last executing test programs: 2.784373362s ago: executing program 3 (id=10419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001f"], 0x3c}}, 0x0) 2.522499025s ago: executing program 3 (id=10420): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_pidfd_open(r0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x1000003, 0x0) 2.231123116s ago: executing program 4 (id=10424): creat(&(0x7f0000000040)='./file0\x00', 0x44) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)={[&(0x7f0000000240)='GPL\x00']}) 2.104550802s ago: executing program 0 (id=10426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x34, r1, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x34}}, 0x0) 1.988978453s ago: executing program 3 (id=10429): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) faccessat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.798956329s ago: executing program 3 (id=10431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5}]}}}]}, 0x3c}}, 0x0) 1.784903517s ago: executing program 4 (id=10432): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000300)={r1, @in={{0x2, 0x0, @dev}}, [0x0, 0x4e5, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0xb53]}, &(0x7f0000000140)=0x100) 1.695014054s ago: executing program 0 (id=10433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x9, 0x1, 0x0, 0x0, @msi={0x1, 0xce34, 0x7, 0x4}}]}) 1.585623569s ago: executing program 3 (id=10436): open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) unshare(0x400) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1.397424106s ago: executing program 1 (id=10437): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="890704faf3", 0x5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @local}, 0x1a) 1.357727476s ago: executing program 4 (id=10438): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}]}, 0x38}}, 0x0) 1.311563772s ago: executing program 3 (id=10439): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "6e9b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000080"], 0x0, 0x0, 0x0, 0x0}) 1.217382785s ago: executing program 1 (id=10441): writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000001840)='u', 0x1}], 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 1.186483678s ago: executing program 4 (id=10442): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000f00)=']', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)="0cc070bb9b47ac56fdf196b22a0a9212b2bdf48cbfe682ce86c5b50d76d9bd9cb7fcec2b2433e2337d798a9970b6", 0x2e}, {&(0x7f0000001940)="98cfe0568461cbd1b90151317f84f082b41567bfa25653e4ba2e656bd68717ebb9c2d1d1b5a062437c002403656e3dd39780e033d4681352c95b2d769a6d05d59d5bd34c77b36cedbbf8be", 0x4b}, {&(0x7f00000019c0)="6c274a7e1ebdfb5515047c58b6c105d4", 0x10}], 0x3, 0x0, 0x0, 0x10008001}}], 0x2, 0x8080) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/223, 0xdf}], 0x1, &(0x7f0000000b40)=""/211, 0xd3}, 0x10101) 1.102618766s ago: executing program 0 (id=10443): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) setxattr$security_smack_transmute(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x2) 1.086866289s ago: executing program 1 (id=10445): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) flock(r0, 0x5) 978.485679ms ago: executing program 2 (id=10446): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxselin\x05x\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc088cf2, 0x0, 0x0) mq_notify(r0, 0x0) 877.759795ms ago: executing program 2 (id=10447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000d0a010e000000000000000001000000090001"], 0x2c}}, 0x0) 813.203569ms ago: executing program 4 (id=10448): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) 772.837456ms ago: executing program 1 (id=10449): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x40}}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc5d116e9899720b9, {{0x42}}}, 0x10) 758.448627ms ago: executing program 2 (id=10450): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}}, 0x0) 736.331456ms ago: executing program 0 (id=10451): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000011c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000000c0)={0x18, r1, 0x1, 0x0, &(0x7f0000000080)=[{0x0, 0x2}]}) 489.787805ms ago: executing program 2 (id=10452): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 488.274483ms ago: executing program 1 (id=10453): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x800) waitid$P_PIDFD(0x3, r1, 0x0, 0x4, 0x0) 354.32185ms ago: executing program 0 (id=10454): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 314.495332ms ago: executing program 2 (id=10455): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) 220.155007ms ago: executing program 1 (id=10456): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) 219.622679ms ago: executing program 4 (id=10457): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xff, 0x0, 0x6}]}) socket$packet(0x11, 0x3, 0x300) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x10001, r0, 0x1}) 17.75646ms ago: executing program 0 (id=10458): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x8, 0x0, 0x0) syz_usb_connect(0x0, 0x3e, &(0x7f0000000f80)=ANY=[@ANYBLOB="1201000090a805406708129885400000000109022c0001000000000904"], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) 0s ago: executing program 2 (id=10459): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): s an invalid bInterval 0, changing to 7 [ 589.292065][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.340959][ T5274] usb 2-1: New USB device found, idVendor=056a, idProduct=ad15, bcdDevice= 0.00 [ 589.369686][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.417544][ T5274] usb 2-1: config 0 descriptor?? [ 589.880539][ T5274] wacom 0003:056A:AD15.00CD: Unknown device_type for 'HID 056a:ad15'. Ignoring. [ 590.163866][ T5274] usb 2-1: USB disconnect, device number 87 [ 590.586802][ T5225] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 590.597488][ T5225] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 590.608658][ T5225] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 590.633042][ T5225] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 590.647412][ T5225] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 590.665628][ T5225] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 590.787277][T24491] lo speed is unknown, defaulting to 1000 [ 590.796776][T24491] wg1 speed is unknown, defaulting to 1000 [ 591.031871][ T5270] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 591.182087][ T5270] usb 4-1: Using ep0 maxpacket: 32 [ 591.219800][ T5270] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 591.276450][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 591.339373][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 591.404529][ T5270] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 591.448036][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.536333][T24491] chnl_net:caif_netlink_parms(): no params data found [ 591.564648][ T5270] usb 4-1: config 0 descriptor?? [ 591.572206][T24496] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 591.602437][ T5270] hub 4-1:0.0: USB hub found [ 591.801348][ T5270] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 592.019492][ T5270] usbhid 4-1:0.0: can't add hid device: -71 [ 592.047414][ T5270] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 592.059233][T24525] netlink: 632 bytes leftover after parsing attributes in process `syz.1.8626'. [ 592.097355][T24491] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.129553][ T5270] usb 4-1: USB disconnect, device number 95 [ 592.152771][T24491] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.202875][T24491] bridge_slave_0: entered allmulticast mode [ 592.240180][T24491] bridge_slave_0: entered promiscuous mode [ 592.296696][T24491] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.334851][T24491] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.382055][T24491] bridge_slave_1: entered allmulticast mode [ 592.422956][T24491] bridge_slave_1: entered promiscuous mode [ 592.716192][T24491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.740637][T24537] sctp: [Deprecated]: syz.2.8629 (pid 24537) Use of int in maxseg socket option. [ 592.740637][T24537] Use struct sctp_assoc_value instead [ 592.756448][ T5225] Bluetooth: hci7: command tx timeout [ 592.848003][T24491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.954639][T24539] netlink: 'syz.0.8628': attribute type 1 has an invalid length. [ 593.039149][T24539] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.8628'. [ 593.175516][T24491] team0: Port device team_slave_0 added [ 593.337930][T24548] bridge0: entered promiscuous mode [ 593.376226][T24548] macsec1: entered promiscuous mode [ 593.423406][T24548] bridge0: left promiscuous mode [ 593.546884][T24491] team0: Port device team_slave_1 added [ 593.722962][T24491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.763603][T24491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.838148][T24559] o2cb: This node has not been configured. [ 593.882816][T24559] o2cb: Cluster check failed. Fix errors before retrying. [ 593.917398][T24559] (syz.2.8639,24559,0):user_dlm_register:674 ERROR: status = -22 [ 593.937597][T24491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.970755][T24559] (syz.2.8639,24559,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 594.099360][T24491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.160588][T24491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.277798][T24491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.618329][T24491] hsr_slave_0: entered promiscuous mode [ 594.666696][T24491] hsr_slave_1: entered promiscuous mode [ 594.730659][T24491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 594.771947][T24491] Cannot create hsr debugfs directory [ 594.824808][ T5225] Bluetooth: hci7: command tx timeout [ 594.838466][T24572] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.848727][T24572] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.857604][T24572] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.866427][T24572] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.972432][T24583] delete_channel: no stack [ 595.005314][T24582] delete_channel: no stack [ 595.361950][ T5274] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 595.543470][ T5274] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 595.577185][ T5274] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 595.645689][ T5274] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 595.732788][ T5274] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 595.766813][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 595.822338][ T5274] usb 2-1: SerialNumber: syz [ 595.850433][T24587] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 596.118341][T24587] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 596.325546][T24491] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.694971][T24491] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.762595][ T5274] cdc_ether 2-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.1-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 596.835844][ T5274] usb 2-1: USB disconnect, device number 88 [ 596.856972][ T5274] cdc_ether 2-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.1-1, Mobile Broadband Network Device [ 596.910668][ T5225] Bluetooth: hci7: command tx timeout [ 596.922668][ T5304] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 596.935622][T24491] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.094506][ T5304] usb 4-1: Using ep0 maxpacket: 8 [ 597.106863][ T5304] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 597.124777][T24491] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.138543][ T5304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.167212][ T5304] usb 4-1: Product: syz [ 597.171421][ T5304] usb 4-1: Manufacturer: syz [ 597.197697][ T5304] usb 4-1: SerialNumber: syz [ 597.218436][ T5304] usb 4-1: config 0 descriptor?? [ 597.240977][ T5304] gspca_main: se401-2.14.0 probing 047d:5003 [ 597.750852][T24491] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 597.826324][T24491] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 597.858790][ T5304] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input152 [ 597.906064][T24491] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 597.964543][T24491] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 598.060373][ T5272] usb 4-1: USB disconnect, device number 96 [ 598.324288][T24491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.394347][T24491] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.450677][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.457974][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.529418][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.536655][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.835929][T24491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 599.001847][ T5225] Bluetooth: hci7: command tx timeout [ 599.221065][T24491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.973914][T24655] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8679'. [ 600.143883][ T5304] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 600.194533][T24491] veth0_vlan: entered promiscuous mode [ 600.273578][T24491] veth1_vlan: entered promiscuous mode [ 600.324020][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 600.365518][T24662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8682'. [ 600.375810][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.437963][ T5304] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 600.463204][T24491] veth0_macvtap: entered promiscuous mode [ 600.506725][ T5304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.524141][T24491] veth1_macvtap: entered promiscuous mode [ 600.564845][ T5304] usb 4-1: config 0 descriptor?? [ 600.607550][ T5304] hub 4-1:0.0: USB hub found [ 600.653633][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.713556][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.761916][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.777597][ T5304] hub 4-1:0.0: 1 port detected [ 600.803628][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.844491][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.886096][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.925966][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.967119][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.979498][ T5304] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 600.992199][ T5304] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 601.022154][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.053135][ T5304] usbhid 4-1:0.0: can't add hid device: -71 [ 601.060291][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.081633][ T5304] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 601.123012][T24491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.134610][ T5304] usb 4-1: USB disconnect, device number 97 [ 601.165649][T24665] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 601.184790][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.259641][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.312735][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.351910][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.391909][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.439895][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.484782][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.528861][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.576694][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.618773][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.661981][T24491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.710489][T24491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.756397][T24491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.879118][T24491] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.903925][T24675] Falling