last executing test programs: 23m33.791614701s ago: executing program 1 (id=164): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e22, 0x8a49, @private1, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="80", 0x1}], 0x1}, 0x44090) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) 23m32.388281328s ago: executing program 1 (id=168): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000400000012"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0xf}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 23m31.812783047s ago: executing program 1 (id=173): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0xbfff8000}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 23m29.373399864s ago: executing program 1 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 23m28.954842602s ago: executing program 1 (id=180): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d0000000000010902"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000380)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0xbffffffd, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x4, 0x9, 0x567a5030, 0xb5f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 23m26.291008633s ago: executing program 1 (id=194): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 23m25.95097754s ago: executing program 32 (id=194): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 27.329980152s ago: executing program 0 (id=4950): r0 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 27.087044146s ago: executing program 0 (id=4955): openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 26.783971718s ago: executing program 0 (id=4960): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r1}, 0x20) 26.481045602s ago: executing program 0 (id=4964): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x80003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183042, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r0, 0xa) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') r1 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000500)="00000080fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x88) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) socket$kcm(0x2, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 24.970952768s ago: executing program 4 (id=4974): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) 24.898504686s ago: executing program 5 (id=4975): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00005a3000/0x4000)=nil, 0x4000, &(0x7f0000000300)='/dev\'vcsa\x00j*-\x8a\x8fK\x8e\x84\x8e\xa6\xd0\xe2\xa6\xc6o\xfe\xda\xcd\xb6Vx\x19\xb5_\xe3K\x03\xa2;\"J\xc0\x04\xfa\x1dj\xa4\xa6\xef\x82\x9dj\x82\xec\x93\x8c\x9f\r\xf0\x14,\"%\xf7+\xb0;|$\x0e>M\xe9{\x8d\xdd\xeb\xde\xf9f\x8a\x8dr\xae\xdf\xd0\x115\x01\xb9\xa5\x19\xa3;wu\xfc\xb4\x8b\xf6\x90\x8b\xa8\x8e\x8b\x8aW\xcf;0C\xd1\xa2\x9d\xc0\xc0\x9d\x1d\x91\vD\x86\xd2\x95\b \tQ\x000\xc4\xef\xfd\xd2\x05\x04>\xf0\xf1\x19>\xf5\x98wS\x14\xcbn\x00'/160) pread64(r0, &(0x7f0000000000)=""/177, 0xb1, 0xa0000000000000) 24.86181784s ago: executing program 4 (id=4976): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0) recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) 24.650138214s ago: executing program 0 (id=4977): r0 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 24.274628831s ago: executing program 4 (id=4978): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000001200)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000001100)={&(0x7f0000000cc0)={{@host, 0x2}, {@hyper, 0x1}, 0x400, "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"}, 0x418, 0x928}) 24.274331838s ago: executing program 2 (id=4979): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @mcast2, 0x5}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffc, 0x1, @empty, 0x200}, 0x1c) setsockopt(r0, 0x1, 0x9, &(0x7f0000000040), 0x29) 23.976279395s ago: executing program 2 (id=4980): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9d}}, 0x80, 0x0}, 0x4004090) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 23.925607665s ago: executing program 4 (id=4981): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) close(r0) 23.794009425s ago: executing program 2 (id=4982): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd70000000", @ANYBLOB="0c009900b4170e7e08006140fb01"], 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79"]) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 23.727640423s ago: executing program 5 (id=4983): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='processo', 0x8) 23.726897537s ago: executing program 4 (id=4984): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x31dd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x484}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x0) 23.060171376s ago: executing program 5 (id=4986): openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x281c02, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000089146480", @ANYRES64=r0], 0xb2) 22.931334494s ago: executing program 0 (id=4987): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x80003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183042, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r0, 0xa) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') r1 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000500)="00000080fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x88) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) socket$kcm(0x2, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 22.428174929s ago: executing program 4 (id=4988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "f0"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) close(0x3) 22.001589734s ago: executing program 3 (id=4989): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, r1, 0xb0d, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) 21.719570821s ago: executing program 3 (id=4990): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0) 21.583692491s ago: executing program 3 (id=4991): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd70000000", @ANYBLOB="0c009900b4170e7e08006140fb01"], 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79"]) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 20.121249523s ago: executing program 2 (id=4992): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x5309, 0x0) 19.558430591s ago: executing program 2 (id=4993): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000023c0)=@delchain={0x20c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1e0, 0x2, [@TCA_BPF_ACT={0x1dc, 0x1, [@m_bpf={0xc8, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x6b, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0xd4, 0x8, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xa3b7, 0x9, 0xb, 0x7}, {0x28a3, 0x4, 0x4, 0xfffffffa}]}, @TCA_ACT_BPF_OPS={0x4}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x3c, 0x9, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5bb5}]]}, {0x8, 0x6, "94cedea6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 18.987554368s ago: executing program 2 (id=4994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd090002007379"], 0x15c}}, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 18.95934033s ago: executing program 3 (id=4995): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000005500e50128bd70000000000007000000", @ANYRES32, @ANYBLOB="20000100"], 0x38}}, 0x0) 18.47424653s ago: executing program 5 (id=4996): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000012700)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mount(0x0, 0x0, &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) 18.396886169s ago: executing program 3 (id=4997): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x2, 0xa4, 0x7fff0003}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 18.141514565s ago: executing program 5 (id=4998): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000400)={0x0, &(0x7f0000000500)='\x00', 0x1}) 18.111017778s ago: executing program 3 (id=4999): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x7, 0x6}, {0x6, 0xfd, 0xee, 0x16}]}) write$ppp(r0, &(0x7f0000000240)="0f291d080e74", 0x6) 16.886575139s ago: executing program 5 (id=5000): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001c00010029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200aa060a000200aa"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) 6.560051069s ago: executing program 33 (id=4987): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x80003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183042, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r0, 0xa) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') r1 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000500)="00000080fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x88) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) socket$kcm(0x2, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.512659069s ago: executing program 34 (id=4988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "f0"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) close(0x3) 2.557321746s ago: executing program 35 (id=4994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 631.679102ms ago: executing program 36 (id=4999): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x7, 0x6}, {0x6, 0xfd, 0xee, 0x16}]}) write$ppp(r0, &(0x7f0000000240)="0f291d080e74", 0x6) 0s ago: executing program 37 (id=5000): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001c00010029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200aa060a000200aa"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) kernel console output (not intermixed with test programs): device number 46 [ 1317.990067][T17747] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3240'. [ 1318.787119][T17757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3245'. [ 1318.909550][T16968] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1318.935055][T16968] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1318.955770][T16968] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1318.978865][T16968] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1319.021048][T16968] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1320.631642][T17788] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 1320.631681][T17788] bond1: option packets_per_slave: allowed values 0 - 65535 [ 1320.660271][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3261'. [ 1320.660298][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3261'. [ 1320.784425][T17801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3262'. [ 1320.796854][T17788] bond1 (unregistering): Released all slaves [ 1321.463897][T16968] Bluetooth: hci4: command tx timeout [ 1322.206896][ T5817] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1322.387695][ T5817] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1322.389415][ T5817] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1322.389445][ T5817] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1322.389475][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.459486][ T5817] usb 4-1: config 0 descriptor?? [ 1322.464886][T17824] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1323.030412][ T5817] lenovo 0003:17EF:6062.000C: unknown main item tag 0x2 [ 1323.030451][ T5817] lenovo 0003:17EF:6062.000C: unknown main item tag 0x3 [ 1323.030476][ T5817] lenovo 0003:17EF:6062.000C: unknown main item tag 0x1 [ 1323.030501][ T5817] lenovo 0003:17EF:6062.000C: unknown main item tag 0x2 [ 1323.030525][ T5817] lenovo 0003:17EF:6062.000C: unknown main item tag 0x0 [ 1323.030549][ T5817] lenovo 0003:17EF:6062.000C: unknown main item tag 0x0 [ 1323.030574][ T5817] lenovo 0003:17EF:6062.000C: unknown main item tag 0x0 [ 1323.030599][ T5817] lenovo 0003:17EF:6062.000C: unknown main item tag 0x0 [ 1323.030623][ T5817] lenovo 0003:17EF:6062.000C: unknown main item tag 0x0 [ 1323.030796][ T5817] lenovo 0003:17EF:6062.000C: unknown main item tag 0x0 [ 1323.065297][ T5817] lenovo 0003:17EF:6062.000C: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.3-1/input0 [ 1323.226368][T10048] usb 4-1: USB disconnect, device number 47 [ 1323.470624][T17835] fido_id[17835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1323.719587][T16968] Bluetooth: hci4: command tx timeout [ 1325.972325][T16968] Bluetooth: hci4: command tx timeout [ 1326.304187][T17755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.304724][T17755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.305668][T17755] bridge_slave_0: entered allmulticast mode [ 1326.333441][T17755] bridge_slave_0: entered promiscuous mode [ 1326.348200][T17755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.359256][T17755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.359509][T17755] bridge_slave_1: entered allmulticast mode [ 1326.387214][T17755] bridge_slave_1: entered promiscuous mode [ 1326.672243][ T1764] bridge_slave_1: left allmulticast mode [ 1326.672287][ T1764] bridge_slave_1: left promiscuous mode [ 1326.672587][ T1764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.785668][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 1326.785689][ T37] audit: type=1326 audit(1787128615.492:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17909 comm="syz.2.3304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1326.787611][ T37] audit: type=1326 audit(1787128615.492:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17909 comm="syz.2.3304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1326.789475][ T37] audit: type=1326 audit(1787128615.492:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17909 comm="syz.2.3304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1326.789842][ T37] audit: type=1326 audit(1787128615.492:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17909 comm="syz.2.3304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1326.791162][ T37] audit: type=1326 audit(1787128615.492:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17909 comm="syz.2.3304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1326.791217][ T37] audit: type=1326 audit(1787128615.492:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17909 comm="syz.2.3304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1326.792445][ T37] audit: type=1326 audit(1787128615.492:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17909 comm="syz.2.3304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1326.792498][ T37] audit: type=1326 audit(1787128615.492:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17909 comm="syz.2.3304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1326.793025][ T37] audit: type=1326 audit(1787128615.492:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17909 comm="syz.2.3304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1326.793074][ T37] audit: type=1326 audit(1787128615.492:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17909 comm="syz.2.3304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1327.105311][ T1764] bridge_slave_0: left allmulticast mode [ 1327.105353][ T1764] bridge_slave_0: left promiscuous mode [ 1327.105679][ T1764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.856053][T17928] CIFS: Attempting to mount //127.0.0.1/share [ 1327.856823][T17928] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1327.856873][T17928] CIFS: VFS: cifs_mount failed w/return code = -22 [ 1328.226589][T16968] Bluetooth: hci4: command tx timeout [ 1328.836165][ T1764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.899631][ T1764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.947299][ T1764] bond0 (unregistering): Released all slaves [ 1329.383032][T17755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.484141][T17755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1330.612012][ T1764] hsr_slave_0: left promiscuous mode [ 1331.046132][ T1764] hsr_slave_1: left promiscuous mode [ 1331.047821][ T1764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1331.093514][ T1764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1331.235604][T17965] CIFS: Attempting to mount //127.0.0.1/share [ 1332.665507][T10048] kernel write not supported for file /stat (pid: 10048 comm: kworker/1:1) [ 1332.666105][T17965] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1332.666178][T17965] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1332.666348][T17967] CIFS: Attempting to mount //127.0.0.1/share [ 1332.667019][T17967] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1332.667062][T17967] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1333.375345][ T1764] team0 (unregistering): Port device team_slave_1 removed [ 1334.329643][ T1764] team0 (unregistering): Port device team_slave_0 removed [ 1334.711803][T18009] CIFS: Attempting to mount //127.0.0.1/share [ 1334.712479][T18009] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1334.712524][T18009] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1334.870993][ T5249] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1334.967332][T18013] CIFS: Attempting to mount //127.0.0.1/share [ 1334.968159][T18013] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1334.968207][T18013] CIFS: VFS: cifs_mount failed w/return code = -22 [ 1335.127370][T17755] team0: Port device team_slave_0 added [ 1335.152032][T17755] team0: Port device team_slave_1 added [ 1335.352253][T17755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.352271][T17755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.352298][T17755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.365529][T17755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.365547][T17755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.365572][T17755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.750642][T17755] hsr_slave_0: entered promiscuous mode [ 1335.754392][T17755] hsr_slave_1: entered promiscuous mode [ 1335.757383][T17755] debugfs: 'hsr0' already exists in 'hsr' [ 1335.757410][T17755] Cannot create hsr debugfs directory [ 1338.483474][ T5249] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1343.552073][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 1343.552099][ T37] audit: type=1326 audit(1787128630.947:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18131 comm="syz.3.3377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b87de0d9 code=0x7ffc0000 [ 1343.552166][ T37] audit: type=1326 audit(1787128630.947:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18131 comm="syz.3.3377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b87de0d9 code=0x7ffc0000 [ 1343.637573][ T37] audit: type=1326 audit(1787128631.030:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18131 comm="syz.3.3377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f96b87de0d9 code=0x7ffc0000 [ 1343.661655][ T37] audit: type=1326 audit(1787128631.058:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18131 comm="syz.3.3377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b87de0d9 code=0x7ffc0000 [ 1343.661709][ T37] audit: type=1326 audit(1787128631.058:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18131 comm="syz.3.3377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b87de0d9 code=0x7ffc0000 [ 1343.671340][ T37] audit: type=1326 audit(1787128631.067:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18131 comm="syz.3.3377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f96b87de0d9 code=0x7ffc0000 [ 1343.671389][ T37] audit: type=1326 audit(1787128631.067:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18131 comm="syz.3.3377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b87de0d9 code=0x7ffc0000 [ 1343.671435][ T37] audit: type=1326 audit(1787128631.067:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18131 comm="syz.3.3377" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b87de0d9 code=0x7ffc0000 [ 1343.889592][ T5249] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1344.416796][T18156] syz.3.3385 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1344.949234][T16014] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1345.120532][T16014] usb 4-1: Using ep0 maxpacket: 8 [ 1345.132691][T16014] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1345.132755][T16014] usb 4-1: New USB device found, idVendor=0506, idProduct=00df, bcdDevice=f6.6a [ 1345.140426][T16014] usb 4-1: config 6 has an invalid interface number: 114 but max is 0 [ 1345.140455][T16014] usb 4-1: config 6 has no interface number 0 [ 1345.140486][T16014] usb 4-1: config 6 interface 114 has no altsetting 0 [ 1345.145777][T16014] usb 4-1: string descriptor 0 read error: -22 [ 1345.145936][T16014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.387956][T16014] gspca_main: spca501-2.14.0 probing 0506:00df [ 1347.426681][T16014] gspca_spca501: reg write: error -71 [ 1347.426703][T16014] spca501 4-1:6.114: Reg write failed for 0x00,0x02,0x01 [ 1347.426818][T16014] spca501 4-1:6.114: probe with driver spca501 failed with error -22 [ 1347.431213][T16014] usb 4-1: USB disconnect, device number 48 [ 1347.783351][ T37] audit: type=1326 audit(1787128634.859:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18185 comm="syz.2.3399" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1347.783416][ T37] audit: type=1326 audit(1787128634.859:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18185 comm="syz.2.3399" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1348.296404][T18183] sch_fq: defrate 2 ignored. [ 1350.750481][T18227] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3412'. [ 1351.693147][T18245] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 1351.693147][T18245] program syz.2.3417 not setting count and/or reply_len properly [ 1355.138367][T18308] netlink: 'syz.0.3439': attribute type 1 has an invalid length. [ 1355.138408][T18308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1355.550086][T17755] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1355.934294][T17755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1355.940543][T17755] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1355.985564][T17755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1355.989991][T17755] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1356.036295][T10048] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1356.046954][T17755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1356.054565][T17755] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1356.130760][T17755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1356.198906][T10048] usb 3-1: Using ep0 maxpacket: 16 [ 1356.199853][T10048] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1356.201504][T10048] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1356.201539][T10048] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1356.201568][T10048] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1356.201604][T10048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.239146][T18330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3446'. [ 1356.239719][T18330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1356.378913][T10048] usb 3-1: config 0 descriptor?? [ 1356.932126][T10048] hid_parser_main: 1 callbacks suppressed [ 1356.932154][T10048] magicmouse 0003:05AC:0269.000D: unknown main item tag 0x0 [ 1356.932185][T10048] magicmouse 0003:05AC:0269.000D: unknown main item tag 0x0 [ 1356.932210][T10048] magicmouse 0003:05AC:0269.000D: unknown main item tag 0x0 [ 1356.932234][T10048] magicmouse 0003:05AC:0269.000D: unknown main item tag 0x0 [ 1356.932258][T10048] magicmouse 0003:05AC:0269.000D: unknown main item tag 0x0 [ 1356.932281][T10048] magicmouse 0003:05AC:0269.000D: unknown main item tag 0x0 [ 1356.932305][T10048] magicmouse 0003:05AC:0269.000D: unknown main item tag 0x0 [ 1356.932329][T10048] magicmouse 0003:05AC:0269.000D: unknown main item tag 0x0 [ 1356.932353][T10048] magicmouse 0003:05AC:0269.000D: unknown main item tag 0x0 [ 1356.932378][T10048] magicmouse 0003:05AC:0269.000D: unknown main item tag 0x0 [ 1357.098879][T10048] magicmouse 0003:05AC:0269.000D: hidraw0: USB HID vff.fd Device [HID 05ac:0269] on usb-dummy_hcd.2-1/input0 [ 1357.124535][T10048] usb 3-1: USB disconnect, device number 7 [ 1357.450923][T17755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1357.781150][T18358] fido_id[18358]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1358.512878][T17755] 8021q: adding VLAN 0 to HW filter on device team0 [ 1358.852420][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 1358.852512][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1358.956327][ T8989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.958273][ T8989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1359.068242][ T7517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.068816][ T7517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1359.870998][T18397] CIFS: Attempting to mount //127.0.0.1/share [ 1359.871718][T18397] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1359.871766][T18397] CIFS: VFS: cifs_mount failed w/return code = -22 [ 1364.135089][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3479'. [ 1364.135122][T18450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3479'. [ 1364.135635][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3479'. [ 1364.135656][T18450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3479'. [ 1364.612579][T18464] CIFS: Attempting to mount //127.0.0.1/share [ 1364.700002][T18465] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1364.744304][T18464] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 1364.744456][T18464] CIFS: VFS: cifs_mount failed w/return code = -11 [ 1364.784535][T17755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.598073][T18486] CIFS: Attempting to mount //127.0.0.1/share [ 1365.598744][T18486] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1365.598789][T18486] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1366.672722][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3491'. [ 1366.672763][T18499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3491'. [ 1366.718903][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3492'. [ 1367.502657][T14590] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1367.507657][T17755] veth0_vlan: entered promiscuous mode [ 1367.652808][T17755] veth1_vlan: entered promiscuous mode [ 1367.688139][T14590] usb 3-1: Using ep0 maxpacket: 32 [ 1367.690043][T14590] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1367.692114][T14590] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1367.692142][T14590] usb 3-1: config 0 has no interface number 0 [ 1367.692193][T14590] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1367.695356][T14590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.695382][T14590] usb 3-1: Product: syz [ 1367.695397][T14590] usb 3-1: Manufacturer: syz [ 1367.695422][T14590] usb 3-1: SerialNumber: syz [ 1367.784976][T14590] usb 3-1: config 0 descriptor?? [ 1367.882423][T17755] veth0_macvtap: entered promiscuous mode [ 1367.938706][T17755] veth1_macvtap: entered promiscuous mode [ 1368.036135][T17755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1368.136973][T17755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.426785][ T9230] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.428606][ T8989] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.428654][ T8989] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.428693][ T8989] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.475107][T14590] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1368.475140][T14590] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1368.475159][T14590] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1368.475446][T14590] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1368.543087][T14590] usb 3-1: USB disconnect, device number 8 [ 1370.367767][T18541] CIFS: Attempting to mount //127.0.0.1/share [ 1370.370421][T18541] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1370.370472][T18541] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1370.539421][ T3343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.539472][ T3343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.669513][ T3343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.669539][ T3343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.817989][T18553] CIFS: Attempting to mount //127.0.0.1/share [ 1370.818654][T18553] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1370.818798][T18553] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1370.848804][T18551] fuse: fd is not a fuse device [ 1373.402247][T16968] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 1373.580185][T18585] CIFS: Attempting to mount //127.0.0.1/share [ 1373.580986][T18585] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1373.581035][T18585] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1373.757574][T18591] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[15351] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[18591] [ 1374.184358][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3534'. [ 1374.841534][T18613] netlink: 'syz.2.3539': attribute type 5 has an invalid length. [ 1375.010104][T18618] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1375.539608][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3546'. [ 1376.824221][T18648] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1379.327864][T14591] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1379.545127][T14591] usb 3-1: not running at top speed; connect to a high speed hub [ 1379.545171][T14591] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1379.546757][T14591] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.546780][T14591] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1379.546833][T14591] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.887116][T14591] usb 3-1: string descriptor 0 read error: -71 [ 1379.891476][T14591] uvcvideo 3-1:1.0: Found UVC 0.00 device (046d:0825) [ 1379.891512][T14591] uvcvideo 3-1:1.0: No valid video chain found. [ 1379.895764][T14591] usb 3-1: USB disconnect, device number 9 [ 1385.627715][T18805] netlink: 'syz.5.3618': attribute type 4 has an invalid length. [ 1385.739982][T18811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3621'. [ 1385.754519][T18809] CIFS: Attempting to mount //127.0.0.1/share [ 1385.755280][T18809] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1385.755328][T18809] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1386.160587][T18821] CIFS: Attempting to mount //127.0.0.1/share [ 1386.165053][T18821] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1386.165110][T18821] CIFS: VFS: cifs_mount failed w/return code = -22 [ 1386.288626][T18826] macsec1: entered allmulticast mode [ 1386.288650][T18826] geneve1: entered allmulticast mode [ 1386.339275][T18826] geneve1: left allmulticast mode [ 1389.147742][T18873] geneve0: entered promiscuous mode [ 1389.462935][T18879] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3648'. [ 1389.719980][T14436] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1389.895305][T14436] usb 4-1: Using ep0 maxpacket: 16 [ 1389.896366][T14436] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1389.898010][T14436] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1389.901269][T14436] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.901296][T14436] usb 4-1: Product: syz [ 1389.901311][T14436] usb 4-1: Manufacturer: syz [ 1389.901327][T14436] usb 4-1: SerialNumber: syz [ 1389.910745][T14436] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1389.910771][T14436] r8152-cfgselector 4-1: config 0 descriptor?? [ 1390.113923][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3654'. [ 1390.142713][T14591] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1390.307261][T14591] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1390.311496][T14591] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1390.311525][T14591] usb 6-1: Product: syz [ 1390.311539][T14591] usb 6-1: SerialNumber: syz [ 1390.359825][T14591] usb 6-1: config 0 descriptor?? [ 1390.459010][T14436] r8152-cfgselector 4-1: USB disconnect, device number 49 [ 1390.607962][T14591] hso 6-1:0.0: Failed to find BULK eps [ 1390.857074][T14436] usb 6-1: USB disconnect, device number 2 [ 1391.070748][T18904] overlayfs: failed to clone lowerpath [ 1391.684742][T18914] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3664'. [ 1393.005627][T16014] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 1393.074646][T18934] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3673'. [ 1393.178399][T16014] usb 6-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1393.181045][T16014] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1393.181095][T16014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 1393.181123][T16014] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1393.182085][T16014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.294461][T16014] usb 6-1: config 0 descriptor?? [ 1393.303160][T18920] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1393.539758][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1393.602684][T18942] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3677'. [ 1393.719125][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1393.721488][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1393.725016][ T9] usb 4-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1393.725079][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1393.725108][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1393.725137][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1393.725162][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1393.727695][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1393.727722][ T9] usb 4-1: Manufacturer: syz [ 1393.752457][ T9] usb 4-1: config 0 descriptor?? [ 1393.827138][T16014] hid_parser_main: 6 callbacks suppressed [ 1393.827165][T16014] aureal 0003:0755:2626.000E: unknown main item tag 0x2 [ 1393.827196][T16014] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 1393.827222][T16014] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 1393.855041][T16014] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 1393.855079][T16014] aureal 0003:0755:2626.000E: unknown main item tag 0x0 [ 1393.855105][T16014] aureal 0003:0755:2626.000E: global environment stack underflow [ 1393.855121][T16014] aureal 0003:0755:2626.000E: item 0 4 1 11 parsing failed [ 1393.856000][T16014] aureal 0003:0755:2626.000E: probe with driver aureal failed with error -22 [ 1394.248932][ T9] rc_core: IR keymap rc-hauppauge not found [ 1394.248954][ T9] Registered IR keymap rc-empty [ 1394.249448][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1394.250843][T14436] usb 6-1: USB disconnect, device number 3 [ 1394.267855][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1395.232380][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1395.320833][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input34 [ 1396.306226][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1396.335296][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1396.364321][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1396.385546][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1396.419056][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1396.440058][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1396.467988][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1396.494846][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1396.515787][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1396.517837][T18973] scsi_nl_rcv_msg: discarding partial skb [ 1396.537508][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1396.734844][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1396.734871][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1396.754009][ T9] usb 4-1: USB disconnect, device number 50 [ 1397.078811][T14436] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1397.246515][T14436] usb 6-1: Using ep0 maxpacket: 32 [ 1397.249650][T14436] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1397.253580][T14436] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1397.253611][T14436] usb 6-1: config 0 has no interface number 0 [ 1397.253664][T14436] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1397.263813][T14436] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.263843][T14436] usb 6-1: Product: syz [ 1397.263859][T14436] usb 6-1: Manufacturer: syz [ 1397.263874][T14436] usb 6-1: SerialNumber: syz [ 1397.293386][T14436] usb 6-1: config 0 descriptor?? [ 1397.483697][T14436] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1397.484034][T14436] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 1398.108501][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 1398.108525][ T37] audit: type=1326 audit(1787128681.243:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18965 comm="syz.5.3686" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f387e15e0d9 code=0x0 [ 1398.869041][ T5708] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1399.029653][ T5708] usb 4-1: Using ep0 maxpacket: 16 [ 1399.030848][ T5708] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1399.032659][ T5708] usb 4-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 1399.032717][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1399.032747][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1399.032774][ T5708] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1399.032798][ T5708] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1399.034998][ T5708] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1399.035022][ T5708] usb 4-1: Manufacturer: syz [ 1399.060411][ T5708] usb 4-1: config 0 descriptor?? [ 1399.464043][ T5708] rc_core: IR keymap rc-hauppauge not found [ 1399.464067][ T5708] Registered IR keymap rc-empty [ 1399.464591][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1399.487195][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1399.525546][ T5708] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1399.553400][ T5708] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input35 [ 1399.778939][T14436] usb 6-1: USB disconnect, device number 4 [ 1399.842050][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1399.914635][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1399.930712][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1399.962277][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1399.987105][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1400.005929][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1400.035720][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1400.049372][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1400.082450][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1400.128847][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1400.187942][ T5708] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1400.187971][ T5708] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1400.274046][ T5708] usb 4-1: USB disconnect, device number 51 [ 1403.828377][T19080] set match dimension is over the limit! [ 1404.468146][T19096] team0: Port device vlan0 added [ 1404.524329][T16968] Bluetooth: hci4: command tx timeout [ 1406.700833][T19144] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3760'. [ 1406.897748][ T9] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1407.063105][ T9] usb 4-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 1407.066399][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1407.066434][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1407.066456][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1407.066507][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.156071][ T9] usb 4-1: config 0 descriptor?? [ 1407.578163][T19161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3768'. [ 1407.666302][ T9] hid-generic 0003:093A:8002.000F: unbalanced collection at end of report description [ 1407.680171][ T9] hid-generic 0003:093A:8002.000F: probe with driver hid-generic failed with error -22 [ 1407.869603][ T9] usb 4-1: USB disconnect, device number 52 [ 1408.818981][T19186] CIFS: Attempting to mount //127.0.0.1/share [ 1408.819720][T19186] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1408.819779][T19186] CIFS: VFS: cifs_mount failed w/return code = -22 [ 1409.314615][ T5708] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1409.489080][ T5708] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1409.493549][ T5708] usb 4-1: config 0 interface 0 altsetting 72 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1409.493584][ T5708] usb 4-1: config 0 interface 0 altsetting 72 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1409.493610][ T5708] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1409.493640][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.559630][ T5708] usb 4-1: config 0 descriptor?? [ 1409.603240][T19192] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1410.190038][ T5708] magicmouse 0003:05AC:0324.0010: item fetching failed at offset 2/4 [ 1410.190869][ T5708] magicmouse 0003:05AC:0324.0010: magicmouse hid parse failed [ 1410.190998][ T5708] magicmouse 0003:05AC:0324.0010: probe with driver magicmouse failed with error -22 [ 1410.318710][ T5708] usb 4-1: USB disconnect, device number 53 [ 1410.734549][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1410.924552][ T9] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 1410.945027][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.945059][ T9] usb 3-1: Product: syz [ 1410.945073][ T9] usb 3-1: Manufacturer: syz [ 1410.945088][ T9] usb 3-1: SerialNumber: syz [ 1411.286083][ T9] kalmia 3-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 1411.323682][ T9] kalmia 3-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 1411.324031][ T9] kalmia 3-1:1.0: probe with driver kalmia failed with error -71 [ 1411.367445][ T9] usb 3-1: USB disconnect, device number 10 [ 1412.099879][T14591] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1412.225458][T19267] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1412.267168][T14591] usb 6-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1412.270985][T14591] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.668377][T14591] dln2 6-1:1.0: Device ID 0x12345678 not supported [ 1412.668485][T14591] dln2 6-1:1.0: failed to initialize hardware [ 1412.729007][T19279] CIFS: Attempting to mount //127.0.0.1/share [ 1412.729724][T19279] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1412.729773][T19279] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1412.911522][T19283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3818'. [ 1412.929589][T14591] usb 6-1: USB disconnect, device number 5 [ 1414.852406][T19341] overlayfs: failed to clone lowerpath [ 1415.252832][T19354] CIFS: Attempting to mount //127.0.0.1/share [ 1415.253650][T19354] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1415.253698][T19354] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1415.839790][T19366] 9p: Bad value for 'rfdno' [ 1417.299118][T19409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3875'. [ 1419.537726][ T9] hsr0: entered promiscuous mode [ 1421.344582][T18542] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1421.519430][T18542] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1421.521629][T18542] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.521690][T18542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.618487][T18542] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 1421.618907][T18542] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 1421.618995][T18542] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 1421.622586][T18542] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 1421.622690][T18542] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 1421.681684][T18542] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1421.685939][T18542] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 1421.686041][T18542] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 1421.715794][T18542] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1421.857716][T19495] CIFS: Attempting to mount //127.0.0.1/share [ 1421.858376][T19495] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1421.858436][T19495] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1421.969419][T18542] usb 3-1: USB disconnect, device number 11 [ 1422.046959][T18542] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1422.079049][T18542] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1422.103415][T18542] keyspan 3-1:1.0: device disconnected [ 1422.539232][ T109] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1422.539301][ T109] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1422.539338][ T109] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1422.539431][ T109] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.165698][T19529] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3930'. [ 1423.166858][T19529] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3930'. [ 1423.175590][T19529] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3930'. [ 1423.499306][T19539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3934'. [ 1423.925353][T19556] netlink: 'syz.4.3942': attribute type 5 has an invalid length. [ 1423.925380][T19556] netlink: 'syz.4.3942': attribute type 6 has an invalid length. [ 1423.925394][T19556] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.3942'. [ 1423.925473][T19556] netlink: 'syz.4.3942': attribute type 1 has an invalid length. [ 1424.049920][T19561] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3946'. [ 1424.140827][T16014] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1424.314409][T16014] usb 3-1: Using ep0 maxpacket: 16 [ 1424.315470][T16014] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1424.387538][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3948'. [ 1424.445177][T18542] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1424.447485][T16014] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1424.447555][T16014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1424.447584][T16014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1424.447612][T16014] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1424.447636][T16014] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1424.449354][T16014] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1424.449376][T16014] usb 3-1: Manufacturer: syz [ 1424.474856][T16014] usb 3-1: config 0 descriptor?? [ 1424.628318][T18542] usb 4-1: Using ep0 maxpacket: 16 [ 1424.629328][T18542] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1424.630908][T18542] usb 4-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 1424.630964][T18542] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1424.630993][T18542] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1424.631019][T18542] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1424.631043][T18542] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1424.632597][T18542] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1424.632619][T18542] usb 4-1: Manufacturer: syz [ 1424.751254][T18542] usb 4-1: config 0 descriptor?? [ 1424.975180][T16014] rc_core: IR keymap rc-hauppauge not found [ 1424.975205][T16014] Registered IR keymap rc-empty [ 1424.975685][T16014] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1425.000711][T16014] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1425.028578][T16014] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1425.043733][T16014] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input36 [ 1425.063981][T16014] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1425.084649][T16014] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1425.106070][T16014] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1425.181754][T18542] rc_core: IR keymap rc-hauppauge not found [ 1425.181776][T18542] Registered IR keymap rc-empty [ 1425.182213][T18542] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.210111][T18542] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.217055][T16014] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1425.226517][T18542] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 1425.230117][T18542] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input37 [ 1425.241190][T16014] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1425.270628][T16014] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1425.289909][T16014] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1425.311603][T18542] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.311739][T16014] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1425.334462][T16014] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1425.344505][T18542] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.354951][T16014] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1425.376586][T18542] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.390834][T16014] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1425.390861][T16014] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1425.399304][T18542] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.422208][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 1425.422283][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.432062][T18542] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.452504][T18542] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.479291][T18542] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.505503][T16014] usb 3-1: USB disconnect, device number 12 [ 1425.513959][T18542] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.528277][T18542] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.549966][T18542] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.626823][T18542] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1425.626853][T18542] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1425.772520][T19589] program syz.5.3956 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1425.772813][T18542] usb 4-1: USB disconnect, device number 54 [ 1426.283125][T19599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3962'. [ 1426.374859][T19599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3962'. [ 1426.379410][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3961'. [ 1426.483387][T19606] program syz.5.3963 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1426.706461][T19612] CIFS: Attempting to mount //127.0.0.1/share [ 1426.707226][T19612] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1426.707276][T19612] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1427.308460][T19621] macvtap1: entered promiscuous mode [ 1427.308495][T19621] bridge0: entered promiscuous mode [ 1427.357215][T19621] bridge0: port 3(macvtap1) entered blocking state [ 1427.357485][T19621] bridge0: port 3(macvtap1) entered disabled state [ 1427.357735][T19621] macvtap1: entered allmulticast mode [ 1427.357751][T19621] bridge0: entered allmulticast mode [ 1427.390291][T19621] macvtap1: left allmulticast mode [ 1427.390352][T19621] bridge0: left allmulticast mode [ 1427.622725][T19630] CIFS: Attempting to mount //127.0.0.1/share [ 1427.623468][T19630] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1427.623518][T19630] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1428.430082][ T9] bridge0: left promiscuous mode [ 1429.338543][T19661] batadv_slave_0: entered promiscuous mode [ 1429.358426][T19659] batadv_slave_0: left promiscuous mode [ 1429.491932][T19665] CIFS: Attempting to mount //127.0.0.1/share [ 1429.747526][T19666] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1429.747699][T19665] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1430.858438][T16014] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1431.067732][T16014] usb 4-1: Using ep0 maxpacket: 32 [ 1431.070168][T16014] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1431.071853][T16014] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.074939][T16014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.074964][T16014] usb 4-1: Product: syz [ 1431.074978][T16014] usb 4-1: Manufacturer: syz [ 1431.074993][T16014] usb 4-1: SerialNumber: syz [ 1431.099499][T16014] usb 4-1: config 0 descriptor?? [ 1431.117951][T16014] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1431.870447][T19724] CIFS: Attempting to mount //127.0.0.1/share [ 1431.892678][T16014] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1431.892790][T16014] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1431.909609][T16014] usb 4-1: USB disconnect, device number 55 [ 1431.968576][T19725] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1431.968752][T19724] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1433.357887][T19761] __nla_validate_parse: 1 callbacks suppressed [ 1433.357974][T19761] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4032'. [ 1433.784034][T19773] CIFS: Attempting to mount //127.0.0.1/share [ 1433.784690][T19773] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1433.784739][T19773] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1433.834611][T19774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4036'. [ 1434.124372][T19780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4040'. [ 1435.268211][T19797] input: syz1 as /devices/virtual/input/input38 [ 1435.274777][T19802] CIFS: Attempting to mount //127.0.0.1/share [ 1435.277622][T19802] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1435.277674][T19802] CIFS: VFS: cifs_mount failed w/return code = -22 [ 1435.569904][ T37] audit: type=1400 audit(1787128715.798:460): lsm=SMACK fn=smack_task_setnice action=denied subject="w" object="_" requested=w pid=19804 comm="syz.5.4050" opid=19804 ocomm="syz.5.4050" [ 1436.412870][T19827] CIFS: Attempting to mount //127.0.0.1/share [ 1436.413623][T19827] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1436.413672][T19827] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1436.529924][T14436] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1436.703253][T14436] usb 6-1: Using ep0 maxpacket: 32 [ 1436.706039][T14436] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1436.708221][T14436] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1436.708254][T14436] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1436.708298][T14436] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.796907][T14436] usb 6-1: config 0 descriptor?? [ 1436.918379][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1437.113429][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1437.114937][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1437.117817][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1437.117915][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1437.177772][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.177876][ T9] usb 3-1: Product: syz [ 1437.177893][ T9] usb 3-1: Manufacturer: syz [ 1437.177908][ T9] usb 3-1: SerialNumber: syz [ 1437.336790][ T9] usb 3-1: config 0 descriptor?? [ 1437.360129][T14436] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 1437.360170][T14436] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 1437.391447][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1437.391484][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1437.550957][T14436] ft260 0003:0403:6030.0011: chip code: 0000 0000 [ 1437.667494][T16014] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1437.761859][T14436] ft260 0003:0403:6030.0011: failed to retrieve system status [ 1437.762721][T14436] ft260 0003:0403:6030.0011: probe with driver ft260 failed with error -71 [ 1437.834848][T16014] usb 4-1: Using ep0 maxpacket: 32 [ 1437.838453][T16014] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1437.843969][T16014] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 1437.849823][T16014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.849850][T16014] usb 4-1: Product: syz [ 1437.849865][T16014] usb 4-1: Manufacturer: syz [ 1437.849878][T16014] usb 4-1: SerialNumber: syz [ 1437.918161][T14436] usb 6-1: USB disconnect, device number 6 [ 1437.974898][T16014] usb 4-1: config 0 descriptor?? [ 1438.038934][T16014] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1438.053208][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (108) [ 1438.197562][T16014] dvb-usb: bulk message failed: -22 (2/0) [ 1438.237052][T16014] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1438.238129][T16014] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1438.238192][T16014] usb 4-1: media controller created [ 1438.326347][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1438.326883][ T9] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1438.326938][ T9] em28xx 3-1:0.0: No AC97 audio processor [ 1438.645901][ T9] usb 3-1: USB disconnect, device number 13 [ 1438.682750][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 1438.947972][T16014] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1439.219611][T19859] CIFS: Attempting to mount //127.0.0.1/share [ 1439.220270][T19859] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1439.220355][T19859] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1439.390239][ T9] em28xx 3-1:0.0: Freeing device [ 1439.740823][T16014] usb 4-1: selecting invalid altsetting 7 [ 1439.740848][T16014] cxusb: set interface failed [ 1439.740864][T16014] dvb-usb: bulk message failed: -22 (1/0) [ 1439.877237][T19873] CIFS: Attempting to mount //127.0.0.1/share [ 1439.942703][ T37] audit: type=1804 audit(1787128719.895:461): pid=19876 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.4079" name="/newroot/1060/file0" dev="tmpfs" ino=5546 res=1 errno=0 [ 1440.066416][T16014] DVB: Unable to find symbol lgdt330x_attach() [ 1440.066494][T16014] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1440.135273][T19875] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1440.177051][T19873] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 1440.181653][T19873] CIFS: VFS: cifs_mount failed w/return code = -11 [ 1440.589742][T16014] rc_core: IR keymap rc-dvico-portable not found [ 1440.589767][T16014] Registered IR keymap rc-empty [ 1440.594962][T16014] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1440.603991][T16014] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input39 [ 1440.608604][T16014] dvb-usb: schedule remote query interval to 100 msecs. [ 1440.608629][T16014] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1440.659816][T16014] usb 4-1: USB disconnect, device number 56 [ 1441.595906][T19900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4089'. [ 1441.843186][T16014] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1441.959475][ T37] audit: type=1326 audit(1787128721.750:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19904 comm="syz.2.4093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1441.959535][ T37] audit: type=1326 audit(1787128721.750:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19904 comm="syz.2.4093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1441.959951][ T37] audit: type=1326 audit(1787128721.759:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19904 comm="syz.2.4093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1441.960001][ T37] audit: type=1326 audit(1787128721.759:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19904 comm="syz.2.4093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1441.962659][ T37] audit: type=1326 audit(1787128721.759:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19904 comm="syz.2.4093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1441.962717][ T37] audit: type=1326 audit(1787128721.759:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19904 comm="syz.2.4093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1441.967361][ T37] audit: type=1326 audit(1787128721.759:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19904 comm="syz.2.4093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1441.967416][ T37] audit: type=1326 audit(1787128721.759:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19904 comm="syz.2.4093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1441.999932][ T37] audit: type=1326 audit(1787128721.759:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19904 comm="syz.2.4093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff44e0d9 code=0x7ffc0000 [ 1442.383012][ T37] audit: type=1800 audit(1787128722.147:471): pid=19913 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4095" name="nullb0" dev="tmpfs" ino=4259 res=0 errno=0 [ 1442.619844][T18542] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1442.812817][T18542] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1442.830727][T18542] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.830792][T18542] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1442.830839][T18542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.174489][T18542] ttusb_dec_init_stb: unknown model returned by firmware (00000000) - please report [ 1443.174764][T18542] ttusb-dec 3-1:1.0: probe with driver ttusb-dec failed with error -2 [ 1443.348439][T19931] CIFS: Attempting to mount //127.0.0.1/share [ 1443.349264][T19931] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1443.349310][T19931] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1443.679452][T10048] usb 3-1: USB disconnect, device number 14 [ 1444.780105][T19955] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4113'. [ 1445.056623][T14591] kernel write not supported for file /admmidi2 (pid: 14591 comm: kworker/1:2) [ 1445.063716][T19960] dyndbg: bad line-number: 2�88 [ 1445.063733][T19960] dyndbg: query parse failed [ 1445.396341][T19972] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4121'. [ 1446.200098][T19990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4130'. [ 1446.200135][T19990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4130'. [ 1446.252483][T19990] gretap0: entered promiscuous mode [ 1446.489952][T19990] gretap0: left promiscuous mode [ 1446.661485][T10048] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1446.824009][T10048] usb 4-1: Using ep0 maxpacket: 16 [ 1446.825746][T10048] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1446.827665][T10048] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.827689][T10048] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1446.837652][T10048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.837679][T10048] usb 4-1: Product: syz [ 1446.837692][T10048] usb 4-1: Manufacturer: syz [ 1446.837705][T10048] usb 4-1: SerialNumber: syz [ 1446.918188][T10048] usb 4-1: 0:2 : does not exist [ 1447.203614][T10048] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1447.838953][T20009] CIFS: Attempting to mount //127.0.0.1/share [ 1447.840972][T20009] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1447.841052][T20009] CIFS: VFS: cifs_mount failed w/return code = -22 [ 1448.700759][T20030] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1448.700795][T20030] overlayfs: missing 'lowerdir' [ 1449.117658][T10048] usb 4-1: USB disconnect, device number 57 [ 1450.245616][T17073] udevd[17073]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1451.144866][T20083] CIFS: Attempting to mount //127.0.0.1/share [ 1451.145595][T20083] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1451.145662][T20083] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1451.424124][T20091] CIFS: Attempting to mount //127.0.0.1/share [ 1451.424901][T20091] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1451.424952][T20091] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1452.125905][T20106] sctp: [Deprecated]: syz.5.4180 (pid 20106) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1452.125905][T20106] Use struct sctp_sack_info instead [ 1452.422389][T20114] jffs2: notice: (20114) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1452.492282][ T5708] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1452.678149][ T5708] usb 3-1: Using ep0 maxpacket: 16 [ 1452.680105][ T5708] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1452.682185][ T5708] usb 3-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 1452.682249][ T5708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1452.682278][ T5708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1452.682304][ T5708] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1452.682337][ T5708] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1452.692900][ T5708] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1452.692932][ T5708] usb 3-1: Manufacturer: syz [ 1452.804343][ T5708] usb 3-1: config 0 descriptor?? [ 1453.199210][ T5708] rc_core: IR keymap rc-hauppauge not found [ 1453.199235][ T5708] Registered IR keymap rc-empty [ 1453.199764][ T5708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1453.226451][ T5708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1453.264434][ T5708] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1453.268278][ T5708] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input40 [ 1453.319981][ T5708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1453.340473][ T5708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1453.360783][ T5708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1453.383081][ T5708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1453.404930][ T5708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1453.424608][ T5708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1453.446313][ T5708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1453.467964][ T5708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1453.489672][ T5708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1453.511374][ T5708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1453.576664][ T5708] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1453.576702][ T5708] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1453.656577][ T5708] usb 3-1: USB disconnect, device number 15 [ 1454.067182][T20136] CIFS: Attempting to mount //127.0.0.1/share [ 1454.161415][T20137] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1454.161591][T20136] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1454.570108][T20148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4196'. [ 1454.832041][T20155] CIFS: Attempting to mount //127.0.0.1/share [ 1454.956745][T20156] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1454.956959][T20155] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1456.315135][T20180] CIFS: Attempting to mount //127.0.0.1/share [ 1456.315890][T20180] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1456.315939][T20180] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1457.363614][T20200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4217'. [ 1458.623419][T20228] openvswitch: netlink: VLAN attribute unexpected. [ 1458.789003][T18542] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1458.951560][T18542] usb 3-1: Using ep0 maxpacket: 16 [ 1458.952584][T18542] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1458.954229][T18542] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1458.954255][T18542] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.954307][T18542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1458.954339][T18542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1458.954367][T18542] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1458.954391][T18542] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1458.955982][T18542] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1458.956005][T18542] usb 3-1: Manufacturer: syz [ 1459.089452][T18542] usb 3-1: config 0 descriptor?? [ 1459.184135][ T37] audit: type=1326 audit(1787128737.648:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20238 comm="syz.4.4235" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f776a27e0d9 code=0x0 [ 1459.217207][T20241] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1459.569284][T18542] rc_core: IR keymap rc-hauppauge not found [ 1459.569307][T18542] Registered IR keymap rc-empty [ 1459.570077][T18542] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1459.599812][T18542] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1459.617999][T18542] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1459.643301][T18542] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input41 [ 1459.673102][T18542] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1459.689009][T18542] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1459.711027][T18542] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1459.732219][T18542] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1459.755315][T18542] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1459.775583][T18542] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1459.797242][T18542] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1459.819041][T18542] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1459.840739][T18542] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1459.841942][T20257] CIFS: Attempting to mount //127.0.0.1/share [ 1459.874077][T18542] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1459.942496][T20258] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1459.957055][T20257] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1459.980194][T18542] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1459.980274][T18542] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1460.079912][T18542] usb 3-1: USB disconnect, device number 16 [ 1461.711155][T20297] veth1_macvtap: left promiscuous mode [ 1461.711194][T20297] macsec0: entered allmulticast mode [ 1461.757554][T20297] veth1_macvtap: entered promiscuous mode [ 1461.757582][T20297] veth1_macvtap: entered allmulticast mode [ 1461.757812][T20297] macsec0: left allmulticast mode [ 1461.757828][T20297] veth1_macvtap: left allmulticast mode [ 1462.614292][T20312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4266'. [ 1463.666074][T10048] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1463.828907][T10048] usb 6-1: Using ep0 maxpacket: 16 [ 1463.829921][T10048] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1463.831500][T10048] usb 6-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 1463.831554][T10048] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1463.831582][T10048] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1463.831608][T10048] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1463.831630][T10048] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1463.833295][T10048] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1463.833318][T10048] usb 6-1: Manufacturer: syz [ 1463.907032][T10048] usb 6-1: config 0 descriptor?? [ 1464.404647][T10048] rc_core: IR keymap rc-hauppauge not found [ 1464.404672][T10048] Registered IR keymap rc-empty [ 1464.409669][T10048] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1464.425399][T10048] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1464.466248][T10048] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1464.483798][T10048] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input42 [ 1464.518142][T10048] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1464.555125][T10048] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1464.577070][T10048] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1464.598529][T10048] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1464.629510][T10048] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1464.641783][T10048] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1464.679860][T10048] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1464.699026][T10048] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1464.718801][T10048] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1464.739321][T10048] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1464.795347][T10048] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1464.795377][T10048] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1464.867849][T10048] usb 6-1: USB disconnect, device number 7 [ 1465.410962][T20359] netlink: 'syz.0.4285': attribute type 4 has an invalid length. [ 1466.586217][T20382] 9p: Bad value for 'wfdno' [ 1470.913197][T20417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4309'. [ 1471.526286][T20434] program syz.2.4316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1471.622531][T10048] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1471.806859][T10048] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 1471.810420][T10048] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.810474][T10048] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1471.822635][T10048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.822663][T10048] usb 4-1: Product: syz [ 1471.822677][T10048] usb 4-1: Manufacturer: syz [ 1471.822690][T10048] usb 4-1: SerialNumber: syz [ 1472.256232][T10048] usb 4-1: USB disconnect, device number 58 [ 1472.840164][T20459] random: crng reseeded on system resumption [ 1472.899688][T10048] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1473.086800][T10048] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1473.089898][T10048] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.096995][T10048] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.097028][T10048] usb 3-1: Product: syz [ 1473.097049][T10048] usb 3-1: Manufacturer: syz [ 1473.097069][T10048] usb 3-1: SerialNumber: syz [ 1473.152959][T10048] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 1473.153290][T10048] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 87 [ 1473.153375][T10048] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 7 [ 1473.163695][T10048] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 1473.163790][T10048] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 82 [ 1473.163871][T10048] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 1473.163952][T10048] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 1473.164044][T10048] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 85 [ 1473.164128][T10048] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 5 [ 1473.169852][T10048] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1473.175640][T10048] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 83 [ 1473.175744][T10048] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 1473.175825][T10048] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 3 [ 1473.175907][T10048] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 4 [ 1473.178076][T10048] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 86 [ 1473.178166][T10048] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 1473.207854][T10048] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1473.466593][T10048] usb 3-1: USB disconnect, device number 17 [ 1473.705182][T10048] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1473.827277][T10048] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1473.837844][T10048] keyspan 3-1:1.0: device disconnected [ 1473.998993][T20477] Set syz1 is full, maxelem 256 reached [ 1474.381357][T20489] fuse: fd is not a fuse device [ 1474.547038][ T5708] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1474.611513][ T37] audit: type=1326 audit(1787128751.876:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20494 comm="syz.3.4344" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96b87de0d9 code=0x0 [ 1474.732075][ T5708] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1474.735698][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1474.735728][ T5708] usb 3-1: Product: syz [ 1474.765326][ T5708] usb 3-1: config 0 descriptor?? [ 1474.773910][ T5708] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1474.791513][ T5708] usb 3-1: Detected FT232H [ 1475.029163][ T5708] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1475.474736][ T5708] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1475.529682][ T5708] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1475.553121][ T5708] usb 3-1: USB disconnect, device number 18 [ 1475.589703][ T5708] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1475.591858][ T5708] ftdi_sio 3-1:0.0: device disconnected [ 1476.031896][T10048] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1476.207667][T10048] usb 4-1: Using ep0 maxpacket: 8 [ 1476.208595][T10048] usb 4-1: New USB device found, idVendor=ee8d, idProduct=001e, bcdDevice=61.00 [ 1476.216183][T10048] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1476.216245][T10048] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1476.216267][T10048] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1476.216290][T10048] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1476.216312][T10048] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1476.216352][T10048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.905798][T10048] usb 4-1: USB disconnect, device number 59 [ 1477.305486][T20540] batadv_slave_0: entered promiscuous mode [ 1477.312137][T20539] batadv_slave_0: left promiscuous mode [ 1477.701134][T20554] netlink: 'syz.3.4368': attribute type 83 has an invalid length. [ 1478.803840][ T37] audit: type=1326 audit(1787128755.751:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20580 comm="syz.3.4379" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96b87de0d9 code=0x0 [ 1478.909834][T20586] ªªªªªª: renamed from vlan0 (while UP) [ 1479.649068][T20615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4393'. [ 