last executing test programs: 3m32.491686163s ago: executing program 0 (id=412): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001100)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x6}}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 3m32.346448323s ago: executing program 0 (id=414): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m30.430734827s ago: executing program 0 (id=436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d06}]}) 3m30.324477866s ago: executing program 0 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 3m30.272272827s ago: executing program 0 (id=438): setuid(0xee00) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000"], 0x38}}, 0x2040) 3m29.962729731s ago: executing program 0 (id=441): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000200)=0x80000006) 3m29.651516363s ago: executing program 32 (id=441): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000200)=0x80000006) 2m38.842781264s ago: executing program 4 (id=1189): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0xea60}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 2m38.490595664s ago: executing program 4 (id=1196): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r1}) 2m38.293280593s ago: executing program 4 (id=1198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000001c0)=@other={0x2000000400000000, 0x0}) 2m37.958182103s ago: executing program 4 (id=1212): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0xc) 2m37.846029515s ago: executing program 4 (id=1204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001002503010e02000000080026006c09000408000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x7c}}, 0x0) 2m37.510660672s ago: executing program 4 (id=1211): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x828a, 0x3, 0x2}, 0x18, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read(r1, &(0x7f0000000080)=""/252, 0xfc) landlock_restrict_self(r0, 0x8) 2m37.327597142s ago: executing program 33 (id=1211): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x828a, 0x3, 0x2}, 0x18, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read(r1, &(0x7f0000000080)=""/252, 0xfc) landlock_restrict_self(r0, 0x8) 3.134690828s ago: executing program 3 (id=3633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}}, 0x0) 2.997041184s ago: executing program 3 (id=3636): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000500)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x240c4044}, 0x0) 2.874290481s ago: executing program 3 (id=3637): unshare(0x40200) r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) semctl$SETVAL(r0, 0x1, 0x10, 0x0) 1.937617324s ago: executing program 3 (id=3647): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x3, &(0x7f0000000200)={0x1f, 0x5, 0x1}) 1.795147864s ago: executing program 2 (id=3650): r0 = socket(0x10, 0x80003, 0x0) recvmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'sit0\x00'}) recvfrom$inet6(r0, 0x0, 0x0, 0x2042, 0x0, 0x0) 1.61601461s ago: executing program 5 (id=3653): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f000000c600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='erofs\x00', 0x200004, 0x0) 1.573917999s ago: executing program 2 (id=3656): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x161, 0x0) 1.520468214s ago: executing program 5 (id=3657): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x40, 0x9, @empty, 0x6}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.385942644s ago: executing program 5 (id=3659): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) read(r0, &(0x7f00000001c0)=""/50, 0x32) 1.009977297s ago: executing program 3 (id=3660): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) 1.009345766s ago: executing program 5 (id=3668): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/freeze_filesystems', 0x88102, 0x0) 897.042183ms ago: executing program 3 (id=3661): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) 896.129418ms ago: executing program 1 (id=3670): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c00)=""/4098, 0x1002}, {&(0x7f0000000540)=""/104, 0x7e}, {&(0x7f0000005280)=""/4096, 0x1000}], 0x3}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 824.855872ms ago: executing program 5 (id=3662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x4, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x7c, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x37}, {[@timestamp={0x44, 0x4, 0xe, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x4, "ca14af122f7c3c3867426d800378f37efc8de4af0cea2110a9e116d7495a5e4e", "aa4b5387584c02c1fa6427aa227fb2c2", {"b58ad8844cf30895076ab1c7d2ad5919", "11cfafcb549d5d9f0e3a68e6932d5a13"}}}}}, 0x8a) 593.919778ms ago: executing program 2 (id=3663): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100)=r1, 0x4) 548.943321ms ago: executing program 2 (id=3664): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000010000000000bb", @ANYRES32=r2], 0x28}}], 0x1, 0x4000005) 499.691008ms ago: executing program 5 (id=3665): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x10) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xbfd1, 0x0) 477.084455ms ago: executing program 1 (id=3666): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)=0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f00000000c0)={0x27, r1, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r0) 396.125865ms ago: executing program 2 (id=3667): r0 = syz_clone(0x8000011, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) epoll_create1(0x0) ptrace(0x10, r0) ptrace$peeksig(0x1a, r0, 0x0, &(0x7f0000000040)) 251.079596ms ago: executing program 1 (id=3669): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 182.513737ms ago: executing program 2 (id=3671): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000100)={0x11}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 138.79182ms ago: executing program 1 (id=3672): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000500), 0x40800, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000580)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x2, 0x2274d1, 0x26fe14}) 77.358355ms ago: executing program 1 (id=3673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x84, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x200000000000000, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x8, 0x2, "6378e433"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}}, 0x0) 0s ago: executing program 1 (id=3674): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x9, 0xff, 0xffffffff, 0xb, 0x4, "03f07f0909343528000800", 0x10000, 0x4}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x7f) kernel console output (not intermixed with test programs): 3-1: USB disconnect, device number 6 [ 161.281194][ T5888] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 162.071464][ T5851] Bluetooth: hci2: command tx timeout [ 162.173067][ T29] audit: type=1326 audit(1771844967.284:6): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=8157 comm="syz.3.961" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae32b9c629 code=0x0 [ 162.639931][ T8178] netlink: 'syz.1.971': attribute type 83 has an invalid length. [ 163.196796][ T8200] netlink: 'syz.2.981': attribute type 25 has an invalid length. [ 163.204778][ T8200] netlink: 'syz.2.981': attribute type 28 has an invalid length. [ 163.452494][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 163.563346][ T8217] netlink: 'syz.1.989': attribute type 2 has an invalid length. [ 163.583157][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.989'. [ 164.334355][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'. [ 164.344037][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'. [ 164.859979][ T8272] netlink: 'syz.3.1013': attribute type 6 has an invalid length. [ 164.884704][ T8272] netlink: 'syz.3.1013': attribute type 6 has an invalid length. [ 164.898872][ T8272] Zero length message leads to an empty skb [ 165.444017][ T8292] program syz.3.1021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.530473][ T8294] netlink: 'syz.3.1022': attribute type 83 has an invalid length. [ 165.590248][ T8296] netlink: 7986 bytes leftover after parsing attributes in process `syz.2.1023'. [ 166.495682][ T8334] netlink: 'syz.3.1040': attribute type 22 has an invalid length. [ 166.523519][ T8334] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.1040'. [ 166.550947][ T8338] vivid-000: ================= START STATUS ================= [ 166.559406][ T8338] vivid-000: Enable Output Cropping: true grabbed [ 166.567360][ T8338] vivid-000: Enable Output Composing: true grabbed [ 166.574565][ T8338] vivid-000: Enable Output Scaler: true grabbed [ 166.583108][ T8338] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 166.617631][ T8338] vivid-000: Transmit Mode: HDMI grabbed [ 166.635756][ T8338] vivid-000: Hotplug Present: 0x00000000 [ 166.657968][ T8338] vivid-000: RxSense Present: 0x00000000 [ 166.678412][ T8338] vivid-000: EDID Present: 0x00000000 [ 166.717674][ T8338] vivid-000: ================== END STATUS ================== [ 167.007839][ T8350] netlink: 'syz.2.1048': attribute type 58 has an invalid length. [ 167.927157][ T8380] dvmrp1: entered allmulticast mode [ 167.943371][ T8380] dvmrp1: left allmulticast mode [ 168.384793][ T8396] Falling back ldisc for ptm0. [ 168.811244][ T8417] input: syz1 as /devices/virtual/input/input11 [ 169.397817][ T8442] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1086'. [ 169.563688][ T8450] cgroup: noprefix used incorrectly [ 170.679511][ T29] audit: type=1326 audit(1771844975.784:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8466 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae32b9c629 code=0x7fc00000 [ 170.860119][ T8508] dummy0: entered promiscuous mode [ 170.866757][ T8506] dummy0: left promiscuous mode [ 170.873960][ T8507] batadv_slave_1: entered promiscuous mode [ 170.892462][ T8503] batadv_slave_1: left promiscuous mode [ 171.608267][ T8539] netlink: 'syz.4.1125': attribute type 22 has an invalid length. [ 171.640388][ T8539] netlink: 14380 bytes leftover after parsing attributes in process `syz.4.1125'. [ 172.229510][ T5926] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 172.389615][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 172.402790][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 172.418316][ T5926] usb 3-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 172.442437][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.467249][ T5926] usb 3-1: config 0 descriptor?? [ 172.702238][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1154'. [ 172.847601][ T8589] netlink: 'syz.1.1148': attribute type 16 has an invalid length. [ 172.856397][ T8589] netlink: 'syz.1.1148': attribute type 2 has an invalid length. [ 172.865061][ T8589] netlink: 'syz.1.1148': attribute type 2 has an invalid length. [ 172.875108][ T8589] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.1148'. [ 172.894374][ T5926] kye 0003:0458:5014.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 172.923175][ T5926] kye 0003:0458:5014.0006: hidraw0: USB HID v10.00 Device [HID 0458:5014] on usb-dummy_hcd.2-1/input0 [ 172.959923][ T5926] kye 0003:0458:5014.0006: tablet-enabling feature report not found [ 172.976983][ T5926] kye 0003:0458:5014.0006: tablet enabling failed [ 173.001296][ T8593] input: syz1 as /devices/virtual/input/input12 [ 173.099722][ T5926] usb 3-1: USB disconnect, device number 7 [ 173.488478][ T8610] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1159'. [ 173.863252][ T8625] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1166'. [ 174.127242][ T8635] loop8: detected capacity change from 0 to 1 [ 174.160880][ T8635] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 174.161075][ T8635] loop8: p1 start 540042604 is beyond EOD, truncated [ 174.161100][ T8635] loop8: p2 start 1640453368 is beyond EOD, truncated [ 174.161119][ T8635] loop8: p3 start 1935506780 is beyond EOD, truncated [ 174.161139][ T8635] loop8: p4 start 3893138939 is beyond EOD, truncated [ 174.161157][ T8635] loop8: p5 start 287485722 is beyond EOD, truncated [ 174.161177][ T8635] loop8: p6 start 3376667143 is beyond EOD, truncated [ 174.161196][ T8635] loop8: p7 start 2111012381 is beyond EOD, truncated [ 174.161216][ T8635] loop8: p8 start 3147612238 is beyond EOD, truncated [ 174.161235][ T8635] loop8: p9 start 2252824347 is beyond EOD, truncated [ 174.161254][ T8635] loop8: p10 start 489633540 is beyond EOD, truncated [ 174.161274][ T8635] loop8: p11 start 1985099615 is beyond EOD, truncated [ 174.161293][ T8635] loop8: p12 start 2132828001 is beyond EOD, truncated [ 174.384767][ T8649] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1175'. [ 174.959408][ T5926] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 175.081641][ T8677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1191'. [ 175.122715][ T5926] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 175.139893][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.147958][ T5926] usb 3-1: Product: syz [ 175.179481][ T5926] usb 3-1: Manufacturer: syz [ 175.184151][ T5926] usb 3-1: SerialNumber: syz [ 175.193389][ T5926] usb 3-1: config 0 descriptor?? [ 175.411788][ T8690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 175.449917][ T8690] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 175.625363][ T5926] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 175.639464][ T5926] usb 3-1: Firmware version (0.0) predates our first public release. [ 175.656846][ T5926] usb 3-1: Please update to version 0.2 or newer [ 175.903550][ T5926] usb 3-1: USB disconnect, device number 8 [ 176.144914][ T8716] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1206'. [ 176.711825][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.722384][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.732521][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.744205][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.754356][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.789423][ T5926] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 176.956618][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 176.973768][ T5926] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 176.989419][ T5926] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 177.004604][ T5926] usb 3-1: Product: syz [ 177.019411][ T5926] usb 3-1: Manufacturer: syz [ 177.024218][ T5926] usb 3-1: SerialNumber: syz [ 177.042907][ T5926] usb 3-1: config 0 descriptor?? [ 177.068988][ T5926] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 177.130955][ T8734] chnl_net:caif_netlink_parms(): no params data found [ 177.321705][ T8734] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.339822][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.347542][ T8734] bridge_slave_0: entered allmulticast mode [ 177.357695][ T8734] bridge_slave_0: entered promiscuous mode [ 177.373650][ T8734] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.402143][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.410262][ T8734] bridge_slave_1: entered allmulticast mode [ 177.418982][ T8734] bridge_slave_1: entered promiscuous mode [ 177.471953][ T8734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.490469][ T8734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.613238][ T8734] team0: Port device team_slave_0 added [ 177.624522][ T8734] team0: Port device team_slave_1 added [ 177.707848][ T5926] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 177.730937][ T8734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.744826][ T8734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.783400][ T8734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.825066][ T8734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.839391][ T8734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.909245][ T8734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.942442][ T5926] usb 3-1: USB disconnect, device number 9 [ 178.064669][ T8734] hsr_slave_0: entered promiscuous mode [ 178.073086][ T8734] hsr_slave_1: entered promiscuous mode [ 178.080593][ T8734] debugfs: 'hsr0' already exists in 'hsr' [ 178.091151][ T8734] Cannot create hsr debugfs directory [ 178.479087][ T8734] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.495648][ T8734] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.534196][ T8734] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.576242][ T8782] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1238'. [ 178.587544][ T8734] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 178.708590][ T29] audit: type=1326 audit(1771844983.814:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2d59c629 code=0x7ffc0000 [ 178.779959][ T29] audit: type=1326 audit(1771844983.844:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2d59c629 code=0x7ffc0000 [ 178.804715][ T5148] Bluetooth: hci2: command tx timeout [ 178.835883][ T29] audit: type=1326 audit(1771844983.854:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8e2d59c629 code=0x7ffc0000 [ 178.917640][ T8734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.935553][ T29] audit: type=1326 audit(1771844983.854:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2d59c629 code=0x7ffc0000 [ 178.985424][ T29] audit: type=1326 audit(1771844983.854:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2d59c629 code=0x7ffc0000 [ 179.009674][ T29] audit: type=1326 audit(1771844983.854:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e2d55cece code=0x7ffc0000 [ 179.065117][ T8734] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.081229][ T29] audit: type=1326 audit(1771844983.854:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2d59c629 code=0x7ffc0000 [ 179.088579][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.107105][ T29] audit: type=1326 audit(1771844983.854:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2d59c629 code=0x7ffc0000 [ 179.110968][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.133474][ T29] audit: type=1326 audit(1771844983.864:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e2d59c629 code=0x7ffc0000 [ 179.169219][ T29] audit: type=1326 audit(1771844983.864:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2d59c629 code=0x7ffc0000 [ 179.205650][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.212876][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.482441][ T8813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 179.529680][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 179.598468][ T8734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.663113][ T8819] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.1250'. [ 179.685276][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 179.696264][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.715114][ T9] usb 2-1: Product: syz [ 179.719826][ T9] usb 2-1: Manufacturer: syz [ 179.724467][ T9] usb 2-1: SerialNumber: syz [ 179.760523][ T9] usb 2-1: config 0 descriptor?? [ 179.806809][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1251'. [ 179.910848][ T8827] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1252'. [ 180.040957][ T8734] veth0_vlan: entered promiscuous mode [ 180.059236][ T8734] veth1_vlan: entered promiscuous mode [ 180.143887][ T8734] veth0_macvtap: entered promiscuous mode [ 180.163230][ T8734] veth1_macvtap: entered promiscuous mode [ 180.195142][ T8734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.206106][ T9] usb 2-1: Firmware: major: 71, minor: 109, hardware type: ATUSB (2) [ 180.232702][ T8734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.264262][ T365] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.291689][ T365] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.312113][ T365] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.326417][ T365] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.424484][ T9] usb 2-1: failed to fetch extended address, random address set [ 180.459643][ T365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.467740][ T365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.478461][ T9] usb 2-1: USB disconnect, device number 5 [ 180.557880][ T365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.567438][ T365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.869735][ T5148] Bluetooth: hci2: command tx timeout [ 180.921876][ T5908] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 181.092077][ T5908] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 181.119453][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.154645][ T5908] usb 6-1: config 0 descriptor?? [ 181.184116][ T5908] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 181.396129][ T5908] gp8psk: usb in 128 operation failed. [ 181.405746][ T5908] gp8psk: usb in 137 operation failed. [ 181.416787][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.451418][ T5908] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 181.479580][ T5908] usb 6-1: media controller created [ 181.507933][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.564627][ T5908] gp8psk_fe: Frontend attached [ 181.573370][ T5908] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 181.583949][ T5908] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 181.909278][ T5908] gp8psk: usb in 137 operation failed. [ 181.920712][ T5908] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 181.938158][ T5908] gp8psk: found Genpix USB device pID = 203 (hex) [ 181.965237][ T5908] usb 6-1: USB disconnect, device number 2 [ 182.176492][ T5908] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 182.945647][ T8914] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1289'. [ 182.955739][ T5148] Bluetooth: hci2: command tx timeout [ 183.729227][ T8950] kvm: kvm [8949]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 184.521030][ T9] kernel read not supported for file /radio0 (pid: 9 comm: kworker/0:0) [ 185.030164][ T5851] Bluetooth: hci2: command tx timeout [ 185.298437][ T8998] dvmrp6: entered allmulticast mode [ 185.429555][ T5148] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 185.429912][ T5851] Bluetooth: hci4: command 0x1003 tx timeout [ 185.605760][ T9009] netlink: 'syz.1.1332': attribute type 6 has an invalid length. [ 185.652964][ T9009] netlink: 'syz.1.1332': attribute type 6 has an invalid length. [ 185.719526][ T9014] program syz.5.1336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.093023][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1344'. [ 186.143200][ T9032] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1345'. [ 186.158709][ T9032] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 186.338454][ T9040] usb usb8: usbfs: process 9040 (syz.3.1349) did not claim interface 0 before use [ 186.942632][ T9067] netlink: 'syz.1.1362': attribute type 1 has an invalid length. [ 186.972070][ T9067] netlink: 'syz.1.1362': attribute type 2 has an invalid length. [ 187.009721][ T9067] netlink: 'syz.1.1362': attribute type 1 has an invalid length. [ 187.019878][ T9067] netlink: 'syz.1.1362': attribute type 3 has an invalid length. [ 187.027675][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'. [ 187.109905][ T5148] Bluetooth: hci2: command tx timeout [ 187.197896][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1367'. [ 187.914025][ T9108] input: syz1 as /devices/virtual/input/input14 [ 188.245931][ T9121] program syz.5.1386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.614146][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1393'. [ 188.758883][ T9139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1396'. [ 189.145450][ T9159] netlink: 'syz.5.1405': attribute type 31 has an invalid length. [ 189.159463][ T9159] netlink: 'syz.5.1405': attribute type 1 has an invalid length. [ 189.177629][ T9159] bridge0: port 1(bridge_slave_0) entered learning state [ 189.209412][ T5919] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 189.389765][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 189.401865][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.418085][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.431930][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 189.447267][ T5919] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 189.461340][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.500846][ T5919] usb 3-1: config 0 descriptor?? [ 189.800515][ T9182] batadv_slave_1: entered promiscuous mode [ 189.808082][ T9181] batadv_slave_1: left promiscuous mode [ 189.945461][ T5919] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 189.970719][ T5919] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 189.978031][ T5919] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 189.986741][ T5919] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 189.996086][ T5919] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 190.019436][ T5919] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 190.026776][ T5919] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 190.038547][ T5919] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 190.046590][ T5919] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 190.055091][ T5919] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 190.062695][ T5919] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 190.152302][ T5919] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 190.180831][ T5919] microsoft 0003:045E:07DA.0007: no inputs found [ 190.195158][ T5919] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 190.227493][ T5919] usb 3-1: USB disconnect, device number 10 [ 190.267341][ T9194] fido_id[9194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 192.030023][ T9269] sctp: [Deprecated]: syz.1.1455 (pid 9269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.030023][ T9269] Use struct sctp_sack_info instead [ 192.197931][ T29] audit: type=1326 audit(1771844997.304:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz.5.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914799c629 code=0x7ffc0000 [ 192.222211][ T29] audit: type=1326 audit(1771844997.304:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz.5.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914799c629 code=0x7ffc0000 [ 192.252667][ T29] audit: type=1326 audit(1771844997.304:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz.5.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914799c629 code=0x7ffc0000 [ 192.277433][ T29] audit: type=1326 audit(1771844997.304:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz.5.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f914795cece code=0x7ffc0000 [ 192.302223][ T29] audit: type=1326 audit(1771844997.304:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz.5.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914799c629 code=0x7ffc0000 [ 192.325907][ T29] audit: type=1326 audit(1771844997.304:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz.5.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914799c629 code=0x7ffc0000 [ 192.384867][ T29] audit: type=1326 audit(1771844997.304:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz.5.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914799c629 code=0x7ffc0000 [ 192.418026][ T29] audit: type=1326 audit(1771844997.304:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz.5.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914799c629 code=0x7ffc0000 [ 192.442629][ T29] audit: type=1326 audit(1771844997.304:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz.5.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f914799c629 code=0x7ffc0000 [ 192.467533][ T29] audit: type=1326 audit(1771844997.304:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz.5.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914799c629 code=0x7ffc0000 [ 192.694525][ T9287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.449937][ T5937] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 193.599383][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 193.606846][ T5937] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 193.627102][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.661297][ T5937] usb 2-1: config 0 descriptor?? [ 193.919564][ T5937] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 193.948487][ T5937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.980305][ T5937] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 193.987584][ T5937] usb 2-1: media controller created [ 194.037495][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.115936][ T5937] az6027: usb out operation failed. (-71) [ 194.138913][ T5937] az6027: usb out operation failed. (-71) [ 194.144904][ T5937] stb0899_attach: Driver disabled by Kconfig [ 194.152574][ T5937] az6027: no front-end attached [ 194.152574][ T5937] [ 194.189426][ T5937] az6027: usb out operation failed. (-71) [ 194.195243][ T5937] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 194.226178][ T5937] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 194.288599][ T5937] dvb-usb: schedule remote query interval to 400 msecs. [ 194.319233][ T5937] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 194.352687][ T5937] usb 2-1: USB disconnect, device number 6 [ 194.396119][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.401743][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.409701][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.554272][ T5937] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 195.044062][ T9358] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1500'. [ 198.883342][ T5148] block nbd1: Receive control failed (result -32) [ 199.011044][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 199.193732][ T9] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 199.213549][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 199.225040][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.227075][ T9503] sctp: [Deprecated]: syz.5.1571 (pid 9503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.227075][ T9503] Use struct sctp_sack_info instead [ 199.255107][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 199.743886][ T9525] input: syz0 as /devices/virtual/input/input16 [ 200.514171][ T9] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 200.551119][ T9] stv0680 3-1:4.0: Could not get descriptor 0200 [ 200.565569][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 200.584822][ T9] stv0680 3-1:4.0: last error: 9, command = 0xd [ 200.601965][ T9] usb 3-1: USB disconnect, device number 11 [ 200.719025][ T9551] netlink: 'syz.3.1593': attribute type 83 has an invalid length. [ 201.144863][ T9567] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.1600'. [ 201.882178][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 201.882196][ T29] audit: type=1326 audit(1771845006.994:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2339c629 code=0x7ffc0000 [ 201.949601][ T29] audit: type=1326 audit(1771845007.024:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2339c629 code=0x7ffc0000 [ 201.998334][ T29] audit: type=1326 audit(1771845007.024:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fea2339c629 code=0x7ffc0000 [ 202.024064][ T29] audit: type=1326 