last executing test programs: 6m5.825315112s ago: executing program 0 (id=490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0xd, 0x7ff, 0xc50, 0x9, 0x7}]}) 6m5.251800709s ago: executing program 0 (id=496): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB="88000000", @ANYRES16=r0, @ANYBLOB="01002bbd7000ffdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e005f00330000a40800080211000001080211000001505050505050b00000018e80090024b500129dfed6d7d2caafcf34ed931775f30093716401016c2d1a20000f0400010000000000010005001c00000001000500000003dd063951e53e606600080057"], 0x88}, 0x1, 0x0, 0x0, 0x4044084}, 0x48000) 6m5.006294169s ago: executing program 0 (id=502): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 6m4.718313725s ago: executing program 0 (id=505): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x1a474dc, 0x0) umount2(&(0x7f0000000140)='./file0/file0/..\x00', 0x4) 6m4.407552982s ago: executing program 0 (id=508): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x2a82, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r1, 0x0, 0x80, 0x5}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r1, 0x0, 0x9, 0x82000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1004000}) 6m3.401104577s ago: executing program 0 (id=515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x94, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x47, 0xe, {{{}, {0x3}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x400, 0x8848, @void, @void, @val={0x3, 0x1, 0x70}, @val={0x4, 0x6, {0x6, 0x8b, 0x4, 0x6}}, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54}}, @void}}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x681}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac03, 0xfac02]}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}]]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x40) 6m2.735723338s ago: executing program 32 (id=515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x94, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x47, 0xe, {{{}, {0x3}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x400, 0x8848, @void, @void, @val={0x3, 0x1, 0x70}, @val={0x4, 0x6, {0x6, 0x8b, 0x4, 0x6}}, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54}}, @void}}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x681}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac03, 0xfac02]}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}]]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x40) 4m38.775179152s ago: executing program 4 (id=1191): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r2}, 0x10) 4m38.555360461s ago: executing program 4 (id=1193): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x4, 0x3, 0x2, {0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}}}, 0x80, 0x0}, 0x2004b761) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) 4m38.435594609s ago: executing program 4 (id=1195): socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmmsg(r0, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x60, 0x0) 4m38.163728194s ago: executing program 4 (id=1200): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00') 4m38.043807633s ago: executing program 4 (id=1203): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x3}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x5}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0xb}, 0x1) 4m37.256821225s ago: executing program 4 (id=1210): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x35ddf000) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 4m36.86842789s ago: executing program 33 (id=1210): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x35ddf000) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 1m31.845009512s ago: executing program 5 (id=2464): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}}, 0x14}}, 0x25c782929a2a6532) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0xb}, &(0x7f0000000040)=0x8) 1m31.50070137s ago: executing program 5 (id=2465): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0000891f0180c200000ebbbbbbbbbbbb0800450000210067e000032f"], 0x80) 1m30.443606256s ago: executing program 5 (id=2467): r0 = syz_io_uring_setup(0x7f3f, &(0x7f0000000000)={0x0, 0xb8d0, 0x40, 0x2, 0xbe}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x2000003, 0x12, r0, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) 1m29.338651498s ago: executing program 5 (id=2470): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m28.934358245s ago: executing program 5 (id=2472): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r2 = socket(0x2d, 0x2, 0x0) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, r1, 0xc}, 0x10) r3 = socket(0x2d, 0x2, 0x0) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) 1m22.12523769s ago: executing program 5 (id=2500): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'wrr\x00', 0x0, 0x5, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m21.313899578s ago: executing program 34 (id=2500): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'wrr\x00', 0x0, 0x5, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 12.917918384s ago: executing program 2 (id=2723): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) 12.508429002s ago: executing program 2 (id=2727): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="5c0000000206010200000000000000000c0000090c00078008001240001600000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a6970"], 0x5c}}, 0x0) 10.826865959s ago: executing program 2 (id=2731): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000090605000000000000000000060000000900020073797a3000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) close_range(r0, 0xffffffffffffffff, 0x0) 6.029000045s ago: executing program 3 (id=2752): r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='coredump_filter\x00') syz_usb_disconnect(0xffffffffffffffff) write$sysctl(r2, &(0x7f0000000200)='5\x00', 0x2) 3.69673475s ago: executing program 1 (id=2755): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000300)='./file2\x00', 0x133) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') 3.072759765s ago: executing program 2 (id=2756): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4d, 0x1000007, 0x3d, 0x5, 0xfffc, 0x7f, 0x4002004c1, 0xa, 0x5, 0x0, 0x40000000800001, 0x7, 0x402, 0xb, 0x9, 0x10000008d], 0xddcd0000, 0x100000}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x40002, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 2.91705894s ago: executing program 1 (id=2757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4000009c, 0x0, 0x1}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.881025526s ago: executing program 3 (id=2758): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000380)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 2.683605742s ago: executing program 2 (id=2760): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2.673940379s ago: executing program 1 (id=2761): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x150, 0x10, 0x1, 0x1, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x1234, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x34ff, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, '000102030405060708090a0b0c0d0e0f00010203'}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newpolicy={0xfc, 0x13, 0x1, 0x2, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@empty, 0x34ff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x11) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000300)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000500)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f", 0x40, 0x4000000, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 2.576466385s ago: executing program 3 (id=2762): sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x34, r2, 0x205, 0xffffffec, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}}, 0x0) 2.398430019s ago: executing program 1 (id=2763): r0 = socket$nl_generic(0x10, 0x3, 0x10) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x30000001}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) epoll_pwait2(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) 2.31461311s ago: executing program 6 (id=2764): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x101c80) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x9) close(r0) 1.824663322s ago: executing program 3 (id=2765): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x100000000000a3) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x9a) 1.710514886s ago: executing program 6 (id=2766): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp(0xa, 0x2, 0x3a) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r2}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 1.520623931s ago: executing program 3 (id=2767): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 1.439107156s ago: executing program 6 (id=2768): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "bc86299ab62e97b6", "2125e44cdf02000000000000003297f0", "8fc203e0", "c40330604dc13bd4"}, 0x28) ioctl$int_in(r0, 0x5421, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.316888994s ago: executing program 1 (id=2769): eventfd(0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b2, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1ffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c2e, 0x80020, 0x0, 0x312}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 1.316410272s ago: executing program 2 (id=2770): r0 = socket(0x2, 0x1, 0x6) bind(r0, &(0x7f00000000c0)=@in={0x2, 0x3039, @loopback}, 0x10) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='port\x00', &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1.224397328s ago: executing program 3 (id=2771): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0x3, @dev={0xfe, 0x80, '\x00', 0x10}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.180393801s ago: executing program 6 (id=2772): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x32600) write$P9_RRENAME(r1, &(0x7f0000000300)={0x7, 0x15, 0x1}, 0x34000) shutdown(r0, 0x0) 334.904425ms ago: executing program 6 (id=2773): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000012700)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf25010000ca000000000c41000000140014"], 0x30}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000) 10.476161ms ago: executing program 6 (id=2774): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 0s ago: executing program 1 (id=2775): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, 0x0, 0x0, 0x8000e5, 0x0, 0x0, 0x4, 0xe4}) kernel console output (not intermixed with test programs): devsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.721157][ T3349] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.641740][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.641762][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.793814][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 205.833999][ T7696] erspan0: entered promiscuous mode [ 205.845796][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 206.591035][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.591058][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.630203][ T5323] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 206.780133][ T5323] usb 4-1: Using ep0 maxpacket: 32 [ 206.806399][ T5323] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 206.806429][ T5323] usb 4-1: config 0 has no interface number 0 [ 206.875288][ T5323] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 206.875323][ T5323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.875345][ T5323] usb 4-1: Product: syz [ 206.875361][ T5323] usb 4-1: Manufacturer: syz [ 206.875376][ T5323] usb 4-1: SerialNumber: syz [ 206.918546][ T5323] usb 4-1: config 0 descriptor?? [ 206.931884][ T5323] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 207.264814][ T5323] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 207.318219][ T5323] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 207.545368][ T7708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.546478][ T7708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.795599][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 207.808052][ T5323] usb 4-1: USB disconnect, device number 7 [ 207.878586][ T5323] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 207.914897][ T5323] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 207.915932][ T5323] quatech2 4-1:0.51: device disconnected [ 208.588511][ T38] audit: type=1326 audit(1785262862.135:6): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7742 comm="syz.1.731" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3742a3de99 code=0x0 [ 211.580227][ T5699] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 211.732463][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.732499][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.732536][ T5699] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 211.732560][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.819667][ T5699] usb 2-1: config 0 descriptor?? [ 212.177055][ T7807] input: syz1 as /devices/virtual/input/input9 [ 212.486543][ T5699] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 212.486581][ T5699] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 212.486608][ T5699] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 212.486635][ T5699] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 212.486661][ T5699] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 212.581117][ T5699] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 212.835649][ T5699] playstation 0003:054C:0DF2.0004: Invalid reportID