last executing test programs: 3m35.273706638s ago: executing program 32 (id=10147): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) brk(0x5d555ede6000) 2m1.09557554s ago: executing program 2 (id=10930): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe0281, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x7f, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x80, 0x91, '\x00', 0x5}, {0xf, 0x2, 0x8, '\x00', 0xa9}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0xff, 0x43, '\x00', 0x80}, {0xf, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0x1, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x6}, {0x5, 0xa0, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0x92, '\x00', 0x8}]}}) 2m0.867642095s ago: executing program 2 (id=10933): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x20, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x5}, {0xa, 0xffff}, {0xfff3, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m59.838044906s ago: executing program 2 (id=10947): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}]}, 0x3c}}, 0x20) 1m59.766874799s ago: executing program 2 (id=10937): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m58.839656421s ago: executing program 2 (id=10950): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000540)={0x1, 0x1fe, 0x4, 0xdc2d, 0x4f, 0x1, 0x3, 0x806c7, 0xa, 0xffffff98, 0x2, 0x5}) 1m58.441054341s ago: executing program 2 (id=10953): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000740)="78e0", 0x2}, {0x0}], 0x2}}], 0x1, 0x0) 1m57.876241695s ago: executing program 33 (id=10953): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000740)="78e0", 0x2}, {0x0}], 0x2}}], 0x1, 0x0) 1m53.050307629s ago: executing program 0 (id=10995): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4754, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1m52.803794247s ago: executing program 0 (id=10987): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = dup2(r1, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x850) 1m52.676656996s ago: executing program 0 (id=10988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x2, 0x3, 0x8, 0x9, 0x10}, {0x2, 0x0, 0xc, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x7, 0x4, 0x4}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfc}, {0x3000, 0xd000, 0x0, 0xff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0xeeef0000, 0x9, 0x0, 0xfc, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0xdddd1000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x2}, {0xeeee0000, 0xdddd1000, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0xdddd1000}, {0xdddd1000, 0xffff}, 0xddf8ffdb, 0x0, 0x0, 0x430, 0x0, 0x2501, 0x0, [0x100000, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x170003, 0x0, [0x53b2, 0x9, 0x4, 0x5, 0xffffffffffff1e53, 0x5, 0x9, 0xb82]}) 1m52.360637805s ago: executing program 0 (id=10990): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m51.366874456s ago: executing program 0 (id=10999): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m51.037504268s ago: executing program 0 (id=11002): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) unshare(0x22020600) ftruncate(r1, 0x1) 1m50.506248707s ago: executing program 34 (id=11002): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) unshare(0x22020600) ftruncate(r1, 0x1) 1m38.340004682s ago: executing program 6 (id=11076): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000180)={0x20, 0x0, 0x1, 'X'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m35.534554148s ago: executing program 6 (id=11088): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x27, 0x1, 0x10045001}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002140)={0x10, 0xffffffffffffffda, r2}, 0x10) 1m35.20719297s ago: executing program 6 (id=11091): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000380)=ANY=[]) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 1m34.724880994s ago: executing program 6 (id=11093): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xc) 1m34.485910351s ago: executing program 6 (id=11095): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804125000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) 1m34.135218084s ago: executing program 6 (id=11097): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b937600000000000000000000000000000000000000000002000000000000000100"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 1m33.258741434s ago: executing program 35 (id=11097): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b937600000000000000000000000000000000000000000002000000000000000100"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 1m31.929348714s ago: executing program 5 (id=11116): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x4000}], 0x1, 0x800) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000380)=""/4, 0x4}], 0x1}, 0x40000000) 1m31.580802623s ago: executing program 5 (id=11120): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000280)=[0x0], 0x1}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 1m31.363444717s ago: executing program 5 (id=11124): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x10, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) 1m28.833522775s ago: executing program 5 (id=11141): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x46) 1m28.747188636s ago: executing program 5 (id=11142): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002440)="bb", 0x1}], 0x1, &(0x7f0000003440)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x5}}], 0x10}}], 0x1, 0x4004441) 1m27.497643351s ago: executing program 5 (id=11143): r0 = syz_io_uring_setup(0x10da, &(0x7f0000000480)={0x0, 0x7734, 0x1, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m26.796298631s ago: executing program 36 (id=11143): r0 = syz_io_uring_setup(0x10da, &(0x7f0000000480)={0x0, 0x7734, 0x1, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 37.384706386s ago: executing program 3 (id=11474): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000280)=[0x0], 0x1}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 36.988687441s ago: executing program 3 (id=11489): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002f40)="92f0ac0d687fc396c6e3fcb435c1ab468bfbcb101f67fb0a6eaf21f2fc72ec5a03074a7357c6308114ad5b64ecac13598f51c6ae646ab3f0d7b8", 0x3a}], 0x1}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003040)="b87a12bfe84b8a61e5973e77ad8d2e880d8f77f82bf7f31fb63b3441e4bd657a7248543451a8181b88c0dc4dce63c0d0d89477b6bd6d95ad92ceb4d43e2b720b1235e17c7c744db03b18adbb47804f9e3368cdbeb4b2f75a1989e642b9c9dd84a6f7259615e76ff56a83bdd40f", 0x6d}, {&(0x7f0000003300)="f188f01c5ab1b2d6648a42cff6dd5157a23b61b77e", 0x15}, {&(0x7f0000003340)="eb5331c5b894d975ea5885fc377d68d205d92f42d9b93add8855ef779d0638d6a577269e24a524b3a0ce61dafab620c9c59458f3260a67d355a91c1e59b128964786827aa7262b754b7b72523d0807c6a8e5af2ab370e141c4f8be05ad03e335caf45e25cde29308249c4be6363cc4356dab7c2cfc", 0x75}, {&(0x7f00000033c0)="9e707f06cead4fd09abb88942ed84a458f77ebfeab04150c94f8e8e49793c2cc98d4f83bbf62920ea2dd", 0x2a}], 0x4}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000000900)="a5101cbf4358ccec8575d4a4ac391c44609f1a2394a092d50e2c6d8729954388ba60e39413726ff9f523", 0x2a}, {&(0x7f0000001980)="739baeda416639aada26aa947003b46ee7c4825e0c4cca4bb13fb38e5720c9d810cd1473eb29ed037ea6c3663c42fd202609b4eecd11c8f07fcc8c9b38b7f60b81a70c608c71d53c58e18bbb476e72b23977434a52cde217a46534b97361bff2752595b421fcd0", 0x67}, {&(0x7f0000002a80)="5366d94a233e76266e63", 0xa}, {&(0x7f0000002b40)="538ab0a16972c9c27182fe5257", 0xd}, {&(0x7f0000002c40)="79f25d484e497ba98f1b37e2253c5667eeb334773ceda32dfbad26013cd0f080c4683778d9f821b4c2508ce99d52b5be4f5d5decff2ce6d32d80aaa66e2a847a17bad1bf702cc68ed80b8089beaf30bc299d20e9bfadaa1622a40144801e6cdd0e838c940edde60d6a507ab91c68d148af1fb3b6aa040e8b9030df56da2c1a26560c23c427fd97d908d24f6366722f7409430927892370ae97363884ca2f9275ae305405e7520871e3998ce5e9297c9f5f921505c54350f7a70c627e38e5c07507c7b3d5a106d33dbbd0f078a3f1a5b91c819fb484a3d90601e8defd5f691927c2497f5dcd864a1987da2971be", 0xed}], 0x5}}], 0x3, 0x24008804) sendmmsg$alg(r1, &(0x7f0000003b80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}], 0x1, 0x4010) 36.809859919s ago: executing program 3 (id=11479): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x4000}], 0x1, 0x800) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000380)=""/4, 0x4}], 0x1}, 0x40000000) 36.623082239s ago: executing program 3 (id=11481): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x46) 36.381921235s ago: executing program 3 (id=11485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x1, 0x2, 0x1}, 0x48, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000003000040"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 35.769412882s ago: executing program 3 (id=11487): inotify_init() syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = syz_io_uring_setup(0xbde, &(0x7f0000000640)={0x0, 0x45e9, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x2ffb, 0x0, 0x0, 0x0, 0x0) 34.639857569s ago: executing program 37 (id=11487): inotify_init() syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = syz_io_uring_setup(0xbde, &(0x7f0000000640)={0x0, 0x45e9, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x2ffb, 0x0, 0x0, 0x0, 0x0) 9.719591571s ago: executing program 1 (id=11596): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x0, 0x80000000, 0x8, r2}, 0x10) 7.414779329s ago: executing program 7 (id=11605): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x483, 0x44000102, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 7.413948731s ago: executing program 1 (id=11607): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000d80)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}, 0x0, 0x0, 0x0}, 0x0) 6.749086046s ago: executing program 7 (id=11610): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000000)="f3", 0x1, 0xb, 0x0, 0x0) 4.999903604s ago: executing program 7 (id=11616): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x8000000, 0x5, 0x6, 0x100, 0x0, [{0x8, 0xb, 0xb, '\x00', 0x9}, {0x1, 0x1, 0x1}, {0x8, 0x5, 0x0, '\x00', 0x10}, {0x8, 0x1, 0x9, '\x00', 0x9}, {0x5, 0x5, 0x2, '\x00', 0xb6}, {0x3e, 0xc, 0x7, '\x00', 0x1}, {0x1, 0x5, 0x6, '\x00', 0x7f}, {0x8, 0x80, 0x4, '\x00', 0x81}, {0xfd, 0x4}, {0x3, 0x0, 0x4, '\x00', 0x7}, {0x7, 0x5, 0x5, '\x00', 0x3}, {0x5, 0x6, 0x8, '\x00', 0x40}, {0x2, 0xd, 0x7, '\x00', 0x40}, {0x7, 0x7, 0x5, '\x00', 0x2}, {0xfe, 0xd0, 0xfa, '\x00', 0x2}, {0x4d, 0x9, 0x9, '\x00', 0x5}, {0xa, 0x5, 0x83, '\x00', 0x4}, {0xe, 0x1, 0x67}, {0x5, 0x3, 0x6, '\x00', 0x4}, {0x8, 0xff, 0x8e, '\x00', 0xd1}, {0x7f, 0x7, 0x1, '\x00', 0x8}, {0x4, 0x1, 0x5, '\x00', 0x3}, {0x5, 0x9, 0x8, '\x00', 0x1}, {0x3, 0xf7, 0x9, '\x00', 0x6b}]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) 4.529657883s ago: executing program 7 (id=11617): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000100004000000000000000000000000000001400"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.47959397s ago: executing program 1 (id=11619): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x24, &(0x7f00000000c0)={0x0, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.005426995s ago: executing program 1 (id=11620): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 2.004411502s ago: executing program 7 (id=11630): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) io_setup(0x7f, &(0x7f0000000080)=0x0) io_pgetevents(r2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={[0xb]}, 0x8}) 1.984930199s ago: executing program 9 (id=11621): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xca, 0x0, 0x1000}}}}}}, 0x0) 1.984526024s ago: executing program 8 (id=11631): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x4}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x4}, 'port0\x00', 0x786520dbf34c80ff, 0x20a03, 0x122, 0x0, 0x0, 0xc, 0x400, 0x0, 0x0, 0x87}) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x123482, 0x0) 1.731985445s ago: executing program 9 (id=11622): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) 1.731775495s ago: executing program 4 (id=11623): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.717328138s ago: executing program 7 (id=11624): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1.629706625s ago: executing program 8 (id=11625): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f) 1.285980276s ago: executing program 4 (id=11626): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) read$alg(r1, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0xc, 0x10c, 0x1}, {0xc, 0x0, 0x4}], 0x18}, 0x44080) 1.280298588s ago: executing program 9 (id=11627): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xa, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8800) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x10000, 0x0) 1.045672804s ago: executing program 8 (id=11628): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x80}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r0) 950.751868ms ago: executing program 4 (id=11629): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}}, 0x20048005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 914.065615ms ago: executing program 9 (id=11633): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)=""/11, 0xb}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 713.023999ms ago: executing program 8 (id=11634): r0 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = open(&(0x7f00000001c0)='.\x00', 0x141400, 0x4) getdents(r2, &(0x7f0000000280)=""/4096, 0x9005) 655.469355ms ago: executing program 4 (id=11635): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/180, 0xffb0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}], 0x1}}], 0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 589.690451ms ago: executing program 9 (id=11636): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x9, 0x31, 0xffffffffffffffff, 0xf983e000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 588.373839ms ago: executing program 1 (id=11637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xca, 0x0, 0x1000}}}}}}, 0x0) 405.634116ms ago: executing program 8 (id=11638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000000000002"]) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x0, 0x9}) 348.886119ms ago: executing program 4 (id=11639): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x30) 194.385897ms ago: executing program 9 (id=11640): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2207, 0x4) 147.541503ms ago: executing program 4 (id=11641): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r0 = landlock_create_ruleset(&(0x7f0000000440)={0x6621}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 1.053299ms ago: executing program 8 (id=11642): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x28800d, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x20000002) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 0s ago: executing program 1 (id=11643): syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}]}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): , Product=0, SerialNumber=0 [ 1127.437412][ T5914] usb 5-1: config 0 descriptor?? [ 1127.884762][ T5914] plantronics 0003:047F:FFFF.0095: reserved main item tag 0xd [ 1127.955451][ T5914] plantronics 0003:047F:FFFF.0095: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1128.227536][T22850] usb 5-1: USB disconnect, device number 27 [ 1128.610505][ T30] audit: type=1326 audit(1754803241.606:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31673 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1128.700262][ T30] audit: type=1326 audit(1754803241.606:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31673 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1128.811004][ T30] audit: type=1326 audit(1754803241.606:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31673 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1128.930778][ T30] audit: type=1326 audit(1754803241.606:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31673 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1129.036353][ T30] audit: type=1326 audit(1754803241.606:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31673 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1129.143113][ T30] audit: type=1326 audit(1754803241.606:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31673 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1129.219594][ T30] audit: type=1326 audit(1754803241.606:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31673 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1129.313994][ T30] audit: type=1326 audit(1754803241.606:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31673 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1129.355954][ T30] audit: type=1326 audit(1754803241.606:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31673 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1129.390822][ T30] audit: type=1326 audit(1754803241.606:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31673 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 1129.861101][T31699] loop9: detected capacity change from 0 to 7 [ 1129.898353][T31699] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1129.931180][T31699] loop9: partition table partially beyond EOD, truncated [ 1129.967383][T31699] loop9: p1 size 501170297 extends beyond EOD, truncated [ 1130.112272][ T6061] udevd[6061]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1130.211299][T22850] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1130.380907][T22850] usb 6-1: Using ep0 maxpacket: 16 [ 1130.394025][T22850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.425957][T22850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.452358][T22850] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1130.465604][ T2154] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1130.490861][T22850] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1130.517389][T22850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.539137][T22850] usb 6-1: config 0 descriptor?? [ 1130.634262][ T2154] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.661056][ T2154] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1130.682791][ T2154] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1130.702511][ T2154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.721567][ T2154] usb 3-1: Product: syz [ 1130.736031][ T2154] usb 3-1: Manufacturer: syz [ 1130.746155][ T2154] usb 3-1: SerialNumber: syz [ 1130.970129][T31706] random: crng reseeded on system resumption [ 1131.027343][T31714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.057668][T31714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.080523][T22850] input: HID 0955:7214 Haptics as /devices/virtual/input/input178 [ 1131.150051][ T2154] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1131.185186][T22850] shield 0003:0955:7214.0096: Registered Thunderstrike controller [ 1131.208025][ T2154] usb 3-1: USB disconnect, device number 18 [ 1131.216724][T22850] shield 0003:0955:7214.0096: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 1131.315631][ T5860] shield 0003:0955:7214.0096: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1131.339647][T22850] usb 6-1: USB disconnect, device number 9 [ 1131.361221][ T5860] shield 0003:0955:7214.0096: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1131.420814][ T5860] shield 0003:0955:7214.0096: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1131.481378][ T5860] shield 0003:0955:7214.0096: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1131.640773][ T5914] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1131.811153][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 1131.825959][ T5914] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 1131.847252][ T5914] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.868154][ T5914] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1131.878788][ T5914] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1131.889300][ T5914] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1131.922355][ T5914] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 1131.942811][ T5914] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33552, setting to 1024 [ 1131.954628][ T5914] usb 3-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1131.974147][ T5914] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1131.993550][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.234158][ T5914] usb 3-1: usb_control_msg returned -32 [ 1132.258675][ T5914] usbtmc 3-1:16.0: can't read capabilities [ 1132.268909][ C1] usbtmc 3-1:16.0: overflow with length 1024, actual length is 1024 [ 1132.511170][T22850] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1132.536865][ T9] usb 3-1: USB disconnect, device number 19 [ 1132.693980][T22850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.705639][T22850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.716240][T22850] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1132.730412][T22850] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1132.759673][T22850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.782045][T22850] usb 6-1: config 0 descriptor?? [ 1133.272302][T22850] plantronics 0003:047F:FFFF.0097: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1133.417664][T31795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10800'. [ 1133.481475][T31798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10800'. [ 1133.560114][T31795] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10800'. [ 1133.600395][T31795] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10800'. [ 1133.817306][ T9] usb 6-1: USB disconnect, device number 10 [ 1133.841310][T22850] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1134.004483][T22850] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1134.017492][T22850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.037134][T22850] usb 5-1: config 0 descriptor?? [ 1134.056100][T22850] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1134.290393][T22850] gp8psk: usb in 128 operation failed. [ 1134.519850][T22850] gp8psk: usb in 146 operation failed. [ 1134.534685][T22850] gp8psk: failed to get FW version [ 1134.555513][T22850] gp8psk: usb in 149 operation failed. [ 1134.567355][T22850] gp8psk: failed to get FPGA version [ 1134.573409][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1134.733541][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.753644][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1134.763807][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.785091][ T9] usb 3-1: config 0 descriptor?? [ 1134.792146][T22850] gp8psk: usb out operation failed. [ 1134.812488][T22850] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1134.851150][T22850] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1134.886359][T22850] usb 5-1: USB disconnect, device number 28 [ 1134.975088][T31832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10814'. [ 1134.995533][T31832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10814'. [ 1135.018915][T31832] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10814'. [ 1135.031068][T31832] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10814'. [ 1135.056226][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1135.070459][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1135.100458][ T9] usb 3-1: USB disconnect, device number 20 [ 1135.405957][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 1135.405979][ T30] audit: type=1326 audit(1754803248.406:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31837 comm="syz.4.10818" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 1135.435053][ C0] vkms_vblank_simulate: vblank timer overrun [ 1135.467723][ T30] audit: type=1326 audit(1754803248.406:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31837 comm="syz.4.10818" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 1135.518036][ T30] audit: type=1326 audit(1754803248.406:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31837 comm="syz.4.10818" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 1135.540679][ T5914] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1135.561747][ T30] audit: type=1326 audit(1754803248.406:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31837 comm="syz.4.10818" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 1135.607236][ T30] audit: type=1326 audit(1754803248.406:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31837 comm="syz.4.10818" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 1135.640157][ T30] audit: type=1326 audit(1754803248.406:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31837 comm="syz.4.10818" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 1135.670857][ T30] audit: type=1326 audit(1754803248.406:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31837 comm="syz.4.10818" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 1135.695618][ T30] audit: type=1326 audit(1754803248.406:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31837 comm="syz.4.10818" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 1135.718582][ T30] audit: type=1326 audit(1754803248.406:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31837 comm="syz.4.10818" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 1135.741122][ T5915] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1135.754609][ T30] audit: type=1326 audit(1754803248.406:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31837 comm="syz.4.10818" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 1135.777080][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 1135.784768][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.796112][ T5914] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1135.817418][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.847685][ T5914] usb 3-1: config 0 descriptor?? [ 1135.900986][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 1135.917480][ T5915] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1135.930147][ T5915] usb 4-1: config 179 has no interface number 0 [ 1135.950184][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1135.993522][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1136.019575][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1136.045758][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1136.077624][ T5915] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1136.099790][ T5915] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1136.136187][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.176747][T31841] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1136.312028][ T5914] mcp2221 0003:04D8:00DD.0098: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1136.398782][ T5915] usb 4-1: USB disconnect, device number 20 [ 1136.404799][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1136.404832][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1136.745337][ T5915] usb 3-1: USB disconnect, device number 21 [ 1136.851386][T22850] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1137.018212][T22850] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1137.050847][T22850] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1137.070794][T22850] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1137.080568][T22850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.102050][T31857] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1137.115449][T22850] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1137.400046][T22850] usb 6-1: USB disconnect, device number 11 [ 1138.331185][T22850] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1138.505676][T22850] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1138.527021][T22850] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1138.560577][T22850] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1138.605876][T22850] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1138.617225][T22850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1138.632462][T22850] usb 5-1: Product: syz [ 1138.642300][T22850] usb 5-1: Manufacturer: syz [ 1138.654777][T22850] usb 5-1: SerialNumber: syz [ 1138.904180][T22850] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1138.921838][ T5915] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1139.090858][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 1139.101151][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.126978][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.164973][T22850] usb 5-1: USB disconnect, device number 29 [ 1139.177899][ T5915] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1139.186882][T22850] usblp0: removed [ 1139.188298][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.219229][ T5915] usb 3-1: config 0 descriptor?? [ 1139.233324][ T5915] hub 3-1:0.0: USB hub found [ 1139.440134][ T5915] hub 3-1:0.0: 1 port detected [ 1140.128188][ T5915] hub 3-1:0.0: activate --> -90 [ 1140.189933][T31960] loop2: detected capacity change from 0 to 7 [ 1140.200183][T31960] Dev loop2: unable to read RDB block 7 [ 1140.205888][T31960] loop2: AHDI p2 p3 [ 1140.209863][T31960] loop2: partition table partially beyond EOD, truncated [ 1140.232556][T31960] loop2: p3 start 335544320 is beyond EOD, truncated [ 1140.543991][T22850] usb 3-1: USB disconnect, device number 22 [ 1140.760894][ T5915] usb 3-1-port1: config error [ 1141.120905][ T5950] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1141.293286][ T5950] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1141.329945][ T5950] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1141.351812][ T5950] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1141.382731][ T5950] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1141.396770][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1141.415072][ T5950] usb 4-1: Product: syz [ 1141.425403][ T5950] usb 4-1: Manufacturer: syz [ 1141.434798][ T5950] usb 4-1: SerialNumber: syz [ 1141.682774][ T5950] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1141.912920][ T5914] usb 4-1: USB disconnect, device number 21 [ 1141.941319][ T5914] usblp0: removed [ 1142.350806][ T5950] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1142.511985][ T5950] usb 3-1: Using ep0 maxpacket: 8 [ 1142.524565][ T5950] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1142.534926][ T5950] usb 3-1: config 0 has no interface number 0 [ 1142.548242][ T5950] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1142.562850][ T5950] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1142.575115][ T5950] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1142.586675][ T5950] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1142.618514][ T5950] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1142.634659][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.650276][ T5950] usb 3-1: config 0 descriptor?? [ 1142.676145][ T5950] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1142.730932][T22850] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1142.840955][ T5914] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1142.906599][T22850] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1142.926208][T22850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.973344][T22850] usb 4-1: config 0 descriptor?? [ 1143.004839][ T5914] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1143.014121][T22850] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1143.024529][ T5914] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1143.024587][ T5914] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1143.024613][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.057119][T32032] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1143.097557][ T5914] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1143.217361][T22850] gp8psk: usb in 128 operation failed. [ 1143.366434][ T5914] usb 5-1: USB disconnect, device number 30 [ 1143.441828][T22850] gp8psk: usb in 146 operation failed. [ 1143.454415][T22850] gp8psk: failed to get FW version [ 1143.461218][T22850] gp8psk: usb in 149 operation failed. [ 1143.474057][T22850] gp8psk: failed to get FPGA version [ 1143.657068][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 1143.686266][T22850] gp8psk: usb out operation failed. [ 1143.714932][T22850] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1143.746226][T22850] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1143.807460][T22850] usb 4-1: USB disconnect, device number 22 [ 1144.940298][ T9] usb 3-1: USB disconnect, device number 23 [ 1144.976330][ T9] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1145.401120][ T5914] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1145.552604][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.558822][T32098] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1145.576388][ T5914] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1145.588498][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.609202][ T5914] usb 5-1: config 0 descriptor?? [ 1145.646569][T22850] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1145.834373][T22850] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1145.867590][ T5914] usbhid 5-1:0.0: can't add hid device: -71 [ 1145.869923][T22850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.901045][T22850] usb 6-1: config 0 descriptor?? [ 1145.901117][ T5914] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1145.929423][T22850] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1145.963650][ T5914] usb 5-1: USB disconnect, device number 31 [ 1146.118545][T22850] gp8psk: usb in 128 operation failed. [ 1146.334540][T22850] gp8psk: usb in 146 operation failed. [ 1146.340066][T22850] gp8psk: failed to get FW version [ 1146.364777][T22850] gp8psk: usb in 149 operation failed. [ 1146.364946][T32120] binder: 32116:32120 ioctl c0306201 80000480 returned -14 [ 1146.370291][T22850] gp8psk: failed to get FPGA version [ 1146.461480][ T5914] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1146.527105][T32123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10933'. [ 1146.556004][T32123] vxlan1: entered promiscuous mode [ 1146.589716][T22850] gp8psk: usb out operation failed. [ 1146.598800][T22850] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1146.609984][T22850] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1146.611206][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 1146.632550][T22850] usb 6-1: USB disconnect, device number 12 [ 1146.636228][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.655170][ T5914] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1146.664692][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.676461][ T5914] usb 5-1: config 0 descriptor?? [ 1146.687105][ T5914] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1146.709540][ T5914] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1147.181404][ T5950] usb 5-1: USB disconnect, device number 32 [ 1147.212032][ T5950] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1147.302755][T32130] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1148.306696][T32161] binder: 32155:32161 ioctl c0306201 80000480 returned -14 [ 1148.877968][T32169] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1148.919533][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1148.953932][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.124864][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1149.168115][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.325318][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1149.345747][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.538977][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1149.581527][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.040926][ T5915] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1150.233378][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.279997][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.325656][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1150.367659][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1150.381946][ T5915] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1150.382068][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1150.399327][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.407820][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1150.419285][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1150.432008][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1150.447783][ T5915] usb 4-1: config 0 descriptor?? [ 1150.730524][T32202] binder: 32200:32202 ioctl c0306201 80000480 returned -14 [ 1150.801020][ T5914] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1150.883804][ T5915] plantronics 0003:047F:FFFF.0099: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1150.950801][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 1150.960121][ T5914] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1150.973967][ T5914] usb 5-1: config 0 has no interface number 0 [ 1150.980253][ T5914] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1151.007813][ T49]  (unregistering): left promiscuous mode [ 1151.009816][ T5914] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1151.020499][ T49]  (unregistering): Released all slaves [ 1151.026694][ T5914] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1151.043629][ T5914] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1151.057715][ T5914] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1151.066995][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.112797][ T5914] usb 5-1: config 0 descriptor?? [ 1151.159963][ T5914] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1151.196875][ T49] tipc: Disabling bearer [ 1151.211707][ T49] tipc: Disabling bearer [ 1151.222776][ T49] tipc: Left network mode [ 1151.928337][ T49] mac80211_hwsim hwsim8 wlan0 (unregistering): left allmulticast mode [ 1152.203997][ T5914] usb 5-1: USB disconnect, device number 33 [ 1152.228632][ T5914] ldusb 5-1:0.55: LD USB Device #1 now disconnected [ 1152.382417][ T49] veth1_to_batadv: left promiscuous mode [ 1152.429980][ T49] hsr_slave_0: left promiscuous mode [ 1152.447722][ T49] hsr_slave_1: left promiscuous mode [ 1152.509351][ T49] veth1_vlan: left promiscuous mode [ 1152.530878][ T5183] Bluetooth: hci1: command tx timeout [ 1152.538921][ T49] veth0_vlan: left promiscuous mode [ 1153.261817][ T5944] usb 4-1: reset high-speed USB device number 23 using dummy_hcd [ 1153.270414][ T5944] usb 4-1: device reset changed ep0 maxpacket size! [ 1153.280071][ T5950] usb 4-1: USB disconnect, device number 23 [ 1153.459851][T32266] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1153.502075][ T5950] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1153.667088][ T5950] usb 4-1: Using ep0 maxpacket: 8 [ 1153.680087][ T5950] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1153.696033][ T5950] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1153.708016][ T5950] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1153.724830][ T5950] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1153.739354][ T5950] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1153.754501][ T5950] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1153.764163][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.880751][ T5944] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1154.062355][ T5944] usb 6-1: Using ep0 maxpacket: 16 [ 1154.073717][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.081495][ T5950] usb 4-1: GET_CAPABILITIES returned 0 [ 1154.090471][ T5950] usbtmc 4-1:16.0: can't read capabilities [ 1154.091883][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.113286][ T5944] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 1154.130288][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.159659][ T5944] usb 6-1: config 0 descriptor?? [ 1154.468484][ T5950] usb 4-1: USB disconnect, device number 24 [ 1154.474817][T32247] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 1154.612263][ T5183] Bluetooth: hci1: command tx timeout [ 1154.652136][T32285] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1154.683919][ T5944] input: HID 0458:5012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5012.009A/input/input179 [ 1154.872523][T32199] chnl_net:caif_netlink_parms(): no params data found [ 1154.881737][ T5944] input: HID 0458:5012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5012.009A/input/input180 [ 1155.002270][ T5944] kye 0003:0458:5012.009A: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.5-1/input0 [ 1155.085954][ T5944] usb 6-1: USB disconnect, device number 13 [ 1155.288244][T32298] fido_id[32298]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1155.531698][T32199] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.548067][T32199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.567752][T32199] bridge_slave_0: entered allmulticast mode [ 1155.595193][T32199] bridge_slave_0: entered promiscuous mode [ 1155.621589][T32199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.629744][T32199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.673946][T32199] bridge_slave_1: entered allmulticast mode [ 1155.710171][T32199] bridge_slave_1: entered promiscuous mode [ 1155.969927][T32199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.005741][T32199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.153196][ T49] IPVS: stop unused estimator thread 0... [ 1156.212621][T32199] team0: Port device team_slave_0 added [ 1156.245851][T32199] team0: Port device team_slave_1 added [ 1156.411070][T32199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.418092][T32199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.444041][ C1] vkms_vblank_simulate: vblank timer overrun [ 1156.465868][T32199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.486372][T32199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.493832][T32199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.547333][T32199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.691920][ T5183] Bluetooth: hci1: command tx timeout [ 1156.752349][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.121901][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.316048][T32199] hsr_slave_0: entered promiscuous mode [ 1157.372916][T32199] hsr_slave_1: entered promiscuous mode [ 1157.406959][T32199] debugfs: 'hsr0' already exists in 'hsr' [ 1157.429753][T32199] Cannot create hsr debugfs directory [ 1157.500983][ T5944] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1157.557846][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1157.570025][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1157.579330][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1157.589838][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1157.599046][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1157.608598][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.671121][ T5944] usb 5-1: Using ep0 maxpacket: 8 [ 1157.680865][ T5944] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1157.709175][ T5944] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1157.766981][ T5944] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1157.786026][ T5944] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1157.799169][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.800430][ T5944] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1157.830505][ T5944] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1157.840083][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.080862][ T5944] usb 5-1: usb_control_msg returned -32 [ 1158.086647][ T5944] usbtmc 5-1:16.0: can't read capabilities [ 1158.514765][ T49] bridge_slave_1: left allmulticast mode [ 1158.532253][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.545860][ T49] bridge_slave_0: left allmulticast mode [ 1158.554056][ T49] bridge_slave_0: left promiscuous mode [ 1158.559873][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.771348][ T5183] Bluetooth: hci1: command tx timeout [ 1158.833489][T32371] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 1159.037383][ T5950] usb 5-1: USB disconnect, device number 34 [ 1159.317048][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.328563][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.339852][ T49] bond0 (unregistering): Released all slaves [ 1159.536117][T32199] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1159.653049][ T5183] Bluetooth: hci0: command tx timeout [ 1159.717485][T32199] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1159.767148][T32199] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1159.950792][ T5950] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1159.978643][T32199] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1160.099592][T32352] chnl_net:caif_netlink_parms(): no params data found [ 1160.112856][ T5950] usb 6-1: config index 0 descriptor too short (expected 12306, got 18) [ 1160.137393][ T5950] usb 6-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 1160.151991][ T49] hsr_slave_0: left promiscuous mode [ 1160.160479][ T5950] usb 6-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 1160.171444][ T49] hsr_slave_1: left promiscuous mode [ 1160.179962][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1160.186143][ T5950] usb 6-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 1160.196597][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.211944][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1160.222072][ T5950] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1160.230696][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.238485][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.266210][T32399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11019'. [ 1160.289348][T32399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11019'. [ 1160.325813][ T49] veth1_macvtap: left promiscuous mode [ 1160.340309][ T49] veth0_macvtap: left promiscuous mode [ 1160.356172][ T49] veth1_vlan: left promiscuous mode [ 1160.369217][ T49] veth0_vlan: left promiscuous mode [ 1160.761568][ T5950] usb 6-1: string descriptor 0 read error: -71 [ 1160.786821][ T5950] usb 6-1: USB disconnect, device number 14 [ 1161.668652][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1161.744539][ T5183] Bluetooth: hci0: command tx timeout [ 1161.845650][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1162.779093][ T5950] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1162.942253][ T5950] usb 5-1: Using ep0 maxpacket: 8 [ 1162.958788][ T5950] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 1162.970441][ T5950] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1163.006912][ T5950] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 1163.016652][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.029665][ T5950] usb 5-1: Product: syz [ 1163.034370][ T5950] usb 5-1: Manufacturer: syz [ 1163.039163][ T5950] usb 5-1: SerialNumber: syz [ 1163.286294][ T5950] usbhid 5-1:1.0: can't add hid device: -71 [ 1163.292455][ T5950] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1163.347157][ T5950] usb 5-1: USB disconnect, device number 35 [ 1163.821995][ T5183] Bluetooth: hci0: command tx timeout [ 1164.263473][T32352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.300874][T32352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.323860][T32352] bridge_slave_0: entered allmulticast mode [ 1164.355913][T32352] bridge_slave_0: entered promiscuous mode [ 1164.476178][T32352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.520936][T32352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.528355][T32352] bridge_slave_1: entered allmulticast mode [ 1164.557083][T32352] bridge_slave_1: entered promiscuous mode [ 1164.792705][ T49] IPVS: stop unused estimator thread 0... [ 1164.876906][T32352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.964454][T32199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.984449][T32352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1165.180962][T32352] team0: Port device team_slave_0 added [ 1165.202818][T32352] team0: Port device team_slave_1 added [ 1165.313573][T32199] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.500525][T32352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.518394][T32352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.544545][ C1] vkms_vblank_simulate: vblank timer overrun [ 1165.618073][T32352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.708974][T32352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.718632][T32352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.744596][ C1] vkms_vblank_simulate: vblank timer overrun [ 1165.758963][T32352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.772993][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.780213][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.822241][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1165.892339][ T5183] Bluetooth: hci0: command tx timeout [ 1165.899791][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.907057][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.953086][T32352] hsr_slave_0: entered promiscuous mode [ 1165.963749][T32352] hsr_slave_1: entered promiscuous mode [ 1166.001046][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1166.033340][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.068405][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.083533][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1166.096797][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1166.117470][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.148746][ T9] usb 6-1: config 0 descriptor?? [ 1166.537988][T32199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.580801][ T5950] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1166.624884][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 1166.661103][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.009B/input/input181 [ 1166.698578][ T9] microsoft 0003:045E:07DA.009B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1166.754519][ T5950] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.790571][T32199] veth0_vlan: entered promiscuous mode [ 1166.791388][ T5950] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1166.854965][ T5950] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1166.889763][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.900075][T32199] veth1_vlan: entered promiscuous mode [ 1166.920142][ T5950] usb 5-1: Product: syz [ 1166.922410][T32352] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1166.931150][ T5950] usb 5-1: Manufacturer: syz [ 1166.931175][ T5950] usb 5-1: SerialNumber: syz [ 1166.961364][ T5915] usb 6-1: USB disconnect, device number 15 [ 1167.005854][T32352] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1167.055888][T32543] fido_id[32543]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1167.060518][T32352] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1167.127808][T32352] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1167.169000][ T5950] usb 5-1: 0:2 : does not exist [ 1167.191841][ T5950] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1167.195460][T32199] veth0_macvtap: entered promiscuous mode [ 1167.229277][T32199] veth1_macvtap: entered promiscuous mode [ 1167.285644][ T5950] usb 5-1: USB disconnect, device number 36 [ 1167.290032][T32199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.364773][T32199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.410005][ T1097] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.414909][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1167.463895][ T1097] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.556795][ T1097] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.573122][ T1097] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.740306][T32352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.895382][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.907635][T32352] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.920449][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.968295][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.975525][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.095546][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.102794][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.288658][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.330814][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.756564][T32352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.921791][T32584] sctp: [Deprecated]: syz.5.11074 (pid 32584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1168.921791][T32584] Use struct sctp_sack_info instead [ 1168.998336][T32352] veth0_vlan: entered promiscuous mode [ 1169.072149][T32352] veth1_vlan: entered promiscuous mode [ 1169.218641][T32352] veth0_macvtap: entered promiscuous mode [ 1169.260823][T32562] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1169.280270][T32352] veth1_macvtap: entered promiscuous mode [ 1169.397214][T32352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1169.431329][T32562] usb 7-1: Using ep0 maxpacket: 32 [ 1169.453247][T32562] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1169.480920][T32562] usb 7-1: config 0 has no interface number 0 [ 1169.502695][T32352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1169.519814][T32562] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1169.572637][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.589184][T32562] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1169.613505][T32562] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.632330][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.677799][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.696796][T32562] usb 7-1: Product: syz [ 1169.711000][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.728494][T32562] usb 7-1: Manufacturer: syz [ 1169.750739][T32562] usb 7-1: SerialNumber: syz [ 1169.794237][T32562] usb 7-1: config 0 descriptor?? [ 1169.854514][T32562] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1169.898876][T32562] em28xx 7-1:0.132: Video interface 132 found: [ 1170.025159][T32596] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1170.094266][ T5860] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1170.139162][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.211361][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.251133][T32562] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 1170.297050][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.327290][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.356089][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.356715][ T5860] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1170.390269][ T5860] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1170.394660][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.404911][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.467224][ T5860] usb 5-1: config 0 descriptor?? [ 1170.880566][T32562] em28xx 7-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1170.911099][T32562] em28xx 7-1:0.132: failed to read eeprom (err=-5) [ 1170.932841][T32562] em28xx 7-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1171.009535][ T5860] plantronics 0003:047F:FFFF.009C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1171.031551][T32562] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1171.060154][T32562] em28xx 7-1:0.132: analog set to bulk mode. [ 1171.066790][ T5915] em28xx 7-1:0.132: Registering V4L2 extension [ 1171.139649][T32562] usb 7-1: USB disconnect, device number 2 [ 1171.181311][T32562] em28xx 7-1:0.132: Disconnecting em28xx [ 1171.383213][ T5860] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1171.500098][ T30] kauditd_printk_skb: 568 callbacks suppressed [ 1171.500120][ T30] audit: type=1804 audit(1754803284.496:5291): pid=32633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.11087" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=165486 res=1 errno=0 [ 1171.548732][ C1] vkms_vblank_simulate: vblank timer overrun [ 1171.555998][ T5860] usb 4-1: Using ep0 maxpacket: 16 [ 1171.588944][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.610237][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.635462][ T5860] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1171.661149][ T5915] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 1171.668724][ T5915] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1171.721514][ T5915] em28xx 7-1:0.132: No AC97 audio processor [ 1171.751528][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.773196][ T5915] usb 7-1: Decoder not found [ 1171.778358][ T5915] em28xx 7-1:0.132: failed to create media graph [ 1171.822159][ T5860] usb 4-1: config 0 descriptor?? [ 1171.841953][ T5915] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1171.894760][ T5915] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1171.960870][T32562] em28xx 7-1:0.132: Closing input extension [ 1172.035850][T32562] em28xx 7-1:0.132: Freeing device [ 1172.873730][ T5860] letsketch 0003:6161:4D15.009D: Device info: ఁ [ 1172.927720][T32665] input: syz1 as /devices/virtual/input/input182 [ 1173.132136][ T5860] usb 4-1: Max retries (5) exceeded reading string descriptor 201 [ 1173.168538][ T5860] letsketch 0003:6161:4D15.009D: probe with driver letsketch failed with error -71 [ 1173.239607][ T5860] usb 4-1: USB disconnect, device number 25 [ 1173.282995][T22850] usb 5-1: USB disconnect, device number 37 [ 1173.706508][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.975181][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.241271][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.613959][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.277852][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1175.291003][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1175.299433][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1175.307827][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1175.315747][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1175.501989][ T49] bridge_slave_1: left allmulticast mode [ 1175.507707][ T49] bridge_slave_1: left promiscuous mode [ 1175.561598][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.634528][ T49] bridge_slave_0: left allmulticast mode [ 1175.661289][ T49] bridge_slave_0: left promiscuous mode [ 1175.690914][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.241688][T22850] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1176.421049][T22850] usb 6-1: Using ep0 maxpacket: 16 [ 1176.438124][T22850] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1176.465706][T22850] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1176.475318][T22850] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1176.500233][T22850] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1176.520816][ T5860] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1176.542741][T22850] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1176.553188][T22850] usb 6-1: config 0 has no interface number 0 [ 1176.559340][T22850] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1176.588376][T22850] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1176.598666][T22850] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1176.608924][T22850] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1176.624870][T22850] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1176.632174][T22850] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1176.645846][T22850] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1176.666565][T22850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.681641][T22850] usb 6-1: Product: syz [ 1176.686106][T22850] usb 6-1: Manufacturer: syz [ 1176.693153][T22850] usb 6-1: SerialNumber: syz [ 1176.700067][T22850] usb 6-1: config 0 descriptor?? [ 1176.705317][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 1176.723054][T22850] usb 6-1: selecting invalid altsetting 2 [ 1176.736346][ T5860] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1176.766838][ T5860] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1176.800956][ T5860] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1176.823107][ T5860] usb 4-1: string descriptor 0 read error: -71 [ 1176.829523][ T5860] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1176.839004][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.858706][ T5860] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 1176.877426][ T5860] usb 4-1: no configuration chosen from 1 choice [ 1176.888313][ T5860] usb 4-1: USB disconnect, device number 26 [ 1176.948185][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1176.961750][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1176.973631][ T49] bond0 (unregistering): Released all slaves [ 1177.331225][ T5863] Bluetooth: hci1: command tx timeout [ 1177.424681][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.433512][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.734225][ T49] hsr_slave_0: left promiscuous mode [ 1177.753066][ T49] hsr_slave_1: left promiscuous mode [ 1177.777662][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.800758][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1177.816257][T22850] usb 6-1: USB disconnect, device number 16 [ 1177.830993][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1177.839735][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.904915][ T49] veth1_macvtap: left promiscuous mode [ 1177.910533][ T49] veth0_macvtap: left promiscuous mode [ 1177.920226][ T49] veth1_vlan: left promiscuous mode [ 1177.926043][ T49] veth0_vlan: left promiscuous mode [ 1178.391163][T32562] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1178.580462][T32562] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.600071][T32562] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1178.619802][T32562] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1178.627047][T32562] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1178.637063][T32562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.648791][T32562] usb 5-1: config 0 descriptor?? [ 1178.833034][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1178.893642][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1179.297381][T32562] usb 5-1: string descriptor 0 read error: -22 [ 1179.421113][ T5863] Bluetooth: hci1: command tx timeout [ 1179.493487][ T5863] Bluetooth: hci3: command 0x0406 tx timeout [ 1179.521632][T32562] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.009E/input/input183 [ 1179.615481][T32562] uclogic 0003:256C:006D.009E: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 1179.840954][T22850] usb 5-1: USB disconnect, device number 38 [ 1180.281668][T32713] chnl_net:caif_netlink_parms(): no params data found [ 1180.811453][T32713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.835746][T32713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.861176][T32713] bridge_slave_0: entered allmulticast mode [ 1180.883715][T32713] bridge_slave_0: entered promiscuous mode [ 1180.906852][T32713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.924484][T32713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.941035][T32713] bridge_slave_1: entered allmulticast mode [ 1180.963203][T32713] bridge_slave_1: entered promiscuous mode [ 1180.990024][ T340] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1180.996609][ T340] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1181.034523][ T340] vhci_hcd vhci_hcd.0: Device attached [ 1181.064056][ T341] vhci_hcd: connection closed [ 1181.064412][ T1097] vhci_hcd: stop threads [ 1181.084042][ T1097] vhci_hcd: release socket [ 1181.088715][ T1097] vhci_hcd: disconnect device [ 1181.205778][T32713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.227033][T32713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.381767][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1181.397291][T32713] team0: Port device team_slave_0 added [ 1181.405259][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1181.415814][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1181.425426][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1181.436917][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1181.445919][T32713] team0: Port device team_slave_1 added [ 1181.492347][ T5183] Bluetooth: hci1: command tx timeout [ 1181.612312][T32713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.638236][T32713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.686425][T32713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.707899][T32713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.716366][T32713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.770408][T32713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.870787][ T5915] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1181.993477][T32713] hsr_slave_0: entered promiscuous mode [ 1182.000308][T32713] hsr_slave_1: entered promiscuous mode [ 1182.015376][T32713] debugfs: 'hsr0' already exists in 'hsr' [ 1182.026218][T32713] Cannot create hsr debugfs directory [ 1182.063016][ T5915] usb 5-1: config index 0 descriptor too short (expected 12306, got 18) [ 1182.081018][ T5915] usb 5-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 1182.130805][ T5915] usb 5-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 1182.142161][ T5915] usb 5-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 1182.151996][ T5915] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1182.167793][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.634183][ T5915] usb 5-1: string descriptor 0 read error: -71 [ 1182.650814][ T5915] usb 5-1: USB disconnect, device number 39 [ 1182.893593][ T352] chnl_net:caif_netlink_parms(): no params data found [ 1182.908565][T32713] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1182.920479][T32713] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1182.988669][T32713] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1183.018300][T32713] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1183.199597][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.226947][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.269520][ T352] bridge_slave_0: entered allmulticast mode [ 1183.285978][ T352] bridge_slave_0: entered promiscuous mode [ 1183.319513][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.335586][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.348996][ T352] bridge_slave_1: entered allmulticast mode [ 1183.369069][ T352] bridge_slave_1: entered promiscuous mode [ 1183.482084][ T352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1183.506580][ T5183] Bluetooth: hci3: command tx timeout [ 1183.518740][ T352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.571868][ T5183] Bluetooth: hci1: command tx timeout [ 1183.636428][ T352] team0: Port device team_slave_0 added [ 1183.645305][ T352] team0: Port device team_slave_1 added [ 1183.699222][ T352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.707198][ T352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.734212][ T352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.749069][ T352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.756766][ T352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.783058][ T352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.854792][ T352] hsr_slave_0: entered promiscuous mode [ 1183.862175][ T352] hsr_slave_1: entered promiscuous mode [ 1183.868276][ T352] debugfs: 'hsr0' already exists in 'hsr' [ 1183.874100][ T352] Cannot create hsr debugfs directory [ 1183.921706][T32713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.990254][T32713] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.032602][T28614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.039887][T28614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.094232][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.101448][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1184.542427][T22850] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1184.584341][T32713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.599811][ T352] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1184.643907][ T352] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1184.674275][ T352] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1184.712798][T22850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.739860][T22850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.749913][ T352] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1184.769101][T22850] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1184.801008][T22850] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1184.810197][T22850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.872386][T22850] usb 4-1: config 0 descriptor?? [ 1184.912927][T32713] veth0_vlan: entered promiscuous mode [ 1184.961922][T32713] veth1_vlan: entered promiscuous mode [ 1185.135233][T32713] veth0_macvtap: entered promiscuous mode [ 1185.179917][T32713] veth1_macvtap: entered promiscuous mode [ 1185.313641][T32713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1185.340467][T22850] plantronics 0003:047F:FFFF.009F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1185.373732][ T352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.447778][T32713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1185.507754][ T352] 8021q: adding VLAN 0 to HW filter on device team0 [ 1185.553406][ T1097] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.581946][ T5183] Bluetooth: hci3: command tx timeout [ 1185.591421][ T1097] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.708917][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.716236][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1185.758326][ T1097] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.785092][ T1097] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.815275][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.822577][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1186.103797][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.146101][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.291366][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.303773][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.407324][ T352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.603767][ T352] veth0_vlan: entered promiscuous mode [ 1186.673037][ T352] veth1_vlan: entered promiscuous mode [ 1186.796739][ T352] veth0_macvtap: entered promiscuous mode [ 1186.847533][ T352] veth1_macvtap: entered promiscuous mode [ 1186.973337][ T352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1187.056824][ T352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1187.126838][T28614] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.157789][T28614] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.281156][T28614] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.311234][T28614] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.441728][ T5915] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1187.452382][ T1211] usb 4-1: USB disconnect, device number 27 [ 1187.571581][ T5914] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1187.607533][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.627945][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.647147][ T5915] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1187.657350][ T5183] Bluetooth: hci3: command tx timeout [ 1187.691105][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.699678][ T5915] usb 5-1: Product: syz [ 1187.715895][ T5915] usb 5-1: Manufacturer: syz [ 1187.720555][ T5915] usb 5-1: SerialNumber: syz [ 1187.730153][ T5915] usb 5-1: config 0 descriptor?? [ 1187.739302][ T5915] ch341 5-1:0.0: ch341-uart converter detected [ 1187.752954][ T5914] usb 9-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1187.776536][ T5914] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1187.802065][ T5914] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1187.821395][ T5914] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.824145][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.853749][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.871511][ T5914] usb 9-1: Product: syz [ 1187.875774][ T5914] usb 9-1: Manufacturer: syz [ 1187.880430][ T5914] usb 9-1: SerialNumber: syz [ 1188.157181][ T462] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1188.469864][ T486] batadv0: entered promiscuous mode [ 1188.486972][ T486] bridge0: entered promiscuous mode [ 1188.501843][ T486] hsr1: entered allmulticast mode [ 1188.516547][ T486] batadv0: entered allmulticast mode [ 1188.527647][ T486] bridge0: entered allmulticast mode [ 1188.757073][ T5915] ch341-uart ttyUSB0: break control not supported, using simulated break [ 1188.797249][ T5915] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 1188.824047][ T462] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1188.831475][ T5915] usb 5-1: USB disconnect, device number 40 [ 1188.859808][ T5915] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1188.914600][ T5915] ch341 5-1:0.0: device disconnected [ 1189.058229][ T5914] cdc_ncm 9-1:1.0: bind() failure [ 1189.096238][ T5914] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1189.117016][ T5914] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1189.139431][ T5914] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 1189.199669][ T5914] usb 9-1: USB disconnect, device number 2 [ 1189.311383][ T5860] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1189.462198][ T509] pim6reg1: entered promiscuous mode [ 1189.469781][ T509] pim6reg1: entered allmulticast mode [ 1189.498742][ T5860] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.533324][ T5860] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1189.553135][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.580858][ T5860] usb 4-1: Product: syz [ 1189.600133][ T5860] usb 4-1: Manufacturer: syz [ 1189.616801][ T5860] usb 4-1: SerialNumber: syz [ 1189.731158][ T5183] Bluetooth: hci3: command tx timeout [ 1190.672859][ T5860] cdc_ncm 4-1:1.0: failed to get mac address [ 1190.693632][ T5860] cdc_ncm 4-1:1.0: bind() failure [ 1190.722924][ T5860] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1190.756305][ T5860] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1190.800266][ T5860] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1190.849294][ T5860] usb 4-1: USB disconnect, device number 28 [ 1191.470809][ T5860] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1191.661431][ T5860] usb 9-1: Using ep0 maxpacket: 8 [ 1191.691120][ T5860] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1191.718936][ T5860] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1191.779289][ T5860] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1191.825062][ T5860] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1191.876790][ T5860] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1191.929576][ T5860] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1191.975217][ T5860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.223351][ T5860] usb 9-1: GET_CAPABILITIES returned 0 [ 1192.250930][ T5860] usbtmc 9-1:16.0: can't read capabilities [ 1192.554741][ T5944] usb 9-1: USB disconnect, device number 3 [ 1192.557912][ T554] usbtmc 9-1:16.0: usb_control_msg returned -71 [ 1192.593304][ T581] usb 9-1: usbtmc_ioctl_clear_in_halt returned -19 [ 1194.566986][ T620] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 747 [ 1195.071458][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1195.273191][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1195.370863][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.451006][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.510808][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1195.514807][ T30] audit: type=1326 audit(1754803308.516:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=639 comm="syz.3.11213" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ae539 code=0x0 [ 1195.606441][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1195.657719][ T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1195.688156][ T9] usb 5-1: Manufacturer: syz [ 1195.749591][ T9] usb 5-1: config 0 descriptor?? [ 1196.193017][ T9] appleir 0003:05AC:8243.00A0: unknown main item tag 0x0 [ 1196.248383][ T9] appleir 0003:05AC:8243.00A0: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1196.619681][ T664] input: syz1 as /devices/virtual/input/input184 [ 1196.919726][ T672] ALSA: mixer_oss: invalid OSS volume ':' [ 1196.966584][ T672] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1196.993446][ T672] ALSA: mixer_oss: invalid OSS volume '2' [ 1197.031795][ T672] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1197.062139][ T672] ALSA: mixer_oss: invalid OSS volume '3' [ 1197.097501][ T672] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1198.272662][ T9] usb 5-1: USB disconnect, device number 41 [ 1198.374982][ T709] pim6reg1: entered promiscuous mode [ 1198.380346][ T709] pim6reg1: entered allmulticast mode [ 1198.490916][ T5915] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1198.708837][ T5915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.740210][ T5915] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1198.793764][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.877109][ T5915] usb 10-1: config 0 descriptor?? [ 1199.162984][ T5915] usbhid 10-1:0.0: can't add hid device: -71 [ 1199.169133][ T5915] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1199.273933][ T5915] usb 10-1: USB disconnect, device number 2 [ 1199.721874][ T5915] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1199.920927][ T5915] usb 10-1: Using ep0 maxpacket: 16 [ 1199.969657][ T5915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1199.990808][ T5915] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1200.025993][ T5944] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1200.068591][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.088233][ T5915] usb 10-1: config 0 descriptor?? [ 1200.142448][ T749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11247'. [ 1200.202339][ T751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11247'. [ 1200.249339][ T5944] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1200.290199][ T5944] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1200.338265][ T5944] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1200.380922][ T5944] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1200.418364][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.517529][ T5915] mcp2221 0003:04D8:00DD.00A1: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 1200.538952][ T737] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1200.928274][ T9] usb 10-1: USB disconnect, device number 3 [ 1201.078615][ T30] audit: type=1326 audit(1754803314.076:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=768 comm="syz.4.11252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 1201.147583][ T30] audit: type=1326 audit(1754803314.076:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=768 comm="syz.4.11252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 1201.220827][ T30] audit: type=1326 audit(1754803314.076:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=768 comm="syz.4.11252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 1201.270699][ T30] audit: type=1326 audit(1754803314.076:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=768 comm="syz.4.11252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 1201.360824][ T30] audit: type=1326 audit(1754803314.076:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=768 comm="syz.4.11252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 1201.440801][ T30] audit: type=1326 audit(1754803314.086:5298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=768 comm="syz.4.11252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 1201.550768][ T30] audit: type=1326 audit(1754803314.086:5299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=768 comm="syz.4.11252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 1201.650949][ T30] audit: type=1326 audit(1754803314.086:5300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=768 comm="syz.4.11252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 1201.778342][ T30] audit: type=1326 audit(1754803314.086:5301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=768 comm="syz.4.11252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 1201.880471][ T30] audit: type=1326 audit(1754803314.086:5302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=768 comm="syz.4.11252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 1202.200158][ T5944] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1202.226826][ T5944] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input185 [ 1202.366773][ T5944] usb 4-1: USB disconnect, device number 29 [ 1202.373129][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1202.384661][ T793] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11260'. [ 1202.422383][ T793] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11260'. [ 1202.551912][ T36] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1202.610306][ T13] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1202.676951][ T13] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1202.728967][ T13] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1205.613722][ T868] loop6: detected capacity change from 0 to 1 [ 1205.695382][ T6061] Dev loop6: unable to read RDB block 1 [ 1205.718095][ T6061] loop6: unable to read partition table [ 1205.761380][ T6061] loop6: partition table beyond EOD, truncated [ 1205.778604][ T868] Dev loop6: unable to read RDB block 1 [ 1205.812910][ T868] loop6: unable to read partition table [ 1205.849447][ T868] loop6: partition table beyond EOD, truncated [ 1205.890928][ T868] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1207.291316][ T909] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11300'. [ 1207.315458][ T913] netlink: 'syz.3.11301': attribute type 1 has an invalid length. [ 1207.369298][ T913] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11301'. [ 1207.799819][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1207.799839][ T30] audit: type=1326 audit(1754803320.796:5308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=927 comm="syz.4.11306" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f81539 code=0x0 [ 1207.843022][ T930] input: syz0 as /devices/virtual/input/input186 [ 1207.923913][ T5944] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1208.171209][ T5944] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.207560][ T5944] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1208.250710][ T5944] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1208.290848][ T5944] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1208.339586][ T5944] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1208.377700][ T5944] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1208.417353][ T5944] usb 10-1: Manufacturer: syz [ 1208.438666][ T5944] usb 10-1: config 0 descriptor?? [ 1208.975408][ T5944] rc_core: IR keymap rc-hauppauge not found [ 1209.004675][ T5944] Registered IR keymap rc-empty [ 1209.026607][ T5944] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1209.080941][ T5944] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1209.142224][ T5944] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1209.250490][ T5944] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input187 [ 1209.272521][ T965] loop6: detected capacity change from 0 to 7 [ 1209.332342][ T5944] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1209.333477][ T965] Dev loop6: unable to read RDB block 7 [ 1209.383824][ T5944] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1209.433802][ T5944] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1209.441374][ T965] loop6: unable to read partition table [ 1209.451114][ T965] loop6: partition table beyond EOD, truncated [ 1209.492424][ T965] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1209.499178][ T5944] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1209.560890][ T5944] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1209.626743][ T5944] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1209.670741][ T5944] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1209.726402][ T5944] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1209.775148][ T5944] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1209.830758][ T5944] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1209.909241][ T5944] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1209.961652][ T5944] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1210.011100][ T5944] usb 10-1: USB disconnect, device number 4 [ 1211.340841][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1211.523621][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1211.577732][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1211.631096][ T9] usb 4-1: config 0 has no interface number 0 [ 1211.637275][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1211.690016][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1211.717331][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.760757][ T9] usb 4-1: Product: syz [ 1211.764991][ T9] usb 4-1: Manufacturer: syz [ 1211.769611][ T9] usb 4-1: SerialNumber: syz [ 1211.832408][ T9] usb 4-1: config 0 descriptor?? [ 1211.882463][ T9] smsc75xx v1.0.0 [ 1212.071203][ T5948] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1212.273140][ T5948] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.321961][ T5948] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1212.356445][ T5948] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1212.400846][ T5948] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.486611][ T5948] usb 9-1: config 0 descriptor?? [ 1212.800918][ T5860] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1212.940362][ T5948] Bluetooth: Can't get version to change to load ram patch err [ 1212.984981][ T5948] Bluetooth: Loading patch file failed [ 1212.998291][ T5860] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1213.013190][ T5948] ath3k 9-1:0.0: probe with driver ath3k failed with error -32 [ 1213.035127][ T5860] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1213.073386][ T5948] usb 9-1: USB disconnect, device number 4 [ 1213.081526][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1213.102898][ T5860] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1213.124185][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1213.148412][ T5860] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1213.165875][ T5860] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1213.178530][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1213.199736][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1213.227336][ T5860] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1213.249940][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1213.274884][ T5860] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1213.299862][ T5860] usb 10-1: Product: syz [ 1213.315616][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1213.325777][ T5860] usb 10-1: Manufacturer: syz [ 1213.358142][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1213.377648][ T5860] cdc_wdm 10-1:1.0: skipping garbage [ 1213.397273][ T5860] cdc_wdm 10-1:1.0: skipping garbage [ 1213.418508][ T9] usb 4-1: USB disconnect, device number 30 [ 1213.431384][ T5860] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1213.463527][ T5860] cdc_wdm 10-1:1.0: Unknown control protocol [ 1213.700939][ T5860] usb 10-1: USB disconnect, device number 5 [ 1214.321353][ T5860] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1214.390749][ T5948] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1214.458404][ T1079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11345'. [ 1214.491033][ T5860] usb 9-1: Using ep0 maxpacket: 16 [ 1214.514194][ T5860] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.550956][ T5860] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1214.572558][ T5948] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1214.586377][ T5948] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1214.597414][ T5860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.641905][ T5860] usb 9-1: config 0 descriptor?? [ 1214.647018][ T5948] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1214.700173][ T5948] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1214.750702][ T5948] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1214.813723][ T5948] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1214.830715][ T5948] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1214.847625][ T5948] usb 10-1: Product: syz [ 1214.900788][ T5948] usb 10-1: Manufacturer: syz [ 1214.945850][ T5948] cdc_wdm 10-1:1.0: skipping garbage [ 1214.964718][ T1069] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11342'. [ 1214.970857][ T5948] cdc_wdm 10-1:1.0: skipping garbage [ 1215.011676][ T5948] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1215.017728][ T5948] cdc_wdm 10-1:1.0: Unknown control protocol [ 1215.019040][ T5944] usb 9-1: USB disconnect, device number 5 [ 1215.103208][ T5948] hid-generic 0000:0000:0000.00A2: unknown main item tag 0x0 [ 1215.172873][ T5948] hid-generic 0000:0000:0000.00A2: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1215.272363][ T5944] usb 10-1: USB disconnect, device number 6 [ 1216.722992][ T1136] input: syz0 as /devices/virtual/input/input188 [ 1217.162490][ T5860] hid-generic 0000:0000:0000.00A3: unknown main item tag 0x0 [ 1217.238406][ T5860] hid-generic 0000:0000:0000.00A3: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1219.060721][ T5915] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1219.240717][ T5915] usb 9-1: Using ep0 maxpacket: 8 [ 1219.258612][ T5915] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.297993][ T5915] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1219.334558][ T5915] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.378660][ T5915] usb 9-1: config 0 descriptor?? [ 1219.422973][ T5915] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1220.630054][ T5915] gspca_vc032x: reg_w err -71 [ 1220.641238][ T5915] vc032x 9-1:0.0: probe with driver vc032x failed with error -71 [ 1220.668122][ T5915] usb 9-1: USB disconnect, device number 6 [ 1222.518315][ T1301] pimreg: entered allmulticast mode [ 1223.509019][ T1337] loop2: detected capacity change from 0 to 7 [ 1223.584266][ T1337] Dev loop2: unable to read RDB block 7 [ 1223.620761][ T1337] loop2: unable to read partition table [ 1223.646209][ T1337] loop2: partition table beyond EOD, truncated [ 1223.679500][ T1337] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1224.560803][ T1211] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1224.792888][ T1211] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.818583][ T1211] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.855381][ T1211] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1224.930532][ T1211] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1224.969921][ T1211] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.004835][ T1211] usb 9-1: config 0 descriptor?? [ 1225.445355][ T1211] plantronics 0003:047F:FFFF.00A4: reserved main item tag 0xd [ 1225.523250][ T1211] plantronics 0003:047F:FFFF.00A4: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1225.782383][ T1211] usb 9-1: USB disconnect, device number 7 [ 1225.859020][ T1403] fido_id[1403]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1226.023511][ T30] audit: type=1326 audit(1754803339.026:5309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.4.11445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 1226.137808][ T30] audit: type=1326 audit(1754803339.026:5310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.4.11445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 1226.260841][ T30] audit: type=1326 audit(1754803339.026:5311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.4.11445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 1226.359284][ T30] audit: type=1326 audit(1754803339.026:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.4.11445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 1226.529513][ T30] audit: type=1326 audit(1754803339.056:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.4.11445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 1226.663478][ T30] audit: type=1326 audit(1754803339.056:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.4.11445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 1226.818480][ T30] audit: type=1326 audit(1754803339.056:5315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.4.11445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 1226.909462][ T30] audit: type=1326 audit(1754803339.056:5316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.4.11445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 1227.010074][ T1440] binder: 1439:1440 ioctl c0306201 800001c0 returned -22 [ 1227.018081][ T30] audit: type=1326 audit(1754803339.056:5317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.4.11445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 1227.106589][ T30] audit: type=1326 audit(1754803339.056:5318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1412 comm="syz.4.11445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f81558 code=0x7ffc0000 [ 1228.201149][ T5915] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1228.405842][ T5915] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1228.434746][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.446016][ T5915] usb 5-1: Product: syz [ 1228.477227][ T5915] usb 5-1: Manufacturer: syz [ 1228.487931][ T5915] usb 5-1: SerialNumber: syz [ 1228.516472][ T5915] usb 5-1: config 0 descriptor?? [ 1228.563066][T28614] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.793243][ T5915] usb 5-1: ignoring: probably an ADSL modem [ 1228.804279][T28614] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.996358][T28614] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.197352][ T5915] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1229.270492][T28614] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.413256][ T1495] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1229.420153][ T1495] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1229.456418][ T1495] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1229.485921][ T5915] usb 5-1: USB disconnect, device number 42 [ 1229.543302][ T1495] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1229.550186][ T1495] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1229.647058][ T1495] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1229.882485][T28614] bridge_slave_1: left allmulticast mode [ 1229.903403][T28614] bridge_slave_1: left promiscuous mode [ 1229.929671][T28614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.989103][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1230.010852][T28614] bridge_slave_0: left allmulticast mode [ 1230.010864][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1230.016543][T28614] bridge_slave_0: left promiscuous mode [ 1230.050894][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1230.063811][T28614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.073283][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1230.101030][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1230.225319][ T1516] input: syz1 as /devices/virtual/input/input190 [ 1230.411208][ T5944] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1230.619335][ T5944] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.646893][ T5944] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.688703][ T5944] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1230.696315][ T5944] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1230.723448][ T5944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.735069][ T5944] usb 10-1: config 0 descriptor?? [ 1231.343607][T28614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.354146][ T5944] usb 10-1: string descriptor 0 read error: -22 [ 1231.365506][T28614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1231.378671][T28614] bond0 (unregistering): Released all slaves [ 1231.501579][ T5863] Bluetooth: hci1: command 0x0c1a tx timeout [ 1231.583765][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout [ 1231.613033][ T5944] input: HID 256c:006d as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.00A5/input/input191 [ 1231.782112][ T5944] uclogic 0003:256C:006D.00A5: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.9-1/input0 [ 1231.875720][ T5944] usb 10-1: USB disconnect, device number 7 [ 1232.028409][ T1542] fido_id[1542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1232.130927][ T5863] Bluetooth: hci0: command tx timeout [ 1232.872707][ T1517] chnl_net:caif_netlink_parms(): no params data found [ 1233.170831][T28614] hsr_slave_0: left promiscuous mode [ 1233.223078][T28614] hsr_slave_1: left promiscuous mode [ 1233.236304][T28614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1233.243981][T28614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1233.301826][T28614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1233.309303][T28614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1233.403513][T28614] veth1_macvtap: left promiscuous mode [ 1233.415789][T28614] veth0_macvtap: left promiscuous mode [ 1233.428696][T28614] veth1_vlan: left promiscuous mode [ 1233.449856][T28614] veth0_vlan: left promiscuous mode [ 1233.549998][ T5183] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1233.561206][ T5183] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1233.562993][ T5860] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1233.575907][ T5183] Bluetooth: hci1: command 0x0c1a tx timeout [ 1233.589667][ T5183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1233.610360][ T5183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1233.626727][ T5183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1233.655972][ T5183] Bluetooth: hci3: command 0x0c1a tx timeout [ 1233.763583][ T5860] usb 9-1: Using ep0 maxpacket: 8 [ 1233.777991][ T5860] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1233.821883][ T5860] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1233.839400][ T5860] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1233.862399][ T5860] usb 9-1: string descriptor 0 read error: -71 [ 1233.879995][ T5860] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1233.889411][ T5860] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.913241][ T5860] usb 9-1: rejected 1 configuration due to insufficient available bus power [ 1233.936338][ T5860] usb 9-1: no configuration chosen from 1 choice [ 1233.953376][ T5860] usb 9-1: USB disconnect, device number 8 [ 1234.214660][ T5183] Bluetooth: hci0: command tx timeout [ 1234.395303][T28614] team0 (unregistering): Port device team_slave_1 removed [ 1234.455431][T28614] team0 (unregistering): Port device team_slave_0 removed [ 1235.626584][ T1586] pim6reg1: entered promiscuous mode [ 1235.632055][ T1586] pim6reg1: entered allmulticast mode [ 1235.652063][ T5183] Bluetooth: hci1: command 0x0c1a tx timeout [ 1235.730849][ T5183] Bluetooth: hci3: command 0x0c1a tx timeout [ 1235.735218][ T5863] Bluetooth: hci2: command tx timeout [ 1236.173245][ T1517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.188300][ T1517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.196714][ T1517] bridge_slave_0: entered allmulticast mode [ 1236.206648][ T1517] bridge_slave_0: entered promiscuous mode [ 1236.291142][ T5863] Bluetooth: hci0: command tx timeout [ 1236.471873][ T1517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.510997][ T1517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.518314][ T1517] bridge_slave_1: entered allmulticast mode [ 1236.541778][ T1517] bridge_slave_1: entered promiscuous mode [ 1236.658245][ T1517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.678288][ T1517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1236.980219][ T1517] team0: Port device team_slave_0 added [ 1237.007364][ T1517] team0: Port device team_slave_1 added [ 1237.233580][ T1517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.251245][ T1517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.296861][ T1517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.349181][ T1517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.358642][ T1517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.385887][ T1517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.442140][T28614] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.664823][T28614] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.810794][ T5863] Bluetooth: hci2: command tx timeout [ 1237.862752][T28614] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.993506][ T1642] loop2: detected capacity change from 0 to 7 [ 1238.004108][ T1517] hsr_slave_0: entered promiscuous mode [ 1238.013311][ T1517] hsr_slave_1: entered promiscuous mode [ 1238.065880][ T1642] Dev loop2: unable to read RDB block 7 [ 1238.090820][ T1642] loop2: unable to read partition table [ 1238.117844][ T1642] loop2: partition table beyond EOD, truncated [ 1238.136084][ T1642] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1238.288163][T28614] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.373335][ T5863] Bluetooth: hci0: command tx timeout [ 1238.779044][ T1578] chnl_net:caif_netlink_parms(): no params data found [ 1238.866940][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.873787][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.216319][ T1674] ALSA: mixer_oss: invalid OSS volume ':' [ 1239.226968][ T1674] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1239.243710][ T1674] ALSA: mixer_oss: invalid OSS volume '2' [ 1239.259304][ T1674] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1239.284562][ T1674] ALSA: mixer_oss: invalid OSS volume '3' [ 1239.290535][ T1674] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1239.367799][T28614] bridge_slave_1: left allmulticast mode [ 1239.378239][T28614] bridge_slave_1: left promiscuous mode [ 1239.385858][T28614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.422740][T28614] bridge_slave_0: left allmulticast mode [ 1239.430135][T28614] bridge_slave_0: left promiscuous mode [ 1239.436552][T28614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.622180][T28614] ip6gretap0 (unregistering): left allmulticast mode [ 1239.627772][ T1683] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11524'. [ 1239.638856][ T1683] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11524'. [ 1239.880312][T28614] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1239.892119][ T5863] Bluetooth: hci2: command tx timeout [ 1240.238456][T28614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1240.250427][T28614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1240.261802][T28614] bond0 (unregistering): Released all slaves [ 1240.422931][T28614] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1240.431364][T28614] bond2 (unregistering): left promiscuous mode [ 1240.438327][T28614] bond1 (unregistering): Released all slaves [ 1240.599577][T28614] bond2 (unregistering): Released all slaves [ 1240.755691][T28614] bond3 (unregistering): Released all slaves [ 1240.910269][ T1578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.917706][ T1578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.931144][ T1578] bridge_slave_0: entered allmulticast mode [ 1240.939340][ T1578] bridge_slave_0: entered promiscuous mode [ 1240.971341][ T1578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.984055][ T1578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.003499][ T1578] bridge_slave_1: entered allmulticast mode [ 1241.011752][ T1578] bridge_slave_1: entered promiscuous mode [ 