back ldisc for ttyS3. [ 601.941025][T24491] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.998958][T24491] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.036995][T24491] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.392625][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.411920][ T5271] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 602.420915][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.545057][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.575304][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.584656][ T5271] usb 2-1: Using ep0 maxpacket: 8 [ 602.609313][ T5271] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 602.636607][ T5271] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 602.692942][ T5271] usb 2-1: Product: syz [ 602.710052][ T5271] usb 2-1: Manufacturer: syz [ 602.763323][ T5271] usb 2-1: SerialNumber: syz [ 602.784228][ T5271] usb 2-1: config 0 descriptor?? [ 602.843914][ T5271] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 603.467347][ T5271] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input153 [ 603.615136][T24701] netlink: 'syz.3.8698': attribute type 10 has an invalid length. [ 603.653081][T24701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.677594][T24701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.682871][ T5273] usb 2-1: USB disconnect, device number 89 [ 603.740789][T24701] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 604.143096][ T5271] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 604.346758][ T5271] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 604.351170][T24715] cgroup: fork rejected by pids controller in [ 604.360105][ T5271] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 604.379294][ T5271] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 604.388676][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.401422][T24708] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 604.412163][ T5271] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 604.452667][T24715] /syz1 [ 604.576422][T24720] 9p: Unknown access argument 18446744073709551615: -34 [ 604.693581][ T5318] usb 4-1: USB disconnect, device number 98 [ 604.844356][T24729] netpci0: tun_chr_ioctl cmd 1074025677 [ 604.850169][T24729] netpci0: linktype set to 805 [ 605.367873][ T29] audit: type=1400 audit(1728353653.430:8469): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=24732 comm="syz.2.8712" dest=20003 [ 606.050060][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.290741][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.484041][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.525632][T24750] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 606.542467][T24751] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 1 [ 606.557214][T24752] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 2 [ 606.572012][T24753] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 3 [ 606.597076][T24749] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8719'. [ 606.847165][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.929336][T18338] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 606.944222][T18338] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 606.961053][T18338] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 606.973686][T18338] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 606.985158][T18338] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 606.992860][T18338] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 607.121521][T24760] lo speed is unknown, defaulting to 1000 [ 607.142978][T24760] wg1 speed is unknown, defaulting to 1000 [ 607.781492][ T61] bridge_slave_1: left allmulticast mode [ 607.788109][ T61] bridge_slave_1: left promiscuous mode [ 607.794500][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.909460][T24786] bpf: Bad value for 'gid' [ 608.056294][ T61] bridge_slave_0: left allmulticast mode [ 608.062707][ T61] bridge_slave_0: left promiscuous mode [ 608.068471][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.285433][T24682] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 608.460763][T24682] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 608.471015][T24682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.492620][T24682] usb 3-1: config 0 descriptor?? [ 608.499605][T24682] cp210x 3-1:0.0: cp210x converter detected [ 608.933597][T24682] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 608.964609][T24682] usb 3-1: cp210x converter now attached to ttyUSB0 [ 609.062362][T18338] Bluetooth: hci4: command tx timeout [ 609.190582][ T5318] usb 3-1: USB disconnect, device number 89 [ 609.225755][ T5318] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 609.292905][ T5318] cp210x 3-1:0.0: device disconnected [ 609.540156][T24806] Falling back ldisc for ttyS3. [ 610.142287][ T5270] IPVS: starting estimator thread 0... [ 610.251995][T24822] IPVS: using max 17 ests per chain, 40800 per kthread [ 610.930128][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.957068][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.998048][ T61] bond0 (unregistering): Released all slaves [ 611.031553][T24821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8747'. [ 611.144135][T18338] Bluetooth: hci4: command tx timeout [ 611.301913][ T61] tipc: Left network mode [ 611.303799][T24760] chnl_net:caif_netlink_parms(): no params data found [ 611.646009][T24840] netlink: 'syz.2.8755': attribute type 8 has an invalid length. [ 612.154072][T24760] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.177371][T24760] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.208182][T24760] bridge_slave_0: entered allmulticast mode [ 612.240337][T24760] bridge_slave_0: entered promiscuous mode [ 612.312271][T24760] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.319412][T24760] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.412727][T24760] bridge_slave_1: entered allmulticast mode [ 612.474143][T24760] bridge_slave_1: entered promiscuous mode [ 612.993978][ T61] hsr_slave_0: left promiscuous mode [ 613.001617][ T61] hsr_slave_1: left promiscuous mode [ 613.047509][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.083418][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.102682][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.112207][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.192048][ T61] veth1_macvtap: left promiscuous mode [ 613.212495][ T61] veth0_macvtap: left promiscuous mode [ 613.218135][ T61] veth1_vlan: left promiscuous mode [ 613.251701][ T61] veth0_vlan: left promiscuous mode [ 613.263411][ T5225] Bluetooth: hci4: command tx timeout [ 615.301940][ T5225] Bluetooth: hci4: command tx timeout [ 615.571091][ T61] team0 (unregistering): Port device team_slave_1 removed [ 615.707634][ T61] team0 (unregistering): Port device team_slave_0 removed [ 618.106893][T24760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.194632][T24760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.488292][T24760] team0: Port device team_slave_0 added [ 618.527951][T24760] team0: Port device team_slave_1 added [ 618.562717][T24682] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 618.732614][T24682] usb 3-1: Using ep0 maxpacket: 8 [ 618.739545][T24682] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 618.759571][T24682] usb 3-1: config 179 has no interface number 0 [ 618.792999][T24682] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 618.852572][T24682] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 618.902156][T24682] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 618.936179][T24760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.005123][T24760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.032920][T24682] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 619.045485][T24682] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 619.060503][T24682] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 619.068616][T24760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.080577][T24682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.092970][T24879] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 619.113989][T24760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.120980][T24760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.147801][T24760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.391574][T24682] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input155 [ 619.407859][T24760] hsr_slave_0: entered promiscuous mode [ 619.536903][T24760] hsr_slave_1: entered promiscuous mode [ 619.589044][T24682] usb 3-1: USB disconnect, device number 90 [ 619.595100][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 619.595151][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 619.625468][T24760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 619.626742][T24682] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 619.655172][T24760] Cannot create hsr debugfs directory [ 620.476237][T24914] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 621.446825][T24760] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 621.535986][T24760] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 621.584700][T24760] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 621.660318][T24760] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 621.990375][T24760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.089292][T24760] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.176525][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.183749][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.208913][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.216160][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.381609][T24949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8800'. [ 623.095078][T24760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.128282][T24760] veth0_vlan: entered promiscuous mode [ 623.144151][T24760] veth1_vlan: entered promiscuous mode [ 623.182716][T24760] veth0_macvtap: entered promiscuous mode [ 623.196147][T24760] veth1_macvtap: entered promiscuous mode [ 623.250301][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.325517][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.420363][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.446627][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.472082][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.497813][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.569655][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.610416][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.623534][T24760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.637371][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.723161][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.765630][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.817592][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.868317][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.899652][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.927406][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.939709][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.951505][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.964892][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.976618][T24760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.988152][T24760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.000823][T24760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.038348][T24760] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.104420][T24760] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.162291][T24760] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.171046][T24760] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.397557][T24992] ieee802154 phy0 wpan0: encryption failed: -126 [ 624.467081][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.489275][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.578586][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.589475][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.596232][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.618109][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.218969][T25007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8825'. [ 625.676198][ T29] audit: type=1400 audit(1728353673.740:8470): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=25024 comm="syz.2.8832" dest=20002 netif=wpan0 [ 627.171190][T25058] netlink: 'syz.0.8846': attribute type 1 has an invalid length. [ 627.227775][T25058] netlink: 'syz.0.8846': attribute type 2 has an invalid length. [ 628.866349][T25080] netlink: 'syz.0.8855': attribute type 25 has an invalid length. [ 628.907311][T25080] netlink: 'syz.0.8855': attribute type 8 has an invalid length. [ 628.964014][T25084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8858'. [ 629.859487][T25120] netlink: 'syz.0.8874': attribute type 4 has an invalid length. [ 630.520023][ T29] audit: type=1326 audit(1728353678.580:8471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25140 comm="syz.4.8885" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df977dff9 code=0x0 [ 630.761689][T25151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.545344][T25164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8896'. [ 631.632923][T25168] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8894'. [ 631.650006][T25164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8896'. [ 631.791390][T25168] Κό: entered promiscuous mode [ 631.883429][ T5318] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 632.077321][ T5318] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 632.079274][T25177] lo speed is unknown, defaulting to 1000 [ 632.088729][ T5318] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 632.137502][T25177] wg1 speed is unknown, defaulting to 1000 [ 632.141370][ T5318] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 632.191835][ T5318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.225235][T25167] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 632.318195][ T5318] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 632.795353][T24682] usb 5-1: USB disconnect, device number 92 [ 632.898113][T25203] netlink: 'syz.1.8914': attribute type 3 has an invalid length. [ 632.933538][T25203] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.8914'. [ 633.023124][T25208] tun0: tun_chr_ioctl cmd 2147767511 [ 633.592817][T25216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8920'. [ 633.790430][T25218] tun0: tun_chr_ioctl cmd 1074025675 [ 633.796660][T25218] tun0: persist disabled [ 634.260853][T25232] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 634.499915][T25239] sctp: [Deprecated]: syz.1.8930 (pid 25239) Use of int in max_burst socket option deprecated. [ 634.499915][T25239] Use struct sctp_assoc_value instead [ 635.349889][ T29] audit: type=1326 audit(1728353683.390:8472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25259 comm="syz.2.8942" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44cd57dff9 code=0x0 [ 636.553165][T25292] netlink: 'syz.3.8954': attribute type 39 has an invalid length. [ 636.561181][T25292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8954'. [ 636.582640][T25292] bridge0: left allmulticast mode [ 636.784719][ T29] audit: type=1400 audit(1728353684.850:8473): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=25297 comm="syz.3.8958" [ 638.516325][T25344] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.8979'. [ 638.526631][T25344] openvswitch: netlink: Multiple metadata blocks provided [ 639.154137][T25375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 640.304724][T25393] lo speed is unknown, defaulting to 1000 [ 