audit(1771845007.024:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2339c629 code=0x7ffc0000 [ 202.089509][ T29] audit: type=1326 audit(1771845007.024:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2339c629 code=0x7ffc0000 [ 202.160643][ T29] audit: type=1326 audit(1771845007.024:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea2335cece code=0x7ffc0000 [ 202.191230][ T29] audit: type=1326 audit(1771845007.024:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2339c629 code=0x7ffc0000 [ 202.216028][ T29] audit: type=1326 audit(1771845007.024:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2339c629 code=0x7ffc0000 [ 202.242841][ T29] audit: type=1326 audit(1771845007.024:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea2339c629 code=0x7ffc0000 [ 202.266262][ T29] audit: type=1326 audit(1771845007.024:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2339c629 code=0x7ffc0000 [ 202.372491][ T5888] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 202.413026][ T9603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.507953][ T9605] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.1617'. [ 202.592687][ T5888] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 202.625967][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.644289][ T5888] usb 3-1: Product: syz [ 202.648662][ T5888] usb 3-1: Manufacturer: syz [ 202.666794][ T5888] usb 3-1: SerialNumber: syz [ 202.678776][ T5888] usb 3-1: config 0 descriptor?? [ 203.102067][ T5888] usb 3-1: Firmware: major: 71, minor: 109, hardware type: ATUSB (2) [ 203.243236][ T9622] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1624'. [ 203.313273][ T5888] usb 3-1: failed to fetch extended address, random address set [ 203.392818][ T5888] usb 3-1: USB disconnect, device number 12 [ 204.219523][ T5919] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 204.306435][ T9641] overlay: filesystem on ./file1 is read-only [ 204.412159][ T5919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.429434][ T5919] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.451864][ T5919] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 204.468449][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 204.488292][ T5919] usb 3-1: SerialNumber: syz [ 204.726458][ T5919] usb 3-1: 0:2 : does not exist [ 204.867957][ T5919] usb 3-1: USB disconnect, device number 13 [ 205.021600][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.160022][ T9655] kvm: kvm [9654]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0xb [ 205.442232][ T9661] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1643'. [ 205.662237][ T9673] dvmrp6: entered allmulticast mode [ 206.460269][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 206.629528][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 206.650537][ T10] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 206.658723][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 206.697982][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 206.725687][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 206.754133][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 206.789760][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.825315][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.846305][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.091501][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 207.097075][ T10] usbtmc 2-1:16.0: can't read capabilities [ 207.303138][ T10] usb 2-1: USB disconnect, device number 7 [ 207.734094][ T9754] Bluetooth: hci4: Frame reassembly failed (-84) [ 208.485982][ T9784] Invalid ELF header len 16 [ 208.557792][ T9787] lo: entered promiscuous mode [ 208.588449][ T9787] lo: left promiscuous mode [ 209.167816][ T5908] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 209.348772][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 209.367380][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.389402][ T5908] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 209.408767][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.430448][ T5908] usb 2-1: config 0 descriptor?? [ 209.557327][ T9820] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1721'. [ 209.767472][ T5851] Bluetooth: hci4: command 0x1003 tx timeout [ 209.778564][ T5148] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 209.874930][ T5908] hid_parser_main: 3 callbacks suppressed [ 209.874953][ T5908] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 209.921989][ T5908] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 209.928838][ T5908] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 209.961770][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 209.980131][ T5908] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 209.999083][ T5908] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 210.012949][ T5908] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 210.021714][ T5908] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 210.041580][ T5908] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 210.159367][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 210.185578][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.220484][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.251055][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 210.289795][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 210.298907][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.329042][ T5908] usb 2-1: USB disconnect, device number 8 [ 210.344427][ T10] usb 6-1: config 0 descriptor?? [ 210.580704][ T5888] IPVS: starting estimator thread 0... [ 210.679521][ T9839] IPVS: using max 29 ests per chain, 69600 per kthread [ 210.771828][ T10] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 210.784311][ T10] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 210.800016][ T10] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 210.807418][ T10] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 210.979766][ T9847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1731'. [ 211.001415][ T10] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 211.020080][ T9847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1731'. [ 211.031454][ T10] microsoft 0003:045E:07DA.0009: no inputs found [ 211.048770][ T10] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 211.068031][ T10] usb 6-1: USB disconnect, device number 3 [ 211.172631][ T9848] fido_id[9848]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 211.288540][ T9852] overlayfs: invalid origin (0000) [ 211.833451][ T5148] Bluetooth: hci3: command 0x0406 tx timeout [ 211.841403][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 213.306061][ T9913] sctp: [Deprecated]: syz.2.1762 (pid 9913) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.306061][ T9913] Use struct sctp_sack_info instead [ 213.999609][ T5888] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 214.152822][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.168075][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.181389][ T5888] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 214.193189][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.212737][ T5888] usb 2-1: config 0 descriptor?? [ 214.609443][ T5937] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 214.660047][ T5888] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 214.797423][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 214.811791][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.822398][ T5937] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 214.832403][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.841991][ T5888] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE [ 214.853819][ T5937] usb 6-1: config 0 descriptor?? [ 215.052461][ T5888] cp2112 0003:10C4:EA90.000A: error requesting SMBus config [ 215.072727][ T5888] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -71 [ 215.090078][ T5888] usb 2-1: USB disconnect, device number 9 [ 215.275350][ T5937] isku 0003:1E7D:319C.000B: collection stack underflow [ 215.289246][ T5937] isku 0003:1E7D:319C.000B: item 0 1 0 12 parsing failed [ 215.298708][ T5937] isku 0003:1E7D:319C.000B: parse failed [ 215.323137][ T5937] isku 0003:1E7D:319C.000B: probe with driver isku failed with error -22 [ 215.479987][ T10] usb 6-1: USB disconnect, device number 4 [ 215.846445][ T9972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.622341][ T5919] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 216.766758][T10006] loop6: detected capacity change from 0 to 2640 [ 216.774848][T10006] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.783192][T10006] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.792167][T10006] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.801749][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 216.807172][T10006] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.816988][T10006] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.825390][T10006] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.833816][T10006] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.843343][ T5919] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 216.854212][ T5919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.864431][ T5919] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.876438][ T5919] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.887030][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.895162][ T5919] usb 3-1: Product: syz [ 216.899868][ T5919] usb 3-1: Manufacturer: syz [ 216.903878][T10007] loop6: detected capacity change from 2640 to 524288000 [ 216.904559][T10006] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.904616][T10006] ldm_validate_partition_table(): Disk read failed. [ 216.926528][ T5919] usb 3-1: SerialNumber: syz [ 216.943260][T10006] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.954872][T10006] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.964070][T10006] Dev loop6: unable to read RDB block 0 [ 216.971036][T10006] loop6: unable to read partition table [ 216.977025][T10006] loop_reread_partitions: partition scan of loop6 (irc VUXGZtM<I i8NL W@Q6%) failed (rc=-5) [ 217.352890][ T5919] usb 3-1: 0:2 : does not exist [ 217.771543][ T5919] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 217.780636][ T5888] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 217.835241][ T5919] usb 3-1: USB disconnect, device number 14 [ 217.876831][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.939368][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 217.947077][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.968208][ T5888] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 217.999409][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.023002][ T5888] usb 2-1: config 0 descriptor?? [ 218.240678][ T5888] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 218.412910][T10051] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1825'. [ 218.646161][T10057] option changes via remount are deprecated (pid=10056 comm=syz.5.1830) [ 218.654821][T10057] cgroup: option or name mismatch, new: 0x0 "pim6reg0", old: 0x0 "" [ 219.415245][T10083] loop8: detected capacity change from 0 to 1 [ 219.432721][T10083] Dev loop8: unable to read RDB block 1 [ 219.438942][T10083] loop8: unable to read partition table [ 219.445309][T10083] loop8: partition table beyond EOD, truncated [ 219.456963][T10083] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 219.513873][ T5842] usb 2-1: USB disconnect, device number 10 [ 219.864935][T10097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.964882][T10100] netlink: 'syz.5.1850': attribute type 12 has an invalid length. [ 219.980807][T10100] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1850'. [ 220.590190][T10128] netlink: 212 bytes leftover after parsing attributes in process `syz.5.1863'. [ 221.897714][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 222.032965][T10184] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.695733][T10200] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1896'. [ 223.967353][T10253] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 223.977327][T10253] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 223.991032][T10253] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 224.013199][T10253] overlayfs: conflicting lowerdir path [ 226.204881][T10340] overlay: filesystem on ./file1 is read-only [ 226.319357][T10342] input: syz0 as /devices/virtual/input/input18 [ 227.461061][T10370] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 227.605140][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 227.605158][ T29] audit: type=1326 audit(1771845033.714:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10375 comm="syz.1.1979" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea2339c629 code=0x0 [ 227.679059][T10379] lo: entered promiscuous mode [ 227.687604][T10379] lo: left promiscuous mode [ 228.730249][ T5937] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 228.899405][ T5937] usb 6-1: Using ep0 maxpacket: 8 [ 228.907328][ T5937] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 228.916378][ T5937] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 228.927890][ T5937] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 228.940776][ T5937] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 228.960683][ T5842] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 228.978196][ T5937] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 228.988839][ T5937] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.003716][ T5937] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 229.034953][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.130308][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 229.137630][ T5842] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.150728][ T5842] usb 3-1: config 0 interface 0 has no altsetting 0 [ 229.157427][ T5842] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 229.166712][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.183454][ T5842] usb 3-1: config 0 descriptor?? [ 229.241802][T10443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2019'. [ 229.260824][ T5937] usb 6-1: GET_CAPABILITIES returned 0 [ 229.276933][ T5937] usbtmc 6-1:16.0: can't read capabilities [ 229.471976][ T5937] usb 6-1: USB disconnect, device number 5 [ 229.630403][ T5842] hid (null): unknown global tag 0xd [ 229.635766][ T5842] hid (null): invalid report_size -747656597 [ 229.827916][ T5887] usb 3-1: USB disconnect, device number 15 [ 230.518204][T10492] binder: 10491:10492 ioctl c018620c 200000000580 returned -22 [ 230.879484][T10504] serio: Serial port ttyS3 [ 231.601868][ T5887] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 231.693244][T10543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.755775][T10547] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2061'. [ 231.775325][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 231.798252][T10529] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.853371][ T5887] usb 6-1: unable to get BOS descriptor or descriptor too short [ 231.870134][ T5887] usb 6-1: no configurations [ 231.880781][ T5887] usb 6-1: can't read configurations, error -22 [ 232.586993][T10571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.912005][T10619] kvm: kvm [10617]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x80000000000 [ 234.739052][T10653] kvm: kvm [10652]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x80000000000 [ 234.907284][T10664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2116'. [ 