received, expected 32 got 220 [ 212.835679][ T5699] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense firmware info: -22 [ 212.835732][ T5699] playstation 0003:054C:0DF2.0004: Failed to get firmware info from DualSense [ 212.835750][ T5699] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 212.911765][ T5699] playstation 0003:054C:0DF2.0004: probe with driver playstation failed with error -22 [ 213.111109][ T37] usb 2-1: USB disconnect, device number 4 [ 214.259130][ T7855] netlink: 56 bytes leftover after parsing attributes in process `syz.3.764'. [ 216.645020][ T7913] Invalid argument reading file caps for ./file0 [ 216.926703][ T7923] netlink: 'syz.1.786': attribute type 1 has an invalid length. [ 217.732399][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'. [ 220.021792][ T37] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 220.185288][ T37] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 220.185320][ T37] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 220.189856][ T37] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 220.189886][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.189907][ T37] usb 4-1: Product: syz [ 220.189921][ T37] usb 4-1: Manufacturer: syz [ 220.189936][ T37] usb 4-1: SerialNumber: syz [ 220.273061][ T37] usb 4-1: config 0 descriptor?? [ 220.489548][ T8025] syzkaller1: entered promiscuous mode [ 220.489575][ T8025] syzkaller1: entered allmulticast mode [ 220.913986][ T37] mos7840 4-1:0.0: required endpoints missing [ 220.957338][ T37] usb 4-1: USB disconnect, device number 8 [ 221.577288][ T8050] Bluetooth: hci4: Frame reassembly failed (-84) [ 221.667998][ T4906] Bluetooth: hci2: unexpected event for opcode 0x2043 [ 221.838275][ T7412] Bluetooth: hci4: Frame reassembly failed (-84) [ 221.850877][ T1170] Bluetooth: hci4: Frame reassembly failed (-84) [ 221.851133][ T1170] Bluetooth: hci4: Frame reassembly failed (-84) [ 221.873919][ T1170] Bluetooth: hci4: Frame reassembly failed (-84) [ 222.064656][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.825'. [ 222.327959][ T8071] loop5: detected capacity change from 0 to 7 [ 222.347617][ T8071] Dev loop5: unable to read RDB block 7 [ 222.347670][ T8071] loop5: unable to read partition table [ 222.347889][ T8071] loop5: partition table beyond EOD, truncated [ 222.347927][ T8071] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 222.453444][ T5796] Flush: task=udevd[5796] dev=loop5 state=2 [ 222.520169][ T5796] Teardown: task=udevd[5796] dev=loop5 state=2 [ 222.847233][ T38] audit: type=1326 audit(1785262876.395:7): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8079 comm="syz.3.834" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7f1fbde99 code=0x0 [ 223.504275][ T8104] pim6reg1: entered promiscuous mode [ 223.504307][ T8104] pim6reg1: entered allmulticast mode [ 223.760414][ T4906] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 224.035355][ T8112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.847'. [ 224.178450][ T8115] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 224.198916][ T8115] CPU: 0 UID: 0 PID: 8115 Comm: syz.1.849 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 224.198956][ T8115] Tainted: [L]=SOFTLOCKUP [ 224.198972][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 224.198995][ T8115] Call Trace: [ 224.199005][ T8115] [ 224.199015][ T8115] dump_stack_lvl+0xe8/0x150 [ 224.199053][ T8115] sysfs_create_dir_ns+0x271/0x2a0 [ 224.199082][ T8115] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 224.199112][ T8115] ? rt_spin_unlock+0x163/0x200 [ 224.199147][ T8115] kobject_add_internal+0x62c/0xce0 [ 224.199186][ T8115] kobject_add+0x163/0x240 [ 224.199214][ T8115] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 224.199248][ T8115] ? __pfx_kobject_add+0x10/0x10 [ 224.199281][ T8115] ? get_device_parent+0x370/0x3a0 [ 224.199306][ T8115] ? __pfx_klist_children_get+0x10/0x10 [ 224.199342][ T8115] device_add+0x3fa/0xb80 [ 224.199369][ T8115] tty_register_device_attr+0x422/0x950 [ 224.199404][ T8115] ? __pfx_tty_register_device_attr+0x10/0x10 [ 224.199437][ T8115] ? tty_port_init+0x140/0x1b0 [ 224.199463][ T8115] ? gsm_dlci_alloc+0x341/0x650 [ 224.199493][ T8115] gsm_activate_mux+0x110/0x2a0 [ 224.199526][ T8115] gsmld_ioctl+0x12d3/0x1930 [ 224.199559][ T8115] ? __pfx_gsmld_ioctl+0x10/0x10 [ 224.199596][ T8115] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 224.199638][ T8115] ? ldsem_down_read+0x12/0x40 [ 224.199680][ T8115] ? __pfx_gsmld_ioctl+0x10/0x10 [ 224.199703][ T8115] tty_ioctl+0x9c3/0xde0 [ 224.199726][ T8115] ? __pfx_tty_ioctl+0x10/0x10 [ 224.199749][ T8115] __se_sys_ioctl+0xff/0x170 [ 224.199783][ T8115] do_syscall_64+0x17b/0x530 [ 224.199806][ T8115] ? irqentry_exit+0x10f/0x8f0 [ 224.199827][ T8115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.199851][ T8115] ? clear_bhb_loop+0x40/0x90 [ 224.199879][ T8115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.199901][ T8115] RIP: 0033:0x7f3742a3de99 [ 224.199933][ T8115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.199953][ T8115] RSP: 002b:00007f3740c75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.200012][ T8115] RAX: ffffffffffffffda RBX: 00007f3742cc6090 RCX: 00007f3742a3de99 [ 224.200030][ T8115] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 224.200044][ T8115] RBP: 00007f3742ad3eaf R08: 0000000000000000 R09: 0000000000000000 [ 224.200057][ T8115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.200070][ T8115] R13: 00007f3742cc6128 R14: 00007f3742cc6090 R15: 00007ffd48a6b028 [ 224.200104][ T8115] [ 224.209313][ T8115] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 224.348237][ T8119] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 226.302203][ T8157] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 226.310270][ T8157] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.310496][ T8157] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 226.310655][ T8157] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 226.413410][ T8157] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 226.653784][ T8168] netlink: 44 bytes leftover after parsing attributes in process `syz.4.869'. [ 228.185178][ T8205] netlink: 20 bytes leftover after parsing attributes in process `syz.4.885'. [ 228.330267][ T4906] Bluetooth: hci0: command 0x0c1a tx timeout [ 228.331192][ T5601] Bluetooth: hci3: command 0x0c1a tx timeout [ 228.331227][ T5601] Bluetooth: hci2: command 0x0c1a tx timeout [ 228.934721][ T8225] netlink: 'syz.1.894': attribute type 1 has an invalid length. [ 228.934745][ T8225] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.894'. [ 229.094222][ T8227] syzkaller1: entered promiscuous mode [ 229.094249][ T8227] syzkaller1: entered allmulticast mode [ 229.163537][ T1009] kernel read not supported for file /kmsg (pid: 1009 comm: kworker/1:2) [ 229.476181][ T8241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.900'. [ 229.476226][ T8241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.900'. [ 229.828252][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.905'. [ 230.401870][ T4906] Bluetooth: hci0: command 0x0c1a tx timeout [ 231.135218][ T8284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.481027][ T4906] Bluetooth: hci0: command 0x0c1a tx timeout [ 233.295942][ T8344] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 233.297387][ T8344] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 233.297438][ T8344] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 233.370955][ T8344] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 233.585306][ T8344] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 235.143933][ T12] smbdirect: ib_dev[syz2] removed [ 235.652032][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.964'. [ 235.726573][ T8388] vlan1: entered promiscuous mode [ 235.726834][ T8388] vlan1: entered allmulticast mode [ 235.726850][ T8388] veth0_vlan: entered allmulticast mode [ 236.834253][ T38] audit: type=1800 audit(1785262890.295:8): pid=8417 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.977" name="file1" dev="tmpfs" ino=1355 res=0 errno=0 [ 237.357637][ T8433] dummy0: entered allmulticast mode [ 237.415644][ T8432] dummy0: left allmulticast mode [ 237.625563][ T8439] netlink: 72 bytes leftover after parsing attributes in process `syz.1.988'. [ 238.110190][ T37] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 238.270119][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 238.275398][ T37] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.278148][ T37] usb 2-1: config 3 has an invalid interface number: 71 but max is 0 [ 238.278175][ T37] usb 2-1: config 3 has no interface number 0 [ 238.278222][ T37] usb 2-1: config 3 interface 71 has no altsetting 0 [ 238.320431][ T37] usb 2-1: New USB device found, idVendor=1546, idProduct=1104, bcdDevice=b6.0d [ 238.320462][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.320484][ T37] usb 2-1: Product: syz [ 238.320500][ T37] usb 2-1: Manufacturer: syz [ 238.320515][ T37] usb 2-1: SerialNumber: syz [ 238.731396][ T37] cdc_ether 2-1:3.71: invalid descriptor buffer length [ 238.731426][ T37] usb 2-1: No union descriptors [ 238.756612][ T37] usb 2-1: USB disconnect, device number 5 [ 239.357456][ T8472] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1002'. [ 239.744248][ T8485] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 242.281347][ T5323] libceph: connect (2)127.0.0.1:6789 error -101 [ 242.281549][ T5323] libceph: ceph_tcp_connect failed: -101 [ 242.281568][ T5323] libceph: mon0 (2)127.0.0.1:6789 connect error [ 242.294155][ T5323] libceph: connect (2)127.0.0.1:6789 error -101 [ 242.294617][ T5323] libceph: ceph_tcp_connect failed: -101 [ 242.294668][ T5323] libceph: mon0 (2)127.0.0.1:6789 connect error [ 242.674013][ T5691] libceph: connect (2)127.0.0.1:6789 error -101 [ 242.674194][ T5691] libceph: ceph_tcp_connect failed: -101 [ 242.674211][ T5691] libceph: mon0 (2)127.0.0.1:6789 connect error [ 242.998000][ T8546] ceph: No mds server is up or the cluster is laggy [ 243.180768][ T5691] libceph: connect (2)127.0.0.1:6789 error -101 [ 243.180939][ T5691] libceph: ceph_tcp_connect failed: -101 [ 243.180956][ T5691] libceph: mon0 (2)127.0.0.1:6789 connect error [ 243.232137][ T8574] 9p: Unknown uid 00000000004294967295 [ 245.387901][ T8641] netlink: 408 bytes leftover after parsing attributes in process `syz.2.1080'. [ 247.752459][ T8694] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1102'. [ 248.879753][ T8710] syz.4.1108 (8710) used greatest stack depth: 16704 bytes left [ 249.460142][ T37] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 249.540340][ T32] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 249.693059][ T37] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.693110][ T37] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 249.693141][ T37] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 80, setting to 64 [ 249.695934][ T37] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.695965][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.695986][ T37] usb 3-1: Product: syz [ 249.696001][ T37] usb 3-1: Manufacturer: syz [ 249.696017][ T37] usb 3-1: SerialNumber: syz [ 249.778612][ T37] cdc_ncm 3-1:1.0: skipping garbage [ 249.804486][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.804525][ T32] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 249.833778][ T32] usb 4-1: New USB device found, idVendor=249c, idProduct=9001, bcdDevice= 0.40 [ 249.833810][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.833830][ T32] usb 4-1: Product: syz [ 249.834071][ T32] usb 4-1: Manufacturer: syz [ 249.834088][ T32] usb 4-1: SerialNumber: syz [ 249.999454][ T8727] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 249.999579][ T8727] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 250.212860][ T32] usb 4-1: USB disconnect, device number 9 [ 250.422210][ T8749] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 250.422239][ T8749] CPU: 0 UID: 0 PID: 8749 Comm: syz.4.1124 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 250.422270][ T8749] Tainted: [L]=SOFTLOCKUP [ 250.422278][ T8749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 250.422307][ T8749] Call Trace: [ 250.422316][ T8749] [ 250.422325][ T8749] dump_stack_lvl+0xe8/0x150 [ 250.422370][ T8749] sysfs_create_dir_ns+0x271/0x2a0 [ 250.422397][ T8749] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 250.422428][ T8749] ? rt_spin_unlock+0x163/0x200 [ 250.422463][ T8749] kobject_add_internal+0x62c/0xce0 [ 250.422498][ T8749] kobject_add+0x163/0x240 [ 250.422523][ T8749] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 250.422555][ T8749] ? __pfx_kobject_add+0x10/0x10 [ 250.422587][ T8749] ? get_device_parent+0x370/0x3a0 [ 250.422610][ T8749] ? __pfx_klist_children_get+0x10/0x10 [ 250.422647][ T8749] device_add+0x3fa/0xb80 [ 250.422673][ T8749] tty_register_device_attr+0x422/0x950 [ 250.422705][ T8749] ? __pfx_tty_register_device_attr+0x10/0x10 [ 250.422736][ T8749] ? tty_port_init+0x140/0x1b0 [ 250.422760][ T8749] ? gsm_dlci_alloc+0x341/0x650 [ 250.422788][ T8749] gsm_activate_mux+0x110/0x2a0 [ 250.422818][ T8749] gsmld_ioctl+0x12d3/0x1930 [ 250.422849][ T8749] ? __pfx_gsmld_ioctl+0x10/0x10 [ 250.422885][ T8749] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 250.422925][ T8749] ? ldsem_down_read+0x12/0x40 [ 250.422962][ T8749] ? __pfx_gsmld_ioctl+0x10/0x10 [ 250.422984][ T8749] tty_ioctl+0x9c3/0xde0 [ 250.423008][ T8749] ? __pfx_tty_ioctl+0x10/0x10 [ 250.423029][ T8749] __se_sys_ioctl+0xff/0x170 [ 250.423061][ T8749] do_syscall_64+0x17b/0x530 [ 250.423085][ T8749] ? irqentry_exit+0x10f/0x8f0 [ 250.423106][ T8749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.423129][ T8749] ? clear_bhb_loop+0x40/0x90 [ 250.423155][ T8749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.423176][ T8749] RIP: 0033:0x7f7401a3de99 [ 250.423196][ T8749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.423214][ T8749] RSP: 002b:00007f73ffc75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.423237][ T8749] RAX: ffffffffffffffda RBX: 00007f7401cc6090 RCX: 00007f7401a3de99 [ 250.423253][ T8749] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 250.423266][ T8749] RBP: 00007f7401ad3eaf R08: 0000000000000000 R09: 0000000000000000 [ 250.423279][ T8749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.423291][ T8749] R13: 00007f7401cc6128 R14: 00007f7401cc6090 R15: 00007ffda5887b08 [ 250.423323][ T8749] [ 250.434340][ T8749] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 250.627908][ T8727] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 250.628165][ T8727] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 250.836316][ T37] cdc_ncm 3-1:1.0: bind() failure [ 250.894353][ T37] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 250.895330][ T37] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 250.927607][ T37] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 250.951423][ T37] usb 3-1: USB disconnect, device number 7 [ 251.688614][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 251.688666][ T8761] erspan0: entered promiscuous mode [ 251.707432][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 252.059875][ T38] audit: type=1326 audit(1785262905.605:9): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8763 comm="syz.1.1130" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3742a3de99 code=0x7fc00000 [ 252.243687][ T8772] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 252.693698][ T38] audit: type=1326 audit(1785262906.245:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8763 comm="syz.1.1130" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3742a3de99 code=0x7fc00000 [ 253.193239][ T8793] sit0: entered allmulticast mode [ 253.247720][ T8793] sit0: entered promiscuous mode [ 254.574675][ T8829] netlink: 'syz.2.1160': attribute type 26 has an invalid length. [ 255.154048][ T38] audit: type=1326 audit(1785262908.705:11): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8843 comm="syz.3.1167" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7f1fbde99 code=0x0 [ 255.847362][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.847477][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.827937][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1183'. [ 256.828039][ T8881] bridge_slave_1: left allmulticast mode [ 256.828069][ T8881] bridge_slave_1: left promiscuous mode [ 256.828565][ T8881] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.863129][ T8877] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.1181'. [ 256.863170][ T8877] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 257.071504][ T8881] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.461237][ T7040] do_umount: task=syz-executor[7040] propagate_mount_busy()!=0 [ 258.461528][ T7040] do_umount: task=syz-executor[7040] propagate_mount_busy()!=0 [ 259.747122][ T8944] netlink: 'syz.2.1214': attribute type 8 has an invalid length. [ 259.935167][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.983781][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.990830][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.012567][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.019017][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.162861][ T4906] Bluetooth: hci0: command tx timeout [ 262.813214][ T8948] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.813761][ T8948] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.814062][ T8948] bridge_slave_0: entered allmulticast mode [ 262.818365][ T8948] bridge_slave_0: entered promiscuous mode [ 262.827250][ T8948] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.828258][ T8948] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.829237][ T8948] bridge_slave_1: entered allmulticast mode [ 262.837786][ T8948] bridge_slave_1: entered promiscuous mode [ 263.028796][ T8948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.068598][ T8948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.235962][ T8948] team0: Port device team_slave_0 added [ 263.246613][ T8948] team0: Port device team_slave_1 added [ 263.362349][ T8948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.362367][ T8948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.362395][ T8948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.366970][ T8948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.366986][ T8948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.367015][ T8948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.707804][ T9048] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1249'. [ 263.709097][ T9048] openvswitch: netlink: Message has 512 unknown bytes. [ 264.037173][ T8948] hsr_slave_0: entered promiscuous mode [ 264.048573][ T8948] hsr_slave_1: entered promiscuous mode [ 264.060776][ T8948] debugfs: 'hsr0' already exists in 'hsr' [ 264.060805][ T8948] Cannot create hsr debugfs directory [ 264.250275][ T4906] Bluetooth: hci0: command tx timeout [ 266.136836][ T8948] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 266.213734][ T8948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.243845][ T8948] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 266.321348][ T4906] Bluetooth: hci0: command tx timeout [ 266.366227][ T8948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 266.376323][ T8948] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 266.484646][ T8948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 266.509266][ T8948] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 266.582493][ T8948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.622989][ T8948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.826252][ T8948] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.933810][ T7412] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.933985][ T7412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.058297][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.058411][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.405201][ T4906] Bluetooth: hci0: command tx timeout [ 269.187297][ T9146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.187752][ T9146] batadv_slave_0: entered promiscuous mode [ 269.187776][ T9146] batadv_slave_0: entered allmulticast mode [ 270.256114][ T8948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.835369][ T9198] loop8: detected capacity change from 0 to 8 [ 270.931277][ T9198] Dev loop8: unable to read RDB block 8 [ 270.931324][ T9198] loop8: unable to read partition table [ 270.931639][ T9198] loop8: partition table beyond EOD, truncated [ 270.931869][ T9198] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 270.993559][ T5796] Flush: task=udevd[5796] dev=loop8 state=2 [ 271.090632][ T5796] Teardown: task=udevd[5796] dev=loop8 state=2 [ 271.425436][ T9204] input: syz1 as /devices/virtual/input/input10 [ 271.425473][ T9204] input: failed to attach handler leds to device input10, error: -6 [ 271.476179][ T8948] veth0_vlan: entered promiscuous mode [ 271.573822][ T8948] veth1_vlan: entered promiscuous mode [ 271.718696][ T8948] veth0_macvtap: entered promiscuous mode [ 271.742704][ T8948] veth1_macvtap: entered promiscuous mode [ 271.832393][ T8948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.884347][ T8948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.923866][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.924959][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.925233][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.925274][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.020438][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 272.116304][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 273.464149][ T7406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.464171][ T7406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.770226][ T9220] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 274.032581][ T9220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.032615][ T9220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.032653][ T9220] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 274.032670][ T9220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.045062][ T9220] usb 2-1: config 0 descriptor?? [ 274.306197][ T495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.306220][ T495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.607008][ T9220] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 274.607059][ T9220] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 274.607088][ T9220] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 274.607117][ T9220] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 274.607146][ T9220] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 274.736497][ T9220] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 274.799772][ T9220] playstation 0003:054C:0DF2.0005: Invalid byte count transferred, expected 20 got 0 [ 274.799807][ T9220] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense pairing info: -22 [ 274.799865][ T9220] playstation 0003:054C:0DF2.0005: Failed to get MAC address from DualSense [ 274.799882][ T9220] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 274.998229][ T9220] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -22 [ 275.248370][ T9220] usb 2-1: USB disconnect, device number 6 [ 275.558270][ T1300] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.672760][ T5601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.708724][ T5601] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.726322][ T5601] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.757634][ T5601] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.758562][ T5601] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.264794][ T9245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1326'. [ 277.001791][ T1300] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.669068][ T1300] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.923720][ T4906] Bluetooth: hci2: command tx timeout [ 278.387847][ T1300] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.009592][ T4906] Bluetooth: hci2: command tx timeout [ 280.465343][ T9321] pimreg: entered allmulticast mode [ 280.611339][ T9323] dvmrp1: entered allmulticast mode [ 281.053906][ T1300] bridge_slave_1: left allmulticast mode [ 281.053949][ T1300] bridge_slave_1: left promiscuous mode [ 281.054250][ T1300] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.244896][ T1300] bridge_slave_0: left allmulticast mode [ 281.244934][ T1300] bridge_slave_0: left promiscuous mode [ 281.245222][ T1300] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.512860][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'. [ 282.085773][ T4906] Bluetooth: hci2: command tx timeout [ 282.810985][ T1300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.890846][ T1300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.913187][ T1300] bond0 (unregistering): Released all slaves [ 282.940226][ T5699] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 282.976910][ T9357] batadv_slave_0: entered promiscuous mode [ 283.000503][ T9355] batadv_slave_0: left promiscuous mode [ 283.102585][ T5699] usb 2-1: Using ep0 maxpacket: 16 [ 283.117434][ T5699] usb 2-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 283.117462][ T5699] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.140150][ T5699] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.140184][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.140205][ T5699] usb 2-1: Product: syz [ 283.140220][ T5699] usb 2-1: Manufacturer: syz [ 283.140237][ T5699] usb 2-1: SerialNumber: syz [ 283.417589][ T5699] usb 2-1: 0:2 : does not exist [ 283.419389][ T5699] usb 2-1: unit 127 not found! [ 283.659786][ T5699] usb 2-1: USB disconnect, device number 7 [ 284.172530][ T4906] Bluetooth: hci2: command tx timeout [ 284.701782][ T9232] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.702251][ T9232] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.702577][ T9232] bridge_slave_0: entered allmulticast mode [ 284.731739][ T9232] bridge_slave_0: entered promiscuous mode [ 285.762451][ T9232] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.762806][ T9232] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.763125][ T9232] bridge_slave_1: entered allmulticast mode [ 285.769482][ T9232] bridge_slave_1: entered promiscuous mode [ 285.828711][ T5252] 8021q: adding VLAN 0 to HW filter on device eth5 [ 286.167486][ T9232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.183918][ T9232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.635337][ T9232] team0: Port device team_slave_0 added [ 286.669119][ T9232] team0: Port device team_slave_1 added [ 286.920140][ T1009] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 287.088735][ T9437] blktrace: Concurrent blktraces are not allowed on loop2 [ 287.124035][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.124053][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.124083][ T9232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.198001][ T1009] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 