1480.273388][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4402'. [ 1480.409374][T10048] hid-generic 0000:0000:0001.0012: unknown main item tag 0x0 [ 1480.412860][T10048] hid-generic 0000:0000:0001.0012: unknown main item tag 0x0 [ 1480.412894][T10048] hid-generic 0000:0000:0001.0012: unknown main item tag 0x0 [ 1480.412916][T10048] hid-generic 0000:0000:0001.0012: unknown main item tag 0x0 [ 1480.412938][T10048] hid-generic 0000:0000:0001.0012: unknown main item tag 0x0 [ 1480.412961][T10048] hid-generic 0000:0000:0001.0012: unknown main item tag 0x0 [ 1480.412983][T10048] hid-generic 0000:0000:0001.0012: unknown main item tag 0x0 [ 1480.413005][T10048] hid-generic 0000:0000:0001.0012: unknown main item tag 0x0 [ 1480.633581][T10048] hid-generic 0000:0000:0001.0012: hidraw0: HID v0.10 Device [syz0] on syz1 [ 1480.914172][T20641] fido_id[20641]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1481.776729][ T7523] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1481.777617][ T7523] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1481.777690][ T7523] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1481.777758][ T7523] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1481.979858][T20679] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1482.751270][ T5708] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1482.956846][ T5708] usb 4-1: Using ep0 maxpacket: 8 [ 1482.957789][ T5708] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1482.973145][ T5708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.973209][ T5708] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1482.973238][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1483.012877][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1483.012906][ T5708] usb 4-1: Product: syz [ 1483.012923][ T5708] usb 4-1: Manufacturer: syz [ 1483.012938][ T5708] usb 4-1: SerialNumber: syz [ 1483.055388][ T5708] usb 4-1: config 0 descriptor?? [ 1483.184953][ T5708] rc_core: IR keymap rc-imon-rsc not found [ 1483.184978][ T5708] Registered IR keymap rc-empty [ 1483.186277][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4438'. [ 1483.187035][ T5708] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1483.190688][ T5708] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input43 [ 1483.687190][ T9] usb 4-1: USB disconnect, device number 60 [ 1483.701386][T20730] program syz.5.4442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1483.881387][ T37] audit: type=1326 audit(1787128760.439:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20731 comm="syz.4.4443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776a27e0d9 code=0x7ffc0000 [ 1483.883709][ T37] audit: type=1326 audit(1787128760.439:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20731 comm="syz.4.4443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776a27e0d9 code=0x7ffc0000 [ 1483.949683][ T37] audit: type=1326 audit(1787128760.503:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20731 comm="syz.4.4443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776a27e0d9 code=0x7ffc0000 [ 1483.991159][ T37] audit: type=1326 audit(1787128760.540:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20731 comm="syz.4.4443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f776a27e0d9 code=0x7ffc0000 [ 1483.991217][ T37] audit: type=1326 audit(1787128760.540:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20731 comm="syz.4.4443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776a27e0d9 code=0x7ffc0000 [ 1483.991265][ T37] audit: type=1326 audit(1787128760.540:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20731 comm="syz.4.4443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776a27e0d9 code=0x7ffc0000 [ 1483.991312][ T37] audit: type=1326 audit(1787128760.503:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20731 comm="syz.4.4443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776a27e0d9 code=0x7ffc0000 [ 1483.991360][ T37] audit: type=1326 audit(1787128760.540:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20731 comm="syz.4.4443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776a27e0d9 code=0x7ffc0000 [ 1483.991407][ T37] audit: type=1326 audit(1787128760.540:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20731 comm="syz.4.4443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f776a27e0d9 code=0x7ffc0000 [ 1483.991450][ T37] audit: type=1326 audit(1787128760.540:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20731 comm="syz.4.4443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776a27e0d9 code=0x7ffc0000 [ 1484.196312][T20739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4446'. [ 1484.639352][T20741] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1484.640724][ T9] team_slave_0: entered promiscuous mode [ 1484.640773][ T9] team_slave_1: entered promiscuous mode [ 1485.055764][T20762] CIFS: Attempting to mount //127.0.0.1/share [ 1485.140106][T20764] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1485.140565][T20762] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 1485.140692][T20762] CIFS: VFS: cifs_mount failed w/return code = -11 [ 1486.118502][T20785] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4467'. [ 1486.956377][ T9] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 1487.130655][ T9] usb 3-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.00 [ 1487.132463][ T9] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1487.132494][ T9] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1487.132520][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1487.132552][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.202842][ T9] usb 3-1: config 0 descriptor?? [ 1487.745183][ T9] ntrig 0003:1B96:0001.0013: unknown main item tag 0x0 [ 1487.745225][ T9] ntrig 0003:1B96:0001.0013: unknown main item tag 0x0 [ 1487.745250][ T9] ntrig 0003:1B96:0001.0013: unknown main item tag 0x0 [ 1487.745273][ T9] ntrig 0003:1B96:0001.0013: unknown main item tag 0x0 [ 1487.745297][ T9] ntrig 0003:1B96:0001.0013: unknown main item tag 0x0 [ 1487.745321][ T9] ntrig 0003:1B96:0001.0013: unknown main item tag 0x0 [ 1487.745346][ T9] ntrig 0003:1B96:0001.0013: unknown main item tag 0x0 [ 1487.745369][ T9] ntrig 0003:1B96:0001.0013: collection stack underflow [ 1487.745389][ T9] ntrig 0003:1B96:0001.0013: item 0 0 0 12 parsing failed [ 1487.821515][ T9] ntrig 0003:1B96:0001.0013: parse failed [ 1487.821632][ T9] ntrig 0003:1B96:0001.0013: probe with driver ntrig failed with error -22 [ 1487.955704][T10048] usb 3-1: USB disconnect, device number 19 [ 1488.679538][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1488.874575][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1488.875619][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1488.881950][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.881979][ T9] usb 6-1: Product: syz [ 1488.881994][ T9] usb 6-1: Manufacturer: syz [ 1488.882009][ T9] usb 6-1: SerialNumber: syz [ 1488.940090][ T9] usb 6-1: config 0 descriptor?? [ 1488.966056][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1489.848098][ T9] gspca_sonixj: reg_r err -71 [ 1489.848260][ T9] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1489.894708][ T9] usb 6-1: USB disconnect, device number 8 [ 1490.151387][T20881] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1490.364473][T20886] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 1491.893473][T20923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4527'. [ 1492.022056][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 1492.022125][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1492.743075][T20927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4529'. [ 1493.353800][T20950] CIFS: Attempting to mount //127.0.0.1/share [ 1493.354461][T20950] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1493.354504][T20950] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1493.363955][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 1493.363973][ T37] audit: type=1326 audit(1787128769.186:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20946 comm="syz.0.4538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4cc87e0d9 code=0x0 [ 1493.644782][T20956] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4541'. [ 1493.644813][T20956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4541'. [ 1493.644827][T20956] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4541'. [ 1494.863292][T20976] CIFS: Attempting to mount //127.0.0.1/share [ 1495.093971][T20982] macvtap1: entered promiscuous mode [ 1495.093999][T20982] syz_tun: entered promiscuous mode [ 1495.094435][T20982] macvtap1: entered allmulticast mode [ 1495.094452][T20982] syz_tun: entered allmulticast mode [ 1495.423017][T20992] netlink: 'syz.3.4554': attribute type 6 has an invalid length. [ 1495.736357][T20976] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1498.330150][T21046] netlink: 'syz.4.4577': attribute type 2 has an invalid length. [ 1499.610813][T21069] ALSA: seq fatal error: cannot create timer (-22) [ 1501.468010][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1501.641378][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1501.643138][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1501.647841][ T9] usb 3-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 1501.647905][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1501.647935][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1501.647978][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1501.648003][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1501.726467][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1501.726498][ T9] usb 3-1: Manufacturer: syz [ 1501.748878][ T9] usb 3-1: config 0 descriptor?? [ 1502.129058][ T9] rc_core: IR keymap rc-hauppauge not found [ 1502.129082][ T9] Registered IR keymap rc-empty [ 1502.130024][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1502.151354][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1502.175554][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1502.199840][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input44 [ 1502.271970][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1502.292196][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1502.328328][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1502.357365][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1502.378729][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1502.400420][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1502.422128][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1502.454940][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1502.476331][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1502.508856][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1502.538452][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1502.538482][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1502.661625][ T9] usb 3-1: USB disconnect, device number 20 [ 1502.892335][T21144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4620'. [ 1502.911978][T21144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4620'. [ 1503.473038][T10048] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1503.647493][T10048] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1503.647567][T10048] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1503.650868][T10048] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.650900][T10048] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1503.701692][T10048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.701724][T10048] usb 6-1: Product: syz [ 1503.701740][T10048] usb 6-1: Manufacturer: syz [ 1503.701755][T10048] usb 6-1: SerialNumber: syz [ 1504.255008][T21174] fuse: fd is not a fuse device [ 1504.255861][T21174] fuse: fd is not a fuse device [ 1504.342477][T18542] usb 6-1: USB disconnect, device number 9 [ 1504.438758][T21180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4637'. [ 1504.708546][T10048] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1504.871055][T10048] usb 3-1: Using ep0 maxpacket: 16 [ 1504.871934][T10048] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1504.873172][T10048] usb 3-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 1504.873245][T10048] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1504.873275][T10048] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1504.873303][T10048] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1504.873327][T10048] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1504.874832][T10048] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1504.874857][T10048] usb 3-1: Manufacturer: syz [ 1504.887915][T10048] usb 3-1: config 0 descriptor?? [ 1505.327235][T10048] rc_core: IR keymap rc-hauppauge not found [ 1505.327262][T10048] Registered IR keymap rc-empty [ 1505.328267][T10048] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1505.350037][T10048] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1505.376816][T10048] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1505.392227][T10048] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input45 [ 1505.516267][T10048] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1505.547510][T10048] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1505.565365][T10048] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1505.586867][T10048] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1505.624453][T10048] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1505.642898][T10048] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1505.662635][T10048] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1505.688432][T10048] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1505.705786][T10048] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1505.727715][T10048] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1505.794373][T18542] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1505.890023][T10048] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1505.890056][T10048] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1505.946939][T10048] usb 3-1: USB disconnect, device number 21 [ 1505.989002][T18542] usb 4-1: not running at top speed; connect to a high speed hub [ 1505.989050][T18542] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1505.993214][T18542] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.993291][T18542] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 1505.993320][T18542] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 1505.993364][T18542] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.084956][T21205] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1506.088936][T18542] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 1506.094246][T18542] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 1506.154252][T18542] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1506.196427][T18542] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 1506.196663][T18542] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 1506.353901][T18542] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1507.188160][ T37] audit: type=1326 audit(1787128781.938:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21232 comm="syz.5.4660" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387e15e0d9 code=0x7ffc0000 [ 1507.195132][ T37] audit: type=1326 audit(1787128781.947:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21232 comm="syz.5.4660" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387e15e0d9 code=0x7ffc0000 [ 1507.202497][ T37] audit: type=1326 audit(1787128781.947:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21232 comm="syz.5.4660" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387e15e0d9 code=0x7ffc0000 [ 1507.204556][ T37] audit: type=1326 audit(1787128781.956:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21232 comm="syz.5.4660" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387e15e0d9 code=0x7ffc0000 [ 1507.204616][ T37] audit: type=1326 audit(1787128781.956:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21232 comm="syz.5.4660" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f387e15e0d9 code=0x7ffc0000 [ 1507.205167][ T37] audit: type=1326 audit(1787128781.956:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21232 comm="syz.5.4660" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387e15e0d9 code=0x7ffc0000 [ 1507.205212][ T37] audit: type=1326 audit(1787128781.956:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21232 comm="syz.5.4660" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387e15e0d9 code=0x7ffc0000 [ 1507.206380][ T37] audit: type=1326 audit(1787128781.956:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21232 comm="syz.5.4660" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387e15e0d9 code=0x7ffc0000 [ 1507.208390][ T37] audit: type=1326 audit(1787128781.956:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21232 comm="syz.5.4660" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387e15e0d9 code=0x7ffc0000 [ 1507.208715][ T37] audit: type=1326 audit(1787128781.956:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21232 comm="syz.5.4660" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f387e15e0d9 code=0x7ffc0000 [ 1507.378122][T10048] usb 4-1: USB disconnect, device number 61 [ 1507.684182][T10048] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1507.840948][T10048] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1507.845957][T10048] keyspan 4-1:1.0: device disconnected [ 1508.458391][T18542] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1508.567210][T21265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4675'. [ 1508.632409][T18542] usb 6-1: Using ep0 maxpacket: 16 [ 1508.680005][T18542] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1508.683505][T18542] usb 6-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1508.683566][T18542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1508.683593][T18542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1508.683620][T18542] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1508.683779][T18542] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1508.749957][T18542] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1508.749988][T18542] usb 6-1: Manufacturer: syz [ 1508.790393][T18542] usb 6-1: config 0 descriptor?? [ 1509.238752][T18542] rc_core: IR keymap rc-hauppauge not found [ 1509.238778][T18542] Registered IR keymap rc-empty [ 1509.239293][T18542] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1509.260922][T18542] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1509.288191][T18542] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1509.300833][T21283] tipc: Started in network mode [ 1509.300865][T21283] tipc: Node identity ac14140f, cluster identity 4711 [ 1509.353497][T18542] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input46 [ 1509.395040][T18542] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1509.440422][T18542] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1509.468168][T18542] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1509.490724][T18542] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1509.515936][T18542] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1509.550358][T18542] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1509.568564][T18542] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1509.588198][T18542] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1509.613397][T18542] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1509.625787][T21283] tipc: New replicast peer: 255.255.255.255 [ 1509.641066][T18542] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1509.710795][T18542] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1509.710821][T18542] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1509.763960][T18542] usb 6-1: USB disconnect, device number 10 [ 1509.835413][T21283] tipc: Enabled bearer , priority 10 [ 1509.844214][T21292] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 1510.847837][ T5708] tipc: Node number set to 2886997007 [ 1511.443378][T21318] netlink: 'syz.5.4698': attribute type 1 has an invalid length. [ 1511.443418][T21318] netlink: 'syz.5.4698': attribute type 2 has an invalid length. [ 1511.443432][T21318] netlink: 'syz.5.4698': attribute type 13 has an invalid length. [ 1511.443446][T21318] netlink: 124 bytes leftover after parsing attributes in process `syz.5.4698'. [ 1512.782851][T21352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4713'. [ 1512.782886][T21352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4713'. [ 1513.569161][T21379] overlayfs: failed to clone upperpath [ 1514.590901][T21417] kAFS: bad VL server IP address [ 1515.847977][T21436] ieee802154 phy0 wpan0: encryption failed: -22 [ 1517.204793][T21464] netlink: 'syz.5.4761': attribute type 2 has an invalid length. [ 1517.377473][T21471] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1517.500697][T21474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4768'. [ 1520.673932][T21565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4810'. [ 1520.942739][T21570] CIFS: Attempting to mount //127.0.0.1/share [ 1520.943599][T21570] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1520.943649][T21570] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1522.428164][T10048] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1522.599297][T10048] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1522.599361][T10048] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1522.601322][T10048] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.601347][T10048] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1522.611397][T10048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.611425][T10048] usb 4-1: Product: syz [ 1522.611439][T10048] usb 4-1: Manufacturer: syz [ 1522.611451][T10048] usb 4-1: SerialNumber: syz [ 1522.710440][T10048] usb 4-1: selecting invalid altsetting 1 [ 1522.793245][T10048] usb 4-1: unit 6 not found! [ 1522.850895][T18542] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1522.892549][T10048] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1522.970458][T21622] batadv1: entered promiscuous mode [ 1522.970484][T21622] batadv1: entered allmulticast mode [ 1522.972371][T21622] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1523.036038][T18542] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1523.040044][T18542] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1523.040075][T18542] usb 6-1: config 0 has no interface number 0 [ 1523.040125][T18542] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1523.040153][T18542] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1523.040194][T18542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.146631][T18542] usb 6-1: config 0 descriptor?? [ 1523.788010][T18542] prodikeys 0003:041E:2801.0014: collection stack underflow [ 1523.788052][T18542] prodikeys 0003:041E:2801.0014: item 0 1 0 12 parsing failed [ 1523.792981][T18542] prodikeys 0003:041E:2801.0014: hid parse failed [ 1523.793102][T18542] prodikeys 0003:041E:2801.0014: probe with driver prodikeys failed with error -22 [ 1523.857137][T18542] usb 6-1: USB disconnect, device number 11 [ 1523.973780][T21636] CIFS: Attempting to mount //127.0.0.1/share [ 1524.024490][T21638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4841'. [ 1524.070940][T21640] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1524.071115][T21636] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1524.442813][T10048] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1524.450478][T10048] usb 4-1: USB disconnect, device number 62 [ 1524.572818][T17073] udevd[17073]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1525.152493][T21665] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4852'. [ 1525.264849][T21669] < [ 1525.960613][T21689] loop5: detected capacity change from 0 to 6 [ 1526.112324][T21689] loop5: [POWERTEC] p1 p2 p3 [ 1526.112618][T21689] loop5: p1 start 2738982409 is beyond EOD, truncated [ 1526.112652][T21689] loop5: p2 start 3318134482 is beyond EOD, truncated [ 1526.112670][T21689] loop5: p3 start 3832978868 is beyond EOD, truncated [ 1526.261048][T21692] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 1526.771340][T21710] CIFS: Attempting to mount //127.0.0.1/share [ 1526.772073][T21710] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1526.772124][T21710] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1527.386342][T21720] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1528.347939][T21737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4883'. [ 1529.360343][T21768] CIFS: Attempting to mount //127.0.0.1/share [ 1529.361055][T21768] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1529.361103][T21768] CIFS: VFS: cifs_mount failed w/return code = -22 [ 1530.125772][T21789] geneve0: Device is already in use. [ 1530.374449][T21794] program syz.2.4910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1530.912717][T21806] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1530.912750][T21806] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1530.983349][T21806] vhci_hcd vhci_hcd.0: Device attached [ 1531.228508][T14590] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1531.253658][ T5708] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 1531.458586][ T5708] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1531.459666][ T5708] usb 6-1: config 0 has no interfaces? [ 1531.459700][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.462693][T16014] kernel write not supported for file bpf-map (pid: 16014 comm: kworker/1:4) [ 1531.501844][ T5708] usb 6-1: config 0 descriptor?? [ 1531.747461][T21807] usb 43-1: recv xbuf, 0 [ 1531.773947][ T5708] usb 6-1: USB disconnect, device number 12 [ 1531.781705][ T7526] vhci_hcd vhci_hcd.5: stop threads [ 1531.781734][ T7526] vhci_hcd vhci_hcd.5: release socket [ 1531.895627][ T7526] vhci_hcd vhci_hcd.5: disconnect device [ 1532.058702][T21836] CIFS: Attempting to mount //127.0.0.1/share [ 1532.059385][T21836] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1532.059432][T21836] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1532.545816][T21855] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.4936'. [ 1532.594226][T21856] CIFS: Attempting to mount //127.0.0.1/share [ 1532.594979][T21856] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1532.595029][T21856] CIFS: VFS: cifs_mount failed w/return code = -22 [ 1534.531704][T21906] CIFS: Attempting to mount //127.0.0.1/share [ 1534.535683][T21906] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1534.535740][T21906] CIFS: VFS: cifs_mount failed w/return code = -22 [ 1534.939564][T21919] CIFS: Attempting to mount //127.0.0.1/share [ 1534.940272][T21919] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1534.940340][T21919] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1535.234688][T21926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4965'. [ 1535.364162][T14590] IPVS: starting estimator thread 0... [ 1535.466150][T21930] IPVS: using max 9 ests per chain, 21600 per kthread [ 1535.687586][ C0] unchecked MSR access error: WRMSR to 0x400 (tried to write 0x0000000000000001) at rIP: 0xffffffff817079a2 (__mcheck_cpu_init_prepare_banks+0x1f2/0x3d0) [ 1535.687723][ C0] Call Trace: [ 1535.687737][ C0] [ 1535.687755][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 1535.687821][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1535.687847][ C0] ? sched_clock_cpu+0x74/0x440 [ 1535.687907][ C0] mce_cpu_restart+0x11a/0x2c0 [ 1535.687949][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 1535.687973][ C0] __flush_smp_call_function_queue+0x35d/0xc50 [ 1535.688016][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 1535.688044][ C0] __sysvec_call_function_single+0x9a/0x3d0 [ 1535.688100][ C0] sysvec_call_function_single+0x9e/0xc0 [ 1535.688117][ C0] [ 1535.688128][ C0] [ 1535.688135][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 1535.688166][ C0] RIP: 0010:lock_acquire+0x222/0x350 [ 1535.688211][ C0] Code: ff ff ff e8 e0 51 a6 09 f7 44 24 08 00 02 00 00 0f 84 39 ff ff ff 65 48 8b 05 12 9d fd 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 97 c8 11 [ 1535.688225][ C0] RSP: 0018:ffffc90000157d10 EFLAGS: 00000282 [ 1535.688246][ C0] RAX: 1e78af58a0e43900 RBX: 0000000000000000 RCX: 0000000000000046 [ 1535.688265][ C0] RDX: 00000000fafbec7f RSI: ffffffff8dafa05a RDI: ffffffff8bca8780 [ 1535.688277][ C0] RBP: ffffffff8b48c450 R08: ffffffff8b48c450 R09: 0000000000000000 [ 1535.688288][ C0] R10: 0000000000008000 R11: ffffffff8e078e00 R12: 0000000000000000 [ 1535.688299][ C0] R13: ffffffff8e078e00 R14: 0000000000000001 R15: 0000000000000246 [ 1535.688312][ C0] ? schedule+0x90/0x2b0 [ 1535.688329][ C0] ? schedule+0x90/0x2b0 [ 1535.688351][ C0] ? schedule+0x90/0x2b0 [ 1535.688366][ C0] schedule+0xb0/0x2b0 [ 1535.688380][ C0] ? schedule+0x90/0x2b0 [ 1535.688396][ C0] smpboot_thread_fn+0x5e2/0xa70 [ 1535.688459][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 1535.688485][ C0] kthread+0x38b/0x470 [ 1535.688508][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1535.688526][ C0] ? __pfx_kthread+0x10/0x10 [ 1535.688548][ C0] ret_from_fork+0x514/0xb70 [ 1535.688581][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1535.688603][ C0] ? __switch_to+0xc89/0x1420 [ 1535.688631][ C0] ? __pfx_kthread+0x10/0x10 [ 1535.688654][ C0] ret_from_fork_asm+0x1a/0x30 [ 1535.688699][ C0] [ 1536.096415][T18542] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1536.264973][T18542] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1536.271716][T18542] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.298371][T18542] usb 4-1: config 0 descriptor?? [ 1536.315828][T18542] cp210x 4-1:0.0: cp210x converter detected [ 1536.659006][T21949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4976'. [ 1536.783933][T18542] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1536.922689][T18542] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1537.009057][ T9] usb 4-1: USB disconnect, device number 63 [ 1537.076861][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1537.313497][T21959] C: renamed from veth1_to_team (while UP) [ 1537.359401][T21959] netlink: 'syz.2.4980': attribute type 2 has an invalid length. [ 1537.359426][T21959] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4980'. [ 1537.359459][T21959] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1537.528276][ T9] cp210x 4-1:0.0: device disconnected [ 1538.359721][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1538.404571][T21973] CIFS: Attempting to mount //127.0.0.1/share [ 1538.405369][T21973] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1538.405418][T21973] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1538.589839][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1538.593413][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1538.595059][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.595125][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1538.595154][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1538.647792][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1538.647825][ T9] usb 3-1: Manufacturer: syz [ 1538.703674][ T9] usb 3-1: config 0 descriptor?? [ 1539.129109][T21971] bond1: Removing last ns target with arp_interval on [ 1540.028724][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1540.202061][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1540.203192][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1540.206895][ T9] usb 4-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 1540.206954][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1540.206984][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1540.207012][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1540.207067][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1540.210511][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1540.210542][ T9] usb 4-1: Manufacturer: syz [ 1540.335464][ T9] usb 4-1: config 0 descriptor?? [ 1540.787316][ T9] rc_core: IR keymap rc-hauppauge not found [ 1540.787341][ T9] Registered IR keymap rc-empty [ 1540.790281][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1540.820783][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1540.903808][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1540.928857][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input47 [ 1540.978817][T18542] usb 3-1: USB disconnect, device number 22 [ 1541.156748][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1541.177974][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1541.200204][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1541.221281][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1541.243356][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1541.266681][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1541.286253][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1541.314154][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1541.330082][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1541.362219][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1541.507029][T21987] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1541.511106][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1541.511130][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1541.576130][ T9] usb 4-1: USB disconnect, device number 64 [ 1542.454304][T21992] sg_write: data in/out 294976/136 bytes for SCSI command 0x0-- guessing data in; [ 1542.454304][T21992] program syz.5.4986 not setting count and/or reply_len properly [ 1555.250880][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1555.365194][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1555.368988][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1555.413050][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1555.414578][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1556.486505][ T5607] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1556.676202][ T5607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1556.683559][ T5607] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1556.708404][ T5607] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1556.740785][ T5607] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1557.900938][T16968] Bluetooth: hci5: command tx timeout [ 1559.160746][ T5607] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1559.209027][ T9919] Bluetooth: hci6: command tx timeout [ 1559.308566][ T5607] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1559.356123][ T5607] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1559.358972][ T5607] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1559.359990][ T5607] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1560.154544][T16968] Bluetooth: hci5: command tx timeout [ 1561.461277][ T9919] Bluetooth: hci6: command tx timeout [ 1561.469011][ T5607] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1561.534476][ T5607] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1561.552645][ T5607] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1561.611733][ T5607] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1561.614124][ T5607] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1561.645518][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 1561.645596][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1561.888626][ T5607] Bluetooth: hci7: command tx timeout [ 1562.413193][T16968] Bluetooth: hci5: command tx timeout [ 1562.450392][ T9919] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1562.538871][ T9919] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1562.547434][ T9919] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1562.596835][ T9919] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1562.597825][ T9919] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1563.709812][ T9919] Bluetooth: hci6: command tx timeout [ 1564.066935][ T9919] Bluetooth: hci8: command tx timeout [ 1564.143233][ T5607] Bluetooth: hci7: command tx timeout [ 1564.662856][ T9919] Bluetooth: hci5: command tx timeout [ 1565.009895][ T9919] Bluetooth: hci9: command tx timeout [ 1565.963994][ T9919] Bluetooth: hci6: command tx timeout [ 1566.310248][ T9919] Bluetooth: hci8: command tx timeout [ 1566.396961][ T9919] Bluetooth: hci7: command tx timeout [ 1567.263975][ T9919] Bluetooth: hci9: command tx timeout [ 1568.564432][ T9919] Bluetooth: hci8: command tx timeout [ 1568.651324][ T9919] Bluetooth: hci7: command tx timeout [ 1569.518213][ T9919] Bluetooth: hci9: command tx timeout [ 1570.818718][ T9919] Bluetooth: hci8: command tx timeout [ 1571.783394][ T9919] Bluetooth: hci9: command tx timeout [ 1608.408546][ T4954] udevd[4954]: worker [17073] /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input47/event4 is taking a long time [ 1620.744237][ T5607] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1620.838258][ T5607] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1620.845292][ T5607] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1620.903593][ T5607] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1620.906295][ T5607] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1621.915083][ T5607] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1622.003273][ T5607] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1622.032708][ T5607] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1622.086317][ T5607] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1622.087467][ T5607] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1623.360129][ T9919] Bluetooth: hci10: command tx timeout [ 1624.488987][ T9919] Bluetooth: hci11: command tx timeout [ 1624.799118][ T5607] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1624.885622][ T5607] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1624.910058][ T5607] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1624.948192][ T5607] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1624.949545][ T5607] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1625.614432][ T9919] Bluetooth: hci10: command tx timeout [ 1626.143217][ T5607] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1626.225657][ T5607] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1626.265812][ T5607] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1626.268522][ T5607] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1626.302646][ T5607] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1626.752678][ T9919] Bluetooth: hci11: command tx timeout [ 1627.344676][ T5607] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1627.413895][ T5607] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1627.420855][ T5607] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1627.451982][ T5607] Bluetooth: hci12: command tx timeout [ 1627.477948][T22064] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1627.501478][T22064] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1627.868810][T22064] Bluetooth: hci10: command tx timeout [ 1628.735903][T22064] Bluetooth: hci13: command tx timeout [ 1629.006591][T22064] Bluetooth: hci11: command tx timeout [ 1629.689424][T22064] Bluetooth: hci12: command tx timeout [ 1629.949604][T22064] Bluetooth: hci14: command tx timeout [ 1630.122942][T22064] Bluetooth: hci10: command tx timeout [ 1630.990056][T22064] Bluetooth: hci13: command tx timeout [ 1631.261053][T22064] Bluetooth: hci11: command tx timeout [ 1631.943836][T22064] Bluetooth: hci12: command tx timeout [ 1632.203757][T22064] Bluetooth: hci14: command tx timeout [ 1633.244164][T22064] Bluetooth: hci13: command tx timeout [ 1634.198001][T22064] Bluetooth: hci12: command tx timeout [ 1634.457979][T22064] Bluetooth: hci14: command tx timeout [ 1635.498568][T22064] Bluetooth: hci13: command tx timeout [ 1636.712245][T22064] Bluetooth: hci14: command tx timeout [ 1671.289441][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 1671.289540][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1673.475058][T22064] Bluetooth: hci4: command 0x0406 tx timeout [ 1686.388140][ T5607] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1686.477730][ T5607] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1686.503778][ T5607] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1686.507869][ T5607] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1686.533906][ T5607] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1687.496274][T22075] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1687.600343][T22075] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1687.615651][T22075] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1687.631350][T22075] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1687.656789][T22075] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1688.483357][T22075] Bluetooth: hci5: command 0x0406 tx timeout [ 1690.315149][T22077] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1690.387442][T22077] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1690.427588][T22077] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1690.484900][T22077] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1690.487462][T22077] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1692.140856][T22087] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1692.231226][T22087] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1692.333604][T22087] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1692.340323][T22087] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1692.341791][T22087] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1693.278267][T22090] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1693.384448][T22090] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1693.392121][T22090] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1693.432936][T22090] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1693.450406][T22090] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1694.039420][T22087] Bluetooth: hci6: command 0x0406 tx timeout [ 1694.039655][T22087] Bluetooth: hci7: command 0x0406 tx timeout [ 1699.745496][T22101] Bluetooth: hci8: command 0x0406 tx timeout [ 1699.745536][T22101] Bluetooth: hci9: command 0x0406 tx timeout [ 1715.361852][ T38] INFO: task syz.5.5000:22009 blocked for more than 141 seconds. [ 1715.361886][ T38] Tainted: G L syzkaller #0 [ 1715.361899][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1715.361910][ T38] task:syz.5.5000 state:D stack:25672 pid:22009 tgid:22008 ppid:17755 task_flags:0x400140 flags:0x00080002 [ 1715.361982][ T38] Call Trace: [ 1715.361993][ T38] [ 1715.362011][ T38] __schedule+0x16df/0x5510 [ 1715.362057][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1715.362158][ T38] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1715.362201][ T38] ? __pfx___schedule+0x10/0x10 [ 1715.362219][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 1715.362270][ T38] rt_mutex_schedule+0x76/0xf0 [ 1715.362340][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1715.362384][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 1715.362420][ T38] rt_mutex_slowlock+0x2d4/0x780 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1715.362456][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1715.362490][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1715.362536][ T38] ? rtnetlink_rcv_msg+0x767/0xc00 [ 1715.362641][ T38] ? rtnetlink_rcv_msg+0x767/0xc00 [ 1715.362683][ T38] ? rtnetlink_rcv_msg+0x767/0xc00 [ 1715.362723][ T38] mutex_lock_nested+0x168/0x1d0 [ 1715.362761][ T38] rtnetlink_rcv_msg+0x767/0xc00 [ 1715.362801][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1715.362836][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1715.362869][ T38] ? ref_tracker_free+0x668/0x820 [ 1715.362956][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 1715.362999][ T38] netlink_rcv_skb+0x226/0x4a0 [ 1715.363087][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1715.363142][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1715.363184][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1715.363210][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1715.363316][ T38] netlink_unicast+0x7f5/0x990 [ 1715.363353][ T38] netlink_sendmsg+0x813/0xb40 [ 1715.363391][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1715.363420][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1715.363528][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1715.363553][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 1715.363606][ T38] ____sys_sendmsg+0x565/0x870 [ 1715.363632][ T38] ? __might_fault+0xaf/0x130 [ 1715.363690][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1715.363736][ T38] ? import_iovec+0x73/0xa0 [ 1715.363819][ T38] ___sys_sendmsg+0x2a5/0x360 [ 1715.363844][ T38] ? __lock_acquire+0x683/0x2ce0 [ 1715.363874][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 1715.363904][ T38] ? futex_wake+0x51e/0x600 [ 1715.363998][ T38] ? __fget_files+0x2a/0x420 [ 1715.364032][ T38] ? __fget_files+0x3a8/0x420 [ 1715.364072][ T38] __x64_sys_sendmsg+0x1b7/0x290 [ 1715.364102][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1715.364154][ T38] do_syscall_64+0x166/0x520 [ 1715.364180][ T38] ? trace_irq_disable+0x3b/0x140 [ 1715.364202][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.364226][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1715.364256][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.364280][ T38] RIP: 0033:0x7f387e15e0d9 [ 1715.364302][ T38] RSP: 002b:00007f387c3b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1715.364327][ T38] RAX: ffffffffffffffda RBX: 00007f387e3e5fa0 RCX: 00007f387e15e0d9 [ 1715.364344][ T38] RDX: 0000000004040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1715.364359][ T38] RBP: 00007f387e1f5024 R08: 0000000000000000 R09: 0000000000000000 [ 1715.364374][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1715.364388][ T38] R13: 00007f387e3e6038 R14: 00007f387e3e5fa0 R15: 00007fff16388988 [ 1715.364426][ T38] [ 1715.364439][ T38] INFO: task syz-executor:22017 blocked for more than 141 seconds. [ 1715.364459][ T38] Tainted: G L syzkaller #0 [ 1715.364471][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1715.364482][ T38] task:syz-executor state:D stack:25800 pid:22017 tgid:22017 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1715.364549][ T38] Call Trace: [ 1715.364557][ T38] [ 1715.364570][ T38] __schedule+0x16df/0x5510 [ 1715.364626][ T38] ? __pfx___schedule+0x10/0x10 [ 1715.364667][ T38] rt_mutex_schedule+0x76/0xf0 [ 1715.364707][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1715.364765][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1715.364801][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1715.368036][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1715.368085][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 1715.368165][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 1715.368205][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 1715.368235][ T38] mutex_lock_nested+0x168/0x1d0 [ 1715.368273][ T38] inet_rtm_newaddr+0x464/0x19e0 [ 1715.368305][ T38] ? unwind_get_return_address+0x4d/0x90 [ 1715.368360][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1715.368460][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1715.368515][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1715.368549][ T38] rtnetlink_rcv_msg+0x802/0xc00 [ 1715.368583][ T38] ? kmem_cache_alloc_node_noprof+0x3f3/0x670 [ 1715.368614][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1715.368648][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1715.368684][ T38] ? __lock_acquire+0x683/0x2ce0 [ 1715.368731][ T38] netlink_rcv_skb+0x226/0x4a0 [ 1715.368759][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1715.368796][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1715.368837][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1715.368862][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1715.368895][ T38] netlink_unicast+0x7f5/0x990 [ 1715.368931][ T38] netlink_sendmsg+0x813/0xb40 [ 1715.368970][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1715.368999][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1715.369042][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1715.369067][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 1715.369103][ T38] __sys_sendto+0x41e/0x5d0 [ 1715.369134][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1715.369191][ T38] ? do_user_addr_fault+0xc4c/0x1340 [ 1715.369252][ T38] __x64_sys_sendto+0xde/0x100 [ 1715.369281][ T38] do_syscall_64+0x166/0x520 [ 1715.369312][ T38] ? trace_irq_disable+0x3b/0x140 [ 1715.369333][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.369357][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1715.369385][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.369408][ T38] RIP: 0033:0x7fdfb3f7e90e [ 1715.369444][ T38] RSP: 002b:00007fffe7dbad38 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1715.369467][ T38] RAX: ffffffffffffffda RBX: 000055556ea50500 RCX: 00007fdfb3f7e90e [ 1715.369484][ T38] RDX: 0000000000000028 RSI: 00007fdfb4d74670 RDI: 0000000000000003 [ 1715.369499][ T38] RBP: 0000000000000001 R08: 00007fffe7dbadb4 R09: 000000000000000c [ 1715.369513][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1715.369527][ T38] R13: 0000000000000000 R14: 00007fdfb4d74670 R15: 0000000000000000 [ 1715.383641][ T38] [ 1715.383659][ T38] INFO: task syz-executor:22022 blocked for more than 141 seconds. [ 1715.383681][ T38] Tainted: G L syzkaller #0 [ 1715.383694][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1715.383705][ T38] task:syz-executor state:D stack:25800 pid:22022 tgid:22022 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1715.383786][ T38] Call Trace: [ 1715.383794][ T38] [ 1715.383809][ T38] __schedule+0x16df/0x5510 [ 1715.383871][ T38] ? __pfx___schedule+0x10/0x10 [ 1715.383913][ T38] rt_mutex_schedule+0x76/0xf0 [ 1715.383940][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1715.383990][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1715.384026][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1715.384061][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1715.384108][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 1715.384164][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 1715.384205][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 1715.384235][ T38] mutex_lock_nested+0x168/0x1d0 [ 1715.384273][ T38] inet_rtm_newaddr+0x464/0x19e0 [ 1715.384306][ T38] ? unwind_get_return_address+0x4d/0x90 [ 1715.384331][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1715.384380][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1715.384436][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1715.384468][ T38] rtnetlink_rcv_msg+0x802/0xc00 [ 1715.384503][ T38] ? kmem_cache_alloc_node_noprof+0x3f3/0x670 [ 1715.384533][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1715.384567][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1715.384604][ T38] ? __lock_acquire+0x683/0x2ce0 [ 1715.384643][ T38] netlink_rcv_skb+0x226/0x4a0 [ 1715.384671][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1715.384715][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1715.384757][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1715.384783][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1715.384815][ T38] netlink_unicast+0x7f5/0x990 [ 1715.384852][ T38] netlink_sendmsg+0x813/0xb40 [ 1715.384889][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1715.384919][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1715.384979][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1715.385004][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 1715.423913][ T38] __sys_sendto+0x41e/0x5d0 [ 1715.423953][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1715.507076][ T38] ? do_user_addr_fault+0xc4c/0x1340 [ 1715.507132][ T38] __x64_sys_sendto+0xde/0x100 [ 1715.507163][ T38] do_syscall_64+0x166/0x520 [ 1715.507189][ T38] ? trace_irq_disable+0x3b/0x140 [ 1715.507211][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.507235][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1715.507264][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.507288][ T38] RIP: 0033:0x7fbde6f2e90e [ 1715.507310][ T38] RSP: 002b:00007ffd27803d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1715.507335][ T38] RAX: ffffffffffffffda RBX: 000055557ab10500 RCX: 00007fbde6f2e90e [ 1715.507352][ T38] RDX: 0000000000000028 RSI: 00007fbde7d24670 RDI: 0000000000000003 [ 1715.507368][ T38] RBP: 0000000000000001 R08: 00007ffd27803d94 R09: 000000000000000c [ 1715.507383][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1715.507397][ T38] R13: 0000000000000000 R14: 00007fbde7d24670 R15: 0000000000000000 [ 1715.507433][ T38] [ 1715.507447][ T38] INFO: task syz-executor:22027 blocked for more than 141 seconds. [ 1715.507468][ T38] Tainted: G L syzkaller #0 [ 1715.507480][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1715.507491][ T38] task:syz-executor state:D stack:25200 pid:22027 tgid:22027 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1715.507559][ T38] Call Trace: [ 1715.507568][ T38] [ 1715.507583][ T38] __schedule+0x16df/0x5510 [ 1715.507641][ T38] ? __pfx___schedule+0x10/0x10 [ 1715.507682][ T38] rt_mutex_schedule+0x76/0xf0 [ 1715.507715][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1715.507765][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1715.507801][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1715.507836][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1715.507882][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 1715.507922][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 1715.507963][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 1715.507994][ T38] mutex_lock_nested+0x168/0x1d0 [ 1715.508033][ T38] inet_rtm_newaddr+0x464/0x19e0 [ 1715.508066][ T38] ? unwind_get_return_address+0x4d/0x90 [ 1715.508090][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1715.508139][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1715.508194][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1715.508226][ T38] rtnetlink_rcv_msg+0x802/0xc00 [ 1715.508260][ T38] ? kmem_cache_alloc_node_noprof+0x3f3/0x670 [ 1715.508291][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1715.508325][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1715.508362][ T38] ? __lock_acquire+0x683/0x2ce0 [ 1715.508402][ T38] netlink_rcv_skb+0x226/0x4a0 [ 1715.508430][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1715.508486][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1715.508528][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1715.508553][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1715.647731][ T38] netlink_unicast+0x7f5/0x990 [ 1715.647782][ T38] netlink_sendmsg+0x813/0xb40 [ 1715.647822][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1715.647853][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1715.647897][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1715.647923][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 1715.647961][ T38] __sys_sendto+0x41e/0x5d0 [ 1715.647992][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1715.648049][ T38] ? do_user_addr_fault+0xc4c/0x1340 [ 1715.648091][ T38] __x64_sys_sendto+0xde/0x100 [ 1715.648120][ T38] do_syscall_64+0x166/0x520 [ 1715.648144][ T38] ? trace_irq_disable+0x3b/0x140 [ 1715.648167][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.648190][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1715.648219][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.648243][ T38] RIP: 0033:0x7fe40d13e90e [ 1715.648264][ T38] RSP: 002b:00007ffc6c113318 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1715.648289][ T38] RAX: ffffffffffffffda RBX: 0000555585c01500 RCX: 00007fe40d13e90e [ 1715.648306][ T38] RDX: 0000000000000028 RSI: 00007fe40df34670 RDI: 0000000000000003 [ 1715.648321][ T38] RBP: 0000000000000001 R08: 00007ffc6c113394 R09: 000000000000000c [ 1715.648336][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1715.648350][ T38] R13: 0000000000000000 R14: 00007fe40df34670 R15: 0000000000000000 [ 1715.648387][ T38] [ 1715.648417][ T38] [ 1715.648417][ T38] Showing all locks held in the system: [ 1715.648428][ T38] locks held by kworker/0:0/9: 6, on CPU#0: [ 1715.648513][ T38] #0: ffff8880226ae138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1715.648581][ T38] #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1715.648643][ T38] #2: ffff888029c22210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 1715.648761][ T38] #3: ffff88806478c210 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xe3/0x990 [ 1715.648818][ T38] #4: ffff888028dde1d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1715.648892][ T38] #5: ffffffff8f0215f8 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x2d8/0x650 [ 1715.648998][ T38] locks held by pr/legacy/17: 3, last CPU#0: [ 1715.649039][ T38] #0: ffffffff8e1b5640 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 1715.649116][ T38] #1: ffffffff8e09cf38 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb50 [ 1715.649221][ T38] #2: ffffffff8e1c3480 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1715.805223][ T38] locks held by ktimers/1/29: 6, last CPU#1: [ 1715.805243][ T38] #0: ffffffff8e0591a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1715.805387][ T38] #1: ffffffff8e1c3480 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1715.805443][ T38] #2: ffff8880b87284f8 (&base->softirq_expiry_lock){+...}-{3:3}, at: hrtimer_run_softirq+0[ 1715.805443][ T38] #2: ffff8880b87284f8 (&base->softirq_expiry_lock){+...}-{3:3}, at: hrtimer_run_softirq+0x7d/0x2e0 [ 1715.805547][ T38] #3: ffffffff8e1c3480 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1715.805614][ T38] #4: ffff88803095a400 (&q->current_entry_lock){+...}-{3:3}, at: __hrtimer_run_queues+0x495/0xaf0 [ 1715.805689][ T38] #5: ffff88803095a3c0 (_T->lock){....