234.966416][T10664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2116'. [ 235.659092][T10695] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 235.683266][T10697] program syz.3.2130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.791660][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'. [ 235.809567][ T5887] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 235.959412][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 235.966459][ T5887] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 235.975965][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.987331][ T5887] usb 3-1: config 0 descriptor?? [ 236.407792][ T5887] cypress 0003:04B4:ED81.000D: item fetching failed at offset 6/7 [ 236.417539][ T5887] cypress 0003:04B4:ED81.000D: parse failed [ 236.424687][ T5887] cypress 0003:04B4:ED81.000D: probe with driver cypress failed with error -22 [ 236.615741][ T5842] usb 3-1: USB disconnect, device number 16 [ 237.262827][T10727] loop5: detected capacity change from 0 to 7 [ 237.530214][ T5854] Dev loop5: unable to read RDB block 7 [ 237.537518][ T5854] loop5: unable to read partition table [ 237.541966][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 237.545256][ T5854] loop5: partition table beyond EOD, [ 237.553275][ C1] buffer_io_error: 8 callbacks suppressed [ 237.553289][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 237.573240][ T5854] truncated [ 237.669506][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 237.830350][T10727] Dev loop5: unable to read RDB block 7 [ 237.836888][T10727] loop5: unable to read partition table [ 237.843116][T10727] loop5: partition table beyond EOD, truncated [ 237.852453][T10727] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 238.170214][T10748] tap1: tun_chr_ioctl cmd 1074025675 [ 238.175696][T10748] tap1: persist enabled [ 238.439418][ T5919] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 238.602200][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 238.613619][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.623498][ T5919] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 238.659835][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.670423][ T5919] usb 2-1: config 0 descriptor?? [ 239.084518][ T5919] isku 0003:1E7D:319C.000E: collection stack underflow [ 239.091758][ T5919] isku 0003:1E7D:319C.000E: item 0 1 0 12 parsing failed [ 239.099567][ T5919] isku 0003:1E7D:319C.000E: parse failed [ 239.105322][ T5919] isku 0003:1E7D:319C.000E: probe with driver isku failed with error -22 [ 239.311810][ T5842] usb 2-1: USB disconnect, device number 11 [ 240.012748][T10777] tap0: tun_chr_ioctl cmd 1074025675 [ 240.049436][T10777] tap0: persist enabled [ 240.950715][ T5888] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 241.110235][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 241.117524][ T5888] usb 2-1: config 0 has an invalid interface number: 13 but max is 0 [ 241.126830][ T5888] usb 2-1: config 0 has no interface number 0 [ 241.133784][ T5888] usb 2-1: config 0 interface 13 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 241.145545][ T5888] usb 2-1: config 0 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 241.166912][ T5888] usb 2-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 241.176690][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.185289][ T5888] usb 2-1: Product: syz [ 241.190395][ T5888] usb 2-1: Manufacturer: syz [ 241.195151][ T5888] usb 2-1: SerialNumber: syz [ 241.219927][ T5888] usb 2-1: config 0 descriptor?? [ 241.226822][T10803] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.234776][T10803] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.248954][ T5888] option 2-1:0.13: GSM modem (1-port) converter detected [ 241.470249][T10803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.480875][T10803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.501457][ T10] usb 2-1: USB disconnect, device number 12 [ 241.511634][ T10] option 2-1:0.13: device disconnected [ 241.949479][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 242.110967][ T10] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 242.119199][ T10] usb 2-1: config 0 has no interface number 0 [ 242.153352][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 242.162709][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.171003][ T10] usb 2-1: Product: syz [ 242.175209][ T10] usb 2-1: Manufacturer: syz [ 242.179930][ T10] usb 2-1: SerialNumber: syz [ 242.190247][ T10] usb 2-1: config 0 descriptor?? [ 242.415352][ T10] usb 2-1: USB disconnect, device number 13 [ 244.241232][T10870] loop8: detected capacity change from 0 to 7 [ 244.276914][T10870] loop8: [POWERTEC] [ 244.744421][T10891] loop8: detected capacity change from 0 to 7 [ 244.752855][ T5854] loop8: [POWERTEC] [ 244.762648][T10891] loop8: [POWERTEC] [ 245.319399][ T5888] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 245.474976][ T5888] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 245.484268][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.492392][ T5888] usb 2-1: Product: syz [ 245.496710][ T5888] usb 2-1: Manufacturer: syz [ 245.501564][ T5888] usb 2-1: SerialNumber: syz [ 245.509502][ T5887] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 245.517850][ T5888] usb 2-1: config 0 descriptor?? [ 245.532557][ T5888] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 245.672355][ T5887] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.699116][ T5887] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.719998][ T5887] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 245.730364][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 245.746064][ T5887] usb 6-1: SerialNumber: syz [ 245.972133][ T5887] usb 6-1: 0:2 : does not exist [ 246.055294][ T5887] usb 6-1: USB disconnect, device number 8 [ 246.354452][ T5888] gspca_sunplus: reg_r err -71 [ 246.362806][ T5888] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 246.378308][ T5888] usb 2-1: USB disconnect, device number 14 [ 248.999393][ T5919] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 249.152417][ T5919] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 249.160804][ T5919] usb 2-1: config 0 has no interface number 0 [ 249.166993][ T5919] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.178183][ T5919] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.188084][ T5919] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.203470][ T5919] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 249.212620][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.227909][ T5919] usb 2-1: config 0 descriptor?? [ 249.470250][T11028] block nbd2: Unsupported socket: should be TCP or UNIX. [ 249.675675][T11036] sctp: [Deprecated]: syz.3.2287 (pid 11036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.675675][T11036] Use struct sctp_sack_info instead [ 249.700336][ T5887] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 249.818812][ T154] tipc: Subscription rejected, illegal request [ 249.870728][ T5919] input: HID 28bd:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.000F/input/input19 [ 249.877324][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 249.901851][ T5887] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 249.911665][ T5887] usb 3-1: config 0 has no interface number 0 [ 249.917854][ T5887] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.929790][ T5887] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 249.938919][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.966431][ T5919] uclogic 0003:28BD:0042.000F: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 249.991277][ T5887] usb 3-1: config 0 descriptor?? [ 250.006773][ T5919] usb 2-1: USB disconnect, device number 15 [ 250.030790][ T5887] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 250.098037][T11041] fido_id[11041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 250.144241][ T5974] udevd[5974]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 250.169020][ T5974] udevd[5974]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 250.214878][ T5887] usb 3-1: USB disconnect, device number 17 [ 250.759818][T11054] kvm: kvm [11053]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x6 [ 251.067702][T11069] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2299'. [ 251.239475][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 251.429752][ T10] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 251.460206][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.481700][ T10] usb 3-1: Product: syz [ 251.492339][ T10] usb 3-1: Manufacturer: syz [ 251.497000][ T10] usb 3-1: SerialNumber: syz [ 251.522159][ T10] usb 3-1: config 0 descriptor?? [ 251.535660][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 251.629760][T11086] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2310'. [ 251.656715][T11086] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2310'. [ 252.286775][T11110] kvm: kvm [11108]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0x7 [ 252.392173][ T10] gspca_sunplus: reg_r err -71 [ 252.397083][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 252.426621][ T10] usb 3-1: USB disconnect, device number 18 [ 252.728606][T11128] block device autoloading is deprecated and will be removed. [ 252.872484][ T10] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 253.034197][ T10] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 253.048999][ T10] usb 6-1: config 0 has no interface number 0 [ 253.064598][ T10] usb 6-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 253.080969][ T10] usb 6-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.094549][ T10] usb 6-1: config 0 interface 8 has no altsetting 0 [ 253.101262][ T10] usb 6-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 253.111979][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.135275][ T10] usb 6-1: config 0 descriptor?? [ 253.222579][T11143] kvm_intel: kvm [11142]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 253.407504][T11150] kvm: kvm [11149]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x6 [ 253.468658][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2340'. [ 253.576314][ T10] uclogic 0003:28BD:0934.0010: interface is invalid, ignoring [ 253.789144][ T5888] usb 6-1: USB disconnect, device number 9 [ 254.215230][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2350'. [ 255.205789][ T29] audit: type=1326 audit(1771845062.321:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2339c629 code=0x7ffc0000 [ 255.264020][ T29] audit: type=1326 audit(1771845062.321:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2339c629 code=0x7ffc0000 [ 255.327300][ T29] audit: type=1326 audit(1771845062.371:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fea2339c629 code=0x7ffc0000 [ 255.390205][ T29] audit: type=1326 audit(1771845062.371:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fea2339c392 code=0x7ffc0000 [ 255.425572][ T29] audit: type=1326 audit(1771845062.371:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fea2339c392 code=0x7ffc0000 [ 255.453390][ T29] audit: type=1326 audit(1771845062.371:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2339c629 code=0x7ffc0000 [ 255.493726][ T29] audit: type=1326 audit(1771845062.371:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2339c629 code=0x7ffc0000 [ 255.517851][ T29] audit: type=1326 audit(1771845062.401:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea2335cece code=0x7ffc0000 [ 255.562280][ T29] audit: type=1326 audit(1771845062.401:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2339c629 code=0x7ffc0000 [ 255.585173][ T29] audit: type=1326 audit(1771845062.401:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2339c629 code=0x7ffc0000 [ 255.744370][T11230] netlink: 'syz.5.2377': attribute type 21 has an invalid length. [ 255.777556][T11230] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2377'. [ 255.790713][T11230] netlink: 'syz.5.2377': attribute type 21 has an invalid length. [ 255.798988][T11230] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2377'. [ 255.811771][T11233] netlink: 'syz.2.2379': attribute type 2 has an invalid length. [ 255.835861][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.852455][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.918736][T11235] overlayfs: failed lookup in lower (newroot/643, name='file0', err=-40): overlapping layers [ 256.755997][T11279] loop4: detected capacity change from 0 to 7 [ 256.764766][ T5854] Buffer I/O error on dev loop4, logical block 0, async page read [ 256.773111][ T5854] Buffer I/O error on dev loop4, logical block 0, async page read [ 256.791361][ T5854] Buffer I/O error on dev loop4, logical block 0, async page read [ 256.810402][ T5854] Buffer I/O error on dev loop4, logical block 0, async page read [ 256.823280][ T5854] Buffer I/O error on dev loop4, logical block 0, async page read [ 256.849382][ T5854] Buffer I/O error on dev loop4, logical block 0, async page read [ 256.877717][ T5854] Buffer I/O error on dev loop4, logical block 0, async page read [ 256.904911][ T5854] ldm_validate_partition_table(): Disk read failed. [ 256.920185][ T5854] Buffer I/O error on dev loop4, logical block 0, async page read [ 256.939199][ T5854] Buffer I/O error on dev loop4, logical block 0, async page read [ 256.956664][ T5854] Buffer I/O error on dev loop4, logical block 0, async page read [ 256.977829][ T5854] Dev loop4: unable to read RDB block 0 [ 257.009429][ T5854] loop4: unable to read partition table [ 257.023232][ T5854] loop4: partition table beyond EOD, truncated [ 257.044071][T11279] ldm_validate_partition_table(): Disk read failed. [ 257.051309][T11279] Dev loop4: unable to read RDB block 0 [ 257.069750][T11279] loop4: unable to read partition table [ 257.085010][T11279] loop4: partition table beyond EOD, truncated [ 257.099428][T11279] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 257.144775][T11292] netlink: 'syz.5.2408': attribute type 2 has an invalid length. [ 257.993437][T11323] loop8: detected capacity change from 0 to 7 [ 258.005134][ T5854] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 258.021651][ T5854] loop8: partition table partially beyond EOD, truncated [ 258.030494][ T5854] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 258.044518][ T5854] loop8: p2 start 956478 is beyond EOD, truncated [ 258.059902][T11323] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 258.067373][T11323] loop8: partition table partially beyond EOD, truncated [ 258.087715][T11323] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 258.098999][T11323] loop8: p2 start 956478 is beyond EOD, truncated [ 258.162385][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 258.245225][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 258.641698][T11343] kvm: apic: phys broadcast and lowest prio [ 259.044939][T11356] loop8: detected capacity change from 0 to 7 [ 259.052145][T11356] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 259.062304][T11356] loop8: partition table partially beyond EOD, truncated [ 259.070043][T11356] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 259.084585][T11356] loop8: p2 start 956478 is beyond EOD, truncated [ 259.127549][T11358] loop4: detected capacity change from 0 to 7 [ 259.145131][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 259.155255][ T5965] ldm_validate_partition_table(): Disk read failed. [ 259.155332][ T5965] Dev loop4: unable to read RDB block 0 [ 259.155397][ T5965] loop4: unable to read partition table [ 