427] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 553.093858][T19427] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.115440][T19427] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.138832][T19427] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 553.165877][T19427] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 553.188192][T19427] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.200422][ T8772] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 553.225802][T19427] usb 4-1: config 0 descriptor?? [ 553.333115][T19753] pimreg: entered allmulticast mode [ 553.375335][ T8772] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.404273][ T8772] usb 9-1: config 0 interface 0 has no altsetting 0 [ 553.418804][ T8772] usb 9-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 553.447359][ T8772] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.467507][T19755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6452'. [ 553.481844][ T8772] usb 9-1: config 0 descriptor?? [ 553.656217][T19427] plantronics 0003:047F:FFFF.006F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 553.746975][T19767] bad cache= option: no%e [ 553.746975][T19767] [ 553.764265][T19767] CIFS: VFS: bad cache= option: no%e [ 553.847042][T19427] usb 4-1: USB disconnect, device number 61 [ 553.918233][ T8772] elecom 0003:056E:00FB.0070: item fetching failed at offset 5/7 [ 553.929041][ T8772] elecom 0003:056E:00FB.0070: probe with driver elecom failed with error -22 [ 554.090896][ T30] audit: type=1326 audit(1751652000.732:6008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19781 comm="syz.6.6465" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ed298e929 code=0x0 [ 554.120420][T19451] usb 9-1: USB disconnect, device number 26 [ 554.409288][T19794] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 554.427747][T19794] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 554.437592][T19794] overlayfs: missing 'lowerdir' [ 554.540989][T19798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6472'. [ 555.298520][T19835] block nbd6: NBD_DISCONNECT [ 555.334455][T19837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6491'. [ 555.666217][T19854] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6499'. [ 555.686813][T19854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6499'. [ 555.706670][T19855] ALSA: seq fatal error: cannot create timer (-22) [ 556.265581][ T30] audit: type=1326 audit(1751652002.902:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19887 comm="syz.5.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 556.334595][ T30] audit: type=1326 audit(1751652002.902:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19887 comm="syz.5.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 556.369306][ T30] audit: type=1326 audit(1751652002.912:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19887 comm="syz.5.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 556.411696][T19895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6520'. [ 556.468247][ T30] audit: type=1326 audit(1751652002.912:6012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19887 comm="syz.5.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 556.516896][ T30] audit: type=1326 audit(1751652002.912:6013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19887 comm="syz.5.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 556.553459][ T30] audit: type=1326 audit(1751652002.912:6014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19887 comm="syz.5.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 556.600016][ T30] audit: type=1326 audit(1751652002.912:6015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19887 comm="syz.5.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 556.778859][T19452] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 556.867125][T19915] sp0: Synchronizing with TNC [ 556.943684][T19452] usb 6-1: Using ep0 maxpacket: 16 [ 556.960675][T19452] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.985940][T19452] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.015220][T19452] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 557.036075][T19452] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.069410][T19452] usb 6-1: Product: syz [ 557.073676][T19452] usb 6-1: Manufacturer: syz [ 557.099215][T19452] usb 6-1: SerialNumber: syz [ 557.529633][T19452] usb 6-1: cannot find UAC_HEADER [ 557.579493][T19452] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 557.621668][T19451] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 557.703564][T19946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6545'. [ 557.753875][T19452] usb 6-1: USB disconnect, device number 48 [ 557.786306][T19451] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 557.818856][T19451] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 557.832320][T19451] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 557.842855][T19451] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 557.854149][T19451] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.870439][T19936] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 557.891319][T19451] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 558.011434][T19957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6550'. [ 558.124576][ T8772] usb 9-1: USB disconnect, device number 27 [ 558.682116][ T30] audit: type=1800 audit(1751652005.322:6016): pid=19984 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.6563" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 559.017191][T19999] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6568'. [ 559.419288][T20025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6579'. [ 559.618729][T19451] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 559.790984][T19451] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.819307][T19451] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 559.837300][T19451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.864029][T19451] usb 3-1: config 0 descriptor?? [ 560.301266][T19451] logitech 0003:046D:C295.0071: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.2-1/input0 [ 560.328745][T19451] logitech 0003:046D:C295.0071: no inputs found [ 560.494530][ T8772] usb 3-1: USB disconnect, device number 52 [ 560.919166][T20094] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.6611'. [ 561.271119][T20110] IPVS: Scheduler module ip_vs_sip not found [ 561.613832][T20131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6630'. [ 561.729503][T20137] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6632'. [ 562.263927][ T30] audit: type=1326 audit(1751652008.902:6017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20165 comm="syz.5.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 562.278817][T19452] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 562.308682][T19451] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 562.313612][ T30] audit: type=1326 audit(1751652008.902:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20165 comm="syz.5.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 562.339416][ T30] audit: type=1326 audit(1751652008.902:6019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20165 comm="syz.5.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 562.363651][ T30] audit: type=1326 audit(1751652008.912:6020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20165 comm="syz.5.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 562.394777][ T30] audit: type=1326 audit(1751652008.912:6021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20165 comm="syz.5.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 562.448842][T19452] usb 4-1: Using ep0 maxpacket: 8 [ 562.449768][ T30] audit: type=1326 audit(1751652008.912:6022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20165 comm="syz.5.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 562.461579][T19452] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 562.480482][ T30] audit: type=1326 audit(1751652008.912:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20165 comm="syz.5.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 562.507734][T19452] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.507793][T19452] usb 4-1: Product: syz [ 562.507811][T19452] usb 4-1: Manufacturer: syz [ 562.507827][T19452] usb 4-1: SerialNumber: syz [ 562.533790][T19451] usb 9-1: config 0 has an invalid interface number: 45 but max is 0 [ 562.547834][T19452] usb 4-1: config 0 descriptor?? [ 562.558691][T19451] usb 9-1: config 0 has no interface number 0 [ 562.562608][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6650'. [ 562.578981][T19451] usb 9-1: config 0 interface 45 altsetting 175 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 562.617664][T19451] usb 9-1: config 0 interface 45 altsetting 175 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.647888][T19451] usb 9-1: config 0 interface 45 has no altsetting 0 [ 562.655629][T19451] usb 9-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 562.670781][T19451] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.698022][T19451] usb 9-1: config 0 descriptor?? [ 562.801156][T19452] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 563.076474][T20197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6661'. [ 563.137871][T19451] uclogic 0003:5543:3031.0072: interface is invalid, ignoring [ 563.200344][T19452] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 563.222793][T19452] usb 4-1: USB disconnect, device number 62 [ 563.279106][T20203] netlink: 26 bytes leftover after parsing attributes in process `syz.2.6664'. [ 563.293797][T20203] netlink: 26 bytes leftover after parsing attributes in process `syz.2.6664'. [ 563.364831][T19451] usb 9-1: USB disconnect, device number 28 [ 563.557358][T20213] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6669'. [ 564.081478][T20233] vivid-001: ================= START STATUS ================= [ 564.118660][T20233] vivid-001: Radio HW Seek Mode: Bounded [ 564.146322][T20233] vivid-001: Radio Programmable HW Seek: false [ 564.189494][T20233] vivid-001: RDS Rx I/O Mode: Block I/O [ 564.195254][T20233] vivid-001: Generate RBDS Instead of RDS: false [ 564.236381][T20233] vivid-001: RDS Reception: true [ 564.242446][T20233] vivid-001: RDS Program Type: 0 inactive [ 564.260388][T20233] vivid-001: RDS PS Name: inactive [ 564.265755][T20233] vivid-001: RDS Radio Text: inactive [ 564.281033][T20233] vivid-001: RDS Traffic Announcement: false inactive [ 564.287941][T20233] vivid-001: RDS Traffic Program: false inactive [ 564.317882][T20233] vivid-001: RDS Music: false inactive [ 564.334724][T20233] vivid-001: ================== END STATUS ================== [ 564.732405][T20264] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6692'. [ 564.820170][T20270] netlink: 'syz.3.6695': attribute type 13 has an invalid length. [ 565.130170][ T30] audit: type=1326 audit(1751652011.762:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20286 comm="syz.5.