640.364585][T25393] wg1 speed is unknown, defaulting to 1000 [ 641.534796][T24682] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 641.754154][T24682] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 641.773016][T24682] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 641.783158][T24682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.828726][T24682] usb 3-1: config 0 descriptor?? [ 641.945619][T24682] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 642.033221][T18338] Bluetooth: hci0: command 0x0406 tx timeout [ 642.054027][T24682] usb 3-1: USB disconnect, device number 91 [ 642.081889][ T5271] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 642.256963][ T5271] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 642.268797][ T5271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.288937][ T5271] usb 4-1: Product: syz [ 642.301891][ T5271] usb 4-1: Manufacturer: syz [ 642.306540][ T5271] usb 4-1: SerialNumber: syz [ 642.333127][ T5271] usb 4-1: config 0 descriptor?? [ 642.363422][ T5271] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 099 [ 642.773526][ T5271] (null): failure reading functionality [ 642.783932][ T5271] i2c i2c-1: connected i2c-tiny-usb device [ 643.008178][ T5271] usb 4-1: USB disconnect, device number 99 [ 643.774733][T25469] tap0: tun_chr_ioctl cmd 1074025677 [ 643.848796][T25469] tap0: linktype set to 0 [ 644.410280][T25480] loop6: detected capacity change from 0 to 524287999 [ 644.493055][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.502602][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.560201][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.592131][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.601343][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.622347][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.631533][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.662714][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.672022][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.702109][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.711337][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.727323][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.736550][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.747622][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.756832][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.770573][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.779801][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.788392][T25480] ldm_validate_partition_table(): Disk read failed. [ 644.804340][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.813598][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.822699][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.883724][T25480] Dev loop6: unable to read RDB block 0 [ 644.949164][T25480] loop6: unable to read partition table [ 644.989463][T25480] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύx³˜CΦ) failed (rc=-5) [ 645.372722][ T5270] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 645.552659][ T5270] usb 4-1: Using ep0 maxpacket: 16 [ 645.563724][ T5270] usb 4-1: config 0 has no interfaces? [ 645.569463][ T5270] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 645.579570][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.625151][ T5270] usb 4-1: config 0 descriptor?? [ 645.891643][T25496] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 645.923844][ T5271] usb 4-1: USB disconnect, device number 100 [ 646.356729][T25536] vim2m vim2m.0: vidioc_s_fmt queue busy [ 646.472911][T25538] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 646.712097][T25542] netlink: 'syz.1.9071': attribute type 1 has an invalid length. [ 646.771217][T25546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9073'. [ 646.783015][T25542] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.9071'. [ 646.806068][T25546] ip6tnl3: entered promiscuous mode [ 646.813133][T25542] netlink: 'syz.1.9071': attribute type 1 has an invalid length. [ 646.820903][T25542] netlink: 'syz.1.9071': attribute type 2 has an invalid length. [ 646.830220][T25546] ip6tnl3: entered allmulticast mode [ 647.353749][T25567] bond0: entered promiscuous mode [ 647.358902][T25567] bond_slave_0: entered promiscuous mode [ 647.366234][T25567] bond_slave_1: entered promiscuous mode [ 647.734641][ T47] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 647.893901][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 647.913093][ T47] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 647.923219][ T47] usb 4-1: config 0 has no interface number 0 [ 647.929371][ T47] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 647.938818][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.949759][ T47] usb 4-1: config 0 descriptor?? [ 648.063975][ T47] viperboard 4-1:0.143: version 0.00 found at bus 004 address 101 [ 648.080021][ T47] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 648.102143][ T47] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 648.140454][T25583] input: syz1 as /devices/virtual/input/input156 [ 648.176206][ T47] usb 4-1: USB disconnect, device number 101 [ 648.432964][T25592] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9093'. [ 648.453076][T25592] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 648.765994][T25606] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 648.942618][ T5271] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 649.092861][ T5271] usb 2-1: Using ep0 maxpacket: 32 [ 649.100424][ T5271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.113320][ T5271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.124900][ T5271] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 649.138918][ T5271] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 649.151341][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.164737][ T5271] usb 2-1: config 0 descriptor?? [ 649.673366][ T5271] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.00CE/input/input157 [ 649.854413][ T5271] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.00CE/input/input158 [ 649.953619][ T5271] kye 0003:0458:5011.00CE: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 650.112959][ T5274] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 650.304048][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.326018][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.385085][ T47] usb 2-1: USB disconnect, device number 90 [ 650.390238][ T5274] usb 5-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 650.421515][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.463213][ T5274] usb 5-1: config 0 descriptor?? [ 650.929843][ T5274] wacom 0003:056A:0315.00CF: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 650.943004][ T5274] wacom 0003:056A:0315.00CF: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.4-1/input0 [ 650.963063][ T5274] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0315.00CF/input/input159 [ 651.416501][ T5274] usb 5-1: USB disconnect, device number 93 [ 651.607195][T25660] loop6: detected capacity change from 0 to 524287999 [ 651.617360][ C0] blk_print_req_error: 8 callbacks suppressed [ 651.617380][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 651.632755][ C0] buffer_io_error: 7 callbacks suppressed [ 651.632771][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.652757][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 651.662023][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.704490][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 651.713750][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.756944][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 651.766170][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.785081][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 651.794299][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.802634][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 651.811834][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.820905][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 651.830682][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 651.839911][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.853015][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 651.862276][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.870193][T25660] ldm_validate_partition_table(): Disk read failed. [ 651.931722][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 651.941009][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.960649][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.976388][T25669] netlink: 'syz.1.9128': attribute type 1 has an invalid length. [ 651.982666][T25660] Dev loop6: unable to read RDB block 0 [ 652.000586][T25660] loop6: unable to read partition table [ 652.007294][T25660] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύx³˜CΦ) failed (rc=-5) [ 652.012642][T25669] netlink: 'syz.1.9128': attribute type 2 has an invalid length. [ 652.618806][T25686] netlink: 'syz.2.9135': attribute type 2 has an invalid length. [ 652.866427][T25694] program syz.3.9141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 653.075722][T25702] loop6: detected capacity change from 0 to 524287999 [ 653.137158][T25702] ldm_validate_partition_table(): Disk read failed. [ 653.211949][T25702] Dev loop6: unable to read RDB block 0 [ 653.239344][T25702] loop6: unable to read partition table [ 653.266539][T25702] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύx³˜CΦ) failed (rc=-5) [ 653.404541][T25707] netlink: 204 bytes leftover after parsing attributes in process `syz.4.9145'. [ 654.025171][T25728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9155'. [ 654.102265][ T47] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 654.282894][T25739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9159'. [ 654.292002][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 654.414796][ T47] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 654.434905][ T47] usb 5-1: config 150 has no interface number 0 [ 654.471186][ T47] usb 5-1: config 150 interface 204 has no altsetting 0 [ 654.478953][ T47] usb 5-1: config 150 interface 1 has no altsetting 0 [ 654.511119][ T47] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 654.527221][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.541093][ T47] usb 5-1: Product: syz [ 654.545526][ T47] usb 5-1: Manufacturer: syz [ 654.550141][ T47] usb 5-1: SerialNumber: syz [ 654.606375][T25745] netlink: 'syz.1.9164': attribute type 10 has an invalid length. [ 654.622592][T24682] IPVS: starting estimator thread 0... [ 654.762844][T25750] IPVS: using max 20 ests per chain, 48000 per kthread [ 654.811140][T25745] team0: Port device wlan1 added [ 654.862797][T24682] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 654.888927][T25744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.914927][ T47] xr_serial 5-1:150.204: xr_serial converter detected [ 655.044856][T24682] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.071686][T24682] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 655.109985][T24682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.131273][T24682] usb 3-1: config 0 descriptor?? [ 655.231661][T25758] IPv6: NLM_F_REPLACE set, but no existing node found! [ 655.353977][T24682] usb 3-1: USB disconnect, device number 92 [ 655.594209][ T47] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 655.600704][ T47] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 655.652203][ T47] usb 5-1: USB disconnect, device number 94 [ 655.673698][ T47] xr_serial 5-1:150.204: device disconnected [ 656.244383][T25794] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 656.412675][T25800] netlink: 'syz.2.9185': attribute type 33 has an invalid length. [ 656.481083][T25800] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9185'. [ 656.504842][T25800] netlink: 'syz.2.9185': attribute type 10 has an invalid length. [ 657.393158][ T29] audit: type=1326 audit(1728353705.460:8474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25827 comm="syz.3.9208" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe80697dff9 code=0x0 [ 657.921526][T25844] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9205'. [ 658.787480][ T29] audit: type=1326 audit(1728353706.850:8475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25864 comm="syz.4.9215" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5df977dff9 code=0x0 [ 659.692834][T25886] CUSE: info not properly terminated [ 659.924218][ T29] audit: type=1400 audit(1728353707.970:8476): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=25895 comm="syz.2.9229" [ 660.552389][T25917] netlink: 'syz.2.9241': attribute type 39 has an invalid length. [ 660.566117][T25917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9241'. [ 660.618757][T25917] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.626405][T25917] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.752498][ T5273] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 660.944667][ T5273] usb 4-1: Using ep0 maxpacket: 16 [ 660.965780][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.977900][ T5273] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 660.997524][ T5273] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 661.030361][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.071166][ T5273] usb 4-1: config 0 descriptor?? [ 661.495374][ T5273] microsoft 0003:045E:07DA.00D0: unbalanced delimiter at end of report description [ 661.507551][ T5273] microsoft 0003:045E:07DA.00D0: parse failed [ 661.513828][ T5273] microsoft 0003:045E:07DA.00D0: probe with driver microsoft failed with error -22 [ 661.662802][ T47] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 661.670866][ T29] audit: type=1326 audit(1728353709.730:8477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25949 comm="syz.0.9253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5aa17dff9 code=0x0 [ 661.691988][ C0] vkms_vblank_simulate: vblank timer overrun [ 661.811988][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 661.819896][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.872739][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.883441][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 661.896383][ T47] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 661.906236][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.919919][ T47] usb 5-1: config 0 descriptor?? [ 661.983554][ T5273] usb 4-1: USB disconnect, device number 102 [ 662.348113][ T47] microsoft 0003:045E:07DA.00D1: unknown main item tag 0x0 [ 662.366834][ T47] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.00D1/input/input162 [ 662.410285][ T47] microsoft 0003:045E:07DA.00D1: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 662.424683][ T5318] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 662.597684][ T5318] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 662.641663][ T5318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 662.653841][ T5318] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 662.674629][ T5318] usb 2-1: string descriptor 0 read error: -22 [ 662.680917][ T5318] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 662.691600][ T5318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.702506][ T5318] usb 2-1: config 0 descriptor?? [ 662.711279][ T5318] em28xx 2-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 662.722399][ T5318] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 662.807704][T24682] usb 5-1: USB disconnect, device number 95 [ 662.986522][ T5318] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 663.018480][ T5318] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 663.027081][ T5318] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 663.039226][ T5318] em28xx 2-1:0.0: No AC97 audio processor [ 663.076249][ T5318] usb 2-1: USB disconnect, device number 91 [ 