259.155616][ T5965] loop4: partition table beyond EOD, truncated [ 259.176557][T11358] ldm_validate_partition_table(): Disk read failed. [ 259.189007][T11358] Dev loop4: unable to read RDB block 0 [ 259.196973][T11358] loop4: unable to read partition table [ 259.204982][T11358] loop4: partition table beyond EOD, truncated [ 259.212708][T11358] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 259.553615][T11370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2451'. [ 259.732951][T11378] kvm: apic: phys broadcast and lowest prio [ 260.509484][ T5888] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 260.669532][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 260.685144][ T5888] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 260.694350][ T5888] usb 3-1: config 0 has no interface number 0 [ 260.702884][ T5888] usb 3-1: config 0 interface 184 has no altsetting 0 [ 260.713995][ T5888] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 260.733126][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.762658][ T5888] usb 3-1: Product: syz [ 260.767012][ T5888] usb 3-1: Manufacturer: syz [ 260.779468][ T5888] usb 3-1: SerialNumber: syz [ 260.795695][ T5888] usb 3-1: config 0 descriptor?? [ 260.818828][ T5888] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 260.829644][ T5888] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 261.027214][ T5888] usb 3-1: USB disconnect, device number 19 [ 261.610712][T11417] tipc: Started in network mode [ 261.615878][T11417] tipc: Node identity 2dcddcd5044a035, cluster identity 4711 [ 261.624030][T11417] tipc: Enabling of bearer rejected, failed to enable media [ 262.393314][T11455] sctp: [Deprecated]: syz.5.2484 (pid 11455) Use of int in max_burst socket option. [ 262.393314][T11455] Use struct sctp_assoc_value instead [ 262.645592][T11464] faux_driver vgem: [drm] Unknown color mode 2787; guessing buffer size. [ 263.216807][T11483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2498'. [ 263.502994][T11499] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2505'. [ 263.659358][ T5842] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 263.689447][ T5919] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 263.811223][ T5842] usb 2-1: Using ep0 maxpacket: 8 [ 263.818229][ T5842] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 263.826088][ T5842] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 263.837924][ T5842] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 263.849945][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 263.856018][ T5842] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 263.868283][ T5842] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 263.879767][ T5842] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 263.891707][ T5842] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 263.905400][ T5919] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 263.914721][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.922958][ T5842] usb 2-1: config 168 interface 0 has no altsetting 0 [ 263.932648][ T5919] usb 3-1: config 0 descriptor?? [ 263.937874][ T5842] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 263.946632][ T5842] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 263.962128][ T5842] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 263.973937][ T5842] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 263.985925][ T5842] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 263.997435][ T5842] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 264.009197][ T5842] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 264.022751][ T5842] usb 2-1: config 168 interface 0 has no altsetting 0 [ 264.033954][ T5842] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 264.041953][ T5842] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 264.054218][ T5842] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 264.066136][ T5842] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.079228][ T5842] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 264.119357][ T5842] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 264.139712][ T5842] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 264.155173][ T5842] usb 2-1: config 168 interface 0 has no altsetting 0 [ 264.181064][ T5842] usb 2-1: string descriptor 0 read error: -22 [ 264.187530][ T5842] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 264.197370][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.219683][ T5842] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 264.373268][ T5919] prodikeys 0003:041E:2801.0011: invalid report_count 55297 [ 264.388829][ T5919] prodikeys 0003:041E:2801.0011: item 0 2 1 9 parsing failed [ 264.410537][ T5919] prodikeys 0003:041E:2801.0011: hid parse failed [ 264.421446][ T5919] prodikeys 0003:041E:2801.0011: probe with driver prodikeys failed with error -22 [ 264.511209][ T5888] usb 2-1: USB disconnect, device number 16 [ 264.583167][ T5919] usb 3-1: USB disconnect, device number 20 [ 265.177623][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2516'. [ 265.541499][T11531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.846419][T11538] netlink: 'syz.5.2523': attribute type 2 has an invalid length. [ 265.869691][T11538] netlink: 'syz.5.2523': attribute type 5 has an invalid length. [ 265.975278][T11545] TCP: TCP_TX_DELAY enabled [ 266.436240][T11565] team0: No ports can be present during mode change [ 266.592018][T11571] netlink: 'syz.2.2538': attribute type 2 has an invalid length. [ 267.887336][T11634] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2570'. [ 267.936835][T11636] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2571'. [ 267.971138][T11636] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2571'. [ 267.987286][T11636] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2571'. [ 268.169457][ C1] sd 0:0:1:0: [sda] tag#5496 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 268.179982][ C1] sd 0:0:1:0: [sda] tag#5496 CDB: Write(6) 0a 00 00 00 00 00 00 00 fe 80 00 00 [ 268.544024][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2586'. [ 269.606712][T11697] netlink: 'syz.1.2601': attribute type 6 has an invalid length. [ 270.610445][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2616'. [ 270.669664][ T5148] block nbd2: Receive control failed (result -32) [ 271.080290][ T5887] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 271.251854][ T5887] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 271.261358][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.273818][ T5887] usb 2-1: config 0 descriptor?? [ 271.475345][T11759] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2632'. [ 271.691419][ T5887] hackrf 2-1:0.0: Board ID: 00 [ 271.696349][ T5887] hackrf 2-1:0.0: Firmware version: [ 271.734824][ T5887] hackrf 2-1:0.0: Registered as swradio24 [ 271.755109][ T5887] videodev: could not get a free minor [ 271.764916][ T5887] hackrf 2-1:0.0: Failed to register as video device (-23) [ 271.781926][ T5887] hackrf 2-1:0.0: probe with driver hackrf failed with error -23 [ 271.923832][ T5842] usb 2-1: USB disconnect, device number 17 [ 272.768965][T11785] netlink: 'syz.2.2641': attribute type 6 has an invalid length. [ 273.273088][T11810] input: syz0 as /devices/virtual/input/input20 [ 273.419353][ T5842] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 273.591069][ T5842] usb 3-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 273.602223][ T5842] usb 3-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 273.615837][ T5842] usb 3-1: config 0 interface 0 has no altsetting 0 [ 273.622804][ T5842] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 273.632207][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.643466][ T5842] usb 3-1: config 0 descriptor?? [ 273.649646][T11805] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 274.085404][ T5842] hid_parser_main: 11 callbacks suppressed [ 274.085429][ T5842] cmedia_hs100b 0003:0D8C:0014.0012: unknown main item tag 0x0 [ 274.109493][ T5842] cmedia_hs100b 0003:0D8C:0014.0012: unknown main item tag 0x0 [ 274.117154][ T5842] cmedia_hs100b 0003:0D8C:0014.0012: unknown main item tag 0x0 [ 274.148925][ T5842] cmedia_hs100b 0003:0D8C:0014.0012: unknown main item tag 0x0 [ 274.162830][ T5842] cmedia_hs100b 0003:0D8C:0014.0012: unknown main item tag 0x0 [ 274.198894][ T5842] cmedia_hs100b 0003:0D8C:0014.0012: hidraw0: USB HID v0.04 Device [HID 0d8c:0014] on usb-dummy_hcd.2-1/input0 [ 274.327358][ T5888] usb 3-1: USB disconnect, device number 21 [ 274.382133][T11838] fido_id[11838]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 275.405450][ T5148] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 275.569829][T11888] input: syz1 as /devices/virtual/input/input21 [ 275.879615][T11905] sctp: [Deprecated]: syz.1.2708 (pid 11905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.879615][T11905] Use struct sctp_sack_info instead [ 276.127520][T11915] netlink: 'syz.1.2704': attribute type 19 has an invalid length. [ 276.136408][T11915] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2704'. [ 276.616493][T11927] sctp: [Deprecated]: syz.5.2710 (pid 11927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.616493][T11927] Use struct sctp_sack_info instead [ 277.025778][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2718'. [ 277.179510][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2722'. [ 277.248826][T11955] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input22 [ 277.557894][T11973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2729'. [ 277.791092][T11987] GUP no longer grows the stack in syz.1.2738 (11987): 200000005000-200000008000 (200000001000) [ 277.802951][T11987] CPU: 0 UID: 0 PID: 11987 Comm: syz.1.2738 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.802992][T11987] Tainted: [L]=SOFTLOCKUP [ 277.803000][T11987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.803021][T11987] Call Trace: [ 277.803034][T11987] [ 277.803043][T11987] dump_stack_lvl+0xe8/0x150 [ 277.803080][T11987] __get_user_pages+0x2453/0x29d0 [ 277.803144][T11987] __gup_longterm_locked+0x3db/0x1630 [ 277.803220][T11987] pin_user_pages+0x9d/0xd0 [ 277.803257][T11987] xdp_umem_pin_pages+0x11b/0x340 [ 277.803300][T11987] xdp_umem_create+0x646/0x8b0 [ 277.803341][T11987] xsk_setsockopt+0x860/0x990 [ 277.803372][T11987] ? __pfx_xsk_setsockopt+0x10/0x10 [ 277.803407][T11987] ? __fget_files+0x2a/0x420 [ 277.803434][T11987] ? aa_sock_opt_perm+0xff/0x1a0 [ 277.803470][T11987] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 277.803493][T11987] ? __pfx_xsk_setsockopt+0x10/0x10 [ 277.803521][T11987] do_sock_setsockopt+0x17c/0x1b0 [ 277.803555][T11987] __x64_sys_setsockopt+0x13d/0x1b0 [ 277.803588][T11987] do_syscall_64+0x14d/0xf80 [ 277.803606][T11987] ? trace_irq_disable+0x3b/0x150 [ 277.803636][T11987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.803657][T11987] ? clear_bhb_loop+0x40/0x90 [ 277.803682][T11987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.803703][T11987] RIP: 0033:0x7fea2339c629 [ 277.803732][T11987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.803750][T11987] RSP: 002b:00007fea24207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 277.803772][T11987] RAX: ffffffffffffffda RBX: 00007fea23615fa0 RCX: 00007fea2339c629 [ 277.803788][T11987] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 277.803801][T11987] RBP: 00007fea23432b39 R08: 0000000000000020 R09: 0000000000000000 [ 277.803815][T11987] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 277.803828][T11987] R13: 00007fea23616038 R14: 00007fea23615fa0 R15: 00007fff6e054eb8 [ 277.803861][T11987] [ 278.238989][T12005] netlink: 'syz.3.2744': attribute type 19 has an invalid length. [ 278.248844][T12005] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2744'. [ 278.256671][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2743'. [ 278.299468][ T5888] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 278.441284][T12015] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 278.467883][ T5888] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 278.486161][ T5888] usb 3-1: config 0 has no interface number 0 [ 278.501283][ T5888] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 278.517427][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.537182][ T5888] usb 3-1: Product: syz [ 278.544772][ T5888] usb 3-1: Manufacturer: syz [ 278.554861][ T5888] usb 3-1: SerialNumber: syz [ 278.584440][ T5888] usb 3-1: config 0 descriptor?? [ 278.820339][ T5888] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 278.836450][ T5888] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 278.849487][ T5888] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 278.858079][ T5888] usb 3-1: media controller created [ 278.885813][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.960371][T12037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2757'. [ 278.982755][ T5842] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 279.026052][T12040] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 279.140445][ T5842] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 279.161651][ T5842] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.177047][T12044] IPVS: persistence engine module ip_vs_pe_ not found [ 279.184548][ T5842] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.197774][ T5842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.219028][ T5842] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.240641][ T5842] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.257473][ T5842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.268044][ T5842] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.288288][ T5842] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.308948][ T5842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.320872][ T5842] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.330041][ T5842] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.346138][ T5842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.355601][ T5842] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.366379][ T5842] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.379455][ T5842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.387806][ T5842] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.403554][ T5842] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.425247][ T5842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.441147][ T5842] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.459350][ T5842] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.480829][ T5842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.489212][ T5842] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.501903][ T5842] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.516141][ T5842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.526482][ T5842] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 279.535708][ T5842] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 279.544358][ T5842] usb 6-1: Product: syz [ 279.548631][ T5842] usb 6-1: Manufacturer: syz [ 279.553400][ T5842] usb 6-1: SerialNumber: syz [ 279.567338][ T5842] usb 6-1: config 0 descriptor?? [ 279.588417][ T5842] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 279.701212][T12059] can0: slcan on ptm0. [ 279.763107][T12059] can0 (unregistered): slcan off ptm0. [ 279.841829][T12063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.910089][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 279.933474][ T5887] usb 6-1: USB disconnect, device number 