}-{2:2}, at: debug_object_deactivate+0x9a/0x250 [ 1715.805779][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 1715.805796][ T38] #0: ffffffff8e1c3480 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1715.805868][ T38] locks held by kworker/u8:6/109: 5, last CPU#0: [ 1715.805883][ T38] #0: ffff888032e37938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1715.805937][ T38] #1: ffffc9000154fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1715.817077][ T38] #2: ffffffff8e0591a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1715.817139][ T38] #3: ffffffff8e1c3480 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1715.817192][ T38] #4: ffff888063b241d8 (key#17){+...}-{3:3}, at: batadv_tt_local_purge+0x13e/0x380 [ 1715.817358][ T38] locks held by kworker/u8:13/1764: 3, on CPU#0: [ 1715.817376][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1715.817431][ T38] #1: ffffc90006a7fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1715.817485][ T38] #2: ffff88804d6a08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1715.947062][ T38] locks held by kworker/u8:16/3343: 2, on CPU#0: [ 1715.947087][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1715.947151][ T38] #1: ffffc9000de47c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1715.947212][ T38] locks held by syz-executor/5574: 4, last CPU#0: [ 1715.947228][ T38] #0: ffff8880359aba30 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1715.947338][ T38] #1: ffffffff8e1c3480 (rcu_read_lock){....}-{1:3}, at: folio_lruvec_lock_irqsave+0x24/0x540 [ 1715.947448][ T38] #2: ffff88801aed12f0 (&lruvec->lru_lock){+.+.}-{3:3}, at: folio_lruvec_lock_irqsave+0x293/0x540 [ 1715.947531][ T38] #3: ffffffff8e1c3480 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1715.947593][ T38] locks held by kworker/u9:6/5607: 4, on CPU#0: [ 1715.947609][ T38] #0: ffff888035e31138 ((wq_completion)hci15){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1715.947672][ T38] #1: ffffc900051b7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1715.947728][ T38] #2: ffff888058a24f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1715.947847][ T38] #3: ffff888058a240b0 (&hdev->lock){+.+.}-{4:4}, at: hci_update_scan_sync+0x211/0x4f0 [ 1715.947906][ T38] locks held by kworker/0:5/5708: 3, on CPU#0: [ 1715.947922][ T38] #0: ffff88813ff19538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1715.947975][ T38] #1: ffffc90005527c40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1715.948030][ T38] #2: ffffffff8e1c42d8 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x6c/0x16f0 [ 1715.948108][ T38] locks held by kworker/0:8/5817: 3, on CPU#0: [ 1715.948123][ T38] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1715.948176][ T38] #1: ffffc9000594fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1715.948230][ T38] #2: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1715.948325][ T38] locks held by kworker/u8:30/7517: 5, last CPU#0: [ 1715.948341][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1715.948394][ T38] #1: ffffc90003937c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1715.948450][ T38] #2: ffff888063cc6310 (&devlink->lock_key#16){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1715.948569][ T38] #3: ffff8880620bd120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1716.098841][ T38] #4: ffffffff8e1c3480 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1716.098908][ T38] locks held by kworker/u8:31/7518: 6, last CPU#0: [ 1716.098925][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.098981][ T38] #1: ffffc90003927c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.099039][ T38] #2: ffff88804f30a310 (&devlink->lock_key#19){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1716.099098][ T38] #3: ffff88804df12520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1716.099153][ T38] #4: ffffffff8e1c3480 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1716.099210][ T38] #5: ffffffff8e1c3480 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1716.099264][ T38] locks held by kworker/u8:37/7526: 3, on CPU#1: [ 1716.099279][ T38] #0: ffff888032732938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.099333][ T38] #1: ffffc90003df7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.099388][ T38] #2: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1716.099511][ T38] locks held by kworker/u8:55/8989: 3, on CPU#0: [ 1716.099527][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.099581][ T38] #1: ffffc90004327c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.099644][ T38] #2: ffff8880334f08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1716.099706][ T38] locks held by kworker/u8:62/9232: 3, on CPU#0: [ 1716.099722][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.099774][ T38] #1: ffffc90004887c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.099828][ T38] #2: ffff8880600508d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1716.099888][ T38] locks held by kworker/u9:0/9919: 6, on CPU#0: [ 1716.099903][ T38] #0: ffff88802a12f138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.099956][ T38] #1: ffffc900051d7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.100011][ T38] #2: ffff88803a1c0f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1716.100073][ T38] #3: ffff88803a1c00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1716.100130][ T38] #4: ffffffff8f737058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 1716.100212][ T38] #5: ffff888043596b70 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x520 [ 1716.100282][ T38] locks held by kworker/0:1/11612: 3, last CPU#0: [ 1716.100298][ T38] #0: ffff88813ff1a538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.259508][ T38] #1: ffffc9000622fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.259569][ T38] #2: ffffffff8eceee18 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x470 [ 1716.259742][ T38] locks held by kworker/u9:2/16968: 5, on CPU#0: [ 1716.259759][ T38] #0: ffff8880381b0938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.259823][ T38] #1: ffffc90005c7fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.259877][ T38] #2: ffff888030fdcf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1716.259941][ T38] #3: ffff888030fdc0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1716.259996][ T38] #4: ffffffff8f737058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 1716.260054][ T38] locks held by udevd/17073: 4, on CPU#0: [ 1716.260069][ T38] #0: ffff888040d69608 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa5/0xcb0 [ 1716.260144][ T38] #1: ffff888063044478 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1716.260224][ T38] #2: ffff88803373b5a8 (kn->active#25){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1716.260282][ T38] #3: ffff88806478c210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1716.260391][ T38] locks held by syz.4.4988/21977: 3, on CPU#0: [ 1716.260407][ T38] #0: ffff888033949038 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1716.260473][ T38] #1: ffffffff8f61db20 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1716.260534][ T38] #2: ffff888033ee5cc8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x148/0xe60 [ 1716.260647][ T38] locks held by syz.2.4994/21993: 1, on CPU#0: [ 1716.260662][ T38] #0: ffff888061cf68c8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 1716.260745][ T38] locks held by syz.3.4999/22001: 1, on CPU#0: [ 1716.260760][ T38] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0xa9/0x140 [ 1716.260899][ T38] locks held by syz.5.5000/22009: 1, on CPU#0: [ 1716.260915][ T38] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 1716.260980][ T38] locks held by dhcpcd/22010: 1, on CPU#0: [ 1716.423188][ T38] #0: ffff888040316138 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1716.423271][ T38] locks held by dhcpcd/22011: 1, on CPU#0: [ 1716.423287][ T38] #0: ffff88803395ccf8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1716.423350][ T38] locks held by dhcpcd/22012: 1, on CPU#0: [ 1716.423366][ T38] #0: ffff8880339582b8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1716.423429][ T38] locks held by dhcpcd/22013: 1, on CPU#0: [ 1716.423444][ T38] #0: ffff88803395da78 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1716.423507][ T38] locks held by dhcpcd/22014: 1, on CPU#0: [ 1716.423521][ T38] #0: ffff88804027b8b8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1716.423584][ T38] locks held by dhcpcd/22015: 1, on CPU#0: [ 1716.423599][ T38] #0: ffff8880402c9038 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1716.423661][ T38] locks held by syz-executor/22017: 1, on CPU#0: [ 1716.423684][ T38] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1716.430167][ T38] locks held by syz-executor/22022: 1, on CPU#0: [ 1716.430189][ T38] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1716.430274][ T38] locks held by syz-executor/22027: 1, on CPU#0: [ 1716.430290][ T38] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1716.430350][ T38] locks held by syz-executor/22032: 1, on CPU#0: [ 1716.430366][ T38] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1716.430427][ T38] locks held by syz-executor/22037: 1, on CPU#0: [ 1716.430442][ T38] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1716.430502][ T38] locks held by syz-executor/22042: 1, on CPU#0: [ 1716.430518][ T38] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1716.430578][ T38] locks held by syz-executor/22047: 1, on CPU#0: [ 1716.430593][ T38] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1716.430655][ T38] locks held by syz-executor/22052: 1, on CPU#0: [ 1716.430678][ T38] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1716.430740][ T38] locks held by syz-executor/22057: 1, on CPU#0: [ 1716.430755][ T38] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1716.430815][ T38] locks held by syz-executor/22062: 1, on CPU#0: [ 1716.430831][ T38] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1716.430891][ T38] locks held by kworker/u9:1/22064: 4, on CPU#0: [ 1716.430906][ T38] #0: ffff888035e35938 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.430982][ T38] #1: ffffc900108b7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.553919][ T38] #2: ffff888058a240b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 1716.553990][ T38] #3: ffffffff8f737058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 1716.554045][ T38] locks held by syz-executor/22068: 1, on CPU#0: [ 1716.554062][ T38] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1716.554126][ T38] locks held by kworker/u9:3/22069: 4, on CPU#0: [ 1716.554141][ T38] #0: ffff888033583938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.554221][ T38] #1: ffffc900108d7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.554275][ T38] #2: ffff888058a2c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 1716.554326][ T38] #3: ffffffff8f737058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 1716.554379][ T38] locks held by syz-executor/22074: 1, on CPU#0: [ 1716.554394][ T38] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1716.554456][ T38] locks held by kworker/u9:4/22075: 4, on CPU#0: [ 1716.554471][ T38] #0: ffff888038f86138 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.554530][ T38] #1: ffffc900108f7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.554585][ T38] #2: ffff888058a340b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 1716.554636][ T38] #3: ffffffff8f737058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 1716.554688][ T38] locks held by kworker/u9:5/22077: 5, on CPU#0: [ 1716.554703][ T38] #0: ffff88803832e138 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.554765][ T38] #1: ffffc90010917c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.554820][ T38] #2: ffff8880754e8f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1716.554882][ T38] #3: ffff8880754e80b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1716.554939][ T38] #4: ffffffff8f737058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 1716.554997][ T38] locks held by syz-executor/22081: 1, on CPU#0: [ 1716.555013][ T38] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1716.555074][ T38] locks held by kworker/u9:7/22082: 5, on CPU#0: [ 1716.555090][ T38] #0: ffff888034c90938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.555144][ T38] #1: ffffc90010927c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.555198][ T38] #2: ffff888075234f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1716.555260][ T38] #3: ffff8880752340b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1716.555316][ T38] #4: ffffffff8f737058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 1716.555388][ T38] locks held by kworker/u9:8/22087: 5, on CPU#0: [ 1716.555405][ T38] #0: ffff88802605f938 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.705681][ T38] #1: ffffc90010887c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.705759][ T38] #2: ffff888058458f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1716.705822][ T38] #3: ffff8880584580b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1716.705880][ T38] #4: ffffffff8f737058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 1716.705938][ T38] locks held by kworker/u9:9/22088: 4, on CPU#0: [ 1716.705955][ T38] #0: ffff888039cf2938 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.706013][ T38] #1: ffffc90010947c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.706068][ T38] #2: ffff888058a3c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 1716.706135][ T38] #3: ffffffff8f737058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 1716.706187][ T38] locks held by syz-executor/22089: 1, on CPU#0: [ 1716.706202][ T38] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1716.706265][ T38] locks held by kworker/u9:10/22090: 4, on CPU#0: [ 1716.706281][ T38] #0: ffff8880624a8938 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.706348][ T38] #1: ffffc90010967c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.706402][ T38] #2: ffff8880794280b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 1716.706453][ T38] #3: ffffffff8f737058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 1716.706504][ T38] locks held by syz-executor/22095: 1, on CPU#0: [ 1716.706520][ T38] #0: ffffffff8f5ae878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1716.706580][ T38] locks held by kworker/u9:11/22096: 5, on CPU#0: [ 1716.706595][ T38] #0: ffff888064a30938 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.706649][ T38] #1: ffffc90010977c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1716.706704][ T38] #2: ffff88802b3f4f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1716.706765][ T38] #3: ffff88802b3f40b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1716.706820][ T38] #4: ffffffff8f737058 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 1716.706879][ T38] [ 1716.706885][ T38] ============================================= [ 1716.706885][ T38] [ 1716.706895][ T38] NMI backtrace for cpu 0 [ 1716.706915][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1716.706945][ T38] Tainted: [L]=SOFTLOCKUP [ 1716.706953][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1716.706966][ T38] Call Trace: [ 1716.706974][ T38] [ 1716.706984][ T38] dump_stack_lvl+0xe8/0x150 [ 1716.707020][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1716.707120][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1716.707186][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1716.707222][ T38] sys_info+0x135/0x170 [ 1716.707273][ T38] watchdog+0xfd7/0x1030 [ 1716.707303][ T38] ? watchdog+0x1c7/0x1030 [ 1716.707412][ T38] kthread+0x38b/0x470 [ 1716.707444][ T38] ? __pfx_watchdog+0x10/0x10 [ 1716.707464][ T38] ? __pfx_kthread+0x10/0x10 [ 1716.707497][ T38] ret_from_fork+0x514/0xb70 [ 1716.707534][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1716.707567][ T38] ? __switch_to+0xc89/0x1420 [ 1716.707599][ T38] ? __pfx_kthread+0x10/0x10 [ 1716.707632][ T38] ret_from_fork_asm+0x1a/0x30 [ 1716.707682][ T38] [ 1716.707713][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1716.707745][ C1] NMI backtrace for cpu 1 [ 1716.707763][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1716.707789][ C1] Tainted: [L]=SOFTLOCKUP [ 1716.707797][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1716.707808][ C1] RIP: 0010:advance_sched+0x4/0xc90 [ 1716.707905][ C1] Code: ac fb e9 57 fb ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 41 57 41 56 41 55 41 54 53 48 81 ec 90 00 00 00 49 89 fe 49 bf [ 1716.707921][ C1] RSP: 0018:ffffc90000a3fbb0 EFLAGS: 00000246 [ 1716.707939][ C1] RAX: 0000000000000000 RBX: 1ffff11003a5693f RCX: ffff88801d2b3e00 [ 1716.707953][ C1] RDX: 0000000000000000 RSI: 0000000000000100 RDI: ffff88803095a440 [ 1716.707965][ C1] RBP: 1ffff110170e5102 R08: 0000000000000100 R09: 0000000000000100 [ 1716.707978][ C1] R10: dffffc0000000000 R11: ffffffff8954f200 R12: ffffffff8954f200 [ 1716.707992][ C1] R13: ffff88801d2b49f8 R14: dffffc0000000000 R15: ffff88803095a440 [ 1716.708006][ C1] FS: 0000000000000000(0000) GS:ffff888125d32000(0000) knlGS:0000000000000000 [ 1716.708021][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1716.708034][ C1] CR2: 00007f4f1f7c4637 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 1716.708053][ C1] Call Trace: [ 1716.708061][ C1] [ 1716.708068][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 1716.708104][ C1] hrtimer_run_softirq+0x1e1/0x2e0 [ 1716.708132][ C1] handle_softirqs+0x1da/0x6d0 [ 1716.708158][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1716.708181][ C1] run_ktimerd+0x6a/0x100 [ 1716.708204][ C1] smpboot_thread_fn+0x565/0xa70 [ 1716.708227][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1716.708253][ C1] kthread+0x38b/0x470 [ 1716.708278][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1716.708299][ C1] ? __pfx_kthread+0x10/0x10 [ 1716.708324][ C1] ret_from_fork+0x514/0xb70 [ 1716.708350][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1716.708374][ C1] ? __switch_to+0xc89/0x1420 [ 1716.708397][ C1] ? __pfx_kthread+0x10/0x10 [ 1716.708423][ C1] ret_from_fork_asm+0x1a/0x30 [ 1716.708456][ C1] [ 1716.955019][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1716.955048][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1716.955081][ T38] Tainted: [L]=SOFTLOCKUP [ 1716.955089][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1716.955103][ T38] Call Trace: [ 1716.955116][ T38] [ 1716.955128][ T38] vpanic+0x56d/0xa60 [ 1716.955169][ T38] ? __pfx___schedule+0x10/0x10 [ 1716.955194][ T38] ? __pfx_vpanic+0x10/0x10 [ 1716.955247][ T38] panic+0xc5/0xd0 [ 1716.955279][ T38] ? __pfx_panic+0x10/0x10 [ 1716.955309][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 1716.955333][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1716.955361][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1716.955402][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1716.955439][ T38] watchdog+0x1030/0x1030 [ 1716.955470][ T38] ? watchdog+0x1c7/0x1030 [ 1716.955500][ T38] kthread+0x38b/0x470 [ 1716.955533][ T38] ? __pfx_watchdog+0x10/0x10 [ 1716.955553][ T38] ? __pfx_kthread+0x10/0x10 [ 1716.955586][ T38] ret_from_fork+0x514/0xb70 [ 1716.955622][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1716.955654][ T38] ? __switch_to+0xc89/0x1420 [ 1716.955700][ T38] ? __pfx_kthread+0x10/0x10 [ 1716.955733][ T38] ret_from_fork_asm+0x1a/0x30 [ 1716.955783][ T38] [ 1716.956113][ T38] Kernel Offset: disabled