663.101168][ T5318] em28xx 2-1:0.0: Disconnecting em28xx [ 663.122114][ T5318] em28xx 2-1:0.0: Freeing device [ 664.754234][T26007] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 664.779125][T26007] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 665.240756][T26021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9285'. [ 665.799693][T26034] lo speed is unknown, defaulting to 1000 [ 665.848559][T26045] netlink: 'syz.1.9295': attribute type 9 has an invalid length. [ 665.877895][T26045] bond_slave_0: entered promiscuous mode [ 665.883680][T26045] bond_slave_1: entered promiscuous mode [ 665.902986][T26045] macvlan2: entered promiscuous mode [ 665.913142][T26045] bond0: entered promiscuous mode [ 665.930469][T26045] macvlan2: entered allmulticast mode [ 665.957800][T26045] bond0: entered allmulticast mode [ 665.967305][T26045] bond_slave_0: entered allmulticast mode [ 665.980982][T26045] bond_slave_1: entered allmulticast mode [ 665.998978][T26045] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 666.038278][T26034] wg1 speed is unknown, defaulting to 1000 [ 666.167472][T26049] lo speed is unknown, defaulting to 1000 [ 666.514691][T26049] wg1 speed is unknown, defaulting to 1000 [ 666.789812][T26060] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9303'. [ 666.873794][ T5274] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 667.073449][ T5274] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 667.111670][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.144697][ T5274] usb 2-1: config 0 descriptor?? [ 667.153632][ T5274] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 667.596021][ T5274] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 668.039637][ T5274] gspca_cpia1: usb_control_msg 02, error -71 [ 668.169420][ T5274] gspca_cpia1: usb_control_msg 05, error -71 [ 668.182587][ T5274] cpia1 2-1:0.0: unexpected systemstate: 00 [ 668.287814][ T5225] Bluetooth: hci6: unexpected event for opcode 0x1004 [ 668.297893][ T5274] usb 2-1: USB disconnect, device number 92 [ 669.605089][T26102] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 669.966464][T26106] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9321'. [ 670.023194][T26106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9321'. [ 670.710386][T26120] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 671.366879][T26139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9336'. [ 671.426612][T26139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9336'. [ 671.468965][T26139] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 5 - 0 [ 671.505026][T26139] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 5 - 0 [ 671.548904][T26139] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 5 - 0 [ 671.581991][T26139] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 5 - 0 [ 672.347581][T18338] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 672.358910][T18338] Bluetooth: hci6: Injecting HCI hardware error event [ 672.369811][T18338] Bluetooth: hci6: hardware error 0x00 [ 672.707920][T26176] netlink: 'syz.3.9354': attribute type 12 has an invalid length. [ 672.716849][T26176] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.9354'. [ 673.736982][ T5274] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 673.953792][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.982686][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.993301][ T5274] usb 2-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 674.005884][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.018476][ T5274] usb 2-1: config 0 descriptor?? [ 674.184587][T24051] Bluetooth: hci4: command 0x0405 tx timeout [ 674.210108][T26237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9381'. [ 674.463865][ T5274] wacom 0003:056A:00B1.00D2: unknown main item tag 0x0 [ 674.471474][ T5274] wacom 0003:056A:00B1.00D2: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 674.485859][ T5274] wacom 0003:056A:00B1.00D2: hidraw0: USB HID v0.00 Device [HID 056a:00b1] on usb-dummy_hcd.1-1/input0 [ 674.523127][ T5274] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B1.00D2/input/input164 [ 674.743306][T18338] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 674.789688][ T5274] usb 2-1: USB disconnect, device number 93 [ 675.389984][T26258] tap0: tun_chr_ioctl cmd 1074812118 [ 675.435333][T26260] netlink: 312 bytes leftover after parsing attributes in process `syz.4.9391'. [ 676.186800][ T47] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 676.372673][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 676.461809][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.517305][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 676.547334][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 676.564544][ T47] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 676.586395][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 676.744301][ T47] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 676.794727][ T47] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 676.845168][ T47] usb 5-1: Manufacturer: syz [ 676.856202][ T47] usb 5-1: config 0 descriptor?? [ 676.861211][T26288] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9404'. [ 676.861244][T26288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9404'. [ 676.964610][T26288] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.009209][T26288] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.016444][T26288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.359938][ T47] rc_core: IR keymap rc-hauppauge not found [ 677.367810][ T47] Registered IR keymap rc-empty [ 677.373446][ T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.413826][ T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.437143][T26297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9407'. [ 677.446789][ T47] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 677.461243][ T47] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input167 [ 677.476497][ T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.501972][ T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.534443][ T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.573570][ T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.592045][ T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.612081][ T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.633964][ T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.652039][ T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.672865][ T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.693093][ T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.713270][ T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 677.748507][ T47] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 677.802684][ T47] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 677.837325][ T47] usb 5-1: USB disconnect, device number 96 [ 678.652745][ T47] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 678.707422][T26333] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 678.827370][T26336] ip6gretap0: entered promiscuous mode [ 678.853511][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 678.866570][ T47] usb 4-1: config 0 has an invalid interface number: 64 but max is 1 [ 678.908550][T26336] ip6gretap0: left promiscuous mode [ 678.916204][ T47] usb 4-1: config 0 has no interface number 1 [ 678.929615][ T47] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 678.986874][ T47] usb 4-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=1c.a5 [ 679.006553][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.018397][ T47] usb 4-1: Product: syz [ 679.025480][ T47] usb 4-1: Manufacturer: syz [ 679.031101][ T47] usb 4-1: SerialNumber: syz [ 679.064713][ T47] usb 4-1: config 0 descriptor?? [ 679.288250][ T47] usb 4-1: bad CDC descriptors [ 679.298509][ T47] usb 4-1: USB disconnect, device number 103 [ 679.712238][T26353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9433'. [ 679.725536][T26353] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9433'. [ 680.178924][ T29] audit: type=1326 audit(1728353728.220:8478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26366 comm="syz.0.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5aa17dff9 code=0x7ffc0000 [ 680.299309][ T29] audit: type=1326 audit(1728353728.220:8479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26366 comm="syz.0.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5aa17dff9 code=0x7ffc0000 [ 680.413398][ T29] audit: type=1326 audit(1728353728.350:8480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26366 comm="syz.0.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5aa17dff9 code=0x7ffc0000 [ 680.482713][T26376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9444'. [ 680.517388][ T29] audit: type=1326 audit(1728353728.350:8481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26366 comm="syz.0.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5aa17dff9 code=0x7ffc0000 [ 680.672492][ T29] audit: type=1326 audit(1728353728.400:8482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26366 comm="syz.0.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5aa17dff9 code=0x7ffc0000 [ 680.751030][ T29] audit: type=1326 audit(1728353728.510:8483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26366 comm="syz.0.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5aa17dff9 code=0x7ffc0000 [ 680.798632][ T29] audit: type=1326 audit(1728353728.510:8484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26366 comm="syz.0.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5aa17dff9 code=0x7ffc0000 [ 680.906235][T26393] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9451'. [ 680.933303][ T29] audit: type=1326 audit(1728353728.510:8485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26366 comm="syz.0.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5aa174fa7 code=0x7ffc0000 [ 680.997256][ T29] audit: type=1326 audit(1728353728.510:8486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26366 comm="syz.0.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5aa119959 code=0x7ffc0000 [ 681.156293][ T29] audit: type=1326 audit(1728353728.520:8487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26366 comm="syz.0.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5aa17dff9 code=0x7ffc0000 [ 681.301961][T26405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9456'. [ 681.549972][T26412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.193771][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 683.862808][T26486] program syz.4.9492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 684.262248][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 684.274705][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 684.428974][T26515] ieee802154 phy0 wpan0: encryption failed: -126 [ 684.482083][T26519] sctp: [Deprecated]: syz.3.9507 (pid 26519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 684.482083][T26519] Use struct sctp_sack_info instead [ 685.302065][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 685.312716][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 685.798738][T26552] ceph: missing cluster fsid [ 685.804313][T26552] ceph: separator ':' missing in source [ 685.915445][T26557] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9523'. [ 685.937216][T26557] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 686.058367][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 686.058385][ T29] audit: type=1326 audit(1728353734.120:8496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26561 comm="syz.0.9525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5aa17dff9 code=0x7ffc0000 [ 686.073029][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.098106][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.226564][ T29] audit: type=1326 audit(1728353734.240:8497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26561 comm="syz.0.9525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5aa17dff9 code=0x7ffc0000 [ 686.248223][ C1] vkms_vblank_simulate: vblank timer overrun [ 686.341905][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 686.351139][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 686.371895][ T29] audit: type=1326 audit(1728353734.240:8498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26561 comm="syz.0.9525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fa5aa17dff9 code=0x7ffc0000 [ 686.512709][ T29] audit: type=1326 audit(1728353734.240:8499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26561 comm="syz.0.9525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5aa17dff9 code=0x7ffc0000 [ 686.581125][ T29] audit: type=1326 audit(1728353734.240:8500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26561 comm="syz.0.9525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5aa17dff9 code=0x7ffc0000 [ 686.664708][ T29] audit: type=1326 audit(1728353734.240:8501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26561 comm="syz.0.9525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fa5aa17dff9 code=0x7ffc0000 [ 686.683047][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9532'. [ 686.689331][ T29] audit: type=1326 audit(1728353734.240:8502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26561 comm="syz.0.9525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5aa17dff9 code=0x7ffc0000 [ 686.716951][ C1] vkms_vblank_simulate: vblank timer overrun [ 686.725683][ T29] audit: type=1326 audit(1728353734.240:8503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26561 comm="syz.0.9525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5aa17dff9 code=0x7ffc0000 [ 686.747333][ C1] vkms_vblank_simulate: vblank timer overrun [ 686.803101][T26575] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9532'. [ 686.914792][T26579] netlink: 596 bytes leftover after parsing attributes in process `syz.1.9534'. [ 687.104400][T26586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9538'. [ 687.381879][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 687.390803][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 687.782649][T24682] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 687.934628][T24682] usb 3-1: Using ep0 maxpacket: 16 [ 687.944179][T24682] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 687.972244][T24682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.021051][T24682] usb 3-1: Product: syz [ 688.048296][T24682] usb 3-1: Manufacturer: syz [ 688.065088][T24682] usb 3-1: SerialNumber: syz [ 688.145701][T24682] r8152-cfgselector 3-1: Unknown version 0x0000 [ 688.152454][T24682] r8152-cfgselector 3-1: config 0 descriptor?? [ 688.421891][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 688.430260][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 688.672130][ T5274] r8152-cfgselector 3-1: USB disconnect, device number 93 [ 688.938284][T26628] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9555'. [ 689.393463][T26636] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9559'. [ 689.457981][T26636] 0ͺXΉ¦ΐ: renamed from caif0 [ 689.462865][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 689.647407][T26636] 0ͺXΉ¦ΐ: entered allmulticast mode [ 689.655924][T26636] A link change request failed with some changes committed already. Interface 60ͺXΉ¦ΐ may have been left with an inconsistent configuration, please check. [ 689.728852][ T11] Bluetooth: hci8: Frame reassembly failed (-84) [ 689.754729][T26642] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 690.512863][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 690.837730][ T29] audit: type=1326 audit(1728353738.900:8504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26665 comm="syz.4.9571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df977dff9 code=0x7ffc0000 [ 690.864069][T26670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9572'. [ 690.934953][ T29] audit: type=1326 