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 565.201710][ T30] audit: type=1326 audit(1751652011.762:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20286 comm="syz.5.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 565.234638][ T30] audit: type=1326 audit(1751652011.762:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20286 comm="syz.5.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 565.316709][T20296] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6709'. [ 565.341741][T20294] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6707'. [ 565.646703][T20314] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6717'. [ 566.275320][T20345] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 566.529276][ T8772] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 566.608852][T19452] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 566.698301][ T8772] usb 4-1: Using ep0 maxpacket: 16 [ 566.709111][ T8772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.733777][ T8772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.768118][ T8772] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 566.800661][T19452] usb 3-1: config 0 has an invalid interface number: 189 but max is 0 [ 566.801235][ T8772] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 566.818643][T19452] usb 3-1: config 0 has no interface number 0 [ 566.841459][ T8772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.849732][T19452] usb 3-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 566.872483][ T8772] usb 4-1: config 0 descriptor?? [ 566.883277][T19452] usb 3-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 566.924174][T19452] usb 3-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 566.952193][T19452] usb 3-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 566.966731][T19452] usb 3-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 566.996676][T19452] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 567.006496][T19452] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.021493][T19452] usb 3-1: Product: syz [ 567.025741][T19452] usb 3-1: Manufacturer: syz [ 567.032716][T19452] usb 3-1: SerialNumber: syz [ 567.053853][T19452] usb 3-1: config 0 descriptor?? [ 567.081971][T20350] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 567.111964][T19452] ums-alauda 3-1:0.189: USB Mass Storage device detected [ 567.151388][T19452] scsi host1: usb-storage 3-1:0.189 [ 567.327101][ T8772] microsoft 0003:045E:07DA.0073: unbalanced collection at end of report description [ 567.347713][ T8772] microsoft 0003:045E:07DA.0073: parse failed [ 567.363762][ T8772] microsoft 0003:045E:07DA.0073: probe with driver microsoft failed with error -22 [ 567.403817][T19452] usb 3-1: USB disconnect, device number 53 [ 567.491545][T20397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6754'. [ 567.571158][T19451] usb 4-1: USB disconnect, device number 63 [ 568.343829][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.350478][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.464081][T20442] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6777'. [ 568.503407][T20442] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6777'. [ 568.575074][T20445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.019535][ T8772] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 569.043386][T20459] bio_check_eod: 14 callbacks suppressed [ 569.043409][T20459] syz.5.6785: attempt to access beyond end of device [ 569.043409][T20459] loop11: rw=0, sector=2, nr_sectors = 2 limit=0 [ 569.094309][T20459] syz.5.6785: attempt to access beyond end of device [ 569.094309][T20459] loop11: rw=0, sector=16, nr_sectors = 2 limit=0 [ 569.225232][ T8772] usb 9-1: Using ep0 maxpacket: 8 [ 569.246180][ T8772] usb 9-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 569.257474][ T8772] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.269087][ T8772] usb 9-1: Product: syz [ 569.273425][ T8772] usb 9-1: Manufacturer: syz [ 569.283361][ T8772] usb 9-1: SerialNumber: syz [ 569.295772][ T8772] usb 9-1: config 0 descriptor?? [ 569.306645][ T8772] radio-usb-si4713 9-1:0.0: Si4713 development board discovered: (10C4:8244) [ 569.714064][T20491] netlink: 'syz.5.6800': attribute type 4 has an invalid length. [ 569.996703][ T8772] radio-usb-si4713 9-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 570.011805][ T8772] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 570.033511][ T8772] usb 9-1: USB disconnect, device number 29 [ 570.478759][T19451] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 570.648891][T19451] usb 4-1: Using ep0 maxpacket: 32 [ 570.662592][T19451] usb 4-1: config 0 has no interfaces? [ 570.679922][T19451] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 570.702682][T19451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.733857][T19451] usb 4-1: config 0 descriptor?? [ 571.073336][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 571.073359][ T30] audit: type=1326 audit(1751652017.702:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20544 comm="syz.5.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 571.144956][T20547] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6827'. [ 571.162690][ T30] audit: type=1326 audit(1751652017.712:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20544 comm="syz.5.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 571.203228][ T8772] usb 4-1: USB disconnect, device number 64 [ 571.238990][T19451] kernel write not supported for file /sg0 (pid: 19451 comm: kworker/1:15) [ 571.260854][ T30] audit: type=1326 audit(1751652017.712:6033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20544 comm="syz.5.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 571.330685][ T30] audit: type=1326 audit(1751652017.712:6034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20544 comm="syz.5.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 571.378586][ T30] audit: type=1326 audit(1751652017.712:6035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20544 comm="syz.5.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 571.404545][ T30] audit: type=1326 audit(1751652017.712:6036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20544 comm="syz.5.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 571.426337][ C0] vkms_vblank_simulate: vblank timer overrun [ 571.438901][ T30] audit: type=1326 audit(1751652017.712:6037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20544 comm="syz.5.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 571.460599][ C0] vkms_vblank_simulate: vblank timer overrun [ 571.517347][ T30] audit: type=1326 audit(1751652017.712:6038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20544 comm="syz.5.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 572.046259][T19425] kernel write not supported for file /snd/seq (pid: 19425 comm: kworker/0:12) [ 572.166153][ T30] audit: type=1400 audit(1751652018.802:6039): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=20590 comm="syz.5.6847" key_serial=791710691 key_desc="_uid_ses.0" [ 572.309500][T19451] kernel read not supported for file /usbmon9 (pid: 19451 comm: kworker/1:15) [ 572.888406][T19425] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 573.068524][T19425] usb 6-1: Using ep0 maxpacket: 32 [ 573.079995][T19425] usb 6-1: config 0 interface 0 has no altsetting 0 [ 573.094072][T19425] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 573.118536][T19425] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.146027][T19425] usb 6-1: Product: syz [ 573.156312][T19425] usb 6-1: Manufacturer: syz [ 573.171073][T19425] usb 6-1: SerialNumber: syz [ 573.185768][T19425] usb 6-1: config 0 descriptor?? [ 573.633615][T19425] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 573.931419][T20677] vlan3: entered promiscuous mode [ 573.936814][T20677] bridge0: entered promiscuous mode [ 573.945903][T20677] vlan3: entered allmulticast mode [ 573.952183][T20677] bridge0: entered allmulticast mode [ 574.023850][T19425] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 574.056239][T19425] usb 6-1: USB disconnect, device number 49 [ 574.067595][T20680] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 574.082854][T20680] macsec1: entered promiscuous mode [ 574.095009][T20680] macsec1: entered allmulticast mode [ 574.106422][T20680] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 574.257868][T20689] tipc: Started in network mode [ 574.264415][T20689] tipc: Node identity 2d6806f2b032df77002e0000004, cluster identity 4711 [ 574.276759][ C0] hrtimer: interrupt took 24205 ns [ 574.595534][T20703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6899'. [ 574.651144][T20705] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6901'. [ 574.663483][T20703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6899'. [ 574.839105][ T30] audit: type=1326 audit(1751652021.472:6040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20710 comm="syz.3.