287.213145][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.213162][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.213185][ T9232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.550106][ T1300] hsr_slave_0: left promiscuous mode [ 287.590162][ T1300] hsr_slave_1: left promiscuous mode [ 287.597255][ T1300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.597287][ T1300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.667712][ T1300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.667739][ T1300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.749681][ T5692] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 287.922170][ T9425] ceph: No mds server is up or the cluster is laggy [ 288.678210][ T1300] veth1_macvtap: left promiscuous mode [ 288.711441][ T1300] veth0_macvtap: left promiscuous mode [ 288.711984][ T1300] veth1_vlan: left promiscuous mode [ 288.712047][ T1300] veth0_vlan: left promiscuous mode [ 290.136562][ T1300] team0 (unregistering): Port device team_slave_1 removed [ 290.200722][ T1300] team0 (unregistering): Port device team_slave_0 removed [ 290.449654][ T5252] 8021q: adding VLAN 0 to HW filter on device eth6 [ 290.852249][ T9232] hsr_slave_0: entered promiscuous mode [ 290.903758][ T9232] hsr_slave_1: entered promiscuous mode [ 290.905563][ T9232] debugfs: 'hsr0' already exists in 'hsr' [ 290.905586][ T9232] Cannot create hsr debugfs directory [ 291.474371][ T9497] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1408'. [ 293.169094][ T9534] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1419'. [ 293.498548][ T5252] 8021q: adding VLAN 0 to HW filter on device eth7 [ 297.421062][ T9232] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 297.482750][ T9232] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.484453][ T9232] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 297.567455][ T9232] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.568602][ T9232] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 297.603453][ T9232] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.604712][ T9232] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 297.880434][ T9232] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 298.569495][ T9232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.642804][ T9661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1446'. [ 298.698764][ T9232] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.779466][ T495] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.779716][ T495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.909605][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.927393][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.114160][ T9704] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1458'. [ 300.114190][ T9704] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1458'. [ 300.787063][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1463'. [ 301.481544][ T9232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.918839][ T9232] veth0_vlan: entered promiscuous mode [ 302.063819][ T9232] veth1_vlan: entered promiscuous mode [ 302.714220][ T9232] veth0_macvtap: entered promiscuous mode [ 302.796190][ T9232] veth1_macvtap: entered promiscuous mode [ 302.847346][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1472'. [ 303.128061][ T9232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.213880][ T9232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.262452][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.263426][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.263469][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.263508][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.597838][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 304.878607][ T3349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.878628][ T3349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.358063][ T1308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.358084][ T1308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.182422][ T9849] Bluetooth: MGMT ver 1.23 [ 307.333960][ T9847] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 307.419153][ T9847] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 307.419271][ T9847] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 307.573813][ T9847] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 308.640792][ T5699] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 308.796940][ T5699] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.796976][ T5699] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.797001][ T5699] usb 6-1: config 1 interface 0 has no altsetting 0 [ 308.843623][ T5699] usb 6-1: string descriptor 0 read error: -22 [ 308.843772][ T5699] usb 6-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 308.843798][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.280215][ T5601] Bluetooth: hci0: command 0x0c1a tx timeout [ 309.321866][ T4906] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 309.360150][ T4906] Bluetooth: hci3: command 0x0c1a tx timeout [ 309.393876][ T5699] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 309.393915][ T5699] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 309.393943][ T5699] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 309.395762][ T5699] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 309.395799][ T5699] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 309.395828][ T5699] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 309.395855][ T5699] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 309.395880][ T5699] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 309.395907][ T5699] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 309.395935][ T5699] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 309.440234][ T4906] Bluetooth: hci2: command 0x0c1a tx timeout [ 309.607696][ T9912] tipc: Started in network mode [ 309.607737][ T9912] tipc: Node identity 785634120000000021436587, cluster identity 4711 [ 309.686910][ T5699] hid_mf 0003:0079:1801.0006: hidraw0: USB HID vf.ff Device [HID 0079:1801] on usb-dummy_hcd.5-1/input0 [ 309.686945][ T5699] hid_mf 0003:0079:1801.0006: Invalid report, this should never happen! [ 309.686977][ T5699] hid_mf 0003:0079:1801.0006: Force feedback init failed. [ 309.848601][ T9913] tipc: Enabling of bearer rejected, failed to enable media [ 310.004344][ T5699] usb 6-1: USB disconnect, device number 2 [ 311.538443][ T4906] Bluetooth: hci2: command 0x0c1a tx timeout [ 313.600809][ T4906] Bluetooth: hci2: command 0x0c1a tx timeout [ 313.740244][T10009] Zero length message leads to an empty skb [ 313.760564][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1547'. [ 314.020160][ T5692] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 314.256802][ T5692] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.256835][ T5692] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.265284][ T5692] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 314.265368][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 314.265414][ T5692] usb 2-1: SerialNumber: syz [ 314.575672][ T5692] usb 2-1: 0:2 : does not exist [ 314.865046][ T5692] usb 2-1: USB disconnect, device number 8 [ 315.073230][T10022] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1552'. [ 315.107105][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.873038][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803cf62800: rx timeout, send abort [ 316.877814][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803cf62800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 317.295280][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.295406][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.663545][ T5699] hid_parser_main: 4002 callbacks suppressed [ 317.663572][ T5699] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 317.708328][ T5699] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 318.981574][T10114] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1587'. [ 319.070809][T10114] gretap0: entered promiscuous mode [ 319.102850][T10126] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1587'. [ 319.239605][T10126] 0{X: renamed from gretap0 [ 319.343924][T10126] 0{X: left promiscuous mode [ 319.343950][T10126] 0{X: entered allmulticast mode [ 319.398378][T10132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1592'. [ 319.422182][T10126] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 320.810136][ T9220] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 320.967969][ T9220] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 320.968001][ T9220] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.968021][ T9220] usb 6-1: Product: syz [ 320.968036][ T9220] usb 6-1: Manufacturer: syz [ 320.968051][ T9220] usb 6-1: SerialNumber: syz [ 321.626180][ T9220] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 321.919855][ T37] kernel read not supported for file /mdstat (pid: 37 comm: kworker/1:1) [ 322.157039][ T5692] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 322.338969][ T5692] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 322.339006][ T5692] usb 3-1: config 0 has no interface number 0 [ 322.339526][ T5692] usb 3-1: config 0 interface 41 has no altsetting 0 [ 322.391724][ T5692] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 322.391765][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.391788][ T5692] usb 3-1: Product: syz [ 322.391803][ T5692] usb 3-1: Manufacturer: syz [ 322.391817][ T5692] usb 3-1: SerialNumber: syz [ 322.444961][ T5692] usb 3-1: config 0 descriptor?? [ 323.298559][ T5692] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 323.535630][ T5692] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 323.535661][ T5692] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 323.535916][ T5692] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 323.605218][ T5692] usb 3-1: USB disconnect, device number 8 [ 323.833291][ T1009] usb 6-1: USB disconnect, device number 3 [ 323.985404][ T1009] usblp0: removed [ 324.583238][T10237] netlink: 'syz.1.1634': attribute type 1 has an invalid length. [ 324.583263][T10237] netlink: 'syz.1.1634': attribute type 4 has an invalid length. [ 324.583278][T10237] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1634'. [ 325.698109][T10259] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AƴI %s [ 326.572211][ T1009] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 326.720091][ T1009] usb 3-1: Using ep0 maxpacket: 32 [ 326.723770][ T1009] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 326.726979][ T1009] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 326.727011][ T1009] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 326.727033][ T1009] usb 3-1: Product: syz [ 326.727048][ T1009] usb 3-1: Manufacturer: syz [ 326.727063][ T1009] usb 3-1: SerialNumber: syz [ 326.840440][ T1009] usb 3-1: config 0 descriptor?? [ 326.842162][T10271] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 326.845977][ T1009] hub 3-1:0.0: bad descriptor, ignoring hub [ 326.846016][ T1009] hub 3-1:0.0: probe with driver hub failed with error -5 [ 327.215713][ T9] usb 3-1: USB disconnect, device number 9 [ 327.561445][T10294] netlink: 'syz.5.1657': attribute type 19 has an invalid length. [ 327.753987][ T1009] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 327.770182][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 327.906523][ T1009] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 327.906558][ T1009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.906580][ T1009] usb 4-1: Product: syz [ 327.906596][ T1009] usb 4-1: Manufacturer: syz [ 327.906611][ T1009] usb 4-1: SerialNumber: syz [ 327.950972][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 327.955516][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 327.955915][ T1009] usb 4-1: config 0 descriptor?? [ 327.963898][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 327.963927][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 327.963949][ T9] usb 3-1: Product: syz [ 327.963964][ T9] usb 3-1: Manufacturer: syz [ 327.963979][ T9] usb 3-1: SerialNumber: syz [ 328.049704][ T9] usb 3-1: config 0 descriptor?? [ 328.069577][T10271] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 328.099099][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 328.099140][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 328.428480][ T1009] usb 4-1: Firmware: major: 141, minor: 82, hardware type: UNKNOWN (66) [ 328.439535][ T9] usb 3-1: USB disconnect, device number 10 [ 328.636217][ T1009] usb 4-1: Read permanent extended address 5e:f3:a1:e4:2e:ca:73:95 from device [ 328.636245][ T1009] usb 4-1: atusb_probe: initialization failed, error = -524 [ 328.692671][ T1009] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 328.893367][ T9220] usb 4-1: USB disconnect, device number 10 [ 329.848699][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 330.654668][ T1009] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 330.872772][ T1009] usb 2-1: too many endpoints for config 1 interface 0 altsetting 3: 65, using maximum allowed: 30 [ 330.872865][ T1009] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 330.872896][ T1009] usb 2-1: config 1 interface 0 has no altsetting 0 [ 330.877579][ T1009] usb 2-1: string descriptor 0 read error: -22 [ 330.877728][ T1009] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.40 [ 330.877753][ T1009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.423161][ T1009] saitek 0003:06A3:0CFA.0008: ignoring exceeding usage max [ 331.428298][ T1009] saitek 0003:06A3:0CFA.0008: usage index