1241.036919][ T13] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1241.224145][ T13] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1241.256811][ T13] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1241.298638][ T1578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.329285][ T1578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.450574][ T13] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1241.753044][ T1578] team0: Port device team_slave_0 added [ 1241.971331][ T5863] Bluetooth: hci2: command tx timeout [ 1242.024467][ T1578] team0: Port device team_slave_1 added [ 1242.140105][T28614] hsr_slave_0: left promiscuous mode [ 1242.154090][T28614] hsr_slave_1: left promiscuous mode [ 1242.160391][T28614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.170102][T28614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.179488][T28614] batman_adv: batadv0: Removing interface: macvtap1 [ 1242.206458][T28614] pimreg (unregistering): left allmulticast mode [ 1243.144286][ T1578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1243.156535][ T1578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1243.227053][ T1578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.320121][ T30] kauditd_printk_skb: 130 callbacks suppressed [ 1243.320146][ T30] audit: type=1326 audit(1754803356.306:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1709 comm="syz.9.11528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 1243.378065][ T30] audit: type=1326 audit(1754803356.356:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1709 comm="syz.9.11528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f91558 code=0x7ffc0000 [ 1243.401691][ T1578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.408656][ T1578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1243.529386][ T30] audit: type=1326 audit(1754803356.356:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1709 comm="syz.9.11528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 1243.568324][ T1578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.719233][ T30] audit: type=1326 audit(1754803356.356:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1709 comm="syz.9.11528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f91558 code=0x7ffc0000 [ 1243.837173][ T1578] hsr_slave_0: entered promiscuous mode [ 1243.859389][ T1578] hsr_slave_1: entered promiscuous mode [ 1243.863965][ T30] audit: type=1326 audit(1754803356.356:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1709 comm="syz.9.11528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 1243.868207][ T1578] debugfs: 'hsr0' already exists in 'hsr' [ 1243.907711][ T1578] Cannot create hsr debugfs directory [ 1244.054544][ T30] audit: type=1326 audit(1754803356.356:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1709 comm="syz.9.11528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f91558 code=0x7ffc0000 [ 1244.131255][ T30] audit: type=1326 audit(1754803356.356:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1709 comm="syz.9.11528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 1244.166408][ T1517] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1244.179649][ T30] audit: type=1326 audit(1754803356.356:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1709 comm="syz.9.11528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 1244.229752][ T30] audit: type=1326 audit(1754803356.356:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1709 comm="syz.9.11528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 1244.253200][ T30] audit: type=1326 audit(1754803356.356:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1709 comm="syz.9.11528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 1244.298198][ T1517] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1244.365845][ T1517] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1244.550691][ T1517] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1245.117587][ T5950] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1245.287041][ T5950] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1245.313542][ T5950] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.346787][ T5950] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1245.378190][ T5950] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1245.405681][ T5950] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1245.450982][ T5950] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1245.469394][ T5950] usb 9-1: Manufacturer: syz [ 1245.533184][ T5950] usb 9-1: config 0 descriptor?? [ 1246.003336][ T5950] appleir 0003:05AC:8243.00A6: unknown main item tag 0x0 [ 1246.086309][ T5950] appleir 0003:05AC:8243.00A6: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 1246.232458][ T1517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1246.290227][ T1517] 8021q: adding VLAN 0 to HW filter on device team0 [ 1246.356868][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.364113][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1246.401957][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.409148][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1246.560253][ T1578] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1246.575240][ T1578] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1246.603470][ T1578] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1246.623496][ T1578] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1246.699319][ T1517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1246.848206][ T1517] veth0_vlan: entered promiscuous mode [ 1246.887716][ T1517] veth1_vlan: entered promiscuous mode [ 1246.928897][ T1578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1246.997096][ T1578] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.019570][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.026808][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1247.066651][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.073924][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1247.191290][ T1517] veth0_macvtap: entered promiscuous mode [ 1247.269765][ T1517] veth1_macvtap: entered promiscuous mode [ 1247.468491][ T1517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.517854][ T1517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.635181][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.644450][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.675919][ T56] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.685601][ T56] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.846158][ T1578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1247.969089][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1247.987634][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.088804][ T3012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.106478][ T1578] veth0_vlan: entered promiscuous mode [ 1248.112968][ T3012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.159042][ T1578] veth1_vlan: entered promiscuous mode [ 1248.171225][T22853] usb 9-1: USB disconnect, device number 9 [ 1248.304408][ T1578] veth0_macvtap: entered promiscuous mode [ 1248.364190][ T1578] veth1_macvtap: entered promiscuous mode [ 1248.476016][ T1578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1248.535359][ T1578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1248.634824][ T1342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.657558][ T1097] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.702199][ T3012] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.741698][ T3012] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.176962][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.196961][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.368610][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.405999][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.345009][ T1826] loop6: detected capacity change from 0 to 7 [ 1250.407354][ T1826] Dev loop6: unable to read RDB block 7 [ 1250.427851][ T1828] pim6reg1: entered promiscuous mode [ 1250.441959][ T1826] loop6: unable to read partition table [ 1250.457929][ T1828] pim6reg1: entered allmulticast mode [ 1250.491360][ T1826] loop6: partition table beyond EOD, truncated [ 1250.511820][ T1826] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1251.858351][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 1251.858373][ T30] audit: type=1326 audit(1754803364.826:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1855 comm="syz.9.11582" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f91539 code=0x0 [ 1253.067540][ T1893] sctp: [Deprecated]: syz.7.11581 (pid 1893) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1253.067540][ T1893] Use struct sctp_sack_info instead [ 1253.190791][ T5944] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1253.368105][ T5944] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.409275][ T5944] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1253.426401][ T5944] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.440759][ T5944] usb 9-1: Product: syz [ 1253.450928][ T5944] usb 9-1: Manufacturer: syz [ 1253.460761][ T5944] usb 9-1: SerialNumber: syz [ 1253.938469][T22853] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1254.120797][T22853] usb 5-1: Using ep0 maxpacket: 8 [ 1254.148507][T22853] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1254.178311][T22853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.208192][ T1908] pim6reg1: entered promiscuous mode [ 1254.240941][ T1908] pim6reg1: entered allmulticast mode [ 1254.274755][T22853] usb 5-1: Product: syz [ 1254.278993][T22853] usb 5-1: Manufacturer: syz [ 1254.337880][T22853] usb 5-1: SerialNumber: syz [ 1254.394382][T22853] usb 5-1: config 0 descriptor?? [ 1254.442249][T22853] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1254.609609][ T5944] cdc_ncm 9-1:1.0: failed to get mac address [ 1254.643624][ T5944] cdc_ncm 9-1:1.0: bind() failure [ 1254.710729][ T5944] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1254.770890][ T5944] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1254.798902][ T5944] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 1254.879647][ T5944] usb 9-1: USB disconnect, device number 10 [ 1255.706299][T22853] gspca_sonixj: reg_w1 err -71 [ 1255.730986][T22853] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1255.781306][T22853] usb 5-1: USB disconnect, device number 43 [ 1257.269320][ T1953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11595'. [ 1257.321170][ T1953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11595'. [ 1257.836346][ T1960] netlink: 'syz.8.11597': attribute type 3 has an invalid length. [ 1257.867166][ T1960] netlink: 716 bytes leftover after parsing attributes in process `syz.8.11597'. [ 1258.240293][T22853] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 1258.300711][T22853] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 1258.343389][T22853] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 1258.401985][T22853] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 1258.437358][T22853] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 1258.490965][T22853] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 1258.498461][T22853] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 1258.599389][T22853] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 1258.664306][T22853] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 1258.705367][T22853] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 1258.784328][T22853] hid-generic 0000:0000:0000.00A7: hidraw0: HID v0.00 Device [] on [ 1260.115846][ T1994] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.11606'. [ 1260.431274][T22853] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1260.631768][T22853] usb 2-1: Using ep0 maxpacket: 16 [ 1260.681845][T22853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.716507][T22853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1260.756970][T22853] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1260.826816][T22853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.856502][T22853] usb 2-1: config 0 descriptor?? [ 1261.460812][ T5948] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1261.620789][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 1261.648216][ T5948] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1261.688182][ T5948] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1261.710380][ T5948] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1261.726146][ T5948] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1261.760899][ T5948] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1261.791308][ T5948] usb 5-1: config 0 has no interface number 0 [ 1261.797502][ T5948] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1261.879625][ T5948] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1261.920223][T22853] letsketch 0003:6161:4D15.00A8: Device info: ఁ [ 1261.926846][ T5948] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1261.947503][ T5948] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1262.007108][ T5948] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1262.041276][ T5948] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1262.072222][ T5948] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1262.095651][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.129125][ T5948] usb 5-1: Product: syz [ 1262.134247][ T5948] usb 5-1: Manufacturer: syz [ 1262.156885][ T5948] usb 5-1: SerialNumber: syz [ 1262.171678][T22853] usb 2-1: Max retries (5) exceeded reading string descriptor 201 [ 1262.208753][ T5948] usb 5-1: config 0 descriptor?? [ 1262.214093][T22853] letsketch 0003:6161:4D15.00A8: probe with driver letsketch failed with error -71 [ 1262.256303][ T5948] usb 5-1: selecting invalid altsetting 2 [ 1262.285191][T22853] usb 2-1: USB disconnect, device number 120 [ 1262.846440][ T2037] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11617'. [ 1262.893604][ T2037] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11617'. [ 1263.160783][ T5950] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1263.320799][ T5950] usb 2-1: Using ep0 maxpacket: 8 [ 1263.336072][ T5950] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1263.357538][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.366795][ T5948] usb 5-1: USB disconnect, device number 44 [ 1263.393871][ T5950] usb 2-1: Product: syz [ 1263.411568][ T5950] usb 2-1: Manufacturer: syz [ 1263.436536][ T5950] usb 2-1: SerialNumber: syz [ 1263.461614][ T5950] usb 2-1: config 0 descriptor?? [ 1263.483885][ T5950] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1264.743763][ T5950] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 1264.960780][ T5950] gspca_sq930x: Sensor ov9630 not yet treated [ 1264.966999][ T5950] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 1264.998179][ T5950] usb 2-1: USB disconnect, device number 121 [ 1265.651085][ T2106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11623'. [ 1265.710342][ T2106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11623'. [ 1267.358693][ T2155] [ 1267.361085][ T2155] ===================================================== [ 1267.368035][ T2155] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1267.375519][ T2155] 6.16.0-syzkaller-12256-g561c80369df0 #0 Not tainted [ 1267.382301][ T2155] ----------------------------------------------------- [ 1267.389249][ T2155] syz.1.11643/2155 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1267.397090][ T2155] ffff888078da8c90 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1267.405853][ T2155] [ 1267.405853][ T2155] and this task is already holding: [ 1267.413236][ T2155] ffff888044071028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1267.423034][ T2155] which would create a new lock dependency: [ 1267.429286][ T2155] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1267.437435][ T2155] [ 1267.437435][ T2155] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1267.446902][ T2155] (&dev->event_lock#2){..-.}-{3:3} [ 1267.446947][ T2155] [ 1267.446947][ T2155] ... which became SOFTIRQ-irq-safe at: [ 1267.460051][ T2155] lock_acquire+0x120/0x360 [ 1267.464684][ T2155] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1267.470002][ T2155] input_event+0x76/0xe0 [ 1267.474360][ T2155] xpad360_process_packet+0xda/0xdd0 [ 1267.479762][ T2155] xpad_irq_in+0x14e/0x2590 [ 1267.484383][ T2155] __usb_hcd_giveback_urb+0x417/0x690 [ 1267.489870][ T2155] dummy_timer+0x862/0x4550 [ 1267.494474][ T2155] __hrtimer_run_queues+0x52c/0xc60 [ 1267.499767][ T2155] hrtimer_run_softirq+0x187/0x2b0 [ 1267.504971][ T2155] handle_softirqs+0x283/0x870 [ 1267.509831][ T2155] __irq_exit_rcu+0xca/0x1f0 [ 1267.514524][ T2155] irq_exit_rcu+0x9/0x30 [ 1267.518862][ T2155] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1267.525024][ T2155] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1267.531099][ T2155] fdget_pos+0x12f/0x320 [ 1267.535431][ T2155] ksys_write+0x79/0x250 [ 1267.539768][ T2155] do_syscall_64+0xfa/0x3b0 [ 1267.544370][ T2155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.550349][ T2155] [ 1267.550349][ T2155] to a SOFTIRQ-irq-unsafe lock: [ 1267.557363][ T2155] (tasklist_lock){.+.