10 [ 279.952491][ T5887] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 279.992165][ T5888] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 280.066188][ T5888] usb 3-1: USB disconnect, device number 22 [ 280.869618][ T5842] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 281.079352][ T5842] usb 2-1: Using ep0 maxpacket: 16 [ 281.090792][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.106099][ T5842] usb 2-1: New USB device found, idVendor=05ac, idProduct=0250, bcdDevice= 0.00 [ 281.115507][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.127801][ T5842] usb 2-1: config 0 descriptor?? [ 281.357849][T12109] can0: slcan on ptm0. [ 281.421661][T12109] can0 (unregistered): slcan off ptm0. [ 281.529395][ T5888] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 281.542959][ T5842] apple 0003:05AC:0250.0013: fixing up Magic Keyboard JIS report descriptor [ 281.565553][ T5842] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 281.572762][ T5842] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 281.581493][ T5842] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 281.588610][ T5842] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 281.597783][ T5842] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 281.606974][ T5842] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 281.615141][ T5842] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 281.622285][ T5842] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 281.630254][ T5842] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 281.637300][ T5842] apple 0003:05AC:0250.0013: unknown main item tag 0x0 [ 281.676055][ T5842] apple 0003:05AC:0250.0013: hidraw0: USB HID v0.00 Device [HID 05ac:0250] on usb-dummy_hcd.1-1/input0 [ 281.695322][ T5888] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 281.719574][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.727667][ T5888] usb 3-1: Product: syz [ 281.746590][ T5888] usb 3-1: Manufacturer: syz [ 281.755955][ T5888] usb 3-1: SerialNumber: syz [ 281.772510][ T5888] usb 3-1: config 0 descriptor?? [ 281.777429][ T5842] usb 2-1: USB disconnect, device number 18 [ 281.792360][ T5888] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 282.411635][ T5888] gspca_sunplus: reg_r err -71 [ 282.416578][ T5888] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 282.456887][ T5888] usb 3-1: USB disconnect, device number 23 [ 282.556898][T12146] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2809'. [ 283.118006][T12179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2825'. [ 283.787906][T12215] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 284.740510][T12268] program syz.1.2868 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.187078][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2880'. [ 285.749568][ T5148] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 287.297232][T12390] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2924'. [ 287.494675][T12400] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2930'. [ 287.717926][T12410] netlink: 'syz.3.2936': attribute type 1 has an invalid length. [ 287.726502][T12410] netlink: 'syz.3.2936': attribute type 2 has an invalid length. [ 287.737897][T12410] netlink: 'syz.3.2936': attribute type 1 has an invalid length. [ 287.989585][ T5148] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 288.005032][T12427] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2949'. [ 288.881948][ T5842] Process accounting resumed [ 289.909489][ T5842] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 289.949472][ T5888] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 290.072387][ T5842] usb 2-1: Using ep0 maxpacket: 8 [ 290.079459][ T5842] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.089566][ T5842] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.099675][ T5842] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.109819][ T5842] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.123007][ T5842] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 290.142637][ T5888] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 290.150713][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.152610][ T5888] usb 6-1: config 0 has no interface number 0 [ 290.166522][ T5888] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 290.188948][ T5888] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 290.198483][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 290.207187][ T5888] usb 6-1: Manufacturer: syz [ 290.212603][ T5888] usb 6-1: SerialNumber: syz [ 290.221448][ T5888] usb 6-1: config 0 descriptor?? [ 290.395836][ T5842] usb 2-1: GET_CAPABILITIES returned 0 [ 290.402314][ T5842] usbtmc 2-1:16.0: can't read capabilities [ 290.600902][ T5887] usb 2-1: USB disconnect, device number 19 [ 290.847991][ T5888] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.214/input/input27 [ 291.057833][ T5919] usb 6-1: USB disconnect, device number 11 [ 291.826201][T12573] input: syz1 as /devices/virtual/input/input28 [ 292.010843][T12579] virtiofs: Unknown parameter 'always 1 V3 [ 292.010843][T12579] 010000E0 1 0:00000000 0 [ 292.010843][T12579] 18 nlmon0 : 1 V3 [ 292.010843][T12579] 010000E0 1 0:00000000 0 [ 292.010843][T12579] 20 batadv0 : 1 V3 [ 292.010843][T12579] 010000E0 1 0:00000000 0 [ 292.010843][T12579] 21 vxcan0 : 1 V3 [ 292.010843][T12579] 010000E0 1 0:00000000 0 [ 292.010843][T12579] 22 vxcan1 : 1 V3 [ 292.010843][T12579] 010000E0 1 0:00000000 0 [ 292.010843][T12579] 23 veth0 : 1 V3 [ 292.010843][T12579] 010000E0 1 0:00000000 0 [ 292.010843][T12579] 24 veth1 : 1 V3 [ 292.010843][T12579] 010000E0 1 0:00000000 0 [ 292.010843][T12579] 25 wg0 : 1 V3 [ 292.010843][T12579] 010000E0 1 0:00000000 0 [ 292.010843][T12579] 26 wg1 : 1 V3 [ 292.010843][T12579] 010000E0 1 0:00000000 0 [ 292.010843][T12579] 27 wg2 : 1 V3 [ 292.010843][T12579] 010000E0 1 0:00000000 0 [ 292.010843][T12579] 28 veth0_to_bridge: 1 V3 [ 292.010843][T12579] 010000E0 1 0:00000000 0 [ 292.010843][T12579] 29 bridge_slave_0: 1 V3 [ 292.010843][T12579] 010000E0 1 0:00000000 0 [ 292.010843][T12579] 30 veth1_to_bridge: 1 V3 [ 292.010843][T12579] 010000E0 1 0:00000000 0 [ 292.010843][T12579] 31 bridge_slave_1: 1 V3 [ 292.010843][T12579] 010000E0 1 0:00000000 0 [ 292.010843][T12579] 32 veth0_to_bond: 1 V3 [ 292.010843][T12579] 010000E0 1 0:00000000 0 [ 292.010843][T12579] 33 bond_slave_0: 1 V3 [ 292.010843][T12579] 010000E0 1 0:0 [ 292.295903][T12596] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input29 [ 292.491437][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3027'. [ 292.544063][T12601] input: syz1 as /devices/virtual/input/input30 [ 292.608059][T12605] syz.2.3029 uses obsolete (PF_INET,SOCK_PACKET) [ 293.134993][T12624] input: syz1 as /devices/virtual/input/input31 [ 293.342387][T12627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3039'. [ 293.380956][T12627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3039'. [ 294.016608][T12632] netlink: 'syz.2.3041': attribute type 2 has an invalid length. [ 294.060056][T12650] input: syz1 as /devices/virtual/input/input32 [ 294.219603][ T5919] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 294.399594][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 294.415581][ T5919] usb 6-1: config 0 interface 0 has no altsetting 0 [ 294.430169][ T5919] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 294.443978][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.470255][ T5919] usb 6-1: config 0 descriptor?? [ 294.583166][T12667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3057'. [ 294.758334][T12677] loop5: detected capacity change from 0 to 7 [ 294.765946][T12677] Dev loop5: unable to read RDB block 7 [ 294.776353][T12677] loop5: AHDI p1 p2 [ 294.783575][T12677] loop5: partition table partially beyond EOD, truncated [ 294.793051][T12677] loop5: p1 start 1702000233 is beyond EOD, truncated [ 294.896018][ T5919] hid (null): nested delimiters [ 294.899979][ T5888] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 294.910536][ T5919] hid (null): report_id 3501428154 is invalid [ 294.916735][ T5919] hid (null): report_id 0 is invalid [ 294.929876][ T5919] hid (null): unknown global tag 0xe [ 295.070936][ T5888] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 295.089452][ T5888] usb 2-1: config 0 has no interface number 0 [ 295.115879][ T5888] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 295.127643][ T5887] usb 6-1: USB disconnect, device number 12 [ 295.148942][ T5888] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 295.171990][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 295.195472][ T5888] usb 2-1: Manufacturer: syz [ 295.201419][ T5888] usb 2-1: SerialNumber: syz [ 295.211996][ T5888] usb 2-1: config 0 descriptor?? [ 295.629395][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 295.678456][T12705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3076'. [ 295.691259][T12705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3076'. [ 295.779598][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 295.792153][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.818244][ T10] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 295.828329][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.841245][ T5888] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input33 [ 295.850783][ T10] usb 3-1: Product: syz [ 295.855103][ T10] usb 3-1: Manufacturer: syz [ 295.869783][ T10] usb 3-1: SerialNumber: syz [ 295.890009][ T10] usb 3-1: config 0 descriptor?? [ 295.908018][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 295.964913][T12713] tap0: tun_chr_ioctl cmd 1074025672 [ 295.987696][T12713] tap0: ignored: set checksum enabled [ 296.052202][ T5926] usb 2-1: USB disconnect, device number 20 [ 296.520590][ T5926] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 296.689527][ T5926] usb 6-1: Using ep0 maxpacket: 8 [ 296.703641][ T5926] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.730597][ T10] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 296.738944][ T5926] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 296.749849][ T10] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 296.759506][ T5926] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.772402][ T10] usb 3-1: USB disconnect, device number 24 [ 296.781430][ T5926] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.805047][ T5926] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 296.833177][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.063706][ T5926] usb 6-1: GET_CAPABILITIES returned 0 [ 297.079399][ T5926] usbtmc 6-1:16.0: can't read capabilities [ 297.230624][ T5908] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 297.294040][ T10] usb 6-1: USB disconnect, device number 13 [ 297.399324][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 297.434655][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.456041][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.476382][ T5908] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 297.499356][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.522274][ T5908] usb 2-1: config 0 descriptor?? [ 297.952254][ T5908] hid_parser_main: 1247 callbacks suppressed [ 297.952278][ T5908] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 297.979519][ T5908] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 298.064519][ T5887] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 298.148814][ T5908] ft260 0003:0403:6030.0015: chip code: 0000 0000 [ 298.239386][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 298.244825][T12752] tap0: tun_chr_ioctl cmd 1074025672 [ 298.262743][T12752] tap0: ignored: set checksum enabled [ 298.269409][ T5887] usb 3-1: too many endpoints for config 0 interface 0 altsetting 1: 128, using maximum allowed: 30 [ 298.289531][ T5887] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.305944][ T5887] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.316494][ T5887] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 298.330149][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 298.341673][ T5887] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 298.352792][ T5908] ft260 0003:0403:6030.0015: failed to retrieve system status [ 298.370440][ T5908] ft260 0003:0403:6030.0015: probe with driver ft260 failed with error -71 [ 298.393071][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.411756][ T5908] usb 2-1: USB disconnect, device number 21 [ 298.431476][ T5887] usb 3-1: config 0 descriptor?? [ 298.452637][ T5887] hub 3-1:0.0: USB hub found [ 298.649397][ T5887] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 299.056130][ T5887] hid-generic 0003:046D:C31C.0016: unknown main item tag 0x0 [ 299.084577][ T5887] hid-generic 0003:046D:C31C.0016: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 299.370654][ T10] usb 3-1: USB disconnect, device number 25 [ 299.399392][ T5908] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 299.580169][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 299.588285][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0 [ 299.598422][ T5908] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 299.607762][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.626754][ T5908] usb 2-1: config 0 descriptor?? [ 300.058997][ T5908] hid (null): nested delimiters [ 300.072104][ T5908] hid (null): report_id 3501428154 is invalid [ 300.078606][ T5908] hid (null): report_id 0 is invalid [ 300.084399][ T5908] hid (null): unknown global tag 0xe [ 300.272259][ T5908] usb 2-1: USB disconnect, device number 22 [ 300.309634][ T10] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 300.470769][ T10] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 300.478903][ T10] usb 3-1: config 0 has no interface number 0 [ 300.485587][ T10] usb 3-1: config 0 interface 29 has no altsetting 0 [ 300.498747][ T10] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 300.508915][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.517254][ T10] usb 3-1: Product: syz [ 300.521773][ T10] usb 3-1: Manufacturer: syz [ 300.526423][ T10] usb 3-1: SerialNumber: syz [ 300.534514][ T10] usb 3-1: config 0 descriptor?? [ 300.747349][ T10] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 300.848990][T12808] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3132'. [ 300.963848][ T10] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 300.987494][ T10] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 301.005370][ T10] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 301.028238][T12816] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512 [ 301.080584][ T10] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -8 [ 301.200958][ T5888] usb 3-1: USB disconnect, device number 26 [ 301.324113][T12828] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3134'. [ 302.869190][T12879] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 302.876055][T12879] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 302.886895][T12879] vhci_hcd vhci_hcd.0: Device attached [ 302.899867][T12879] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 302.906425][T12879] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 302.915908][T12879] vhci_hcd vhci_hcd.0: Device attached [ 302.924876][T12879] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 302.931441][T12879] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 302.940441][T12879] vhci_hcd vhci_hcd.0: Device attached [ 302.962491][T12879] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(9) [ 302.969070][T12879] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 