exceeded [ 331.428322][ T1009] saitek 0003:06A3:0CFA.0008: item 0 1 2 0 parsing failed [ 331.429111][ T1009] saitek 0003:06A3:0CFA.0008: parse failed [ 331.429226][ T1009] saitek 0003:06A3:0CFA.0008: probe with driver saitek failed with error -22 [ 331.649393][ T1009] usb 2-1: USB disconnect, device number 9 [ 334.030828][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'. [ 334.367518][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029e2c800: rx timeout, send abort [ 334.373971][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888029e2c800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 334.640984][ T32] libceph: connect (1)[c::]:6789 error -101 [ 334.641167][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 334.642277][ T32] libceph: connect (1)[c::]:6789 error -101 [ 334.642412][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 334.700508][ T32] libceph: connect (1)[c::]:6789 error -101 [ 334.700708][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 334.702173][ T32] libceph: connect (1)[c::]:6789 error -101 [ 334.704112][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 334.942826][ T32] libceph: connect (1)[c::]:6789 error -101 [ 334.942982][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 334.971611][ T1262] libceph: connect (1)[c::]:6789 error -101 [ 334.971818][ T1262] libceph: mon0 (1)[c::]:6789 connect error [ 335.432542][T10454] ceph: No mds server is up or the cluster is laggy [ 335.441431][T10450] ceph: No mds server is up or the cluster is laggy [ 335.485527][ T32] libceph: connect (1)[c::]:6789 error -101 [ 335.485717][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 335.504953][ T32] libceph: connect (1)[c::]:6789 error -101 [ 335.505169][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 335.863702][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1731'. [ 337.778678][T10526] zero sized request [ 338.444937][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1758'. [ 338.444969][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1758'. [ 338.657906][T10552] kernel read not supported for file /file0 (pid: 10552 comm: syz.1.1760) [ 338.658192][ T38] audit: type=1800 audit(1785263248.202:12): pid=10552 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.1760" name="file0" dev="mqueue" ino=28305 res=0 errno=0 [ 340.774381][T10605] input: syz0 as /devices/virtual/input/input11 [ 341.947845][T10642] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 344.139803][ T1308] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.150578][ T5699] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 344.310468][ T5699] usb 2-1: Using ep0 maxpacket: 32 [ 344.313840][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.313873][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.313912][ T5699] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 344.313937][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.369814][ T5699] usb 2-1: config 0 descriptor?? [ 344.493032][ T5699] hub 2-1:0.0: USB hub found [ 344.651726][ T5699] hub 2-1:0.0: 1 port detected [ 345.286818][ T5699] hub 2-1:0.0: activate --> -90 [ 345.738838][T10738] netlink: 134 bytes leftover after parsing attributes in process `syz.5.1828'. [ 345.739264][T10738] netlink: 134 bytes leftover after parsing attributes in process `syz.5.1828'. [ 345.788995][ T5699] usb 2-1: USB disconnect, device number 10 [ 345.883922][ T1308] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.951302][T10740] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1829'. [ 346.640947][ T1308] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.750414][ T9220] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 347.284949][ T9220] usb 4-1: unable to get BOS descriptor or descriptor too short [ 347.286048][ T9220] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 347.286088][ T9220] usb 4-1: can't read configurations, error -71 [ 347.875272][ T1308] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.181093][ T1308] bridge_slave_1: left allmulticast mode [ 350.181131][ T1308] bridge_slave_1: left promiscuous mode [ 350.285882][ T1308] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.482224][ T1308] bridge_slave_0: left allmulticast mode [ 350.482260][ T1308] bridge_slave_0: left promiscuous mode [ 350.482564][ T1308] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.767661][T10835] sg_write: data in/out 486848/136 bytes for SCSI command 0x0-- guessing data in; [ 350.767661][T10835] program syz.5.1866 not setting count and/or reply_len properly [ 351.120091][ T32] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 351.383116][ T32] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 351.383150][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.383171][ T32] usb 4-1: Product: syz [ 351.383186][ T32] usb 4-1: Manufacturer: syz [ 351.383201][ T32] usb 4-1: SerialNumber: syz [ 351.485227][ T32] usb 4-1: config 0 descriptor?? [ 351.819173][ T32] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 352.874511][ T32] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 352.896054][ T32] usb 4-1: USB disconnect, device number 13 [ 353.374235][ T1308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.451276][ T1308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.518185][ T1308] bond0 (unregistering): Released all slaves [ 353.625264][ T5252] 8021q: adding VLAN 0 to HW filter on device eth5 [ 354.945732][ T5692] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 355.130206][ T5692] usb 2-1: Using ep0 maxpacket: 16 [ 355.132954][ T5692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.132989][ T5692] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 355.133035][ T5692] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 355.133059][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.138700][ T5692] usb 2-1: config 0 descriptor?? [ 355.693171][ T5692] HID 045e:07da: Invalid code 65791 type 1 [ 355.765894][ T5692] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0009/input/input12 [ 355.931851][T10924] binder: 10923:10924 ioctl c0306201 200000000640 returned -22 [ 356.032199][ T5692] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 356.589217][ T32] usb 2-1: USB disconnect, device number 11 [ 356.674093][ T5692] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 356.754553][T10931] Process accounting resumed [ 356.856914][ T5692] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 356.856946][ T5692] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 356.856968][ T5692] usb 4-1: config 220 has no interface number 2 [ 356.857040][ T5692] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 356.857069][ T5692] usb 4-1: config 220 interface 0 has no altsetting 0 [ 356.857088][ T5692] usb 4-1: config 220 interface 76 has no altsetting 0 [ 356.857107][ T5692] usb 4-1: config 220 interface 1 has no altsetting 0 [ 356.932557][ T5692] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 356.932591][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.932612][ T5692] usb 4-1: Product: syz [ 356.932627][ T5692] usb 4-1: Manufacturer: syz [ 356.932642][ T5692] usb 4-1: SerialNumber: syz [ 357.349308][ T5692] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 357.349360][ T5692] uvcvideo 4-1:220.0: No valid video chain found. [ 357.349519][ T5692] usb 4-1: selecting invalid altsetting 0 [ 357.491455][ T5692] usb 4-1: selecting invalid altsetting 0 [ 357.491498][ T5692] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 357.603149][ T5692] usb 4-1: USB disconnect, device number 14 [ 357.877431][ T4906] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 358.104029][ T5252] 8021q: adding VLAN 0 to HW filter on device eth6 [ 360.280112][ T1308] hsr_slave_0: left promiscuous mode [ 360.333050][ T1308] hsr_slave_1: left promiscuous mode [ 360.347581][ T1308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.347613][ T1308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.528517][ T1308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.528556][ T1308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.686302][T11015] input: syz0 as /devices/virtual/input/input13 [ 360.730716][T11002] binder: 10998:11002 ioctl c0306201 200000001a80 returned -14 [ 361.153288][ T1308] veth1_macvtap: left promiscuous mode [ 361.167884][ T1308] veth0_macvtap: left promiscuous mode [ 361.169731][ T1308] veth1_vlan: left promiscuous mode [ 361.184051][ T1308] veth0_vlan: left promiscuous mode [ 362.480482][ T9220] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 362.631859][ T9220] usb 3-1: Using ep0 maxpacket: 16 [ 362.634132][ T9220] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 362.634166][ T9220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 362.637099][ T9220] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 362.637127][ T9220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.637152][ T9220] usb 3-1: Product: syz [ 362.637163][ T9220] usb 3-1: Manufacturer: syz [ 362.637173][ T9220] usb 3-1: SerialNumber: syz [ 362.766840][ T9220] usb 3-1: config 0 descriptor?? [ 362.810401][ T9220] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 362.810449][ T9220] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 363.436735][ T9220] em28xx 3-1:0.0: unknown em28xx chip ID (252) [ 363.637551][ T9220] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 363.817537][ T1308] team0 (unregistering): Port device team_slave_1 removed [ 363.840429][ T9220] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 363.840452][ T9220] em28xx 3-1:0.0: No AC97 audio processor [ 363.891844][ T9220] usb 3-1: USB disconnect, device number 11 [ 363.895244][ T9220] em28xx 3-1:0.0: Disconnecting em28xx [ 363.921673][ T1308] team0 (unregistering): Port device team_slave_0 removed [ 364.038407][ T9220] em28xx: Freeing device [ 364.324415][ T5252] 8021q: adding VLAN 0 to HW filter on device eth7 [ 365.030594][ T6344] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 365.252502][ T6344] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.252531][ T6344] usb 6-1: config 0 has no interfaces? [ 365.279323][ T6344] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 365.279355][ T6344] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 365.279377][ T6344] usb 6-1: Product: syz [ 365.279392][ T6344] usb 6-1: Manufacturer: syz [ 365.279422][ T6344] usb 6-1: SerialNumber: syz [ 365.319630][ T6344] usb 6-1: config 0 descriptor?? [ 365.902996][ T5692] usb 6-1: USB disconnect, device number 4 [ 366.012849][ T5252] 8021q: adding VLAN 0 to HW filter on device eth8 [ 366.621453][T11127] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1953'. [ 367.360672][ T6344] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 367.522164][ T6344] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 367.522198][ T6344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.522220][ T6344] usb 2-1: Product: syz [ 367.522236][ T6344] usb 2-1: Manufacturer: syz [ 367.522252][ T6344] usb 2-1: SerialNumber: syz [ 367.567869][ T6344] usb 2-1: config 0 descriptor?? [ 367.579469][ T6344] ch341 2-1:0.0: ch341-uart converter detected [ 367.961898][T11171] vxcan1: tx drop: invalid sa for name 0x0000000004000000 [ 368.608035][ T6344] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 368.836361][ T6344] usb 2-1: USB disconnect, device number 12 [ 368.885022][ T6344] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 368.886146][ T6344] ch341 2-1:0.0: device disconnected [ 370.718118][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1995'. [ 370.741456][T11228] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1994'. [ 370.748235][ T38] audit: type=1326 audit(1785263280.292:13): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11229 comm="syz.2.1996" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d288de99 code=0x7ffc0000 [ 370.749415][ T38] audit: type=1326 audit(1785263280.292:14): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11229 comm="syz.2.1996" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d288de99 code=0x7ffc0000 [ 370.826613][ T38] audit: type=1326 audit(1785263280.372:15): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11229 comm="syz.2.1996" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d288de99 code=0x7ffc0000 [ 370.839895][ T38] audit: type=1326 audit(1785263280.382:16): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11229 comm="syz.2.1996" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d288de99 code=0x7ffc0000 [ 370.840073][ T38] audit: type=1326 audit(1785263280.382:17): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11229 comm="syz.2.1996" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d288de99 code=0x7ffc0000 [ 370.840199][ T38] audit: type=1326 audit(1785263280.382:18): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11229 comm="syz.2.1996" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d288de99 code=0x7ffc0000 [ 370.840299][ T38] audit: type=1326 audit(1785263280.382:19): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11229 comm="syz.2.1996" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d288de99 code=0x7ffc0000 [ 370.840403][ T38] audit: type=1326 audit(1785263280.382:20): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11229 comm="syz.2.1996" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d288de99 code=0x7ffc0000 [ 370.849282][ T38] audit: type=1326 audit(1785263280.392:21): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11229 comm="syz.2.1996" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7d288de99 code=0x7ffc0000 [ 370.849460][ T38] audit: type=1326 