audit(1728353738.950:8505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26665 comm="syz.4.9571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df977dff9 code=0x7ffc0000 [ 691.541894][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 691.720089][T26691] netlink: 'syz.4.9583': attribute type 1 has an invalid length. [ 691.728997][T26691] netlink: 'syz.4.9583': attribute type 2 has an invalid length. [ 691.792347][T18338] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 691.992667][ T5318] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 692.173395][ T5318] usb 4-1: Using ep0 maxpacket: 32 [ 692.230908][ T5318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.305387][ T5318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.317932][ T5318] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 692.333419][ T5318] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 692.343874][ T5318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.404496][ T5318] usb 4-1: config 0 descriptor?? [ 692.632378][T26712] input: syz0 as /devices/virtual/input/input168 [ 692.668204][T26713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9593'. [ 692.752790][T26713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9593'. [ 692.848200][ T5318] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.00D3/input/input169 [ 692.934762][ T5318] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.00D3/input/input170 [ 692.957407][ T5318] kye 0003:0458:5011.00D3: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 693.402062][ T5274] usb 4-1: USB disconnect, device number 104 [ 693.752589][T24682] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 693.905729][T24682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.946620][T24682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.980455][T24682] usb 2-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 693.992798][T24682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.003014][T24682] usb 2-1: config 0 descriptor?? [ 694.434238][T24682] wacom 0003:056A:0315.00D4: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 694.456425][T24682] wacom 0003:056A:0315.00D4: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.1-1/input0 [ 694.470286][T24682] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0315.00D4/input/input171 [ 694.582272][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 694.734716][ T5273] usb 2-1: USB disconnect, device number 94 [ 695.161927][ T5318] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 695.327502][ T5318] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 695.369142][ T5318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.414656][ T5318] usb 3-1: config 0 descriptor?? [ 695.449930][ T5318] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 695.621885][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 695.871002][ T5318] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 696.278908][ T5318] gspca_cpia1: usb_control_msg 02, error -71 [ 696.302222][ T5318] gspca_cpia1: usb_control_msg 05, error -71 [ 696.331886][ T5318] cpia1 3-1:0.0: unexpected systemstate: 00 [ 696.342257][ T5318] usb 3-1: USB disconnect, device number 94 [ 696.814825][ T5225] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 697.192768][ T5318] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 697.362089][ T5318] usb 3-1: Using ep0 maxpacket: 32 [ 697.379910][ T5318] usb 3-1: config 0 has an invalid interface number: 64 but max is 1 [ 697.410238][ T5318] usb 3-1: config 0 has no interface number 1 [ 697.417663][ T5318] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 697.435664][ T5318] usb 3-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=1c.a5 [ 697.445009][ T5318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.453383][ T5318] usb 3-1: Product: syz [ 697.457769][ T5318] usb 3-1: Manufacturer: syz [ 697.464479][ T5318] usb 3-1: SerialNumber: syz [ 697.471243][ T5318] usb 3-1: config 0 descriptor?? [ 697.558167][T26809] netlink: 'syz.1.9635': attribute type 12 has an invalid length. [ 697.587682][T26809] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.9635'. [ 697.708698][ T5318] usb 3-1: bad CDC descriptors [ 697.728795][ T5318] usb 3-1: USB disconnect, device number 95 [ 697.780567][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9641'. [ 697.817169][T26817] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9641'. [ 697.878631][T26817] vlan2: entered allmulticast mode [ 698.071966][T24682] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 698.088570][T26823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 698.221898][T24682] usb 5-1: Using ep0 maxpacket: 32 [ 698.238261][T24682] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 698.263339][T24682] usb 5-1: config 0 has no interface number 0 [ 698.281955][T24682] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 698.331983][T24682] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 698.381548][T24682] usb 5-1: config 0 interface 126 has no altsetting 0 [ 698.522772][T24682] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 698.554911][T24682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.593123][T24682] usb 5-1: Product: syz [ 698.602931][T24682] usb 5-1: Manufacturer: syz [ 698.616441][T24682] usb 5-1: SerialNumber: syz [ 698.654019][T24682] usb 5-1: config 0 descriptor?? [ 698.661700][T26819] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 698.691688][T26819] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 698.862673][T26832] tap0: tun_chr_ioctl cmd 1074812118 [ 699.232693][T24682] ir_usb 5-1:0.126: IR Dongle converter detected [ 699.519868][T24682] usb 5-1: IRDA class descriptor not found, device not bound [ 699.544994][T24682] IPVS: starting estimator thread 0... [ 699.632145][T26843] IPVS: using max 21 ests per chain, 50400 per kthread [ 699.722845][ T5318] usb 5-1: USB disconnect, device number 97 [ 700.394862][T26849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9655'. [ 700.694546][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 700.694565][ T29] audit: type=1326 audit(1728353748.760:8512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26861 comm="syz.1.9660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedac37dff9 code=0x7ffc0000 [ 700.816110][T26864] input: syz0 as /devices/virtual/input/input174 [ 700.843490][ T29] audit: type=1326 audit(1728353748.760:8513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26861 comm="syz.1.9660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedac37dff9 code=0x7ffc0000 [ 700.852918][ T5225] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 700.875162][ T5225] Bluetooth: hci3: Injecting HCI hardware error event [ 700.886483][ T5225] Bluetooth: hci3: hardware error 0x00 [ 701.002051][ T29] audit: type=1326 audit(1728353748.760:8514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26861 comm="syz.1.9660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fedac37dff9 code=0x7ffc0000 [ 701.081874][ T29] audit: type=1326 audit(1728353748.760:8515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26861 comm="syz.1.9660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedac37dff9 code=0x7ffc0000 [ 701.649497][T26891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9674'. [ 701.781990][T24682] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 701.955764][T24682] usb 3-1: Using ep0 maxpacket: 16 [ 701.964190][T24682] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.986755][T24682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 702.004141][T24682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 702.022141][T24682] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 702.033416][T24682] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 702.055075][T24682] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 702.064756][T24682] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 702.074707][T24682] usb 3-1: Manufacturer: syz [ 702.082116][T24682] usb 3-1: config 0 descriptor?? [ 702.382031][T24682] rc_core: IR keymap rc-hauppauge not found [ 702.390591][T24682] Registered IR keymap rc-empty [ 702.396558][T24682] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.422806][T24682] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.442701][T24682] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 702.460819][T24682] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input175 [ 702.479877][T24682] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.503118][T24682] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.522386][T24682] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.551996][T24682] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.596074][T24682] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.622703][T24682] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.641990][T24682] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.662392][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 702.670984][T24682] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.692088][T24682] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.712750][T24682] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.731925][T24682] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.753886][T24682] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 702.779773][T24682] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 702.801235][T24682] usb 3-1: USB disconnect, device number 96 [ 702.903821][ T5225] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 703.280509][T26916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9685'. [ 703.290550][T26916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9685'. [ 703.642660][ T5271] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 703.701900][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 703.863256][ T5271] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.886424][ T5271] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 703.921862][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.942887][ T5271] usb 5-1: config 0 descriptor?? [ 704.176611][ T5271] usb 5-1: string descriptor 0 read error: -71 [ 704.185129][ T5271] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 704.194793][ T5271] usb 5-1: No valid video chain found. [ 704.204108][ T5271] usb 5-1: USB disconnect, device number 98 [ 704.851018][T26946] netlink: 'syz.0.9698': attribute type 33 has an invalid length. [ 704.864090][ T5318] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 704.877270][T26946] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9698'. [ 704.920055][ T29] audit: type=1326 audit(1728353752.980:8516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26947 comm="syz.2.9697" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44cd57dff9 code=0x0 [ 704.937351][T26946] netlink: 'syz.0.9698': attribute type 10 has an invalid length. [ 704.955925][T26950] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 705.036414][ T5318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.053818][ T5318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.090646][T26946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.099551][ T5318] usb 4-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 705.109769][ T5318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.127508][ T5318] usb 4-1: config 0 descriptor?? [ 705.153015][T26946] team0: Port device batadv0 added [ 705.240484][T26953] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 705.303160][T26953] overlayfs: conflicting lowerdir path [ 705.550299][ T5318] wacom 0003:056A:00B1.00D5: unknown main item tag 0x0 [ 705.564335][ T5318] wacom 0003:056A:00B1.00D5: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 705.577639][ T5318] wacom 0003:056A:00B1.00D5: hidraw0: USB HID v0.00 Device [HID 056a:00b1] on usb-dummy_hcd.3-1/input0 [ 705.591343][ T5318] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B1.00D5/input/input177 [ 705.776196][ T5318] usb 4-1: USB disconnect, device number 105 [ 706.323759][T26982] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9715'. [ 706.378833][T26982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9715'. [ 706.446441][T26982] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.812496][T26999] netlink: 'syz.4.9721': attribute type 3 has an invalid length. [ 707.053237][T27007] macvlan0: entered allmulticast mode [ 707.058676][T27007] veth1_vlan: entered allmulticast mode [ 707.131189][ T5271] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 707.346963][ T5271] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 707.357294][ T5271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.400382][ T5271] usb 4-1: Product: syz [ 707.422843][ T5271] usb 4-1: Manufacturer: syz [ 707.427548][ T5271] usb 4-1: SerialNumber: syz [ 707.444058][ T5271] usb 4-1: config 0 descriptor?? [ 707.639140][T27020] misc userio: Can't change port type on an already running userio instance [ 707.668743][ T5274] usb 4-1: USB disconnect, device number 106 [ 708.758696][T27051] syz.4.9743: attempt to access beyond end of device [ 708.758696][T27051] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 708.812521][T27051] FAT-fs (loop4): unable to read boot sector [ 708.832423][ T5271] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 709.013761][ T5271] usb 2-1: Using ep0 maxpacket: 16 [ 709.052472][ T5271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 709.073008][ T5271] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 709.083376][ T5271] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6B, changing to 0xB [ 709.094933][ T5271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 709.105340][ T5271] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 709.125855][ T5271] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 709.135372][ T5271] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 709.145357][ T5271] usb 2-1: Product: syz [ 709.149571][ T5271] usb 2-1: Manufacturer: syz [ 709.154345][ T5271] usb 2-1: SerialNumber: syz [ 709.170030][ T5271] usb 2-1: config 0 descriptor?? [ 709.183247][ T5271] usb 2-1: NFC: intf ffff88802fdc2000 id ffffffff8f307ee0 [ 709.441951][ T5318] usb 2-1: USB disconnect, device number 95 [ 709.507899][T27070] futex_wake_op: syz.4.9753 tries to shift op by -1; fix this program [ 709.612591][ T29] audit: type=1326 audit(1728353757.670:8517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27071 comm="syz.2.9755" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44cd57dff9 code=0x0 [ 709.925331][T27077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9754'. [ 710.023449][T27077] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9754'. [ 710.266598][ T29] audit: type=1326 audit(1728353758.330:8518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27081 comm="syz.1.9758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedac37dff9 code=0x0 [ 710.851521][T27098] netlink: 'syz.0.9765': attribute type 16 has an invalid length. [ 710.860459][T27098] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9765'. [ 710.872117][T27098] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.971431][ T29] audit: type=1326 audit(1728353759.030:8519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27100 comm="syz.3.9766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe80697dff9 code=0x0 [ 711.715300][ T5270] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 711.881812][ T5270] usb 2-1: Using ep0 maxpacket: 8 [ 711.896580][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 711.909679][ T5270] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 711.919269][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.930200][ T5270] usb 2-1: config 0 descriptor?? [ 712.194818][ T5270] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 712.284769][T27130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9779'. [ 