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639ab8e929 code=0x7ffc0000 [ 574.985511][T19451] kernel write not supported for file /3030/loginuid (pid: 19451 comm: kworker/1:15) [ 575.041265][T20721] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.6908'. [ 575.178419][T19425] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 575.283473][T20732] block device autoloading is deprecated and will be removed. [ 575.296218][T20732] syz.5.6913: attempt to access beyond end of device [ 575.296218][T20732] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 575.368945][T19425] usb 9-1: Using ep0 maxpacket: 16 [ 575.390805][T19425] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.414022][T19425] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.445137][T19425] usb 9-1: config 0 interface 0 has no altsetting 0 [ 575.466973][T19425] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 575.486977][T19425] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.515475][T19425] usb 9-1: config 0 descriptor?? [ 575.586607][T20742] input: syz0 as /devices/virtual/input/input39 [ 575.751983][T20716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.764456][T20716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.204574][T19425] usb 9-1: USB disconnect, device number 30 [ 577.023335][T20803] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6941'. [ 577.411554][T19451] kernel write not supported for file /vcsa1 (pid: 19451 comm: kworker/1:15) [ 577.579754][T20823] kvm: kvm [20821]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0xaf [ 577.832392][T20835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6953'. [ 577.939156][T20842] netlink: 11 bytes leftover after parsing attributes in process `syz.5.6957'. [ 578.969061][T20885] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 580.726619][T19425] hid-generic 0005:07C0:0007.0075: collection stack underflow [ 580.758195][T19425] hid-generic 0005:07C0:0007.0075: item 0 0 0 12 parsing failed [ 580.778880][T19425] hid-generic 0005:07C0:0007.0075: probe with driver hid-generic failed with error -22 [ 580.934431][T20939] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 580.954417][T20939] bridge0: entered allmulticast mode [ 580.959175][T19452] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 581.118979][T19452] usb 3-1: Using ep0 maxpacket: 32 [ 581.126470][T19452] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 581.144664][T19452] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 581.166630][T19452] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 581.183826][T19452] usb 3-1: config 1 has no interface number 0 [ 581.190874][T19452] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 581.204754][T19452] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 581.221863][T19452] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 581.267706][T19452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.302127][T19452] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 581.506546][T19452] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 581.661013][T20965] lo: entered allmulticast mode [ 581.969203][T19452] usb 3-1: USB disconnect, device number 54 [ 581.977539][T19452] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 582.401307][T20990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7026'. [ 583.036832][T21005] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 583.226311][T21018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 584.105490][T21055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7055'. [ 585.210949][ T1099] wlan1: Trigger new scan to find an IBSS to join [ 586.063660][T21131] netlink: 'syz.2.7088': attribute type 1 has an invalid length. [ 586.098250][T21131] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7088'. [ 586.139969][T21131] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7088'. [ 586.221265][T21137] sctp: [Deprecated]: syz.3.7091 (pid 21137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 586.221265][T21137] Use struct sctp_sack_info instead [ 586.294890][T21139] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7093'. [ 586.609330][T21160] random: crng reseeded on system resumption [ 586.644498][T21161] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7101'. [ 586.692005][T21161] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7101'. [ 586.950656][T21165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7103'. [ 586.960931][T21165] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7103'. [ 587.117386][T21176] netlink: 'syz.8.7111': attribute type 3 has an invalid length. [ 587.145298][T21176] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7111'. [ 588.036359][T21228] ipvlan3: entered promiscuous mode [ 588.045461][T21228] ipvlan3: entered allmulticast mode [ 588.053212][T21228] macvlan1: entered allmulticast mode [ 588.059459][T21228] veth1_vlan: entered allmulticast mode [ 588.377086][T21236] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7134'. [ 588.542041][T21243] overlayfs: failed to clone lowerpath [ 589.420101][T21292] veth0_to_bridge: entered promiscuous mode [ 589.433153][T21290] veth0_to_bridge: left promiscuous mode [ 589.676433][T21306] netlink: 'syz.2.7165': attribute type 18 has an invalid length. [ 590.169823][ T3493] wlan1: Trigger new scan to find an IBSS to join [ 590.357235][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 590.357257][ T30] audit: type=1326 audit(1751652036.992:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21338 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb18e929 code=0x7ffc0000 [ 590.386729][ T30] audit: type=1326 audit(1751652036.992:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21338 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb18e929 code=0x7ffc0000 [ 590.414146][ T30] audit: type=1326 audit(1751652037.002:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21338 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc9fb18e929 code=0x7ffc0000 [ 590.437194][ T30] audit: type=1326 audit(1751652037.002:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21338 comm="syz.2.7180" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb18e929 code=0x0 [ 590.798370][ T30] audit: type=1326 audit(1751652037.432:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21321 comm="syz.8.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7fc00000 [ 591.079880][ T12] wlan1: Creating new IBSS network, BSSID d6:20:be:ae:c4:7a [ 591.131487][T19452] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 591.218718][ T8772] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 591.293951][T19452] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.319345][T19452] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.339041][T19452] usb 9-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 591.357643][T19452] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.370668][T19452] usb 9-1: config 0 descriptor?? [ 591.401692][ T8772] usb 6-1: Using ep0 maxpacket: 8 [ 591.412968][ T8772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.430261][ T8772] usb 6-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 591.442310][ T8772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.454792][ T8772] usb 6-1: config 0 descriptor?? [ 591.805771][T19452] steelseries 0003:1038:12B6.0076: reserved main item tag 0xe [ 591.828025][T19452] steelseries 0003:1038:12B6.0076: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.8-1/input0 [ 591.897267][ T8772] belkin 0003:050D:3201.0077: unknown main item tag 0x0 [ 591.905326][ T8772] belkin 0003:050D:3201.0077: unknown main item tag 0x0 [ 591.916801][ T8772] belkin 0003:050D:3201.0077: unknown main item tag 0x0 [ 591.924129][ T8772] belkin 0003:050D:3201.0077: unknown main item tag 0x0 [ 591.936464][ T8772] belkin 0003:050D:3201.0077: unknown main item tag 0x0 [ 591.961870][ T8772] belkin 0003:050D:3201.0077: hiddev0,hidraw1: USB HID vff.fb Device [HID 050d:3201] on usb-dummy_hcd.5-1/input0 [ 592.112750][ T8772] usb 6-1: USB disconnect, device number 50 [ 592.236064][T19427] usb 9-1: USB disconnect, device number 31 [ 592.397634][T19425] hid-generic 0000:0004:0000.0078: unknown main item tag 0x0 [ 592.410177][T19425] hid-generic 0000:0004:0000.0078: unknown main item tag 0x0 [ 592.422460][T19425] hid-generic 0000:0004:0000.0078: unknown main item tag 0x0 [ 592.453407][T19425] hid-generic 0000:0004:0000.0078: hidraw0: HID v0.00 Device [syz0] on syz1 [ 593.524419][T21439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7228'. [ 594.656345][T21477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7243'. [ 596.063603][T21536] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7271'. [ 596.489308][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 596.496015][ T5855] Bluetooth: hci5: command 0x1003 tx timeout [ 598.207108][T21605] netlink: 844 bytes leftover after parsing attributes in process `syz.6.7301'. [ 598.280424][T21604] sctp: [Deprecated]: syz.2.7300 (pid 21604) Use of int in max_burst socket option. [ 598.280424][T21604] Use struct sctp_assoc_value instead [ 598.882778][T21629] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7312'. [ 600.397002][T21663] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7328'. [ 600.407848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 600.843149][T21671] netlink: 88 bytes leftover after parsing attributes in process `syz.6.7332'. [ 600.878969][T21671] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7332'. [ 601.352774][T19445] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 601.513453][T21686] sctp: [Deprecated]: syz.6.7339 (pid 21686) Use of struct sctp_assoc_value in delayed_ack socket option. [ 601.513453][T21686] Use struct sctp_sack_info instead [ 601.530043][T19445] usb 9-1: Using ep0 maxpacket: 32 [ 601.556964][T19445] usb 9-1: config 0 interface 0 has no altsetting 0 [ 601.565947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 601.595757][T19445] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 601.620536][T19445] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.641111][T19445] usb 9-1: config 0 descriptor?? [ 602.494095][T19445] corsair-psu 0003:1B1C:1C09.0079: unknown main item tag 0x0 [ 602.548889][T19445] corsair-psu 0003:1B1C:1C09.0079: unknown main item tag 0x0 [ 602.580312][T19445] corsair-psu 0003:1B1C:1C09.0079: unknown main item tag 0x0 [ 602.592116][T19445] corsair-psu 0003:1B1C:1C09.0079: unknown main item tag 0x0 [ 602.608342][T19445] corsair-psu 0003:1B1C:1C09.0079: unknown main item tag 0x0 [ 602.688972][T19445] corsair-psu 0003:1B1C:1C09.0079: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.8-1/input0 [ 602.710998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 603.048959][T19445] corsair-psu 0003:1B1C:1C09.0079: unable to initialize device (-110) [ 603.083707][T19445] corsair-psu 0003:1B1C:1C09.0079: probe with driver corsair-psu failed with error -110 [ 603.147926][T19445] usb 9-1: USB disconnect, device number 32 [ 603.612986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 604.005708][T21743] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7363'. [ 605.587026][T21803] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7390'. [ 605.598981][T21803] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7390'. [ 605.609289][T21803] netlink: 'syz.5.7390': attribute type 6 has an invalid length. [ 605.617123][T21803] netlink: 'syz.5.7390': attribute type 5 has an invalid length. [ 605.636209][T21803] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7390'. [ 605.790291][T21814] sp0: Synchronizing with TNC [ 605.850409][T21814] Falling back ldisc for ttyS3. [ 606.138815][T19452] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 606.288754][T19452] usb 6-1: Using ep0 maxpacket: 32 [ 606.305875][T19452] usb 6-1: config 0 interface 0 has no altsetting 0 [ 606.319578][T19452] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 606.343919][T19452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.371407][T19452] usb 6-1: config 0 descriptor?? [ 606.807211][T19452] corsair-cpro 0003:1B1C:0C10.007A: unknown main item tag 0x0 [ 606.840294][T19452] corsair-cpro 0003:1B1C:0C10.007A: unknown main item tag 0x0 [ 606.863884][ T30] audit: type=1400 audit(1751652054.507:6056): lsm=SMACK fn=smack_inode_setattr action=denied subject="w" object="_" requested=w pid=21846 comm="syz.6.7410" name="current" dev="proc" ino=71147 [ 606.865666][T19452] corsair-cpro 0003:1B1C:0C10.007A: unknown main item tag 0x0 [ 606.966622][T19452] corsair-cpro 0003:1B1C:0C10.007A: unknown main item tag 0x0 [ 606.982136][T19452] corsair-cpro 0003:1B1C:0C10.007A: unknown main item tag 0x0 [ 607.015999][T19452] corsair-cpro 0003:1B1C:0C10.007A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 607.303026][T21860] bond0: entered promiscuous mode [ 607.338109][T21860] bond_slave_0: entered promiscuous mode [ 607.344186][T21860] bond_slave_1: entered promiscuous mode [ 607.401909][T21860] bond0: left promiscuous mode [ 607.420807][T21860] bond_slave_0: left promiscuous mode [ 607.440057][T21860] bond_slave_1: left promiscuous mode [ 607.451334][T19452] corsair-cpro 0003:1B1C:0C10.007A: probe with driver corsair-cpro failed with error -110 [ 607.488002][T19452] usb 6-1: USB disconnect, device number 51 [ 607.531586][T21869] input: syz0 as /devices/virtual/input/input40 [ 607.652554][T21872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7422'. [ 607.978178][T19425] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 608.168644][T19425] usb 9-1: Using ep0 maxpacket: 16 [ 608.186516][T19425] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.217927][T19425] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.253506][T19425] usb 9-1: config 0 interface 0 has no altsetting 0 [ 608.268156][T19425] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 608.287759][T19425] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.315926][T19425] usb 9-1: config 0 descriptor?? [ 608.770880][T21874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.789050][T21874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.033921][T21893] can0: slcan on ttyS3. [ 609.058975][T19452] usb 9-1: USB disconnect, device number 33 [ 609.169193][T21892] can0 (unregistered): slcan off ttyS3. [ 609.522567][T21918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7443'. [ 609.535536][T21918] netlink: 'syz.6.7443': attribute type 1 has an invalid length. [ 609.543866][T21918] netlink: 'syz.6.7443': attribute type 2 has an invalid length. [ 609.760452][T21922] block nbd1: server does not support multiple connections per device. [ 609.776000][T21922] block nbd1: shutting down sockets [ 610.329574][T19452] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 610.493234][T19452] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 610.505542][T19452] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.514619][T19452] usb 6-1: Product: syz [ 610.519375][T19452] usb 6-1: Manufacturer: syz [ 610.524154][T19452] usb 6-1: SerialNumber: syz [ 610.534719][T19452] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 610.553298][T19451] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 610.929177][T19452] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 611.100779][T19452] usb 3-1: config 0 has no interfaces? [ 611.115409][T19452] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 611.126922][T19452] usb 3-1: New USB device strings: Mfr=1, Product=234, SerialNumber=2 [ 611.137362][T19452] usb 3-1: Product: syz [ 611.143741][T19452] usb 3-1: Manufacturer: syz [ 611.149364][T19452] usb 3-1: SerialNumber: syz [ 611.157475][T19452] usb 3-1: config 0 descriptor?? [ 611.268583][T19445] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 611.332675][T21960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.341805][T21960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.384292][T19452] usb 3-1: USB disconnect, device number 55 [ 611.434285][T19445] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.446244][T19445] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 611.462422][T19445] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 611.477226][T19445] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.486477][T19445] usb 9-1: Product: syz [ 611.491560][T19445] usb 9-1: Manufacturer: syz [ 611.496379][T19445] usb 9-1: SerialNumber: syz [ 611.608434][T19451] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 611.616217][T19451] ath9k_htc: Failed to initialize the device [ 611.660965][T19451] usb 6-1: ath9k_htc: USB layer deinitialized [ 611.680714][T19452] usb 6-1: USB disconnect, device number 52 [ 611.853708][T21966] sctp: [Deprecated]: syz.3.7465 (pid 21966) Use of int in maxseg socket option. [ 611.853708][T21966] Use struct sctp_assoc_value instead [ 611.919166][T19445] usb 9-1: 0:2 : does not exist [ 612.363091][T19445] usb 9-1: USB disconnect, device number 34 [ 613.700510][ T30] audit: type=1326 audit(1751652061.337:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22010 comm="syz.5.7496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd23c1858e7 code=0x7ffc0000 [ 613.817206][ T30] audit: type=1326 audit(1751652061.337:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22010 comm="syz.5.7496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd23c12ab19 code=0x7ffc0000 [ 613.956544][ T30] audit: type=1326 audit(1751652061.337:6059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22010 comm="syz.5.7496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 614.006765][T22022] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 614.019346][ T30] audit: type=1326 audit(1751652061.337:6060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22010 comm="syz.5.7496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd23c1858e7 code=0x7ffc0000 [ 614.090796][ T30] audit: type=1326 audit(1751652061.337:6061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22010 comm="syz.5.7496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd23c12ab19 code=0x7ffc0000 [ 614.161514][ T30] audit: type=1326 audit(1751652061.337:6062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22010 comm="syz.5.7496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 614.330869][ T30] audit: type=1326 audit(1751652061.367:6063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22010 comm="syz.5.7496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd23c1858e7 code=0x7ffc0000 [ 614.428152][ T30] audit: type=1326 audit(1751652061.367:6064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22010 comm="syz.5.7496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd23c12ab19 code=0x7ffc0000 [ 614.506561][ T30] audit: type=1326 audit(1751652061.367:6065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22010 comm="syz.5.7496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fd23c18e929 code=0x7ffc0000 [ 614.638340][ T30] audit: type=1326 audit(1751652061.367:6066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22010 comm="syz.5.7496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd23c1858e7 code=0x7ffc0000 [ 615.385363][T22057] sctp: [Deprecated]: syz.5.7502 (pid 22057) Use of int in maxseg socket option. [ 615.385363][T22057] Use struct sctp_assoc_value instead [ 615.516393][T22071] tap0: tun_chr_ioctl cmd 1074025673 [ 616.049523][T22088] Attempt to restore checkpoint with obsolete wellknown handles [ 616.136584][T22092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7520'. [ 616.757505][T22113] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7530'. [ 617.618726][T22141] netlink: 452 bytes leftover after parsing attributes in process `syz.2.7541'. [ 617.859871][T22153] 2g,{: renamed from lo (while UP) [ 618.594270][T22191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7567'. [ 618.711597][T22197] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.7568'. [ 620.296615][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 620.319545][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 620.332781][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 620.344180][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 620.354234][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 620.397366][ T3576] dvmrp0 (unregistering): left allmulticast mode [ 620.686044][ T3576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.697055][ T3576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.706641][ T3576] bond0 (unregistering): Released all slaves [ 620.725161][ T3576] bond1 (unregistering): Released all slaves [ 620.842911][T19428] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 620.919307][ T3576] tipc: Disabling bearer [ 620.942932][ T3576] tipc: Left network mode [ 620.997049][T22254] netlink: 'syz.2.7596': attribute type 9 has an invalid length. [ 621.025062][T19428] usb 9-1: Using ep0 maxpacket: 8 [ 