audit(1785263280.392:22): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11229 comm="syz.2.1996" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d288de99 code=0x7ffc0000 [ 371.732286][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2005'. [ 372.701750][ T9220] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 372.851603][ T9220] usb 6-1: Using ep0 maxpacket: 32 [ 372.854474][ T9220] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 372.854499][ T9220] usb 6-1: config 0 interface 0 has no altsetting 0 [ 372.854522][ T9220] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 372.854539][ T9220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.944890][ T9220] usb 6-1: config 0 descriptor?? [ 373.121750][T11281] smpboot: CPU 1 is now offline [ 373.216507][ T9220] usbhid 6-1:0.0: can't add hid device: -71 [ 373.216604][ T9220] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 373.327487][ T9220] usb 6-1: USB disconnect, device number 5 [ 373.780055][ T9220] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 373.937889][ T9220] usb 6-1: Using ep0 maxpacket: 32 [ 373.949152][ T9220] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 373.949177][ T9220] usb 6-1: config 0 interface 0 has no altsetting 0 [ 373.949202][ T9220] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 373.949219][ T9220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.009868][ T9220] usb 6-1: config 0 descriptor?? [ 374.895983][ T9220] corsair-cpro 0003:1B1C:0C10.000A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 375.080419][T11310] netlink: 'syz.3.2027': attribute type 4 has an invalid length. [ 375.251715][T11315] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 375.254507][ T9220] corsair-cpro 0003:1B1C:0C10.000A: probe with driver corsair-cpro failed with error -71 [ 375.325305][ T9220] usb 6-1: USB disconnect, device number 6 [ 375.992572][T11323] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 376.224934][T11324] @0: renamed from bond_slave_1 (while UP) [ 376.588638][T11328] vxcan1: tx drop: invalid sa for name 0x0000000004000000 [ 377.380947][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.381027][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.545249][ T9220] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 379.747307][ T9220] usb 4-1: Using ep0 maxpacket: 16 [ 379.813787][ T9220] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 379.813811][ T9220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.813825][ T9220] usb 4-1: Product: syz [ 379.813835][ T9220] usb 4-1: Manufacturer: syz [ 379.813846][ T9220] usb 4-1: SerialNumber: syz [ 379.859458][ T9220] usb 4-1: config 0 descriptor?? [ 379.890010][ T9220] usb 4-1: selecting invalid altsetting 1 [ 379.890025][ T9220] technisat-usb2: could not set alternate setting to 0 [ 380.191835][ T9220] technisat-usb2: firmware version: 0.0 [ 380.191867][ T9220] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 381.177969][ T9220] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 381.195846][ T9220] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 381.195924][ T9220] usb 4-1: media controller created [ 381.331740][T11404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.350185][ T9220] technisat-usb2: i2c-error: out failed 53 = -22 [ 381.350337][ T9220] dvb-usb: MAC address reading failed. [ 381.957902][ T9220] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.543931][T11433] tls_set_device_offload: netdev not found [ 382.724130][ T4906] Bluetooth: hci0: command 0x0c1a tx timeout [ 383.032157][ T9220] DVB: Unable to find symbol stv090x_attach() [ 383.050580][ T9220] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 383.450056][ T9220] rc_core: IR keymap rc-technisat-usb2 not found [ 383.450071][ T9220] Registered IR keymap rc-empty [ 383.753311][T11461] syz.2.2075(11461): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 383.783835][ T9220] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 383.805295][ T9220] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input14 [ 384.034381][ T9220] dvb-usb: schedule remote query interval to 100 msecs. [ 384.038006][ T9220] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 384.071288][ T9220] usb 4-1: USB disconnect, device number 15 [ 384.144213][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 384.327984][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 385.518914][T11488] netlink: 'syz.5.2083': attribute type 2 has an invalid length. [ 385.518932][T11488] netlink: 'syz.5.2083': attribute type 1 has an invalid length. [ 385.518941][T11488] netlink: 'syz.5.2083': attribute type 8 has an invalid length. [ 385.518951][T11488] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2083'. [ 386.729157][ T9220] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 388.683547][T11560] input: syz1 as /devices/virtual/input/input15 [ 389.476232][T11573] tipc: Started in network mode [ 389.476261][T11573] tipc: Node identity 1000001, cluster identity 4711 [ 389.476272][T11573] tipc: Node number set to 16777217 [ 389.669073][T11574] tipc: Enabling of bearer rejected, failed to enable media [ 390.691242][T11597] Bluetooth: MGMT ver 1.23 [ 392.413257][T11638] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2131'. [ 392.536736][T11639] netlink: 'syz.2.2131': attribute type 32 has an invalid length. [ 392.536753][T11639] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2131'. [ 392.726412][T11638] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2131'. [ 392.920253][ T5323] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 393.090547][ T5323] usb 4-1: Using ep0 maxpacket: 32 [ 393.092318][ T5323] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 393.092342][ T5323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 393.092361][ T5323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 393.092378][ T5323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 393.092509][ T5323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 393.094654][ T5323] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 393.094674][ T5323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.094689][ T5323] usb 4-1: Product: syz [ 393.094699][ T5323] usb 4-1: Manufacturer: syz [ 393.094710][ T5323] usb 4-1: SerialNumber: syz [ 393.275034][ T5323] usb 4-1: config 0 descriptor?? [ 393.726692][ T5323] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 393.726749][ T5323] input input16: Device does not respond to id packet M [ 393.727440][ T5323] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 393.727472][ T5323] input input16: Device does not respond to id packet P [ 393.757125][ T5323] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 393.757162][ T5323] input input16: Device does not respond to id packet B [ 393.759811][ T5323] input input16: Device does not respond to id packet N [ 393.980488][ T5323] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 393.981522][ T5323] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 394.050190][ T5323] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 394.054019][ T5323] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 394.331301][ T5323] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 394.627279][ T5323] usb 4-1: USB disconnect, device number 16 [ 395.650166][ T5323] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 395.690912][ T9220] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 395.826754][ T5323] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 395.826778][ T5323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.826793][ T5323] usb 3-1: Product: syz [ 395.826803][ T5323] usb 3-1: Manufacturer: syz [ 395.826814][ T5323] usb 3-1: SerialNumber: syz [ 395.879736][ T5323] usb 3-1: config 0 descriptor?? [ 396.134036][ T9220] usb 2-1: Using ep0 maxpacket: 16 [ 396.136719][ T9220] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 396.136744][ T9220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 396.187835][ T9220] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 396.187859][ T9220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.187873][ T9220] usb 2-1: Product: syz [ 396.187884][ T9220] usb 2-1: Manufacturer: syz [ 396.187894][ T9220] usb 2-1: SerialNumber: syz [ 396.366134][ T9220] usb 2-1: config 0 descriptor?? [ 396.431889][ T9220] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 396.432130][ T9220] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 396.468718][ T5323] usb 3-1: Firmware: major: 229, minor: 0, hardware type: ATUSB (0) [ 396.675371][ T5323] usb 3-1: no permanent extended address found, random address set [ 397.072891][ T9220] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 397.073764][ T9220] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 397.290618][ T9220] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 397.290636][ T9220] em28xx 2-1:0.0: No AC97 audio processor [ 397.353082][ T9220] usb 2-1: USB disconnect, device number 13 [ 397.379180][ T9220] em28xx 2-1:0.0: Disconnecting em28xx [ 397.623995][ T9220] em28xx: Freeing device [ 397.894708][ T5323] usb 3-1: USB disconnect, device number 12 [ 399.543150][ T38] kauditd_printk_skb: 28 callbacks suppressed [ 399.543166][ T38] audit: type=1326 audit(1785263309.092:51): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11732 comm="syz.1.2166" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3742a3de99 code=0x0 [ 400.439843][T11744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2170'. [ 401.294930][T11754] could not open pipe file descriptor [ 401.896146][T11767] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4015170203 (32121361624 ns) > initial count (30716351936 ns). Using initial count to start timer. [ 404.819163][T11837] netlink: 'syz.1.2202': attribute type 4 has an invalid length. [ 404.832521][T11837] netlink: 'syz.1.2202': attribute type 4 has an invalid length. [ 405.630909][T11853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2209'. [ 407.450400][ T5323] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 407.600346][ T5323] usb 6-1: Using ep0 maxpacket: 16 [ 407.602342][ T5323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.602382][ T5323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.603357][ T5323] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 407.603384][ T5323] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 407.603399][ T5323] usb 6-1: Manufacturer: syz [ 407.667062][ T9220] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 407.723385][ T5323] usb 6-1: config 0 descriptor?? [ 407.830191][ T9220] usb 2-1: Using ep0 maxpacket: 8 [ 407.832631][ T9220] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 407.832672][ T9220] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 407.832689][ T9220] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 407.832707][ T9220] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 407.832764][ T9220] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.832796][ T9220] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 407.832813][ T9220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.237774][ T9220] usb 2-1: usb_control_msg returned -32 [ 408.237809][ T9220] usbtmc 2-1:16.0: can't read capabilities [ 408.396914][ T5323] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:041E:3100.000B/input/input17 [ 408.728539][ T5323] creative-sb0540 0003:041E:3100.000B: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 408.790869][ T5323] usb 6-1: USB disconnect, device number 7 [ 409.089468][T11904] fido_id[11904]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 409.105923][T11906] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 409.268140][ T5323] usb 2-1: USB disconnect, device number 14 [ 409.364650][ T9220] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 409.561385][ T9220] usb 3-1: Using ep0 maxpacket: 32 [ 409.563114][ T9220] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 409.565042][ T9220] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 409.565063][ T9220] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 409.565078][ T9220] usb 3-1: Product: syz [ 409.565089][ T9220] usb 3-1: Manufacturer: syz [ 409.565100][ T9220] usb 3-1: SerialNumber: syz [ 409.634466][ T9220] usb 3-1: config 0 descriptor?? [ 409.691736][T11908] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 409.694433][ T9220] hub 3-1:0.0: bad descriptor, ignoring hub [ 409.694459][ T9220] hub 3-1:0.0: probe with driver hub failed with error -5 [ 410.161329][ T5323] usb 3-1: USB disconnect, device number 13 [ 410.422274][T11925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2238'. [ 410.512112][ T9220] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 410.700716][ T9220] usb 3-1: Using ep0 maxpacket: 32 [ 410.714071][ T9220] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 410.724878][ T9220] usb 3-1: string descriptor 0 read error: -22 [ 410.724984][ T9220] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 410.725002][ T9220] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 410.791434][ T9220] usb 3-1: config 0 descriptor?? [ 410.793450][T11908] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 410.797266][ T9220] hub 3-1:0.0: bad descriptor, ignoring hub [ 410.797291][ T9220] hub 3-1:0.0: probe with driver hub failed with error -5 [ 411.028578][T11908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.044504][T11908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.131052][ T9220] usb 3-1: USB disconnect, device number 14 [ 412.680680][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2253'. [ 