302.999405][T12879] vhci_hcd vhci_hcd.0: Device attached [ 303.011245][T12884] vhci_hcd: connection closed [ 303.021949][ T13] vhci_hcd vhci_hcd.5: stop threads [ 303.033864][T12887] vhci_hcd: connection closed [ 303.035364][T12880] vhci_hcd: connection closed [ 303.041194][T12882] vhci_hcd: connection closed [ 303.051032][ T13] vhci_hcd vhci_hcd.5: release socket [ 303.065404][T12893] loop8: detected capacity change from 0 to 1 [ 303.085824][T12893] Dev loop8: unable to read RDB block 1 [ 303.090315][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 303.108437][ T13] vhci_hcd vhci_hcd.5: stop threads [ 303.110093][T12893] loop8: unable to read partition table [ 303.113862][ T13] vhci_hcd vhci_hcd.5: release socket [ 303.113964][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 303.118513][ T13] vhci_hcd vhci_hcd.5: stop threads [ 303.130190][ T5888] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 303.156428][ T13] vhci_hcd vhci_hcd.5: release socket [ 303.158635][T12893] loop8: partition table beyond EOD, [ 303.169909][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 303.171373][T12893] truncated [ 303.185064][ T13] vhci_hcd vhci_hcd.5: stop threads [ 303.199321][ T13] vhci_hcd vhci_hcd.5: release socket [ 303.206853][T12893] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 303.220787][ T5888] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 303.228564][ T5888] usb 43-1: enqueue for inactive port 0 [ 303.234922][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 303.328058][T12900] program syz.1.3165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.349916][ T5888] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 303.781262][T12917] kvm: kvm [12915]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xffffffffffffffff [ 303.955757][T12922] binder: 12921:12922 ioctl c018620c 200000000140 returned -1 [ 304.340484][T12934] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3181'. [ 304.424987][T12936] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512 [ 304.523912][T12940] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 305.019367][ T5887] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 305.139420][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 305.179417][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 305.186312][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.199119][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.210758][ T5887] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 305.220719][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.233447][ T5887] usb 6-1: config 0 descriptor?? [ 305.290002][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 305.297890][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 305.310429][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 305.324080][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 305.335472][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 305.347245][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 305.360610][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 305.371739][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 305.392095][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 305.405108][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 305.417137][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.426593][ T10] usb 3-1: Product: syz [ 305.433502][ T10] usb 3-1: Manufacturer: syz [ 305.438273][ T10] usb 3-1: SerialNumber: syz [ 305.461411][ T10] usb 3-1: config 0 descriptor?? [ 305.467570][T12956] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 305.488616][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.616889][ T10] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 305.663721][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.706792][ T5887] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 305.728337][ T10] usb 3-1: USB disconnect, device number 27 [ 305.733495][ T5887] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 305.896009][ T5887] ft260 0003:0403:6030.0018: chip code: 0000 0000 [ 306.096637][ T5887] ft260 0003:0403:6030.0018: failed to retrieve system status [ 306.111122][ T5887] ft260 0003:0403:6030.0018: probe with driver ft260 failed with error -71 [ 306.128475][ T5887] usb 6-1: USB disconnect, device number 14 [ 306.495541][T12976] loop8: detected capacity change from 0 to 1 [ 306.504000][ T5854] Dev loop8: unable to read RDB block 1 [ 306.510619][ T5854] loop8: unable to read partition table [ 306.516793][ T5854] loop8: partition table beyond EOD, truncated [ 306.526787][T12976] Dev loop8: unable to read RDB block 1 [ 306.533443][T12976] loop8: unable to read partition table [ 306.542129][T12976] loop8: partition table beyond EOD, truncated [ 306.553158][T12976] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 307.792041][T13037] can0: slcan on pty30. [ 307.883766][T13035] can0 (unregistered): slcan off pty30. [ 308.274359][T13059] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3241'. [ 308.410500][T13063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.165787][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3262'. [ 309.198726][T13106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3264'. [ 309.483108][T13119] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3270'. [ 310.083247][T13147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3283'. [ 310.119889][T13147] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3283'. [ 310.145409][T13147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3283'. [ 310.689589][T13181] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3299'. [ 310.777876][T13185] kernel read not supported for file /file1 (pid: 13185 comm: syz.5.3300) [ 310.815345][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 310.815363][ T29] audit: type=1800 audit(1771845373.924:62): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3300" name="file1" dev="mqueue" ino=60222 res=0 errno=0 [ 310.968756][T13192] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.985758][T13194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3307'. [ 311.017785][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.025044][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.707974][T13227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3321'. [ 312.664220][T13278] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.682441][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.689703][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.874094][T13285] tipc: Started in network mode [ 312.889463][T13285] tipc: Node identity ac14140f, cluster identity 4711 [ 312.906132][T13285] tipc: New replicast peer: 255.255.255.255 [ 312.913710][T13285] tipc: Enabled bearer , priority 10 [ 313.528111][T13316] usb usb8: usbfs: process 13316 (syz.3.3364) did not claim interface 0 before use [ 313.757066][T13328] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 313.869578][ T5887] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 313.935940][T13334] : renamed from vlan0 (while UP) [ 314.021158][ T5887] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.032533][T13338] tipc: Started in network mode [ 314.032562][T13338] tipc: Node identity ac14140f, cluster identity 4711 [ 314.032781][T13338] tipc: New replicast peer: 255.255.255.255 [ 314.033455][T13338] tipc: Enabled bearer , priority 10 [ 314.062266][ T5908] tipc: Node number set to 2886997007 [ 314.068739][ T5887] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 314.101334][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.147561][T13340] __nla_validate_parse: 5 callbacks suppressed [ 314.147581][T13340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3377'. [ 314.157405][ T5887] usb 6-1: config 0 descriptor?? [ 314.203620][ T5887] pwc: Askey VC010 type 2 USB webcam detected. [ 314.315601][T13348] blkio.reset_stats is deprecated [ 314.456770][T13356] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3385'. [ 314.606424][ T5887] pwc: recv_control_msg error -32 req 02 val 2b00 [ 314.819876][ T5887] pwc: recv_control_msg error -71 req 02 val 2c00 [ 314.833682][ T5887] pwc: recv_control_msg error -71 req 04 val 1000 [ 314.851401][ T5887] pwc: recv_control_msg error -71 req 04 val 1300 [ 314.868242][ T5887] pwc: recv_control_msg error -71 req 04 val 1400 [ 314.899477][ T5887] pwc: recv_control_msg error -71 req 02 val 2000 [ 314.913006][ T5887] pwc: recv_control_msg error -71 req 02 val 2100 [ 314.933279][ T5887] pwc: recv_control_msg error -71 req 04 val 1500 [ 314.950193][ T5887] pwc: recv_control_msg error -71 req 02 val 2500 [ 314.957596][ T5887] pwc: recv_control_msg error -71 req 02 val 2400 [ 314.975269][ T5887] pwc: recv_control_msg error -71 req 02 val 2600 [ 314.995158][ T5887] pwc: recv_control_msg error -71 req 02 val 2900 [ 315.005673][ T5887] pwc: recv_control_msg error -71 req 02 val 2800 [ 315.023452][ T5887] pwc: recv_control_msg error -71 req 04 val 1100 [ 315.035954][T13380] overlayfs: workdir and upperdir must reside under the same mount [ 315.045790][ T5887] pwc: recv_control_msg error -71 req 04 val 1200 [ 315.069610][ T5887] pwc: Registered as video103. [ 315.095668][ T5887] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input34 [ 315.149487][ T10] tipc: Node number set to 2886997007 [ 315.160204][ T5887] usb 6-1: USB disconnect, device number 15 [ 315.508151][T13399] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3407'. [ 315.521635][T13401] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3405'. [ 315.992258][T13425] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3418'. [ 316.591968][T13454] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3432'. [ 316.972212][ T5926] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 317.139821][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 317.154712][ T5926] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 317.171179][ T5926] usb 3-1: config 0 has no interface number 0 [ 317.183517][ T5926] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 317.202042][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.224246][ T5926] usb 3-1: Product: syz [ 317.228556][ T5926] usb 3-1: Manufacturer: syz [ 317.241201][ T5926] usb 3-1: SerialNumber: syz [ 317.251825][ T5926] usb 3-1: config 0 descriptor?? [ 317.278962][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.284165][ T5926] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 317.292959][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.479539][T13490] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.490935][ T5926] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 317.509167][ T5926] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 317.883493][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 317.893520][ T5926] usb 3-1: USB disconnect, device number 28 [ 317.911056][ T5926] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 317.943291][ T5926] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 317.976978][ T5926] quatech2 3-1:0.51: device disconnected [ 318.057392][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3459'. [ 319.158174][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3471'. [ 319.314551][T13540] netlink: 'syz.2.3475': attribute type 83 has an invalid length. [ 319.690286][T13559] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3483'. [ 319.857939][T13571] netlink: 'syz.1.3487': attribute type 83 has an invalid length. [ 320.195290][T13587] ptrace attach of "./syz-executor exec"[8734] was attempted by "./syz-executor exec"[13587] [ 320.390357][T13599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3502'. [ 320.460804][T13602] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3505'. [ 320.471680][ T5887] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 320.631693][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.663011][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.682665][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 320.697218][ T5887] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 320.707484][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.728377][ T5887] usb 3-1: config 0 descriptor?? [ 321.016820][ T29] audit: type=1326 audit(1771845384.124:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13627 comm="syz.1.3517" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea2339c629 code=0x0 [ 321.151742][ T5887] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 321.159217][ T5887] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 321.181414][ T5887] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 321.191593][ T5887] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 321.199083][ T5887] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 321.206714][ T5887] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 321.216256][ T5887] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 321.224033][ T5887] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 321.232047][ T5887] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 321.240262][ T5887] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 321.259175][ T5887] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 321.421362][ T5919] usb 3-1: USB disconnect, device number 29 [ 321.571263][T13646] tipc: New replicast peer: 255.255.255.255 [ 321.577849][T13646] tipc: Enabled bearer , priority 10 [ 321.903341][T13654] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3526'. [ 322.709805][ T10] tipc: Node number set to 696770437 [ 323.203668][T13704] syzkaller1: entered promiscuous mode [ 323.210073][T13704] syzkaller1: entered allmulticast mode [ 323.572171][T13720] Invalid argument reading file caps for ./file0 [ 323.929537][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 324.079357][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 324.086563][ T10] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 324.094954][ T10] usb 6-1: config 0 has no interface number 0 [ 324.104189][ T10] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 324.113612][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.121842][ T10] usb 6-1: Product: syz [ 324.126235][ T10] usb 6-1: Manufacturer: syz [ 324.130958][ T10] usb 6-1: SerialNumber: syz [ 324.138082][ T10] usb 6-1: config 0 descriptor?? [ 324.147827][ T10] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 324.356109][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 324.371793][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 324.390167][T13671] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 324.767955][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 324.779580][ T10] usb 6-1: USB disconnect, device number 16 [ 324.802190][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 324.834704][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 324.849024][ T10] quatech2 6-1:0.51: device disconnected [ 325.009478][ T29] audit: type=1326 audit(1771845388.114:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.2.3564" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e2d59c629 code=0x0 [ 325.683729][T13754] syzkaller1: entered promiscuous mode [ 325.690124][T13754] syzkaller1: entered allmulticast mode [ 325.784298][T13756] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 325.809532][T13756] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 326.021774][ T29] audit: type=1326 audit(1771845389.134:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.5.3577" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f914799c629 code=0x0 [ 326.247443][T13773] syzkaller1: entered promiscuous mode [ 326.254004][T13773] syzkaller1: entered allmulticast mode [ 326.372109][T13775] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3583'. [ 326.384055][ T29] audit: type=1326 audit(1771845389.494:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13776 comm="syz.1.3582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea2339c629 code=0x0 [ 326.457030][T13779] syzkaller1: entered promiscuous mode [ 326.462675][T13779] syzkaller1: entered allmulticast mode [ 326.578850][T13782] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 326.593328][T13782] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 326.694866][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e957000: rx timeout, send abort [ 326.705317][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e957000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 327.159429][ T5842] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 327.222286][T13804] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3596'. [ 327.267716][T13806] Invalid argument reading file caps for ./file0 [ 327.330141][ T5842] usb 6-1: Using ep0 maxpacket: 8 [ 327.337980][ T5842] usb 6-1: unable to get BOS descriptor or descriptor too short [ 327.356178][ T5842] usb 6-1: config 1 has an invalid interface number: 4 but max is 2 [ 327.364570][ T5842] usb 6-1: config 1 has an invalid interface descriptor of length 6, skipping [ 327.384888][ T5842] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.420498][ T5842] usb 6-1: config 1 has no interface number 1 [ 327.439470][ T5842] usb 6-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 327.455391][ T5842] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 327.487137][ T5842] usb 6-1: config 1 interface 4 has no altsetting 0 [ 327.497110][ T5842] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.506864][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.524420][ T5842] usb 6-1: Product: syz [ 327.528672][ T5842] usb 6-1: Manufacturer: syz [ 327.533614][ T5842] usb 6-1: SerialNumber: syz [ 327.601135][T13813] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input35 [ 327.769629][T13816] input: syz0 as /devices/virtual/input/input36 [ 327.821255][ T5842] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 327.977387][ T5842] usb 6-1: USB disconnect, device number 17 [ 328.071589][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.272860][ T5887] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 328.382270][T13832] Bluetooth: MGMT ver 1.23 [ 328.386880][T13832] Bluetooth: hci2: invalid length 3, exp 2 for type 5 [ 328.439340][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 328.447123][ T5887] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 328.457450][ T5887] usb 3-1: config 0 has no interface number 0 [ 328.467600][ T5887] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 328.480107][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.488221][ T5887] usb 3-1: Product: syz [ 328.493509][ T5887] usb 3-1: Manufacturer: syz [ 328.498306][ T5887] usb 3-1: SerialNumber: syz [ 328.529990][ T5887] usb 3-1: config 0 descriptor?? [ 328.541554][ T5887] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 328.761810][ T5887] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 328.776597][ T5887] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 329.187314][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 329.197639][ T5887] usb 3-1: USB disconnect, device number 30 [ 329.228240][ T5887] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 329.262223][ T5887] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 329.309850][ T5887] quatech2 3-1:0.51: device disconnected [ 330.697348][T13885] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 331.465962][T13912] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 332.048762][ T29] audit: type=1326 audit(1771845395.154:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13924 comm="syz.3.3647" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae32b9c629 code=0x0 [ 333.038588][T13961] netlink: 'syz.1.3670': attribute type 29 has an invalid length. [ 333.088906][T13961] netlink: 'syz.1.3670': attribute type 29 has an invalid length. [ 333.116249][T13963] syzkaller1: entered promiscuous mode [ 333.130926][T13963] syzkaller1: entered allmulticast mode [ 333.149288][T13961] netlink: 'syz.1.3670': attribute type 29 has an invalid length. [ 333.256719][T13961] netlink: 'syz.1.3670': attribute type 29 has an invalid length. [ 333.871395][ C0] ------------[ cut here ]------------ [ 333.876958][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 333.886859][ C0] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#0: kworker/u8:6/154 [ 333.897628][ C0] Modules linked in: [ 333.901949][ C0] CPU: 0 UID: 0 PID: 154 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.912966][ C0] Tainted: [L]=SOFTLOCKUP [ 333.917337][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 333.927468][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 333.934316][ C0] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 333.940651][ C0] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 333.960339][ C0] RSP: 0018:ffffc90000007618 EFLAGS: 00010246 [ 333.966494][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 333.974571][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff904513f0 [ 333.982635][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.990694][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888011ec0528 [ 333.998720][ C0] R13: 0000000000000000 R14: ffffffff904513f0 R15: ffff88805e733138 [ 334.006769][ C0] FS: 0000000000000000(0000) GS:ffff888124fff000(0000) knlGS:0000000000000000 [ 334.015778][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.022460][ C0] CR2: 00007fea241456b8 CR3: 000000002fe64000 CR4: 00000000003526f0 [ 334.030535][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 334.038551][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 334.046635][ C0] Call Trace: [ 334.049982][ C0] [ 334.052880][ C0] rate_control_send_low+0x1a7/0x7b0 [ 334.058231][ C0] rate_control_get_rate+0x20b/0x5d0 [ 334.063617][ C0] ieee80211_beacon_get_finish+0x3af/0x6f0 [ 334.069515][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 334.075900][ C0] ? __ieee80211_beacon_add_tim+0x1180/0x15a0 [ 334.082062][ C0] ? ieee80211_beacon_get_ap+0x8cb/0x2040 [ 334.087848][ C0] ieee80211_beacon_get_ap+0x196a/0x2040 [ 334.093588][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 334.099699][ C0] ? lock_acquire+0xf0/0x2e0 [ 334.104351][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 334.109967][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 334.115572][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 334.121208][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 334.126726][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 334.132889][ C0] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 334.138503][ C0] ? lock_acquire+0xf0/0x2e0 [ 334.143186][ C0] __iterate_interfaces+0x2ab/0x590 [ 334.148543][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 334.154780][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 334.162147][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 334.168275][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 334.175407][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 334.180698][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 334.186563][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 334.191875][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 334.197653][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 334.203808][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 334.208990][ C0] handle_softirqs+0x22a/0x870 [ 334.213845][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 334.218679][ C0] __irq_exit_rcu+0x5f/0x150 [ 334.223354][ C0] irq_exit_rcu+0x9/0x30 [ 334.227650][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 334.233365][ C0] [ 334.236333][ C0] [ 334.239324][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.245349][ C0] RIP: 0010:crng_make_state+0x36f/0x600 [ 334.250989][ C0] Code: 68 88 23 8f e8 b2 91 6d 06 4c 89 fe e9 66 fe ff ff e8 15 05 76 fc e8 50 f4 6a 06 4d 85 f6 74 86 e8 06 05 76 fc fb 48 83 c4 28 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 c2 da 6d 06 cc 90 e8 ab 33 67 ff [ 334.270679][ C0] RSP: 0018:ffffc900030178c8 EFLAGS: 00000282 [ 334.276802][ C0] RAX: ffffffff854fee4a RBX: 0000000000000000 RCX: ffff888020f4dac0 [ 334.284854][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.292906][ C0] RBP: 0000000000000000 R08: ffffffff9033cab7 R09: 1ffffffff2067956 [ 334.300941][ C0] R10: dffffc0000000000 R11: fffffbfff2067957 R12: dffffc0000000000 [ 334.308966][ C0] R13: ffff8880b8436d10 R14: 0000000000000200 R15: ffff8880b8436d60 [ 334.317093][ C0] ? crng_make_state+0x36a/0x600 [ 334.322135][ C0] _get_random_bytes+0xff/0x260 [ 334.327041][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 334.332606][ C0] nsim_dev_trap_report_work+0x69e/0xb80 [ 334.338448][ C0] ? process_one_work+0x87c/0x1650 [ 334.343643][ C0] process_one_work+0x949/0x1650 [ 334.348651][ C0] ? __pfx_process_one_work+0x10/0x10 [ 334.354103][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 334.359199][ C0] worker_thread+0xb46/0x1140 [ 334.363998][ C0] kthread+0x388/0x470 [ 334.368121][ C0] ? __pfx_worker_thread+0x10/0x10 [ 334.373326][ C0] ? __pfx_kthread+0x10/0x10 [ 334.377976][ C0] ret_from_fork+0x51e/0xb90 [ 334.382653][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 334.387804][ C0] ? __switch_to+0xc7d/0x1450 [ 334.392555][ C0] ? __pfx_kthread+0x10/0x10 [ 334.397190][ C0] ret_from_fork_asm+0x1a/0x30 [ 334.402055][ C0] [ 334.405148][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 334.412460][ C0] CPU: 0 UID: 0 PID: 154 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.423432][ C0] Tainted: [L]=SOFTLOCKUP [ 334.427783][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 334.437881][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 334.444817][ C0] Call Trace: [ 334.448144][ C0] [ 334.451018][ C0] vpanic+0x56c/0xa60 [ 334.455056][ C0] ? __pfx__printk+0x10/0x10 [ 334.459688][ C0] ? __pfx_vpanic+0x10/0x10 [ 334.464245][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 334.469578][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 334.474834][ C0] panic+0xc5/0xd0 [ 334.478621][ C0] ? __pfx_panic+0x10/0x10 [ 334.483097][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 334.488094][ C0] __warn+0x315/0x4f0 [ 334.492123][ C0] ? __rate_control_send_low+0x524/0x800 [ 334.497816][ C0] ? __rate_control_send_low+0x524/0x800 [ 334.503500][ C0] __report_bug+0x29a/0x540 [ 334.508156][ C0] ? __rate_control_send_low+0x524/0x800 [ 334.513925][ C0] ? __pfx___report_bug+0x10/0x10 [ 334.519018][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 334.524177][ C0] report_bug_entry+0x19a/0x290 [ 334.529083][ C0] ? __rate_control_send_low+0x5bb/0x800 [ 334.534766][ C0] ? __rate_control_send_low+0x5c0/0x800 [ 334.540464][ C0] handle_bug+0xca/0x200 [ 334.544753][ C0] exc_invalid_op+0x1a/0x50 [ 334.549569][ C0] asm_exc_invalid_op+0x1a/0x20 [ 334.554465][ C0] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 334.560761][ C0] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 334.580411][ C0] RSP: 0018:ffffc90000007618 EFLAGS: 00010246 [ 334.586523][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 334.594538][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff904513f0 [ 334.602550][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 334.610562][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888011ec0528 [ 334.618573][ C0] R13: 0000000000000000 R14: ffffffff904513f0 R15: ffff88805e733138 [ 334.626610][ C0] ? __rate_control_send_low+0x58d/0x800 [ 334.632319][ C0] rate_control_send_low+0x1a7/0x7b0 [ 334.637679][ C0] rate_control_get_rate+0x20b/0x5d0 [ 334.643026][ C0] ieee80211_beacon_get_finish+0x3af/0x6f0 [ 334.648935][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 334.655346][ C0] ? __ieee80211_beacon_add_tim+0x1180/0x15a0 [ 334.661480][ C0] ? ieee80211_beacon_get_ap+0x8cb/0x2040 [ 334.667258][ C0] ieee80211_beacon_get_ap+0x196a/0x2040 [ 334.672964][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 334.679013][ C0] ? lock_acquire+0xf0/0x2e0 [ 334.683665][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 334.689264][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 334.694853][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 334.700431][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 334.706091][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 334.712378][ C0] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 334.717954][ C0] ? lock_acquire+0xf0/0x2e0 [ 334.722568][ C0] __iterate_interfaces+0x2ab/0x590 [ 334.727801][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 334.733908][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 334.741133][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 334.747260][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 334.754341][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 334.759571][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 334.765400][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 334.770647][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 334.776395][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 334.782575][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 334.787719][ C0] handle_softirqs+0x22a/0x870 [ 334.792512][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 334.797316][ C0] __irq_exit_rcu+0x5f/0x150 [ 334.801931][ C0] irq_exit_rcu+0x9/0x30 [ 334.806198][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 334.811881][ C0] [ 334.814825][ C0] [ 334.817767][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.823762][ C0] RIP: 0010:crng_make_state+0x36f/0x600 [ 334.829344][ C0] Code: 68 88 23 8f e8 b2 91 6d 06 4c 89 fe e9 66 fe ff ff e8 15 05 76 fc e8 50 f4 6a 06 4d 85 f6 74 86 e8 06 05 76 fc fb 48 83 c4 28 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 c2 da 6d 06 cc 90 e8 ab 33 67 ff [ 334.849056][ C0] RSP: 0018:ffffc900030178c8 EFLAGS: 00000282 [ 334.855141][ C0] RAX: ffffffff854fee4a RBX: 0000000000000000 RCX: ffff888020f4dac0 [ 334.863130][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.871119][ C0] RBP: 0000000000000000 R08: ffffffff9033cab7 R09: 1ffffffff2067956 [ 334.879106][ C0] R10: dffffc0000000000 R11: fffffbfff2067957 R12: dffffc0000000000 [ 334.887093][ C0] R13: ffff8880b8436d10 R14: 0000000000000200 R15: ffff8880b8436d60 [ 334.895113][ C0] ? crng_make_state+0x36a/0x600 [ 334.900095][ C0] _get_random_bytes+0xff/0x260 [ 334.904971][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 334.910477][ C0] nsim_dev_trap_report_work+0x69e/0xb80 [ 334.916149][ C0] ? process_one_work+0x87c/0x1650 [ 334.921278][ C0] process_one_work+0x949/0x1650 [ 334.926258][ C0] ? __pfx_process_one_work+0x10/0x10 [ 334.931647][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 334.936700][ C0] worker_thread+0xb46/0x1140 [ 334.941422][ C0] kthread+0x388/0x470 [ 334.945511][ C0] ? __pfx_worker_thread+0x10/0x10 [ 334.950749][ C0] ? __pfx_kthread+0x10/0x10 [ 334.955368][ C0] ret_from_fork+0x51e/0xb90 [ 334.959984][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 334.965128][ C0] ? __switch_to+0xc7d/0x1450 [ 334.969846][ C0] ? __pfx_kthread+0x10/0x10 [ 334.974477][ C0] ret_from_fork_asm+0x1a/0x30 [ 334.979296][ C0] [ 334.982939][ C0] Kernel Offset: disabled [ 334.987296][ C0] Rebooting in 86400 seconds..