621.037634][T22254] netlink: 'syz.2.7596': attribute type 6 has an invalid length. [ 621.062739][T19428] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 621.078684][T19428] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.115713][T19428] pvrusb2: Hardware description: Terratec Grabster AV400 [ 621.125536][T19428] pvrusb2: ********** [ 621.129982][T19428] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 621.140353][T19428] pvrusb2: Important functionality might not be entirely working. [ 621.148328][ T3493] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 621.158873][T19428] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 621.171488][T19428] pvrusb2: ********** [ 621.321709][ T2342] pvrusb2: Invalid write control endpoint [ 621.336971][T22263] netlink: 'syz.2.7600': attribute type 29 has an invalid length. [ 621.373764][T22265] vxcan1: entered allmulticast mode [ 621.424400][T22265] vxcan1: left allmulticast mode [ 621.434368][T22263] netlink: 'syz.2.7600': attribute type 29 has an invalid length. [ 621.443153][ T2342] pvrusb2: Invalid write control endpoint [ 621.443654][T22269] netlink: 'syz.2.7600': attribute type 29 has an invalid length. [ 621.459265][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 621.474955][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 621.483303][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 621.500024][ T2342] pvrusb2: Device being rendered inoperable [ 621.512490][ T2342] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 621.532652][T22241] chnl_net:caif_netlink_parms(): no params data found [ 621.553843][ T2342] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 621.573719][T19447] usb 9-1: USB disconnect, device number 35 [ 621.591140][ T3576] hsr_slave_0: left promiscuous mode [ 621.599029][ T2342] pvrusb2: Attached sub-driver cx25840 [ 621.606486][ T3576] hsr_slave_1: left promiscuous mode [ 621.608162][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 621.621722][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.636542][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.642390][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 622.408553][ T5855] Bluetooth: hci4: command tx timeout [ 622.699412][ T3576] team0 (unregistering): Port device team_slave_1 removed [ 622.796717][ T3576] team0 (unregistering): Port device team_slave_0 removed [ 623.015614][T22313] loop2: detected capacity change from 0 to 7 [ 623.094606][T22313] Dev loop2: unable to read RDB block 7 [ 623.113161][T22313] loop2: AHDI p1 p2 p3 [ 623.117497][T22313] loop2: partition table partially beyond EOD, truncated [ 623.125157][T22313] loop2: p1 start 1601398130 is beyond EOD, truncated [ 623.147360][T22313] loop2: p2 start 1702059890 is beyond EOD, truncated [ 623.248477][T19428] kernel write not supported for file /1525/attr/exec (pid: 19428 comm: kworker/0:14) [ 623.617715][T22297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7616'. [ 623.927062][T22241] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.952780][T22241] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.974269][T22241] bridge_slave_0: entered allmulticast mode [ 623.996127][T22241] bridge_slave_0: entered promiscuous mode [ 624.025247][T22334] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7632'. [ 624.036309][T22241] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.043956][T22241] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.051708][T22241] bridge_slave_1: entered allmulticast mode [ 624.060116][T22241] bridge_slave_1: entered promiscuous mode [ 624.247707][T22241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.289785][T22241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.395585][T22241] team0: Port device team_slave_0 added [ 624.411050][T22241] team0: Port device team_slave_1 added [ 624.491484][ T5855] Bluetooth: hci4: command tx timeout [ 624.511236][T22241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.518929][T19451] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 624.534594][T22241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.562091][T22241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.575901][T22241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.585787][T22241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.617827][T22241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.655871][T22355] 9pnet_fd: Insufficient options for proto=fd [ 624.688918][T19451] usb 3-1: Using ep0 maxpacket: 8 [ 624.699637][T19451] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 624.712023][T19451] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.735074][T19451] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 624.743484][T22241] hsr_slave_0: entered promiscuous mode [ 624.753588][T19451] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.756498][T22241] hsr_slave_1: entered promiscuous mode [ 624.764341][T19451] usb 3-1: Product: syz [ 624.772840][T19447] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 624.782192][T22241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.783941][T19451] usb 3-1: Manufacturer: syz [ 624.795347][T19451] usb 3-1: SerialNumber: syz [ 624.798848][T22241] Cannot create hsr debugfs directory [ 624.948269][T19447] usb 6-1: Using ep0 maxpacket: 16 [ 624.966386][T19447] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.995998][T19447] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 625.021852][T19447] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 625.043938][T19447] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 625.063569][T19447] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.085550][T19447] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 625.114548][T19447] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 625.123277][T19451] usbhid 3-1:1.0: can't add hid device: -71 [ 625.130548][T19451] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 625.152584][T19447] usb 6-1: Manufacturer: syz [ 625.161648][T19451] usb 3-1: USB disconnect, device number 56 [ 625.176567][T19447] usb 6-1: config 0 descriptor?? [ 625.189012][T22365] 9pnet_fd: Insufficient options for proto=fd [ 625.269977][T22241] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 625.311531][T22241] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 625.331063][T22241] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 625.352451][T22241] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 625.532292][T19447] rc_core: IR keymap rc-hauppauge not found [ 625.539314][T19447] Registered IR keymap rc-empty [ 625.544674][T19447] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 625.579785][T19447] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 625.602577][T22241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.621257][T19447] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 625.665133][T19447] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input41 [ 625.694645][T19447] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 625.703822][T22241] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.723415][T19447] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 625.734246][T22383] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.749088][T22383] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.756443][T22383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.775993][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 625.776015][ T30] audit: type=1400 audit(1751652073.417:6074): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=22389 comm="syz.8.7656" dest=20002 netif=wpan0 [ 625.782211][T19447] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 625.824100][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.831538][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.868541][T19447] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 625.901079][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.908558][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.918364][T19447] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 625.950075][T19447] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 625.978927][T19447] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 626.004569][T19447] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 626.038303][T19447] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 626.058276][T19447] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 626.093866][T19447] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 626.120642][T19447] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 626.158025][T19447] usb 6-1: USB disconnect, device number 53 [ 626.450283][T22241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.568463][ T5855] Bluetooth: hci4: command tx timeout [ 626.580570][T22412] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7664'. [ 627.183735][T22241] veth0_vlan: entered promiscuous mode [ 627.206258][T22241] veth1_vlan: entered promiscuous mode [ 627.279469][T22241] veth0_macvtap: entered promiscuous mode [ 627.291387][T22241] veth1_macvtap: entered promiscuous mode [ 627.361822][T22241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.393913][T22241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.403859][T19428] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 627.453750][T22241] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.478398][T22241] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.499059][T22241] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.507889][T22241] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.591934][T19428] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.605702][T19428] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 627.624008][T19428] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 627.635128][T19428] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 627.643644][T19428] usb 9-1: SerialNumber: syz [ 627.818288][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.826461][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.887921][T19428] usb 9-1: 0:2 : does not exist [ 627.919783][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.936519][T19428] usb 9-1: USB disconnect, device number 36 [ 