412.761269][ T5699] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 412.915092][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.915119][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.915146][ T5699] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 412.915164][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.967746][ T5699] usb 6-1: config 0 descriptor?? [ 413.570463][ T5699] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 413.570492][ T5699] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 413.570512][ T5699] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 413.570531][ T5699] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 413.570550][ T5699] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 413.609215][ T5323] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 413.708759][ T5699] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 413.871216][ T5323] usb 3-1: Using ep0 maxpacket: 16 [ 413.873697][ T5323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.873769][ T5323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.873797][ T5323] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 413.873814][ T5323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.990742][ T5699] playstation 0003:054C:0DF2.000C: Failed to retrieve feature with reportID 32: -32 [ 413.990765][ T5699] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense firmware info: -32 [ 413.990800][ T5699] playstation 0003:054C:0DF2.000C: Failed to get firmware info from DualSense [ 413.990811][ T5699] playstation 0003:054C:0DF2.000C: Failed to create dualsense. [ 414.123107][ T5699] playstation 0003:054C:0DF2.000C: probe with driver playstation failed with error -32 [ 414.154914][ T5323] usb 3-1: config 0 descriptor?? [ 414.199246][ T5699] usb 6-1: USB disconnect, device number 8 [ 414.242763][T11970] ceph: No mds server is up or the cluster is laggy [ 414.262383][ T9220] libceph: connect (1)[c::]:6789 error -101 [ 414.262531][ T9220] libceph: mon0 (1)[c::]:6789 connect error [ 414.597496][ T199] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 414.840452][ T199] usb 4-1: Using ep0 maxpacket: 8 [ 414.856988][ T199] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 414.857012][ T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.857026][ T199] usb 4-1: Product: syz [ 414.857037][ T199] usb 4-1: Manufacturer: syz [ 414.857089][ T199] usb 4-1: SerialNumber: syz [ 414.892116][ T5323] usb 3-1: language id specifier not provided by device, defaulting to English [ 414.986927][ T199] usb 4-1: config 0 descriptor?? [ 415.023884][ T199] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 415.094089][ T5323] letsketch 0003:6161:4D15.000D: Device info:  [ 415.303482][ T5323] letsketch 0003:6161:4D15.000D: Device info: Ь [ 415.565186][ T5323] usb 3-1: Max retries (5) exceeded reading string descriptor 202 [ 415.565291][ T5323] letsketch 0003:6161:4D15.000D: probe with driver letsketch failed with error -71 [ 415.690326][ T5323] usb 3-1: USB disconnect, device number 15 [ 416.311814][ T199] gspca_sonixj: reg_w1 err -71 [ 416.350141][ T199] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 416.372481][ T199] usb 4-1: USB disconnect, device number 17 [ 416.697989][ T5699] libceph: connect (1)[c::]:6789 error -101 [ 416.698205][ T5699] libceph: mon0 (1)[c::]:6789 connect error [ 416.763067][ T5699] libceph: connect (1)[c::]:6789 error -101 [ 416.763217][ T5699] libceph: mon0 (1)[c::]:6789 connect error [ 416.796032][ T5699] libceph: connect (1)[c::]:6789 error -101 [ 416.796193][ T5699] libceph: mon0 (1)[c::]:6789 connect error [ 416.951104][ T5699] libceph: connect (1)[c::]:6789 error -101 [ 416.951254][ T5699] libceph: mon0 (1)[c::]:6789 connect error [ 417.112618][ T5699] libceph: connect (1)[c::]:6789 error -101 [ 417.112771][ T5699] libceph: mon0 (1)[c::]:6789 connect error [ 417.397626][T11998] ceph: No mds server is up or the cluster is laggy [ 417.412193][T11995] ceph: No mds server is up or the cluster is laggy [ 417.483794][ T199] libceph: connect (1)[c::]:6789 error -101 [ 417.483944][ T199] libceph: mon0 (1)[c::]:6789 connect error [ 417.484080][ T5699] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 417.621046][ T6344] libceph: connect (1)[c::]:6789 error -101 [ 417.621187][ T6344] libceph: mon0 (1)[c::]:6789 connect error [ 417.707066][ T5699] usb 4-1: Using ep0 maxpacket: 32 [ 417.735319][ T5699] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 417.735342][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.781188][ T5699] usb 4-1: config 0 descriptor?? [ 417.830572][ T5699] gspca_main: sq930x-2.14.0 probing 041e:403c [ 418.957294][ T5699] gspca_sq930x: ucbus_write failed -71 [ 418.957378][ T5699] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 418.959860][T12030] netlink: 'syz.1.2276': attribute type 2 has an invalid length. [ 418.959874][T12030] netlink: 'syz.1.2276': attribute type 1 has an invalid length. [ 419.013103][ T5699] usb 4-1: USB disconnect, device number 18 [ 419.427714][T12035] binder: 12034:12035 ioctl c0306201 2000000004c0 returned -14 [ 419.475605][T12038] : renamed from vlan0 (while UP) [ 419.914567][T12047] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2282'. [ 420.584989][T12059] netlink: 'syz.5.2288': attribute type 9 has an invalid length. [ 420.840062][ T5699] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 421.004573][ T5699] usb 6-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 421.004606][ T5699] usb 6-1: too many endpoints for config 0 interface 0 altsetting 68: 63, using maximum allowed: 30 [ 421.004634][ T5699] usb 6-1: config 0 interface 0 altsetting 68 has 0 endpoint descriptors, different from the interface descriptor's value: 63 [ 421.004653][ T5699] usb 6-1: config 0 interface 0 has no altsetting 0 [ 421.054929][ T5699] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 421.054952][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.054967][ T5699] usb 6-1: Product: syz [ 421.054977][ T5699] usb 6-1: Manufacturer: syz [ 421.054988][ T5699] usb 6-1: SerialNumber: syz [ 421.123670][ T5699] usb 6-1: config 0 descriptor?? [ 421.403602][ T5699] usb 6-1: USB disconnect, device number 9 [ 422.937524][T12101] tls_set_device_offload_rx: netdev not found [ 422.948284][ T5323] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 423.091503][ T5323] usb 4-1: Using ep0 maxpacket: 8 [ 423.098584][ T5323] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 423.098606][ T5323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.098620][ T5323] usb 4-1: Product: syz [ 423.098630][ T5323] usb 4-1: Manufacturer: syz [ 423.098641][ T5323] usb 4-1: SerialNumber: syz [ 423.154329][ T5323] usb 4-1: config 0 descriptor?? [ 423.273150][ T5323] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 424.465796][ T5323] gspca_sonixj: reg_w1 err -71 [ 424.548222][ T5323] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 424.621279][ T5323] usb 4-1: USB disconnect, device number 19 [ 425.490072][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'. [ 425.490099][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'. [ 427.787866][T12189] IPv4: Oversized IP packet from 127.202.26.0 [ 428.028888][T12200] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2345'. [ 429.500146][T12239] input: syz1 as /devices/virtual/input/input18 [ 430.197066][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2369'. [ 430.197086][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2369'. [ 430.250248][ T9220] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 430.402644][ T9220] usb 3-1: Using ep0 maxpacket: 8 [ 430.404335][ T9220] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 430.404374][ T9220] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 430.404391][ T9220] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 430.404408][ T9220] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.404426][ T9220] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.404456][ T9220] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 430.404473][ T9220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.774153][ T9220] usb 3-1: usb_control_msg returned -32 [ 430.774189][ T9220] usbtmc 3-1:16.0: can't read capabilities [ 431.507352][T12290] usbtmc 3-1:16.0: CHECK_CLEAR_STATUS returned 0 [ 431.741593][ T9220] usb 3-1: USB disconnect, device number 16 [ 434.750926][T12337] team0: entered promiscuous mode [ 434.750943][T12337] team_slave_0: entered promiscuous mode [ 434.751099][T12337] team_slave_1: entered promiscuous mode [ 434.774547][T12337] batadv_slave_0: entered promiscuous mode [ 434.779550][T12336] batadv_slave_0: left promiscuous mode [ 434.779724][T12336] team0: left promiscuous mode [ 434.779735][T12336] team_slave_0: left promiscuous mode [ 434.779864][T12336] team_slave_1: left promiscuous mode [ 435.460406][T12353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2411'. [ 435.665866][T12359] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 437.401370][ T9220] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 437.553033][ T9220] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 437.553058][ T9220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.585062][ T9220] usb 2-1: config 0 descriptor?? [ 438.870840][T12412] IPVS: nq: FWM 3 0x00000003 - no destination available [ 438.890060][ T5323] IPVS: starting estimator thread 0... [ 438.905299][ T9220] usb 2-1: Cannot set autoneg [ 438.920584][ T9220] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 438.944022][T12410] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 438.990061][T12414] IPVS: using max 11 ests per chain, 26400 per kthread [ 439.009189][ T9220] usb 2-1: USB disconnect, device number 15 [ 439.296579][T12418] sctp: [Deprecated]: syz.2.2433 (pid 12418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.296579][T12418] Use struct sctp_sack_info instead [ 439.734189][T12429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2437'. [ 439.734281][T12429] netlink: 'syz.1.2437': attribute type 1 has an invalid length. [ 439.734291][T12429] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2437'. [ 440.180067][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.180149][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.214363][T12437] input: syz0 as /devices/virtual/input/input19 [ 440.660046][ T199] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 440.846927][ T199] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 440.846951][ T199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.903717][ T199] usb 4-1: config 0 descriptor?? [ 441.086993][ T199] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 441.159787][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'. [ 441.206001][ T199] gp8psk: usb in 128 operation failed. [ 441.422784][ T199] gp8psk: usb in 146 operation failed. [ 441.422800][ T199] gp8psk: failed to get FW version [ 441.426784][ T199] gp8psk: usb in 149 operation failed. [ 441.426798][ T199] gp8psk: failed to get FPGA version [ 441.659660][ T199] gp8psk: usb out operation failed. [ 441.659675][ T199] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 441.659701][ T199] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 441.750977][ T199] usb 4-1: USB disconnect, device number 20 [ 443.628918][T12488] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.415195][ T5601] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 445.524924][ T5699] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 445.524946][ T5699] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 447.529368][ T8948] do_umount: task=syz-executor[8948] propagate_mount_busy()!=0 [ 447.529550][ T8948] do_umount: task=syz-executor[8948] propagate_mount_busy()!