+}-{3:3} [ 1267.557391][ T2155] [ 1267.557391][ T2155] ... which became SOFTIRQ-irq-unsafe at: [ 1267.570015][ T2155] ... [ 1267.570024][ T2155] lock_acquire+0x120/0x360 [ 1267.577197][ T2155] _raw_read_lock+0x36/0x50 [ 1267.581792][ T2155] __do_wait+0xde/0x740 [ 1267.586045][ T2155] do_wait+0x1f8/0x520 [ 1267.590200][ T2155] kernel_wait+0xab/0x170 [ 1267.594619][ T2155] call_usermodehelper_exec_work+0xbe/0x230 [ 1267.600605][ T2155] process_scheduled_works+0xade/0x17b0 [ 1267.606235][ T2155] worker_thread+0x8a0/0xda0 [ 1267.610912][ T2155] kthread+0x70e/0x8a0 [ 1267.615070][ T2155] ret_from_fork+0x3fc/0x770 [ 1267.619744][ T2155] ret_from_fork_asm+0x1a/0x30 [ 1267.624616][ T2155] [ 1267.624616][ T2155] other info that might help us debug this: [ 1267.624616][ T2155] [ 1267.634841][ T2155] Chain exists of: [ 1267.634841][ T2155] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1267.634841][ T2155] [ 1267.648414][ T2155] Possible interrupt unsafe locking scenario: [ 1267.648414][ T2155] [ 1267.656731][ T2155] CPU0 CPU1 [ 1267.662097][ T2155] ---- ---- [ 1267.667457][ T2155] lock(tasklist_lock); [ 1267.671704][ T2155] local_irq_disable(); [ 1267.678463][ T2155] lock(&dev->event_lock#2); [ 1267.685665][ T2155] lock(&client->buffer_lock); [ 1267.693129][ T2155] [ 1267.696589][ T2155] lock(&dev->event_lock#2); [ 1267.701463][ T2155] [ 1267.701463][ T2155] *** DEADLOCK *** [ 1267.701463][ T2155] [ 1267.709700][ T2155] 7 locks held by syz.1.11643/2155: [ 1267.714897][ T2155] #0: ffff888029162118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1267.724148][ T2155] #1: ffff888147297230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1267.734267][ T2155] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1267.743949][ T2155] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1267.753539][ T2155] #4: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1267.762699][ T2155] #5: ffff888044071028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1267.772910][ T2155] #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1267.781977][ T2155] [ 1267.781977][ T2155] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1267.792384][ T2155] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1267.798046][ T2155] IN-SOFTIRQ-W at: [ 1267.802122][ T2155] lock_acquire+0x120/0x360 [ 1267.808464][ T2155] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1267.815490][ T2155] input_event+0x76/0xe0 [ 1267.821562][ T2155] xpad360_process_packet+0xda/0xdd0 [ 1267.828674][ T2155] xpad_irq_in+0x14e/0x2590 [ 1267.835010][ T2155] __usb_hcd_giveback_urb+0x417/0x690 [ 1267.842219][ T2155] dummy_timer+0x862/0x4550 [ 1267.848550][ T2155] __hrtimer_run_queues+0x52c/0xc60 [ 1267.855578][ T2155] hrtimer_run_softirq+0x187/0x2b0 [ 1267.862512][ T2155] handle_softirqs+0x283/0x870 [ 1267.869102][ T2155] __irq_exit_rcu+0xca/0x1f0 [ 1267.875514][ T2155] irq_exit_rcu+0x9/0x30 [ 1267.881668][ T2155] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1267.889144][ T2155] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1267.896970][ T2155] fdget_pos+0x12f/0x320 [ 1267.903050][ T2155] ksys_write+0x79/0x250 [ 1267.909142][ T2155] do_syscall_64+0xfa/0x3b0 [ 1267.915497][ T2155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.923310][ T2155] INITIAL USE at: [ 1267.927297][ T2155] lock_acquire+0x120/0x360 [ 1267.933559][ T2155] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1267.940634][ T2155] input_inject_event+0xa5/0x340 [ 1267.947330][ T2155] kbd_led_trigger_activate+0xbc/0x100 [ 1267.954545][ T2155] led_trigger_set+0x52d/0x950 [ 1267.961148][ T2155] led_trigger_set_default+0x260/0x2a0 [ 1267.968367][ T2155] led_classdev_register_ext+0x73d/0x930 [ 1267.975750][ T2155] input_leds_connect+0x517/0x790 [ 1267.982525][ T2155] input_register_device+0xcfd/0x1140 [ 1267.989658][ T2155] atkbd_connect+0x72e/0xa00 [ 1267.996004][ T2155] serio_driver_probe+0x82/0xd0 [ 1268.002612][ T2155] really_probe+0x26d/0x9e0 [ 1268.008858][ T2155] __driver_probe_device+0x18c/0x2f0 [ 1268.015885][ T2155] driver_probe_device+0x4f/0x430 [ 1268.022656][ T2155] __driver_attach+0x452/0x700 [ 1268.029166][ T2155] bus_for_each_dev+0x233/0x2b0 [ 1268.035772][ T2155] serio_handle_event+0x1f9/0x8d0 [ 1268.042541][ T2155] process_scheduled_works+0xade/0x17b0 [ 1268.049825][ T2155] worker_thread+0x8a0/0xda0 [ 1268.056152][ T2155] kthread+0x70e/0x8a0 [ 1268.061962][ T2155] ret_from_fork+0x3fc/0x770 [ 1268.068289][ T2155] ret_from_fork_asm+0x1a/0x30 [ 1268.074794][ T2155] } [ 1268.077378][ T2155] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1268.086486][ T2155] -> (&client->buffer_lock){....}-{3:3} { [ 1268.092240][ T2155] INITIAL USE at: [ 1268.096221][ T2155] lock_acquire+0x120/0x360 [ 1268.102299][ T2155] _raw_spin_lock+0x2e/0x40 [ 1268.108779][ T2155] evdev_pass_values+0xb9/0xbd0 [ 1268.115202][ T2155] evdev_events+0x1e6/0x340 [ 1268.121445][ T2155] input_pass_values+0x285/0x890 [ 1268.127961][ T2155] input_event_dispose+0x330/0x6b0 [ 1268.134727][ T2155] input_inject_event+0x1dd/0x340 [ 1268.141319][ T2155] evdev_write+0x2fc/0x480 [ 1268.147394][ T2155] vfs_write+0x27b/0xb30 [ 1268.153207][ T2155] ksys_write+0x145/0x250 [ 1268.159147][ T2155] __do_fast_syscall_32+0xb6/0x2b0 [ 1268.165836][ T2155] do_fast_syscall_32+0x34/0x80 [ 1268.172257][ T2155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1268.180155][ T2155] } [ 1268.182651][ T2155] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1268.190920][ T2155] ... acquired at: [ 1268.194721][ T2155] lock_acquire+0x120/0x360 [ 1268.199402][ T2155] _raw_spin_lock+0x2e/0x40 [ 1268.204175][ T2155] evdev_pass_values+0xb9/0xbd0 [ 1268.209206][ T2155] evdev_events+0x1e6/0x340 [ 1268.213887][ T2155] input_pass_values+0x285/0x890 [ 1268.219002][ T2155] input_event_dispose+0x330/0x6b0 [ 1268.224288][ T2155] input_inject_event+0x1dd/0x340 [ 1268.229483][ T2155] evdev_write+0x2fc/0x480 [ 1268.234085][ T2155] vfs_write+0x27b/0xb30 [ 1268.238516][ T2155] ksys_write+0x145/0x250 [ 1268.243026][ T2155] __do_fast_syscall_32+0xb6/0x2b0 [ 1268.248320][ T2155] do_fast_syscall_32+0x34/0x80 [ 1268.253348][ T2155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1268.259849][ T2155] [ 1268.262167][ T2155] [ 1268.262167][ T2155] the dependencies between the lock to be acquired [ 1268.262177][ T2155] and SOFTIRQ-irq-unsafe lock: [ 1268.275684][ T2155] -> (tasklist_lock){.+.+}-{3:3} { [ 1268.280991][ T2155] HARDIRQ-ON-R at: [ 1268.285144][ T2155] lock_acquire+0x120/0x360 [ 1268.291650][ T2155] _raw_read_lock+0x36/0x50 [ 1268.298150][ T2155] __do_wait+0xde/0x740 [ 1268.304305][ T2155] do_wait+0x1f8/0x520 [ 1268.310375][ T2155] kernel_wait+0xab/0x170 [ 1268.316789][ T2155] call_usermodehelper_exec_work+0xbe/0x230 [ 1268.324865][ T2155] process_scheduled_works+0xade/0x17b0 [ 1268.332438][ T2155] worker_thread+0x8a0/0xda0 [ 1268.339027][ T2155] kthread+0x70e/0x8a0 [ 1268.345101][ T2155] ret_from_fork+0x3fc/0x770 [ 1268.351690][ T2155] ret_from_fork_asm+0x1a/0x30 [ 1268.358456][ T2155] SOFTIRQ-ON-R at: [ 1268.362611][ T2155] lock_acquire+0x120/0x360 [ 1268.369116][ T2155] _raw_read_lock+0x36/0x50 [ 1268.375620][ T2155] __do_wait+0xde/0x740 [ 1268.381779][ T2155] do_wait+0x1f8/0x520 [ 1268.387854][ T2155] kernel_wait+0xab/0x170 [ 1268.394184][ T2155] call_usermodehelper_exec_work+0xbe/0x230 [ 1268.402084][ T2155] process_scheduled_works+0xade/0x17b0 [ 1268.409626][ T2155] worker_thread+0x8a0/0xda0 [ 1268.416212][ T2155] kthread+0x70e/0x8a0 [ 1268.422278][ T2155] ret_from_fork+0x3fc/0x770 [ 1268.428864][ T2155] ret_from_fork_asm+0x1a/0x30 [ 1268.435630][ T2155] INITIAL USE at: [ 1268.439708][ T2155] lock_acquire+0x120/0x360 [ 1268.446132][ T2155] _raw_write_lock_irq+0xa2/0xf0 [ 1268.452985][ T2155] copy_process+0x224f/0x3c00 [ 1268.459573][ T2155] kernel_clone+0x21e/0x840 [ 1268.465995][ T2155] user_mode_thread+0xdd/0x140 [ 1268.472673][ T2155] rest_init+0x23/0x300 [ 1268.478738][ T2155] start_kernel+0x3a9/0x410 [ 1268.485152][ T2155] x86_64_start_reservations+0x24/0x30 [ 1268.492527][ T2155] x86_64_start_kernel+0x143/0x1c0 [ 1268.499552][ T2155] common_startup_64+0x13e/0x147 [ 1268.506412][ T2155] INITIAL READ USE at: [ 1268.510912][ T2155] lock_acquire+0x120/0x360 [ 1268.517764][ T2155] _raw_read_lock+0x36/0x50 [ 1268.524702][ T2155] __do_wait+0xde/0x740 [ 1268.531210][ T2155] do_wait+0x1f8/0x520 [ 1268.537626][ T2155] kernel_wait+0xab/0x170 [ 1268.544303][ T2155] call_usermodehelper_exec_work+0xbe/0x230 [ 1268.552551][ T2155] process_scheduled_works+0xade/0x17b0 [ 1268.560447][ T2155] worker_thread+0x8a0/0xda0 [ 1268.567379][ T2155] kthread+0x70e/0x8a0 [ 1268.573797][ T2155] ret_from_fork+0x3fc/0x770 [ 1268.580740][ T2155] ret_from_fork_asm+0x1a/0x30 [ 1268.587856][ T2155] } [ 1268.590533][ T2155] ... key at: [] tasklist_lock+0x18/0x40 [ 1268.598436][ T2155] ... acquired at: [ 1268.602407][ T2155] lock_acquire+0x120/0x360 [ 1268.607088][ T2155] _raw_read_lock+0x36/0x50 [ 1268.611767][ T2155] send_sigurg+0x12b/0x420 [ 1268.616364][ T2155] sk_send_sigurg+0x6c/0x2e0 [ 1268.621131][ T2155] queue_oob+0x420/0x4f0 [ 1268.625555][ T2155] unix_stream_sendmsg+0xc3f/0xdf0 [ 1268.630851][ T2155] __sock_sendmsg+0x21c/0x270 [ 1268.635708][ T2155] ____sys_sendmsg+0x52d/0x830 [ 1268.640642][ T2155] ___sys_sendmsg+0x21f/0x2a0 [ 1268.645491][ T2155] __sys_sendmmsg+0x28e/0x430 [ 1268.650352][ T2155] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1268.656081][ T2155] __do_fast_syscall_32+0xb6/0x2b0 [ 1268.661375][ T2155] do_fast_syscall_32+0x34/0x80 [ 1268.666405][ T2155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1268.672909][ T2155] [ 1268.675232][ T2155] -> (&f_owner->lock){....}-{3:3} { [ 1268.680536][ T2155] INITIAL USE at: [ 1268.684520][ T2155] lock_acquire+0x120/0x360 [ 1268.690775][ T2155] _raw_write_lock_irq+0xa2/0xf0 [ 1268.697496][ T2155] __f_setown+0x67/0x370 [ 1268.703473][ T2155] fcntl_dirnotify+0x3fa/0x6a0 [ 1268.709973][ T2155] do_fcntl+0x6d0/0x1910 [ 1268.715952][ T2155] do_compat_fcntl64+0x477/0x720 [ 1268.722638][ T2155] __do_fast_syscall_32+0xb6/0x2b0 [ 1268.729515][ T2155] do_fast_syscall_32+0x34/0x80 [ 1268.736127][ T2155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1268.744205][ T2155] INITIAL READ USE at: [ 1268.748629][ T2155] lock_acquire+0x120/0x360 [ 1268.755318][ T2155] _raw_read_lock_irqsave+0xaf/0x100 [ 1268.762785][ T2155] send_sigio+0x38/0x370 [ 1268.769386][ T2155] dnotify_handle_event+0x169/0x440 [ 1268.776757][ T2155] fsnotify+0x1671/0x1a80 [ 1268.783275][ T2155] __fsnotify_parent+0x3fe/0x540 [ 1268.790391][ T2155] vfs_read+0x802/0xa30 [ 1268.796726][ T2155] ksys_read+0x145/0x250 [ 1268.803146][ T2155] __do_fast_syscall_32+0xb6/0x2b0 [ 1268.810437][ T2155] do_fast_syscall_32+0x34/0x80 [ 1268.817553][ T2155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1268.826057][ T2155] } [ 1268.828641][ T2155] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1268.837585][ T2155] ... acquired at: [ 1268.841473][ T2155] lock_acquire+0x120/0x360 [ 1268.846158][ T2155] _raw_read_lock_irqsave+0xaf/0x100 [ 1268.851621][ T2155] send_sigio+0x38/0x370 [ 1268.856045][ T2155] kill_fasync+0x24d/0x4d0 [ 1268.860637][ T2155] lease_break_callback+0x26/0x30 [ 1268.865858][ T2155] __break_lease+0x6a2/0x1620 [ 1268.870711][ T2155] do_dentry_open+0x8b7/0x13f0 [ 1268.875650][ T2155] vfs_open+0x3b/0x340 [ 1268.879893][ T2155] path_openat+0x2ee5/0x3830 [ 1268.884696][ T2155] do_filp_open+0x1fa/0x410 [ 1268.889381][ T2155] do_sys_openat2+0x121/0x1c0 [ 1268.894231][ T2155] __ia32_compat_sys_openat+0x131/0x160 [ 1268.899977][ T2155] __do_fast_syscall_32+0xb6/0x2b0 [ 1268.905273][ T2155] do_fast_syscall_32+0x34/0x80 [ 1268.910309][ T2155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1268.916906][ T2155] [ 1268.919229][ T2155] -> (&new->fa_lock){....}-{3:3} { [ 1268.924367][ T2155] INITIAL USE at: [ 1268.928260][ T2155] lock_acquire+0x120/0x360 [ 1268.934421][ T2155] _raw_write_lock_irq+0xa2/0xf0 [ 1268.940929][ T2155] fasync_insert_entry+0xc3/0x270 [ 1268.947520][ T2155] fasync_helper+0x52/0xb0 [ 1268.953532][ T2155] sock_fasync+0x85/0xf0 [ 1268.959344][ T2155] do_vfs_ioctl+0x1064/0x1430 [ 1268.965596][ T2155] __ia32_compat_sys_ioctl+0x4bd/0x840 [ 1268.972625][ T2155] __do_fast_syscall_32+0xb6/0x2b0 [ 1268.979326][ T2155] do_fast_syscall_32+0x34/0x80 [ 1268.985764][ T2155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1268.993680][ T2155] INITIAL READ USE at: [ 1268.998023][ T2155] lock_acquire+0x120/0x360 [ 1269.004596][ T2155] _raw_read_lock_irqsave+0xaf/0x100 [ 1269.011895][ T2155] kill_fasync+0x199/0x4d0 [ 1269.018317][ T2155] sock_wake_async+0x137/0x160 [ 1269.025089][ T2155] unix_write_space+0x3bb/0x470 [ 1269.031945][ T2155] sock_wfree+0x1d3/0x7a0 [ 1269.038269][ T2155] unix_destruct_scm+0x150/0x1a0 [ 1269.045209][ T2155] skb_release_head_state+0x101/0x250 [ 1269.052580][ T2155] consume_skb+0x60/0xf0 [ 1269.058837][ T2155] unix_dgram_sendmsg+0x57d/0x1850 [ 1269.065957][ T2155] __sock_sendmsg+0x21c/0x270 [ 1269.072637][ T2155] ____sys_sendmsg+0x52d/0x830 [ 1269.079398][ T2155] ___sys_sendmsg+0x21f/0x2a0 [ 1269.086072][ T2155] __sys_sendmmsg+0x28e/0x430 [ 1269.092745][ T2155] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1269.100300][ T2155] __do_fast_syscall_32+0xb6/0x2b0 [ 1269.107424][ T2155] do_fast_syscall_32+0x34/0x80 [ 1269.114290][ T2155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1269.122618][ T2155] } [ 1269.125114][ T2155] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1269.133799][ T2155] ... acquired at: [ 1269.137608][ T2155] lock_acquire+0x120/0x360 [ 1269.142463][ T2155] _raw_read_lock_irqsave+0xaf/0x100 [ 1269.147937][ T2155] kill_fasync+0x199/0x4d0 [ 1269.152530][ T2155] evdev_pass_values+0x627/0xbd0 [ 1269.157681][ T2155] evdev_events+0x1e6/0x340 [ 1269.162457][ T2155] input_pass_values+0x285/0x890 [ 1269.167579][ T2155] input_event_dispose+0x330/0x6b0 [ 1269.172864][ T2155] input_inject_event+0x1dd/0x340 [ 1269.178066][ T2155] evdev_write+0x2fc/0x480 [ 1269.182660][ T2155] vfs_write+0x27b/0xb30 [ 1269.187080][ T2155] ksys_write+0x145/0x250 [ 1269.191590][ T2155] __do_fast_syscall_32+0xb6/0x2b0 [ 1269.197328][ T2155] do_fast_syscall_32+0x34/0x80 [ 1269.202548][ T2155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1269.209054][ T2155] [ 1269.211394][ T2155] [ 1269.211394][ T2155] stack backtrace: [ 1269.217281][ T2155] CPU: 1 UID: 0 PID: 2155 Comm: syz.1.11643 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1269.217303][ T2155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1269.217314][ T2155] Call Trace: [ 1269.217321][ T2155] [ 1269.217328][ T2155] dump_stack_lvl+0x189/0x250 [ 1269.217351][ T2155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1269.217369][ T2155] ? __pfx__printk+0x10/0x10 [ 1269.217395][ T2155] validate_chain+0x1f05/0x2140 [ 1269.217419][ T2155] __lock_acquire+0xab9/0xd20 [ 1269.217444][ T2155] ? kill_fasync+0x199/0x4d0 [ 1269.217461][ T2155] lock_acquire+0x120/0x360 [ 1269.217483][ T2155] ? kill_fasync+0x199/0x4d0 [ 1269.217504][ T2155] _raw_read_lock_irqsave+0xaf/0x100 [ 1269.217525][ T2155] ? kill_fasync+0x199/0x4d0 [ 1269.217541][ T2155] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1269.217560][ T2155] ? do_raw_spin_lock+0x121/0x290 [ 1269.217583][ T2155] kill_fasync+0x199/0x4d0 [ 1269.217600][ T2155] ? kill_fasync+0x53/0x4d0 [ 1269.217617][ T2155] evdev_pass_values+0x627/0xbd0 [ 1269.217643][ T2155] ? evdev_pass_values+0x671/0xbd0 [ 1269.217667][ T2155] evdev_events+0x1e6/0x340 [ 1269.217688][ T2155] ? evdev_events+0x79/0x340 [ 1269.217709][ T2155] ? input_pass_values+0x8d/0x890 [ 1269.217730][ T2155] input_pass_values+0x285/0x890 [ 1269.217753][ T2155] ? input_handle_event+0x70c/0xf30 [ 1269.217771][ T2155] input_event_dispose+0x330/0x6b0 [ 1269.217790][ T2155] input_inject_event+0x1dd/0x340 [ 1269.217807][ T2155] ? input_inject_event+0xb6/0x340 [ 1269.217831][ T2155] evdev_write+0x2fc/0x480 [ 1269.217856][ T2155] ? __pfx_evdev_write+0x10/0x10 [ 1269.217878][ T2155] ? bpf_lsm_file_permission+0x9/0x20 [ 1269.217899][ T2155] ? security_file_permission+0x75/0x290 [ 1269.217920][ T2155] ? rw_verify_area+0x255/0x4d0 [ 1269.217939][ T2155] ? __lock_acquire+0xab9/0xd20 [ 1269.217960][ T2155] ? __pfx_evdev_write+0x10/0x10 [ 1269.217983][ T2155] vfs_write+0x27b/0xb30 [ 1269.218006][ T2155] ? __pfx_vfs_write+0x10/0x10 [ 1269.218026][ T2155] ? __fget_files+0x2a/0x420 [ 1269.218051][ T2155] ? __fget_files+0x2a/0x420 [ 1269.218073][ T2155] ? __fget_files+0x3a0/0x420 [ 1269.218096][ T2155] ? __fget_files+0x2a/0x420 [ 1269.218121][ T2155] ksys_write+0x145/0x250 [ 1269.218143][ T2155] ? __pfx_ksys_write+0x10/0x10 [ 1269.218164][ T2155] ? lockdep_hardirqs_on+0x9c/0x150 [ 1269.218185][ T2155] __do_fast_syscall_32+0xb6/0x2b0 [ 1269.218208][ T2155] ? lockdep_hardirqs_on+0x9c/0x150 [ 1269.218230][ T2155] do_fast_syscall_32+0x34/0x80 [ 1269.218253][ T2155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1269.218272][ T2155] RIP: 0023:0xf710e539 [ 1269.218286][ T2155] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1269.218301][ T2155] RSP: 002b:00000000f54fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1269.218319][ T2155] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1269.218331][ T2155] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 1269.218341][ T2155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1269.218351][ T2155] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1269.218361][ T2155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1269.218375][ T2155]