627.945994][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.136119][T22464] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7685'. [ 628.648560][ T5855] Bluetooth: hci4: command tx timeout [ 628.698561][T19447] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 628.868487][T19447] usb 10-1: Using ep0 maxpacket: 8 [ 628.889666][T19447] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 628.908388][T19447] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.927584][T22493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7699'. [ 628.938848][T19447] usb 10-1: Product: syz [ 628.946017][T19447] usb 10-1: Manufacturer: syz [ 628.954391][T19447] usb 10-1: SerialNumber: syz [ 628.974404][T19447] usb 10-1: config 0 descriptor?? [ 628.991396][T19447] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 629.009373][T19447] usb 10-1: setting power ON [ 629.015731][T19447] dvb-usb: bulk message failed: -22 (2/0) [ 629.036963][T19447] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 629.060185][T19447] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 629.078667][T19447] usb 10-1: media controller created [ 629.160301][T19447] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 629.228954][T19447] usb 10-1: selecting invalid altsetting 6 [ 629.234891][T19447] usb 10-1: digital interface selection failed (-22) [ 629.278542][T19447] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 629.300977][T19447] usb 10-1: setting power OFF [ 629.305835][T19447] dvb-usb: bulk message failed: -22 (2/0) [ 629.313578][T19447] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 629.339125][T19447] (NULL device *): no alternate interface [ 629.389984][T19447] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 629.468787][T19447] usb 10-1: USB disconnect, device number 2 [ 629.788745][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.795203][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.710914][T22555] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.7724'. [ 630.758587][T19447] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 630.921769][T19447] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 630.938613][T19447] usb 3-1: config 0 has no interface number 0 [ 630.948231][T19447] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 630.961251][T19447] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 631.018232][T19447] usb 3-1: config 0 interface 255 has no altsetting 0 [ 631.025284][T19447] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 631.063600][T19447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.095499][T19447] usb 3-1: config 0 descriptor?? [ 631.111559][T19447] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 631.244389][T22582] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 631.353295][T19451] usb 3-1: USB disconnect, device number 57 [ 631.600378][T22597] netlink: 596 bytes leftover after parsing attributes in process `syz.5.7740'. [ 631.805992][T22607] wg1: entered promiscuous mode [ 631.812775][T22607] wg1: entered allmulticast mode [ 632.118921][T22623] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7754'. [ 632.381397][T22634] input: syz1 as /devices/virtual/input/input42 [ 632.710730][T22644] kvm: user requested TSC rate below hardware speed [ 632.924879][T22650] netlink: del zone limit has 4 unknown bytes [ 633.193346][T22662] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7772'. [ 633.746405][T22686] wg1: entered promiscuous mode [ 633.771415][T22686] wg1: entered allmulticast mode [ 633.812233][T22692] netlink: 'syz.8.7787': attribute type 1 has an invalid length. [ 633.841065][T22692] netlink: 'syz.8.7787': attribute type 2 has an invalid length. [ 633.866904][T22694] netlink: 'syz.8.7787': attribute type 1 has an invalid length. [ 633.877744][T22694] netlink: 'syz.8.7787': attribute type 2 has an invalid length. [ 633.893535][T22690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 634.261719][ T30] audit: type=1326 audit(1751652081.907:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22709 comm="syz.8.7795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 634.326660][ T30] audit: type=1326 audit(1751652081.907:6076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22709 comm="syz.8.7795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 634.398945][ T30] audit: type=1326 audit(1751652081.907:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22709 comm="syz.8.7795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 634.404920][T22713] netlink: 'syz.9.7796': attribute type 1 has an invalid length. [ 634.453495][T22713] netlink: 'syz.9.7796': attribute type 2 has an invalid length. [ 634.465134][ T30] audit: type=1326 audit(1751652081.907:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22709 comm="syz.8.7795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 634.470468][T22713] netlink: 'syz.9.7796': attribute type 1 has an invalid length. [ 634.522264][ T30] audit: type=1326 audit(1751652081.907:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22709 comm="syz.8.7795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 634.527934][T22713] netlink: 1156 bytes leftover after parsing attributes in process `syz.9.7796'. [ 635.390794][T22754] hsr0: entered promiscuous mode [ 635.396753][T22754] macvtap1: entered promiscuous mode [ 635.420713][T22754] macvtap1: entered allmulticast mode [ 635.426667][T22754] hsr0: entered allmulticast mode [ 635.476483][T22754] hsr_slave_0: entered allmulticast mode [ 635.482841][T22754] hsr_slave_1: entered allmulticast mode [ 635.508963][T22754] hsr0: left allmulticast mode [ 635.521647][T22754] hsr_slave_0: left allmulticast mode [ 635.530621][T22754] hsr_slave_1: left allmulticast mode [ 636.743829][T22810] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 636.966377][T22816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7843'. [ 637.170163][T22823] sp0: Synchronizing with TNC [ 637.179304][T22823] sp0: Found TNC [ 637.331851][T22829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7851'. [ 637.749270][T22851] netlink: 'syz.2.7861': attribute type 2 has an invalid length. [ 638.246613][T22880] netlink: 'syz.5.7876': attribute type 1 has an invalid length. [ 638.261036][T22880] netlink: 'syz.5.7876': attribute type 2 has an invalid length. [ 638.305672][T22886] misc userio: Begin command sent, but we're already running [ 638.391628][ T30] audit: type=1326 audit(1751652086.037:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22888 comm="syz.2.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb18e929 code=0x7ffc0000 [ 638.453150][ T30] audit: type=1326 audit(1751652086.037:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22888 comm="syz.2.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb18e929 code=0x7ffc0000 [ 638.512513][ T30] audit: type=1326 audit(1751652086.037:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22888 comm="syz.2.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fc9fb18e929 code=0x7ffc0000 [ 638.541232][ T30] audit: type=1326 audit(1751652086.037:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22888 comm="syz.2.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb18e929 code=0x7ffc0000 [ 638.661234][ T30] audit: type=1326 audit(1751652086.037:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22888 comm="syz.2.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb18e929 code=0x7ffc0000 [ 638.698870][T22900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7884'. [ 638.721225][T22900] macvlan2: entered allmulticast mode [ 638.727175][T22900] veth0_macvtap: entered allmulticast mode [ 639.573939][T22935] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 639.616908][T22935] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.628251][T22935] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.752844][T22939] validate_nla: 1 callbacks suppressed [ 639.752867][T22939] netlink: 'syz.8.7900': attribute type 10 has an invalid length. [ 639.854539][T22939] team0: Port device geneve1 added [ 640.086061][ T30] audit: type=1326 audit(1751652087.717:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22946 comm="syz.8.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 640.119755][T22949] program syz.9.7905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 640.153068][T22951] random: crng reseeded on system resumption [ 640.162672][ T30] audit: type=1326 audit(1751652087.717:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22946 comm="syz.8.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 640.245900][ T30] audit: type=1326 audit(1751652087.727:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22946 comm="syz.8.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 640.324409][T22954] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 640.347862][ T30] audit: type=1326 audit(1751652087.727:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22946 comm="syz.8.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 640.368175][T22954] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 640.408822][T22954] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 640.425402][ T30] audit: type=1326 audit(1751652087.727:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22946 comm="syz.8.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 640.446419][T22954] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 640.456545][T22957] team_slave_0: entered promiscuous mode [ 640.462467][T22957] team_slave_1: entered promiscuous mode [ 640.502375][T22959] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 640.525925][ T30] audit: type=1326 audit(1751652087.767:6090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22946 comm="syz.8.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 640.575720][T22959] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 640.609610][T22959] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 640.638498][ T30] audit: type=1326 audit(1751652087.767:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22946 comm="syz.8.