712.645704][T27136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9782'. [ 713.251196][T27144] netlink: 'syz.4.9784': attribute type 1 has an invalid length. [ 713.353710][T27144] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9784'. [ 713.433741][T27144] netlink: 'syz.4.9784': attribute type 2 has an invalid length. [ 713.441534][T27144] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9784'. [ 713.719692][T18338] Bluetooth: hci7: command 0x0406 tx timeout [ 714.507802][T24682] usb 2-1: USB disconnect, device number 96 [ 714.626564][T24682] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 714.701878][ T5271] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 714.854430][ T5271] usb 4-1: Using ep0 maxpacket: 32 [ 714.866014][ T5271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 714.889021][T27185] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 714.900728][ T5271] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 714.925335][ T5271] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 714.945732][ T5271] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 714.954219][ T5271] usb 4-1: Product: syz [ 714.958405][ T5271] usb 4-1: Manufacturer: syz [ 714.964076][ T5271] usb 4-1: SerialNumber: syz [ 714.970757][ T5271] usb 4-1: config 0 descriptor?? [ 715.233935][ T5271] usb 4-1: USB disconnect, device number 107 [ 715.869627][T27204] Invalid/unusable pipe [ 716.549989][T27216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9818'. [ 716.674654][T27216] macsec0: entered promiscuous mode [ 716.951187][T27232] Falling back ldisc for ttyS3. [ 717.205625][T27239] lo speed is unknown, defaulting to 1000 [ 717.434140][T27239] wg1 speed is unknown, defaulting to 1000 [ 717.792967][T27257] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 717.872728][T27257] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 717.926984][T27260] cifs: Unknown parameter 'mode' [ 718.130402][T27266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9840'. [ 719.304380][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 719.844284][T27322] netlink: 'syz.0.9862': attribute type 1 has an invalid length. [ 719.937290][T27322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9862'. [ 720.145021][ T5270] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 720.342045][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 720.395490][ T5270] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 720.405541][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.416926][ T5270] usb 2-1: config 0 descriptor?? [ 720.425707][ T5270] gspca_main: spca508-2.14.0 probing 8086:0110 [ 720.727747][ T5270] gspca_spca508: reg_read err -32 [ 720.792658][ T5270] gspca_spca508: reg_read err -32 [ 721.024100][ T5270] gspca_spca508: reg_read err -71 [ 721.031028][ T5270] gspca_spca508: reg_read err -71 [ 721.036528][ T5270] gspca_spca508: reg write: error -71 [ 721.045936][ T5270] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 721.057300][ T5270] usb 2-1: USB disconnect, device number 97 [ 721.110758][T27355] bond0: option resend_igmp: invalid value (7540) [ 721.118049][T27355] bond0: option resend_igmp: allowed values 0 - 255 [ 721.347618][ T29] audit: type=1326 audit(1728353769.410:8520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27359 comm="syz.2.9882" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44cd57dff9 code=0x0 [ 721.599075][T27370] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9884'. [ 722.701932][ T5318] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 722.838943][T27410] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9903'. [ 722.863189][T27410] openvswitch: netlink: Multiple metadata blocks provided [ 722.883652][ T5318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.915837][ T5318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.932170][ T5318] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 722.941261][ T5318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.973674][ T5318] usb 2-1: config 0 descriptor?? [ 723.568185][T27418] netlink: 4056 bytes leftover after parsing attributes in process `syz.2.9909'. [ 723.630107][T27418] openvswitch: netlink: Actions may not be safe on all matching packets [ 724.140963][T27429] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9914'. [ 724.509755][T18338] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 724.522040][T18338] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 724.533764][T18338] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 724.543990][T18338] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 724.552015][T18338] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 724.559378][T18338] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 724.705480][ T5318] hid-steam 0003:28DE:1142.00D6: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 724.740988][T27435] lo speed is unknown, defaulting to 1000 [ 724.771869][ T5318] hid-steam 0003:28DE:1142.00D6: Steam wireless receiver connected [ 724.783829][T27435] wg1 speed is unknown, defaulting to 1000 [ 724.791943][ T5318] hid-steam 0003:28DE:1142.00D7: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 724.805865][ T5318] usb 2-1: USB disconnect, device number 98 [ 724.820036][ T5318] hid-steam 0003:28DE:1142.00D6: Steam wireless receiver disconnected [ 725.487688][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.541756][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.571937][ T5318] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 725.752102][ T5318] usb 5-1: Using ep0 maxpacket: 16 [ 725.773254][ T5318] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 725.852184][ T5318] usb 5-1: config 0 has no interface number 0 [ 725.862713][ T5318] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.922599][ T5318] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.969329][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.990365][ T5318] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 726.037795][ T5318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.057103][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.123103][ T5318] usb 5-1: config 0 descriptor?? [ 726.451225][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.530055][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.583976][ T5225] Bluetooth: hci6: command tx timeout [ 726.948027][ T5318] uclogic 0003:28BD:0071.00D8: pen parameters not found [ 726.987598][ T5318] uclogic 0003:28BD:0071.00D8: interface is invalid, ignoring [ 727.024307][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.076923][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.171561][ T5318] usb 5-1: USB disconnect, device number 99 [ 727.349415][T27477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9936'. [ 727.709550][ T61] bridge_slave_1: left allmulticast mode [ 727.736007][ T61] bridge_slave_1: left promiscuous mode [ 727.766459][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.837710][ T61] bridge_slave_0: left promiscuous mode [ 727.856687][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.690081][ T5225] Bluetooth: hci6: command tx timeout [ 730.371911][ T5273] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 730.532067][ T5273] usb 5-1: Using ep0 maxpacket: 32 [ 730.585317][ T5273] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 730.614267][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.669730][ T5273] usb 5-1: config 0 descriptor?? [ 730.709154][ T5273] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 730.758084][ T5225] Bluetooth: hci6: command tx timeout [ 731.033872][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.096264][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.130669][ T61] bond0 (unregistering): Released all slaves [ 731.307945][T27435] chnl_net:caif_netlink_parms(): no params data found [ 731.361008][ T61] Κό: left promiscuous mode [ 731.662108][ T5273] gspca_nw80x: reg_r err -71 [ 731.671376][ T5273] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 731.703633][ T5273] usb 5-1: USB disconnect, device number 100 [ 732.426007][T27541] program syz.1.9960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 732.830668][ T5225] Bluetooth: hci6: command tx timeout [ 732.850498][T27551] input: syz0 as /devices/virtual/input/input181 [ 732.925801][T27435] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.941891][T27435] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.962136][T27435] bridge_slave_0: entered allmulticast mode [ 732.972977][T27435] bridge_slave_0: entered promiscuous mode [ 732.983231][T27435] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.990349][T27435] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.013677][T27435] bridge_slave_1: entered allmulticast mode [ 733.020876][T27435] bridge_slave_1: entered promiscuous mode [ 733.756842][ T61] hsr_slave_0: left promiscuous mode [ 733.764052][ T61] hsr_slave_1: left promiscuous mode [ 733.770619][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.778821][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.883217][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.919115][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.054913][ T61] veth1_macvtap: left promiscuous mode [ 734.095426][ T61] veth0_macvtap: left promiscuous mode [ 734.124894][ T61] veth1_vlan: left promiscuous mode [ 734.153433][ T61] veth0_vlan: left promiscuous mode [ 734.499301][T27578] bpf: Bad value for 'uid' [ 734.572649][ T47] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 734.758864][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 734.772334][ T47] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 734.832043][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 734.869914][ T47] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 734.943048][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.976069][ T47] usb 3-1: Product: syz [ 734.993435][ T47] usb 3-1: Manufacturer: syz [ 735.016407][ T47] usb 3-1: SerialNumber: syz [ 735.049912][ T47] usb 3-1: config 0 descriptor?? [ 735.066699][ T47] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 735.091757][ T47] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 735.677252][ T47] em28xx 3-1:0.0: chip ID is em28178 [ 735.902084][ T47] usb 3-1: USB disconnect, device number 97 [ 735.919115][ T47] em28xx 3-1:0.0: Disconnecting em28xx [ 735.942138][ T47] em28xx 3-1:0.0: Freeing device [ 737.301243][ T61] team0 (unregistering): Port device team_slave_1 removed [ 737.569999][ T61] team0 (unregistering): Port device team_slave_0 removed [ 739.140408][ T61] team0 (unregistering): Port device batadv0 removed [ 740.264937][T27435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.356936][T27588] dvmrp1: entered allmulticast mode [ 740.367156][T27589] dvmrp5: entered allmulticast mode [ 740.403954][T27590] dvmrp1: left allmulticast mode [ 740.409006][T27590] dvmrp5: left allmulticast mode [ 740.733238][T27598] netpci0: tun_chr_ioctl cmd 1074025677 [ 740.739081][T27598] netpci0: linktype set to 774 [ 740.883803][T27435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.212642][T27435] team0: Port device team_slave_0 added [ 741.265861][T27435] team0: Port device team_slave_1 added [ 741.595170][T27611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9988'. [ 741.607292][T27435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.614812][T27435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.641886][T27435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.654442][T27435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.661495][T27435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.688940][T27435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.162688][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.169017][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.982943][T27623] netlink: 812 bytes leftover after parsing attributes in process `syz.2.9993'. [ 750.010288][T27435] hsr_slave_0: entered promiscuous mode [ 750.112481][T27435] hsr_slave_1: entered promiscuous mode [ 750.142602][T27435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 750.157645][T27435] Cannot create hsr debugfs directory [ 750.337227][ T61] IPVS: stop unused estimator thread 0... [ 751.952100][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 752.035841][T27676] sch_fq: defrate 9 ignored. [ 752.194478][T27435] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 752.275739][T27435] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 752.339815][T27435] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 752.491100][T27435] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 752.865157][T27435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.932692][T27435] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.972939][T27525] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.980066][T27525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.981889][ C0] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 753.044716][T27525] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.051901][T27525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.780642][T27435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.985257][T27435] veth0_vlan: entered promiscuous mode [ 754.030914][T27435] veth1_vlan: entered promiscuous mode [ 754.150517][T27435] veth0_macvtap: entered promiscuous mode [ 754.188681][T27435] veth1_macvtap: entered promiscuous mode [ 754.276962][T27435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.318577][T27435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.343662][T27435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.383293][T27435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.420615][T27435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.443521][T27435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.474979][T27435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.512448][T27435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.554561][T27435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.603814][T27435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.635895][T27435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.671318][T27435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.719616][T27435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.739984][T27435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.770879][T27435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.802576][T27435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.833771][T27435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.872453][T27435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.911205][T27435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.940088][T27435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.969525][T27435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.027637][T27435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.079690][T27435] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.110961][T27435] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.140927][T27435] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.199855][T27435] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.418762][T27526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.445753][T27526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.518600][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.547912][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.631557][T27747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10046'. [ 756.808105][T27754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10050'. [ 756.873381][T27752] netlink: 'syz.1.10047': attribute type 1 has an invalid length. [ 756.921057][T27752] netlink: 9312 bytes leftover after parsing attributes in process `syz.1.10047'. [ 756.980977][T27752] netlink: 'syz.1.10047': attribute type 1 has an invalid length. [ 757.003390][T27750] ptrace attach of "./syz-executor exec"[27756] was attempted by ""[27750] [ 758.219607][T18338] Bluetooth: hci8: sending frame failed (-49) [ 758.231206][ T5225] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 758.700685][ T5304] kernel write not supported for file /sg0 (pid: 5304 comm: kworker/0:6) [ 759.492633][ T5318] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 759.500560][ T5273] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 759.674890][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.722032][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.736385][ T5318] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 759.783055][ T5318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.793416][ T5273] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 759.812823][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.823458][ T5273] usb 4-1: config 0 descriptor?? [ 759.843779][ T5318] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 759.858237][ T5318] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 759.867446][ T5318] usb 5-1: Manufacturer: syz [ 759.874687][ T5318] usb 5-1: config 0 descriptor?? [ 760.095876][T27809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.141840][ T5318] rc_core: IR keymap rc-hauppauge not found [ 760.159152][ T5318] Registered IR keymap rc-empty [ 760.193422][ T5318] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 760.212736][T27809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.237252][ T5318] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input182 [ 760.263878][ T5318] usb 5-1: USB disconnect, device number 101 [ 760.334696][ T5273] hid-led 0003:1D34:000A.00D9: unknown main item tag 0x0 [ 760.342244][ T5273] hid-led 0003:1D34:000A.00D9: unknown main item tag 0x0 [ 760.349330][ T5273] hid-led 0003:1D34:000A.00D9: unknown main item tag 0x0 [ 760.428126][ T5273] hid-led 0003:1D34:000A.00D9: unknown main item tag 0x0 [ 760.482676][ T5273] hid-led 0003:1D34:000A.00D9: unknown main item tag 0x0 [ 760.592025][ T5273] hid-led 0003:1D34:000A.00D9: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 760.614667][ T5273] hid-led 0003:1D34:000A.00D9: Dream Cheeky Webmail Notifier initialized [ 760.744355][T27830] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 760.800381][ T5304] usb 4-1: USB disconnect, device number 108 [ 761.524070][T27850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10091'. [ 761.611953][T27850] netlink: 'syz.2.10091': attribute type 1 has an invalid length. [ 761.669784][T27850] netlink: 'syz.2.10091': attribute type 2 has an invalid length. [ 761.734351][T27865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10097'. [ 761.770181][T27865] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10097'. [ 761.774788][T27850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10091'. [ 761.796741][T27865] vlan3: entered allmulticast mode [ 761.813181][T27865] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 761.852111][ T5318] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 762.052105][ T5318] usb 2-1: Using ep0 maxpacket: 8 [ 762.092960][ T5318] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 762.106951][ T5318] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 762.119022][ T5318] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 762.129843][ T5318] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 762.143375][ T5318] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 762.153940][ T5318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.412792][ T5318] usb 2-1: GET_CAPABILITIES returned 0 [ 762.418348][ T5318] usbtmc 2-1:16.0: can't read capabilities [ 762.608830][T27881] netlink: 'syz.4.10103': attribute type 10 has an invalid length. [ 762.723544][T27881] syz_tun: entered promiscuous mode [ 762.752807][ T5271] usb 2-1: USB disconnect, device number 99 [ 762.928397][T27881] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 762.935184][T27889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10107'. [ 763.034679][T27882] netlink: 'syz.4.10103': attribute type 10 has an invalid length. [ 763.114513][T27882] bond0: left promiscuous mode [ 763.144652][T27882] bond_slave_0: left promiscuous mode [ 763.183373][T27882] bond_slave_1: left promiscuous mode [ 763.276522][T27882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.343942][T27882] team0: Port device bond0 added [ 765.742087][T24682] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 765.916963][T24682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.955292][T24682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.978815][T24682] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 765.997294][T24682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.013641][T24682] usb 3-1: config 0 descriptor?? [ 766.364740][T27968] netlink: 'syz.1.10142': attribute type 1 has an invalid length. [ 766.393843][T27968] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10142'. [ 766.498060][T24682] steelseries 0003:1038:12B6.00DA: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 766.948426][ T5318] usb 3-1: USB disconnect, device number 98 [ 768.190022][T28020] pim6reg: entered allmulticast mode [ 768.228313][T28019] pim6reg: left allmulticast mode [ 768.464347][T28027] netlink: 'syz.4.10167': attribute type 1 has an invalid length. [ 768.531797][T28027] netlink: 'syz.4.10167': attribute type 2 has an invalid length. [ 768.539669][T28027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10167'. [ 768.963231][T28042] netpci0: tun_chr_ioctl cmd 1074025677 [ 768.969047][T28042] netpci0: linktype set to 774 [ 769.044584][T28047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10176'. [ 769.269314][T28050] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.10177'. [ 769.333806][T28050] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 769.410484][T28055] kAFS: unable to lookup cell 'onstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 769.410484][T28055] vmx flags ' [ 769.894944][T28077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10188'. [ 769.905954][ T47] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 770.216256][ T47] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 770.283061][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.297478][ T47] usb 5-1: Product: syz [ 770.303963][ T47] usb 5-1: Manufacturer: syz [ 770.309028][ T47] usb 5-1: SerialNumber: syz [ 770.353912][ T47] usb 5-1: config 0 descriptor?? [ 770.636559][ T47] usb 5-1: USB disconnect, device number 102 [ 771.281802][ T5318] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 771.432177][ T5318] usb 4-1: Using ep0 maxpacket: 16 [ 771.439313][ T5318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.450781][ T5318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.463162][ T5318] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 771.474659][ T5318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.510959][ T5318] usb 4-1: config 0 descriptor?? [ 771.872121][ T5273] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 771.961207][ T5318] logitech 0003:046D:CA03.00DB: item fetching failed at offset 0/5 [ 771.970511][ T5318] logitech 0003:046D:CA03.00DB: parse failed [ 771.982182][ T5318] logitech 0003:046D:CA03.00DB: probe with driver logitech failed with error -22 [ 772.044588][ T5273] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 772.065636][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.078208][ T5273] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 772.100942][ T5273] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 772.111597][ T5273] usb 3-1: Manufacturer: syz [ 772.118602][ T5273] usb 3-1: config 0 descriptor?? [ 772.204179][ T5318] usb 4-1: USB disconnect, device number 109 [ 772.233585][ T5273] rc_core: IR keymap rc-hauppauge not found [ 772.239529][ T5273] Registered IR keymap rc-empty [ 772.275322][ T5273] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 772.339119][ T5273] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input183 [ 772.439855][ T5273] usb 3-1: USB disconnect, device number 99 [ 772.680609][T28130] Process accounting resumed [ 774.461138][ T29] audit: type=1326 audit(1728353822.520:8521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28180 comm="syz.2.10236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44cd57dff9 code=0x0 [ 775.069828][T28191] bridge_slave_0: default FDB implementation only supports local addresses [ 775.841836][ T5304] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 775.857554][T28206] netlink: 'syz.1.10248': attribute type 14 has an invalid length. [ 775.880824][T28206] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10248'. [ 776.103032][ T5304] usb 4-1: Using ep0 maxpacket: 32 [ 776.171892][ T5304] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 776.252658][ T5304] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 776.262149][ T5304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.270416][ T5304] usb 4-1: Product: syz [ 776.275018][ T5304] usb 4-1: Manufacturer: syz [ 776.280409][ T5304] usb 4-1: SerialNumber: syz [ 776.313375][ T5304] usb 4-1: config 0 descriptor?? [ 776.318953][T28199] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 776.362709][ T5304] hub 4-1:0.0: bad descriptor, ignoring hub [ 776.368718][ T5304] hub 4-1:0.0: probe with driver hub failed with error -5 [ 776.380046][ T5304] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input184 [ 776.623217][ T47] usb 4-1: USB disconnect, device number 110 [ 776.623276][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 777.651831][ T5304] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 777.815026][ T5304] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 777.846407][ T5304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.905157][ T5304] usb 2-1: config 0 descriptor?? [ 778.153861][ T5304] [drm] vendor descriptor length:c3 data:c3 00 b7 aa f9 11 f3 d6 00 27 99 [ 778.162613][ T5304] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 778.389289][ T5304] [drm:udl_init] *ERROR* Selecting channel failed [ 778.404599][ T5304] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 778.411430][ T5304] [drm] Initialized udl on minor 2 [ 778.423441][ T5304] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 778.433994][ T5304] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 778.445064][T24682] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 778.457627][T24682] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 778.465911][T24682] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 778.523392][ T5304] usb 2-1: USB disconnect, device number 100 [ 779.141488][ T29] audit: type=1400 audit(1728353827.200:8522): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=28293 comm="syz.2.10290" dest=20001 [ 779.415399][T28305] netlink: 372 bytes leftover after parsing attributes in process `syz.4.10294'. [ 779.889560][ T5273] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 780.056489][ T5273] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.081898][T28320] program syz.3.10301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 780.085066][ T5273] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 780.128513][ T5273] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 780.139372][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 780.147672][ T5273] usb 2-1: SerialNumber: syz [ 780.408506][ T5273] usb 2-1: 0:2 : does not exist [ 780.482843][ T5273] usb 2-1: USB disconnect, device number 101 [ 781.722426][ T47] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 781.884074][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.895370][ T47] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 781.905891][ T47] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 781.929260][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.939573][ T47] usb 2-1: config 0 descriptor?? [ 781.962003][ T47] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 781.969639][ T47] dvb-usb: bulk message failed: -22 (3/0) [ 781.977774][ T47] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 781.987749][ T47] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 781.995069][ T47] usb 2-1: media controller created [ 782.001642][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 782.063328][ T47] dvb-usb: bulk message failed: -22 (6/0) [ 782.069167][ T47] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 782.083485][ T47] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input185 [ 782.096461][ T47] dvb-usb: schedule remote query interval to 150 msecs. [ 782.122084][ T47] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 782.223832][ T47] usb 2-1: USB disconnect, device number 102 [ 782.468989][ T47] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 783.480103][T28405] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 783.699340][T28414] input: syz0 as /devices/virtual/input/input186 [ 783.885856][T28420] can0: slcan on ttyS3. [ 784.060603][T28427] netlink: 'syz.2.10345': attribute type 9 has an invalid length. [ 784.072286][T28421] can0 (unregistered): slcan off ttyS3. [ 784.076012][T28427] bond_slave_0: entered promiscuous mode [ 784.083612][T28427] bond_slave_1: entered promiscuous mode [ 784.089298][T28427] batadv_slave_0: entered promiscuous mode [ 784.095398][T28427] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 784.132217][T28427] macvlan4: entered promiscuous mode [ 784.137947][T28427] bond0: entered promiscuous mode [ 784.165554][T28427] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 785.128902][T28451] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10359'. [ 785.552331][T28468] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.10366'. [ 785.622005][T28468] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 786.932636][ T47] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 787.092613][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 787.132939][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 787.203646][ T47] usb 4-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 787.261814][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.269881][ T47] usb 4-1: Product: syz [ 787.276885][ T47] usb 4-1: Manufacturer: syz [ 787.282782][ T47] usb 4-1: SerialNumber: syz [ 787.290896][ T47] usb 4-1: config 0 descriptor?? [ 787.530161][ T47] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 787.566866][ T47] usb 4-1: USB disconnect, device number 111 [ 790.522963][ T29] audit: type=1326 audit(1728353838.590:8523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28646 comm="syz.2.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cd57dff9 code=0x7ffc0000 [ 790.552624][ T5273] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 790.628688][ T29] audit: type=1326 audit(1728353838.590:8524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28646 comm="syz.2.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cd57dff9 code=0x7ffc0000 [ 790.655352][T28649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10447'. [ 790.663061][ T29] audit: type=1326 audit(1728353838.590:8525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28646 comm="syz.2.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f44cd57dff9 code=0x7ffc0000 [ 790.732052][ T5273] usb 4-1: Using ep0 maxpacket: 8 [ 790.742234][ T29] audit: type=1326 audit(1728353838.590:8526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28646 comm="syz.2.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cd57dff9 code=0x7ffc0000 [ 790.804668][ T5273] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 790.846531][ T29] audit: type=1326 audit(1728353838.590:8527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28646 comm="syz.2.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cd57dff9 code=0x7ffc0000 [ 790.850810][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.869284][ T29] audit: type=1326 audit(1728353838.590:8528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28646 comm="syz.2.