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 640.669556][T22959] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 640.692045][T22964] loop9: detected capacity change from 0 to 7 [ 640.709505][T22964] Buffer I/O error on dev loop9, logical block 0, async page read [ 640.735527][ T30] audit: type=1326 audit(1751652087.767:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22946 comm="syz.8.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 640.757879][T22964] Buffer I/O error on dev loop9, logical block 0, async page read [ 640.781370][T22964] Buffer I/O error on dev loop9, logical block 0, async page read [ 640.812928][T22964] Buffer I/O error on dev loop9, logical block 0, async page read [ 640.821330][ T30] audit: type=1326 audit(1751652087.767:6093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22946 comm="syz.8.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 640.859975][T22964] Buffer I/O error on dev loop9, logical block 0, async page read [ 640.887082][T22964] Buffer I/O error on dev loop9, logical block 0, async page read [ 640.920155][ T30] audit: type=1326 audit(1751652087.767:6094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22946 comm="syz.8.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe1b8e929 code=0x7ffc0000 [ 640.945551][T22964] Buffer I/O error on dev loop9, logical block 0, async page read [ 640.958398][T22964] ldm_validate_partition_table(): Disk read failed. [ 640.985519][T22964] Buffer I/O error on dev loop9, logical block 0, async page read [ 641.001378][T22964] Buffer I/O error on dev loop9, logical block 0, async page read [ 641.011838][T22964] Buffer I/O error on dev loop9, logical block 0, async page read [ 641.022751][T22964] Dev loop9: unable to read RDB block 0 [ 641.030077][T22964] loop9: unable to read partition table [ 641.036159][T22964] loop9: partition table beyond EOD, truncated [ 641.051054][T22964] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 641.051054][T22964] ) failed (rc=-5) [ 641.159659][T22976] tap0: tun_chr_ioctl cmd 1074025681 [ 746.568033][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 746.575092][ C0] rcu: 1-...!: (1 GPs behind) idle=e96c/1/0x4000000000000000 softirq=100174/100175 fqs=1 [ 746.586312][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22990/1:b..l P22991/1:b..l [ 746.595614][ C0] rcu: (detected by 0, t=10506 jiffies, g=97461, q=244 ncpus=2) [ 746.603384][ C0] Sending NMI from CPU 0 to CPUs 1: [ 746.603425][ C1] NMI backtrace for cpu 1 [ 746.603459][ C1] CPU: 1 UID: 0 PID: 22972 Comm: syz.2.7910 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 746.603484][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 746.603499][ C1] RIP: 0010:debug_object_deactivate+0xa9/0x250 [ 746.603530][ C1] Code: c9 49 81 c7 40 b9 c4 99 48 8d 1c c9 48 81 c3 48 b9 c4 99 48 89 df e8 a6 b6 a9 06 48 89 04 24 4c 89 f8 48 c1 e8 03 80 3c 28 00 <74> 08 4c 89 ff e8 3d aa 60 fd 4d 8b 3f 45 31 f6 eb 06 4d 8b 3f 41 [ 746.603545][ C1] RSP: 0018:ffffc90000a08ca8 EFLAGS: 00000046 [ 746.603561][ C1] RAX: 1ffffffff33a2814 RBX: ffffffff99d140a8 RCX: dffffc0000000000 [ 746.603574][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000a08b80 [ 746.603585][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 746.603613][ C1] R10: dffffc0000000000 R11: fffff52000141170 R12: ffff8880511ad340 [ 746.603626][ C1] R13: dffffc0000000000 R14: 18580f720c000000 R15: ffffffff99d140a0 [ 746.603640][ C1] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 746.603654][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 746.603665][ C1] CR2: 0000200000010000 CR3: 0000000031d76000 CR4: 00000000003526f0 [ 746.603681][ C1] Call Trace: [ 746.603695][ C1] [ 746.603710][ C1] debug_deactivate+0x1d/0x200 [ 746.603732][ C1] __hrtimer_run_queues+0x2b0/0xc60 [ 746.603761][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 746.603778][ C1] ? read_tsc+0x9/0x20 [ 746.603809][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 746.603843][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 746.603864][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 746.603892][ C1] [ 746.603897][ C1] [ 746.603904][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 746.603923][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 746.603938][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 0b be fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 746.603952][ C1] RSP: 0018:ffffc90003f3eab8 EFLAGS: 00000206 [ 746.603966][ C1] RAX: f090cf2392a17a00 RBX: 0000000000000000 RCX: f090cf2392a17a00 [ 746.603979][ C1] RDX: 0000000000000000 RSI: ffffffff8db6feb2 RDI: ffffffff8be1bc40 [ 746.603990][ C1] RBP: ffffffff81729af5 R08: 0000000000000000 R09: ffffffff81729af5 [ 746.604001][ C1] R10: ffffc90003f3ec78 R11: ffffffff81acf5d0 R12: 0000000000000002 [ 746.604013][ C1] R13: ffffffff8e13ee20 R14: 0000000000000000 R15: 0000000000000246 [ 746.604027][ C1] ? unwind_next_frame+0xa5/0x2390 [ 746.604044][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 746.604067][ C1] ? unwind_next_frame+0xa5/0x2390 [ 746.604094][ C1] ? unwind_next_frame+0xa5/0x2390 [ 746.604111][ C1] ? save_stack+0xf7/0x1f0 [ 746.604136][ C1] ? unwind_next_frame+0xa5/0x2390 [ 746.604152][ C1] unwind_next_frame+0xc2/0x2390 [ 746.604169][ C1] ? unwind_next_frame+0xa5/0x2390 [ 746.604189][ C1] ? unwind_next_frame+0xa5/0x2390 [ 746.604207][ C1] ? stack_trace_save+0x9c/0xe0 [ 746.604231][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 746.604254][ C1] arch_stack_walk+0x11c/0x150 [ 746.604277][ C1] ? save_stack+0xf7/0x1f0 [ 746.604303][ C1] stack_trace_save+0x9c/0xe0 [ 746.604324][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 746.604352][ C1] save_stack+0xf7/0x1f0 [ 746.604378][ C1] ? __pfx_save_stack+0x10/0x10 [ 746.604411][ C1] ? page_ext_put+0x97/0xc0 [ 746.604439][ C1] __reset_page_owner+0x71/0x1f0 [ 746.604471][ C1] free_unref_folios+0xcd2/0x1570 [ 746.604497][ C1] folios_put_refs+0x559/0x640 [ 746.604529][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 746.604558][ C1] ? free_swap_cache+0x109/0x300 [ 746.604578][ C1] free_pages_and_swap_cache+0x277/0x520 [ 746.604602][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 746.604621][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40 [ 746.604673][ C1] ? tlb_table_flush+0x145/0x410 [ 746.604695][ C1] tlb_flush_mmu+0x3a0/0x680 [ 746.604714][ C1] ? unmap_page_range+0x38da/0x41c0 [ 746.604736][ C1] unmap_page_range+0x38fd/0x41c0 [ 746.604782][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 746.604806][ C1] ? unmap_vmas+0x144/0x580 [ 746.604826][ C1] unmap_vmas+0x399/0x580 [ 746.604848][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 746.604881][ C1] exit_mmap+0x248/0xb50 [ 746.604907][ C1] ? uprobe_clear_state+0x20f/0x290 [ 746.604935][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 746.604959][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 746.604983][ C1] ? __pfx_exit_aio+0x10/0x10 [ 746.605013][ C1] ? uprobe_clear_state+0x274/0x290 [ 746.605037][ C1] ? mm_update_next_owner+0xa7/0x870 [ 746.605063][ C1] __mmput+0x118/0x420 [ 746.605081][ C1] exit_mm+0x1da/0x2c0 [ 746.605105][ C1] ? __pfx_exit_mm+0x10/0x10 [ 746.605129][ C1] ? rcu_is_watching+0x15/0xb0 [ 746.605149][ C1] do_exit+0x648/0x22e0 [ 746.605176][ C1] ? do_raw_spin_lock+0x121/0x290 [ 746.605199][ C1] ? __pfx_do_exit+0x10/0x10 [ 746.605231][ C1] do_group_exit+0x21c/0x2d0 [ 746.605254][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 746.605281][ C1] get_signal+0x125e/0x1310 [ 746.605310][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 746.605338][ C1] ? __pfx_do_madvise+0x10/0x10 [ 746.605363][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 746.605397][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 746.605415][ C1] exit_to_user_mode_loop+0x75/0x110 [ 746.605431][ C1] do_syscall_64+0x2bd/0x3b0 [ 746.605446][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 746.605477][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.605494][ C1] ? clear_bhb_loop+0x60/0xb0 [ 746.605513][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.605531][ C1] RIP: 0033:0x7fc9fb18e929 [ 746.605550][ C1] Code: Unable to access opcode bytes at 0x7fc9fb18e8ff. [ 746.605559][ C1] RSP: 002b:00007fc9fbfb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 746.605577][ C1] RAX: 0000000000000000 RBX: 00007fc9fb3b6080 RCX: 00007fc9fb18e929 [ 746.605589][ C1] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 746.605600][ C1] RBP: 00007fc9fb210b39 R08: 0000000000000000 R09: 0000000000000000 [ 746.605611][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.605621][ C1] R13: 0000000000000001 R14: 00007fc9fb3b6080 R15: 00007ffce0bedce8 [ 746.605641][ C1] [ 746.606412][ C0] task:syz.3.7921 state:R running task stack:25640 pid:22991 tgid:22987 ppid:5837 task_flags:0x400040 flags:0x00004000 [ 747.242940][ C0] Call Trace: [ 747.246260][ C0] [ 747.249227][ C0] __schedule+0x16a2/0x4cb0 [ 747.253788][ C0] ? __lock_acquire+0xab9/0xd20 [ 747.258681][ C0] ? sched_clock+0x3f/0x60 [ 747.263152][ C0] ? preempt_schedule_common+0x83/0xd0 [ 747.268675][ C0] ? __pfx___schedule+0x10/0x10 [ 747.273575][ C0] ? psi_group_change+0xbc7/0x1210 [ 747.278869][ C0] ? psi_task_change+0xe5/0x250 [ 747.283776][ C0] ? preempt_schedule+0xae/0xc0 [ 747.288682][ C0] preempt_schedule_common+0x83/0xd0 [ 747.294106][ C0] preempt_schedule+0xae/0xc0 [ 747.298862][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 747.304302][ C0] preempt_schedule_thunk+0x16/0x30 [ 747.309662][ C0] _raw_spin_unlock_irqrestore+0xfd/0x110 [ 747.315631][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 747.322022][ C0] __wake_up_common_lock+0x190/0x1f0 [ 747.327408][ C0] ? tipc_data_ready+0xbb/0x440 [ 747.332306][ C0] tipc_data_ready+0x1ee/0x440 [ 747.337147][ C0] tipc_sk_filter_rcv+0x1a6f/0x30b0 [ 747.342465][ C0] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 747.348077][ C0] ? __page_table_check_zero+0x406/0x530 [ 747.353888][ C0] ? __page_table_check_zero+0xba/0x530 [ 747.359518][ C0] tipc_sk_backlog_rcv+0x131/0x230 [ 747.364692][ C0] ? __pfx_tipc_sk_backlog_rcv+0x10/0x10 [ 747.370580][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 747.376031][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 747.381807][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 747.387062][ C0] ? __pfx_tipc_sk_backlog_rcv+0x10/0x10 [ 747.392750][ C0] __release_sock+0x249/0x350 [ 747.397501][ C0] release_sock+0x5f/0x1f0 [ 747.401968][ C0] tipc_sendmsg+0x5f/0x70 [ 747.406356][ C0] ? __pfx_tipc_sendmsg+0x10/0x10 [ 747.411433][ C0] __sock_sendmsg+0x219/0x270 [ 747.416168][ C0] ____sys_sendmsg+0x52d/0x830 [ 747.420989][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 747.426333][ C0] ? import_iovec+0x74/0xa0 [ 747.430889][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 747.435753][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 747.441181][ C0] ? __fget_files+0x2a/0x420 [ 747.445814][ C0] ? __fget_files+0x3a0/0x420 [ 747.450557][ C0] __sys_sendmmsg+0x227/0x430 [ 747.455303][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 747.460558][ C0] ? count_memcg_event_mm+0x21/0x260 [ 747.465890][ C0] ? count_memcg_event_mm+0x21/0x260 [ 747.471234][ C0] ? exc_page_fault+0x76/0xf0 [ 747.475972][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 747.480909][ C0] do_syscall_64+0xfa/0x3b0 [ 747.485506][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 747.490756][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.496890][ C0] ? clear_bhb_loop+0x60/0xb0 [ 747.501640][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.507582][ C0] RIP: 0033:0x7f639ab8e929 [ 747.512066][ C0] RSP: 002b:00007f63989d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 747.520635][ C0] RAX: ffffffffffffffda RBX: 00007f639adb6080 RCX: 00007f639ab8e929 [ 747.528665][ C0] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000003 [ 747.536826][ C0] RBP: 00007f639ac10b39 R08: 0000000000000000 R09: 0000000000000000 [ 747.544841][ C0] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.552857][ C0] R13: 0000000000000001 R14: 00007f639adb6080 R15: 00007fff18dd3808 [ 747.560890][ C0] [ 747.563948][ C0] task:syz.9.7923 state:R running task stack:26888 pid:22990 tgid:22989 ppid:22241 task_flags:0x40054c flags:0x00004000 [ 747.577511][ C0] Call Trace: [ 747.580830][ C0] [ 747.583798][ C0] __schedule+0x16a2/0x4cb0 [ 747.588394][ C0] ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40 [ 747.595039][ C0] ? preempt_schedule_common+0x83/0xd0 [ 747.600574][ C0] ? __pfx___schedule+0x10/0x10 [ 747.605482][ C0] ? do_raw_spin_lock+0x121/0x290 [ 747.610562][ C0] ? preempt_schedule+0xae/0xc0 [ 747.615486][ C0] preempt_schedule_common+0x83/0xd0 [ 747.620836][ C0] preempt_schedule+0xae/0xc0 [ 747.625561][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 747.630990][ C0] preempt_schedule_thunk+0x16/0x30 [ 747.636270][ C0] _raw_spin_unlock+0x3f/0x50 [ 747.641009][ C0] unmap_page_range+0x3842/0x41c0 [ 747.646139][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 747.651563][ C0] ? unmap_vmas+0x144/0x580 [ 747.656109][ C0] unmap_vmas+0x399/0x580 [ 747.660493][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 747.665684][ C0] exit_mmap+0x248/0xb50 [ 747.670083][ C0] ? uprobe_clear_state+0x20f/0x290 [ 747.675457][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 747.680263][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 747.686029][ C0] ? __pfx_exit_aio+0x10/0x10 [ 747.690760][ C0] ? uprobe_clear_state+0x274/0x290 [ 747.695997][ C0] ? mm_update_next_owner+0xa7/0x870 [ 747.701330][ C0] __mmput+0x118/0x420 [ 747.705442][ C0] exit_mm+0x1da/0x2c0 [ 747.709639][ C0] ? __pfx_exit_mm+0x10/0x10 [ 747.714277][ C0] ? rcu_is_watching+0x15/0xb0 [ 747.719172][ C0] do_exit+0x648/0x22e0 [ 747.723465][ C0] ? do_raw_spin_lock+0x121/0x290 [ 747.728530][ C0] ? __pfx_do_exit+0x10/0x10 [ 747.733278][ C0] do_group_exit+0x21c/0x2d0 [ 747.737932][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 747.743192][ C0] get_signal+0x125e/0x1310 [ 747.747779][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 747.753402][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 747.759619][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 747.765114][ C0] exit_to_user_mode_loop+0x75/0x110 [ 747.770958][ C0] do_syscall_64+0x2bd/0x3b0 [ 747.775600][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 747.780936][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.787037][ C0] ? clear_bhb_loop+0x60/0xb0 [ 747.791757][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.797683][ C0] RIP: 0033:0x7f280978e929 [ 747.802217][ C0] RSP: 002b:00007f280a6620e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 747.810668][ C0] RAX: fffffffffffffe00 RBX: 00007f28099b5fa8 RCX: 00007f280978e929 [ 747.819101][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f28099b5fa8 [ 747.827104][ C0] RBP: 00007f28099b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 747.835123][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f28099b5fac [ 747.843134][ C0] R13: 0000000000000000 R14: 00007fff75193410 R15: 00007fff751934f8 [ 747.851247][ C0] [ 747.854314][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g97461 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 747.865550][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 747.875564][ C0] rcu: RCU grace-period kthread stack dump: [ 747.881588][ C0] task:rcu_preempt state:R running task stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 747.895230][ C0] Call Trace: [ 747.898544][ C0] [ 747.901597][ C0] __schedule+0x16a2/0x4cb0 [ 747.906262][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 747.911534][ C0] ? schedule+0x165/0x360 [ 747.915916][ C0] ? __lock_acquire+0xab9/0xd20 [ 747.920800][ C0] ? __pfx___schedule+0x10/0x10 [ 747.925803][ C0] ? schedule+0x91/0x360 [ 747.930272][ C0] schedule+0x165/0x360 [ 747.934473][ C0] schedule_timeout+0x12b/0x270 [ 747.939375][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 747.944785][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 747.950814][ C0] ? __pfx_process_timeout+0x10/0x10 [ 747.956167][ C0] ? prepare_to_swait_event+0x341/0x380 [ 747.961966][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 747.966875][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 747.972823][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 747.978316][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 747.983577][ C0] ? finish_swait+0xcd/0x1f0 [ 747.988217][ C0] rcu_gp_kthread+0x99/0x390 [ 747.992958][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 747.998213][ C0] ? __kthread_parkme+0x7b/0x200 [ 748.003192][ C0] ? __kthread_parkme+0x1a1/0x200 [ 748.008266][ C0] kthread+0x711/0x8a0 [ 748.012424][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 748.017764][ C0] ? __pfx_kthread+0x10/0x10 [ 748.022426][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 748.027942][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 748.033359][ C0] ? __pfx_kthread+0x10/0x10 [ 748.037995][ C0] ret_from_fork+0x3fc/0x770 [ 748.042707][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 748.047857][ C0] ? __switch_to_asm+0x39/0x70 [ 748.052680][ C0] ? __switch_to_asm+0x33/0x70 [ 748.057568][ C0] ? __pfx_kthread+0x10/0x10 [ 748.062203][ C0] ret_from_fork_asm+0x1a/0x30 [ 748.067202][ C0] [ 748.070247][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 748.076701][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 748.088995][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 748.099192][ C0] Workqueue: events_unbound toggle_allocation_gate [ 748.105761][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 748.112566][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 b0 79 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 5b 75 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 40 75 0b [ 748.132235][ C0] RSP: 0018:ffffc900001176a0 EFLAGS: 00000293 [ 748.138358][ C0] RAX: ffffffff81b4e850 RBX: ffff8880b863b040 RCX: ffff88801ce95a00 [ 748.146367][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 748.154379][ C0] RBP: ffffc90000117800 R08: ffffffff8fa0b2f7 R09: 1ffffffff1f4165e [ 748.162392][ C0] R10: dffffc0000000000 R11: fffffbfff1f4165f R12: 1ffff110170e7f2d [ 748.170406][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b873f968 [ 748.178413][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 748.187375][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 748.193994][ C0] CR2: 0000200000000000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 748.202016][ C0] Call Trace: [ 748.205340][ C0] [ 748.208327][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 748.214697][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 748.220118][ C0] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 748.226239][ C0] ? __pfx___text_poke+0x10/0x10 [ 748.231217][ C0] ? rcu_is_watching+0x15/0xb0 [ 748.236023][ C0] ? trace_contention_end+0x39/0x120 [ 748.241373][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 748.246445][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 748.251610][ C0] smp_text_poke_batch_finish+0x5e0/0x1100 [ 748.257503][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 748.262595][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 748.269096][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 748.275415][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 748.281444][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 748.287388][ C0] static_key_enable+0x1a/0x20 [ 748.292192][ C0] toggle_allocation_gate+0xad/0x240 [ 748.297530][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 748.303475][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 748.309247][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 748.315059][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 748.320825][ C0] process_scheduled_works+0xae1/0x17b0 [ 748.326445][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 748.332489][ C0] worker_thread+0x8a0/0xda0 [ 748.337154][ C0] kthread+0x711/0x8a0 [ 748.341289][ C0] ? __pfx_worker_thread+0x10/0x10 [ 748.346450][ C0] ? __pfx_kthread+0x10/0x10 [ 748.351087][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 748.356342][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 748.361582][ C0] ? __pfx_kthread+0x10/0x10 [ 748.366217][ C0] ret_from_fork+0x3fc/0x770 [ 748.370852][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 748.376006][ C0] ? __switch_to_asm+0x39/0x70 [ 748.380828][ C0] ? __switch_to_asm+0x33/0x70 [ 748.385650][ C0] ? __pfx_kthread+0x10/0x10 [ 748.390308][ C0] ret_from_fork_asm+0x1a/0x30 [ 748.395229][ C0]