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f44cd57dff9 code=0x7ffc0000 [ 790.869329][ T29] audit: type=1326 audit(1728353838.590:8529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28646 comm="syz.2.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cd57dff9 code=0x7ffc0000 [ 790.869363][ T29] audit: type=1326 audit(1728353838.590:8530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28646 comm="syz.2.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cd57dff9 code=0x7ffc0000 [ 790.978456][ T5273] usb 4-1: config 0 descriptor?? [ 791.317020][ T29] audit: type=1400 audit(2000000000.000:8531): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=28665 comm="syz.2.10455" [ 896.271672][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 896.278677][ C1] rcu: 0-...!: (1 GPs behind) idle=0e8c/1/0x4000000000000000 softirq=139362/139367 fqs=4 [ 896.290680][ C1] rcu: (detected by 1, t=10502 jiffies, g=129781, q=535 ncpus=2) [ 896.298538][ C1] Sending NMI from CPU 1 to CPUs 0: [ 896.298588][ C0] NMI backtrace for cpu 0 [ 896.298601][ C0] CPU: 0 UID: 0 PID: 23322 Comm: syz.0.8096 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 896.298621][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 896.298632][ C0] RIP: 0010:kasan_check_range+0x8c/0x290 [ 896.298663][ C0] Code: 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 0f 85 c9 01 00 00 <49> ff c3 48 ff c5 75 ee e9 1e 01 00 00 45 89 dc 41 83 e4 07 0f 84 [ 896.298679][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00000046 [ 896.298694][ C0] RAX: 0000000000000001 RBX: 1ffffffff2852100 RCX: ffffffff81706e21 [ 896.298707][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff94290800 [ 896.298719][ C0] RBP: ffffffffffffffff R08: ffffffff94290807 R09: 1ffffffff2852100 [ 896.298732][ C0] R10: dffffc0000000000 R11: fffffbfff2852100 R12: 0000000000000001 [ 896.298744][ C0] R13: ffff888078b30ad8 R14: dffffc0000000001 R15: fffffbfff2852101 [ 896.298757][ C0] FS: 00007f58d35706c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 896.298772][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 896.298784][ C0] CR2: 00007fedac506678 CR3: 000000005d7ac000 CR4: 00000000003526f0 [ 896.298799][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 896.298810][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 896.298820][ C0] Call Trace: [ 896.298829][ C0] [ 896.298837][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 896.298861][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 896.298886][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 896.298912][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 896.298933][ C0] ? nmi_handle+0x14f/0x5a0 [ 896.298950][ C0] ? nmi_handle+0x2a/0x5a0 [ 896.298967][ C0] ? kasan_check_range+0x8c/0x290 [ 896.298990][ C0] ? default_do_nmi+0x63/0x160 [ 896.299010][ C0] ? exc_nmi+0x123/0x1f0 [ 896.299028][ C0] ? end_repeat_nmi+0xf/0x53 [ 896.299055][ C0] ? __lock_acquire+0x12a1/0x2050 [ 896.299084][ C0] ? kasan_check_range+0x8c/0x290 [ 896.299108][ C0] ? kasan_check_range+0x8c/0x290 [ 896.299131][ C0] ? kasan_check_range+0x8c/0x290 [ 896.299154][ C0] [ 896.299159][ C0] [ 896.299166][ C0] __lock_acquire+0x12a1/0x2050 [ 896.299196][ C0] lock_acquire+0x1ed/0x550 [ 896.299219][ C0] ? advance_sched+0xa02/0xca0 [ 896.299239][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 896.299262][ C0] ? advance_sched+0x9b4/0xca0 [ 896.299277][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 896.299296][ C0] ? __pfx_lock_release+0x10/0x10 [ 896.299321][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 896.299341][ C0] ? taprio_set_budgets+0x32c/0x370 [ 896.299358][ C0] ? advance_sched+0xa02/0xca0 [ 896.299375][ C0] advance_sched+0xa1e/0xca0 [ 896.299392][ C0] ? advance_sched+0xa02/0xca0 [ 896.299413][ C0] ? __pfx_advance_sched+0x10/0x10 [ 896.299430][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 896.299447][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 896.299475][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 896.299493][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 896.299516][ C0] hrtimer_interrupt+0x396/0x990 [ 896.299541][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 896.299559][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 896.299583][ C0] [ 896.299588][ C0] [ 896.299595][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 896.299619][ C0] RIP: 0010:preempt_count_add+0x63/0x190 [ 896.299640][ C0] Code: 0b 9c a0 7e 65 01 1d 04 9c a0 7e 48 c7 c0 40 79 39 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e4 00 00 00 83 3d 9d 3d d6 18 00 <75> 11 65 8b 05 dc 9b a0 7e 0f b6 c0 3d f5 00 00 00 73 5e 65 8b 05 [ 896.299653][ C0] RSP: 0018:ffffc900043e7a20 EFLAGS: 00000246 [ 896.299667][ C0] RAX: 0000000000000004 RBX: 0000000000000001 RCX: ffffffff9a397903 [ 896.299677][ C0] RDX: dffffc0000000000 RSI: ffff888078b30000 RDI: 0000000000000001 [ 896.299689][ C0] RBP: ffffc900043e7b90 R08: ffffc900043e7b07 R09: 0000000000000000 [ 896.299701][ C0] R10: ffffc900043e7ae0 R11: fffff5200087cf61 R12: dffffc0000000000 [ 896.299713][ C0] R13: ffff8880332c2040 R14: 0000000000000000 R15: dffffc0000000000 [ 896.299732][ C0] __mutex_lock+0x112/0xd70 [ 896.299749][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 896.299770][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 896.299793][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 896.299814][ C0] ? __se_sys_io_uring_enter+0x1fdb/0x2bb0 [ 896.299835][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 896.299849][ C0] ? io_run_task_work+0x358/0x470 [ 896.299869][ C0] ? __pfx_io_run_task_work+0x10/0x10 [ 896.299888][ C0] ? prepare_to_wait_exclusive+0x84/0x230 [ 896.299914][ C0] __se_sys_io_uring_enter+0x1fdb/0x2bb0 [ 896.299934][ C0] ? wake_up_q+0xdc/0x120 [ 896.299965][ C0] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 896.299985][ C0] ? do_futex+0x33b/0x560 [ 896.300002][ C0] ? __pfx_io_wake_function+0x10/0x10 [ 896.300032][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 896.300057][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 896.300085][ C0] ? do_syscall_64+0x100/0x230 [ 896.300102][ C0] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 896.300123][ C0] do_syscall_64+0xf3/0x230 [ 896.300138][ C0] ? clear_bhb_loop+0x35/0x90 [ 896.300153][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.300176][ C0] RIP: 0033:0x7f58d277dff9 [ 896.300191][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.300205][ C0] RSP: 002b:00007f58d3570038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 896.300225][ C0] RAX: ffffffffffffffda RBX: 00007f58d2935f80 RCX: 00007f58d277dff9 [ 896.300237][ C0] RDX: 0000000000400000 RSI: 0000000000000000 RDI: 0000000000000003 [ 896.300248][ C0] RBP: 00007f58d27f0296 R08: 0000000000000000 R09: 0000000000000000 [ 896.300258][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 896.300269][ C0] R13: 0000000000000000 R14: 00007f58d2935f80 R15: 00007ffdba6b98b8 [ 896.300286][ C0] [ 896.300582][ C1] rcu: rcu_preempt kthread starved for 10480 jiffies! g129781 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 896.906814][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 896.916798][ C1] rcu: RCU grace-period kthread stack dump: [ 896.922693][ C1] task:rcu_preempt state:R running task stack:25952 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 896.934471][ C1] Call Trace: [ 896.937755][ C1] [ 896.940709][ C1] __schedule+0x1843/0x4ae0 [ 896.945265][ C1] ? __pfx___schedule+0x10/0x10 [ 896.950136][ C1] ? __pfx_lock_release+0x10/0x10 [ 896.955176][ C1] ? __asan_memset+0x23/0x50 [ 896.959783][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 896.965613][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 896.972046][ C1] ? schedule+0x90/0x320 [ 896.976303][ C1] schedule+0x14b/0x320 [ 896.980478][ C1] schedule_timeout+0x1be/0x310 [ 896.985340][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 896.990730][ C1] ? __pfx_process_timeout+0x10/0x10 [ 896.996038][ C1] ? prepare_to_swait_event+0x330/0x350 [ 897.001609][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 897.006467][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 897.011697][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 897.018037][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 897.023337][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 897.029279][ C1] ? finish_swait+0xd4/0x1e0 [ 897.033917][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 897.038533][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 897.043745][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 897.049657][ C1] ? __kthread_parkme+0x169/0x1d0 [ 897.054706][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 897.059915][ C1] kthread+0x2f0/0x390 [ 897.064003][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 897.069225][ C1] ? __pfx_kthread+0x10/0x10 [ 897.073825][ C1] ret_from_fork+0x4b/0x80 [ 897.078258][ C1] ? __pfx_kthread+0x10/0x10 [ 897.082857][ C1] ret_from_fork_asm+0x1a/0x30 [ 897.087653][ C1] [ 897.090678][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 897.097004][ C1] CPU: 1 UID: 0 PID: 28668 Comm: syz.1.10456 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 897.107862][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 897.117925][ C1] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2ca0 [ 897.124709][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 f3 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 ef 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 ee [ 897.144337][ C1] RSP: 0018:ffffc9000a86f3e0 EFLAGS: 00000246 [ 897.150420][ C1] RAX: ffffffff8188f73b RBX: 1ffff110170c8ca5 RCX: 0000000000040000 [ 897.158400][ C1] RDX: ffffc9000c6e3000 RSI: 000000000003ffff RDI: 0000000000040000 [ 897.166381][ C1] RBP: ffffc9000a86f5e0 R08: ffffffff8188f70a R09: 1ffffffff2852100 [ 897.174361][ C1] R10: dffffc0000000000 R11: fffffbfff2852101 R12: dffffc0000000000 [ 897.182342][ C1] R13: ffff8880b8646528 R14: ffff8880b873fc40 R15: 0000000000000000 [ 897.190334][ C1] FS: 00007fedad2006c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 897.199275][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 897.205875][ C1] CR2: 0000001b2e81dff8 CR3: 00000000470e4000 CR4: 00000000003526f0 [ 897.213867][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 897.221845][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 897.229822][ C1] Call Trace: [ 897.233107][ C1] [ 897.236397][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 897.242773][ C1] ? print_other_cpu_stall+0x1475/0x15b0 [ 897.248431][ C1] ? notifier_call_chain+0x19f/0x3e0 [ 897.253750][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 897.259573][ C1] ? cgroup_rstat_updated+0x13b/0xc60 [ 897.264966][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 897.271228][ C1] ? rcu_sched_clock_irq+0xa1a/0x10d0 [ 897.276704][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 897.282350][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 897.287566][ C1] ? acct_account_cputime+0xd3/0x210 [ 897.293042][ C1] ? update_process_times+0x1ce/0x230 [ 897.298429][ C1] ? tick_nohz_handler+0x37c/0x500 [ 897.303731][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 897.309215][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 897.314598][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 897.320637][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 897.326732][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 897.332821][ C1] ? hrtimer_interrupt+0x396/0x990 [ 897.337974][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 897.344140][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 897.349986][ C1] [ 897.352930][ C1] [ 897.355874][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 897.362055][ C1] ? smp_call_function_many_cond+0x19da/0x2ca0 [ 897.368236][ C1] ? smp_call_function_many_cond+0x1a0b/0x2ca0 [ 897.374431][ C1] ? smp_call_function_many_cond+0x19f3/0x2ca0 [ 897.380613][ C1] ? __SCT__tp_func_mmap_lock_released+0x8/0x8 [ 897.386789][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 897.391840][ C1] ? __pfx___text_poke+0x10/0x10 [ 897.396790][ C1] ? __get_immv32+0x19c/0x350 [ 897.401485][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 897.407849][ C1] ? __pfx___might_resched+0x10/0x10 [ 897.413164][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 897.418202][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 897.423328][ C1] text_poke_bp_batch+0x352/0xb30 [ 897.428380][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 897.434119][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 897.440026][ C1] ? __SCT__tp_func_mmap_lock_released+0x8/0x8 [ 897.446225][ C1] text_poke_bp+0xb0/0x100 [ 897.450676][ C1] ? __pfx_text_poke_bp+0x10/0x10 [ 897.455717][ C1] ? trace_contention_end+0x3c/0x120 [ 897.461022][ C1] ? __mutex_lock+0x2ef/0xd70 [ 897.465707][ C1] ? __SCT__tp_func_mmap_lock_released+0x8/0x8 [ 897.471881][ C1] __static_call_transform+0x51a/0x810 [ 897.477357][ C1] ? __SCT__tp_func_mmap_lock_released+0x8/0x8 [ 897.483530][ C1] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 897.490833][ C1] ? __pfx___static_call_transform+0x10/0x10 [ 897.496830][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 897.502741][ C1] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 897.510041][ C1] ? __SCT__tp_func_mmap_lock_released+0x8/0x8 [ 897.516216][ C1] arch_static_call_transform+0x141/0x380 [ 897.522042][ C1] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 897.529341][ C1] ? __SCT__tp_func_mmap_lock_released+0x8/0x8 [ 897.535509][ C1] __static_call_update+0xd8/0x5e0 [ 897.540637][ C1] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 897.547970][ C1] ? __pfx___static_call_update+0x10/0x10 [ 897.553732][ C1] ? tracepoint_add_func+0x2e4/0x9e0 [ 897.559036][ C1] ? rcu_is_watching+0x15/0xb0 [ 897.563817][ C1] ? tracepoint_add_func+0x2e4/0x9e0 [ 897.569111][ C1] ? tracepoint_add_func+0x2e4/0x9e0 [ 897.574436][ C1] ? tracepoint_add_func+0x49a/0x9e0 [ 897.579759][ C1] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 897.587071][ C1] tracepoint_add_func+0x918/0x9e0 [ 897.592215][ C1] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 897.599520][ C1] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 897.606648][ C1] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 897.614119][ C1] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 897.621420][ C1] ? anon_inode_getfile+0xff/0x180 [ 897.626549][ C1] ? bpf_probe_register+0x134/0x1f0 [ 897.631763][ C1] bpf_raw_tp_link_attach+0x48b/0x6e0 [ 897.637155][ C1] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 897.643089][ C1] ? fput+0x1a8/0x230 [ 897.647081][ C1] bpf_raw_tracepoint_open+0x177/0x1f0 [ 897.652554][ C1] __sys_bpf+0x3c0/0x810 [ 897.656807][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 897.661597][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 897.667606][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 897.673953][ C1] ? do_syscall_64+0x100/0x230 [ 897.678728][ C1] __x64_sys_bpf+0x7c/0x90 [ 897.683159][ C1] do_syscall_64+0xf3/0x230 [ 897.687769][ C1] ? clear_bhb_loop+0x35/0x90 [ 897.692457][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.698366][ C1] RIP: 0033:0x7fedac37dff9 [ 897.702790][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.722492][ C1] RSP: 002b:00007fedad200038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 897.730918][ C1] RAX: ffffffffffffffda RBX: 00007fedac535f80 RCX: 00007fedac37dff9 [ 897.738902][ C1] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000011 [ 897.746883][ C1] RBP: 00007fedac3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 897.754868][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.762855][ C1] R13: 0000000000000000 R14: 00007fedac535f80 R15: 00007fffb1b87e88 [ 897.770854][ C1]