=0 [ 449.623458][ T199] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 449.769997][ T199] usb 2-1: Using ep0 maxpacket: 8 [ 449.771803][ T199] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 449.771841][ T199] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 449.771857][ T199] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 449.771879][ T199] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 449.771895][ T199] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.771924][ T199] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 449.771941][ T199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.127394][ T199] usb 2-1: usb_control_msg returned -32 [ 450.127437][ T199] usbtmc 2-1:16.0: can't read capabilities [ 450.766966][T12592] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 452.468167][ T199] usb 2-1: USB disconnect, device number 16 [ 453.140559][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035888800: rx timeout, send abort [ 453.281302][ T5601] Bluetooth: hci2: command 0x0c1a tx timeout [ 453.281649][ T5699] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 453.281665][ T5699] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 453.653971][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035888800: abort rx timeout. Force session deactivation [ 453.658455][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803588b400: rx timeout, send abort [ 454.158507][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803588b400: abort rx timeout. Force session deactivation [ 454.194318][T12655] team0: No ports can be present during mode change [ 455.700033][ T199] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 455.871018][ T199] usb 3-1: Using ep0 maxpacket: 32 [ 455.887342][ T199] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 455.887364][ T199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.887379][ T199] usb 3-1: Product: syz [ 455.887390][ T199] usb 3-1: Manufacturer: syz [ 455.887400][ T199] usb 3-1: SerialNumber: syz [ 455.916218][ T4906] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 455.976721][ T4906] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 455.995962][ T4906] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 456.004617][ T4906] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 456.057429][ T4906] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 456.073063][ T199] usb 3-1: config 0 descriptor?? [ 456.278270][ T38] audit: type=1326 audit(1785263365.822:52): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12677 comm="syz.3.2506" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f361445de99 code=0x0 [ 456.613334][ T199] airspy 3-1:0.0: Board ID: 00 [ 456.613352][ T199] airspy 3-1:0.0: Firmware version: [ 457.175015][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 457.191064][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 457.222050][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 457.263604][ T199] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 457.286430][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 457.310106][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 457.716999][ T7408] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.779512][ T199] airspy 3-1:0.0: Registered as swradio24 [ 457.779530][ T199] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 457.845442][ T199] usb 3-1: USB disconnect, device number 17 [ 458.789008][T12713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2516'. [ 458.804226][ T7408] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.265887][ T7408] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.445506][ T5601] Bluetooth: hci0: command tx timeout [ 460.169579][ T7408] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.709819][ T5796] block nbd64: NBD_DISCONNECT [ 460.717378][T12715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2516'. [ 460.717403][T12715] nbd: device at index 64 is going down [ 461.522387][ T5601] Bluetooth: hci0: command tx timeout [ 462.184786][ T38] audit: type=1800 audit(1785263371.622:53): pid=12745 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.1.2524" name="file0" dev="overlay" ino=3567 res=0 errno=0 [ 462.778391][T12757] netlink: 'syz.3.2528': attribute type 11 has an invalid length. [ 463.387779][ T9220] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 463.562686][ T9220] usb 2-1: Using ep0 maxpacket: 16 [ 463.564835][ T9220] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 463.564927][ T9220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 463.567433][ T9220] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 463.567454][ T9220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.567468][ T9220] usb 2-1: Product: syz [ 463.567479][ T9220] usb 2-1: Manufacturer: syz [ 463.567490][ T9220] usb 2-1: SerialNumber: syz [ 463.609396][ T5601] Bluetooth: hci0: command tx timeout [ 463.697160][ T9220] usb 2-1: config 0 descriptor?? [ 463.746035][ T9220] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 463.746062][ T9220] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 464.383639][ T9220] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 464.387472][ T9220] em28xx 2-1:0.0: Config register raw data: 0xff [ 464.387489][ T9220] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 464.387500][ T9220] em28xx 2-1:0.0: No AC97 audio processor [ 464.771439][ T6344] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 465.233094][ T9220] usb 2-1: USB disconnect, device number 17 [ 465.296468][ T6344] usb 3-1: unable to get BOS descriptor or descriptor too short [ 465.298022][ T6344] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 465.298047][ T6344] usb 3-1: can't read configurations, error -71 [ 465.427659][ T7408] bridge_slave_1: left allmulticast mode [ 465.427694][ T7408] bridge_slave_1: left promiscuous mode [ 465.427900][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.531452][ T7408] bridge_slave_0: left allmulticast mode [ 465.531481][ T7408] bridge_slave_0: left promiscuous mode [ 465.531687][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.680780][ T5601] Bluetooth: hci0: command tx timeout [ 466.096833][ T5323] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 466.282921][ T5323] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 466.282944][ T5323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.497709][ T5323] usb 2-1: ATUSB: AT86RF231 version 1 [ 467.730813][ T5323] usb 2-1: Firmware: major: 0, minor: 2, hardware type: ATUSB (2) [ 468.084873][ T7408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.120018][ T7408] bond0 (unregistering): (slave c@0): Releasing backup interface [ 468.147078][ T7408] bond0 (unregistering): Released all slaves [ 468.207911][ T5252] 8021q: adding VLAN 0 to HW filter on device eth9 [ 468.587967][ T5323] usb 2-1: USB disconnect, device number 18 [ 468.912756][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2548'. [ 468.912844][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2548'. [ 471.194674][ T7408] hsr_slave_0: left promiscuous mode [ 471.196444][ T7408] hsr_slave_1: left promiscuous mode [ 471.199217][ T7408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.199237][ T7408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.245885][ T7408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.245907][ T7408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.420741][ T7408] veth1_macvtap: left promiscuous mode [ 471.429443][ T7408] veth0_macvtap: left promiscuous mode [ 471.439124][ T7408] veth1_vlan: left promiscuous mode [ 471.489522][ T7408] veth0_vlan: left promiscuous mode [ 472.158762][ T4906] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 472.214919][ T4906] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 472.218350][ T4906] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 472.282399][ T4906] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 472.283064][ T4906] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 473.559404][ T7408] team0 (unregistering): Port device team_slave_1 removed [ 473.594580][ T7408] team0 (unregistering): Port device team_slave_0 removed [ 473.856238][T12880] netlink: 'syz.1.2566': attribute type 1 has an invalid length. [ 473.856254][T12880] netlink: 'syz.1.2566': attribute type 4 has an invalid length. [ 473.856264][T12880] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2566'. [ 474.207251][T12886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2569'. [ 474.252729][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2568'. [ 474.252752][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2568'. [ 474.480106][ T4906] Bluetooth: hci3: command tx timeout [ 475.507349][T12681] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.507597][T12681] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.507825][T12681] bridge_slave_0: entered allmulticast mode [ 475.515541][T12681] bridge_slave_0: entered promiscuous mode [ 475.560672][T12681] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.560935][T12681] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.561174][T12681] bridge_slave_1: entered allmulticast mode [ 475.609828][T12681] bridge_slave_1: entered promiscuous mode [ 475.642663][ T7408] IPVS: stop unused estimator thread 0... [ 476.114849][T12681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.190456][T12681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.565198][ T4906] Bluetooth: hci3: command tx timeout [ 476.773712][T12681] team0: Port device team_slave_0 added [ 477.725493][ T7408] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.038271][T12681] team0: Port device team_slave_1 added [ 478.095032][ T5252] 8021q: adding VLAN 0 to HW filter on device eth10 [ 478.227787][T12948] overlayfs: statfs failed on './file0' [ 478.394715][T12681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.394728][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.394749][T12681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.641098][ T4906] Bluetooth: hci3: command tx timeout [ 478.814716][ T7408] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.863767][T12681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.863781][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.863802][T12681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.148251][ T7408] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.241293][ T5323] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 479.327972][ T7408] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.400251][ T5323] usb 4-1: Using ep0 maxpacket: 32 [ 479.405512][ T5323] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 479.405533][ T5323] usb 4-1: config 0 has no interface number 0 [ 479.405724][ T5323] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 479.450491][ T5323] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 479.450513][ T5323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.450528][ T5323] usb 4-1: Product: syz [ 479.450539][ T5323] usb 4-1: Manufacturer: syz [ 479.450549][ T5323] usb 4-1: SerialNumber: syz [ 479.498893][ T5323] usb 4-1: config 0 descriptor?? [ 479.499823][T12960] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 479.765949][T12960] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 479.919758][T12681] hsr_slave_0: entered promiscuous mode [ 479.964914][T12681] hsr_slave_1: entered promiscuous mode [ 479.969486][T12681] debugfs: 'hsr0' already exists in 'hsr' [ 479.969508][T12681] Cannot create hsr debugfs directory [ 480.720161][ T4906] Bluetooth: hci3: command tx timeout [ 481.052002][ T5323] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 481.052099][ T5323] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 481.079852][ T5323] asix 4-1:0.188: probe with driver asix failed with error -71 [ 481.206777][ T5323] usb 4-1: USB disconnect, device number 21 [ 481.248695][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2593'. [ 481.248717][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2593'. [ 481.599093][T12969] FAULT_INJECTION: forcing a failure. [ 481.599093][T12969] name fail_page_alloc, interval 1, probability 100, space 0, times 10 [ 481.599129][T12969] CPU: 0 UID: 0 PID: 12969 Comm: dhcpcd-run-hook Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 481.599151][T12969] Tainted: [L]=SOFTLOCKUP [ 481.599157][T12969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 481.599170][T12969] Call Trace: [ 481.599176][T12969] [ 481.599183][T12969] dump_stack_lvl+0xe8/0x150 [ 481.599210][T12969] should_fail_ex+0x467/0x600 [ 481.599235][T12969] prepare_alloc_pages+0x223/0x650 [ 481.599268][T12969] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 481.599298][T12969] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 481.599328][T12969] ? __pfx_policy_nodemask+0x10/0x10 [ 481.599350][T12969] alloc_pages_mpol+0xd4/0x280 [ 481.599369][T12969] alloc_pages_noprof+0xd2/0x2f0 [ 481.599387][T12969] pgd_alloc+0x44/0x750 [ 481.599406][T12969] mm_init+0x602/0xb70 [ 481.599423][T12969] copy_mm+0x101/0x480 [ 481.599440][T12969] ? copy_process+0xd3c/0x43f0 [ 481.599456][T12969] copy_process+0x1e7d/0x43f0 [ 481.599478][T12969] ? copy_process+0xd3c/0x43f0 [ 481.599507][T12969] ? __pfx_copy_process+0x10/0x10 [ 481.599533][T12969] kernel_clone+0x2d7/0x940 [ 481.599552][T12969] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 481.599569][T12969] ? __pfx_kernel_clone+0x10/0x10 [ 481.599601][T12969] __x64_sys_clone+0x1b6/0x230 [ 481.599622][T12969] ? __pfx___x64_sys_clone+0x10/0x10 [ 481.599661][T12969] do_syscall_64+0x17b/0x530 [ 481.599677][T12969] ? irqentry_exit+0x10f/0x8f0 [ 481.599692][T12969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.599708][T12969] ? clear_bhb_loop+0x40/0x90 [ 481.599728][T12969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.599746][T12969] RIP: 0033:0x7f936ab51636 [ 481.599761][T12969] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 481.599775][T12969] RSP: 002b:00007ffc32e54020 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 481.599792][T12969] RAX: ffffffffffffffda RBX: 00007ffc32e54028 RCX: 00007f936ab51636 [ 481.599804][T12969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 481.599813][T12969] RBP: 000056374c8e1c30 R08: 0000000000000000 R09: 0000000000000000 [ 481.599823][T12969] R10: 00007f936a9b7f50 R11: 0000000000000246 R12: 000056374c8ef358 [ 481.599834][T12969] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 481.599855][T12969] [ 482.139643][ T5252] 8021q: adding VLAN 0 to HW filter on device eth11 [ 483.534373][ T151] Bluetooth: (null): Invalid header checksum [ 483.611735][ T151] Bluetooth: (null): Too short H5 packet [ 483.611803][ T151] Bluetooth: (null): Invalid header checksum [ 484.396066][ T7408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.420056][ T7408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.422766][ T7408] bond0 (unregistering): Released all slaves [ 486.343567][T12857] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.343823][T12857] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.438436][T12857] bridge_slave_0: entered allmulticast mode [ 486.473821][T12857] bridge_slave_0: entered promiscuous mode [ 486.628843][T13021] Set syz1 is full, maxelem 6117 reached [ 486.801310][T12857] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.801588][T12857] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.801796][T12857] bridge_slave_1: entered allmulticast mode [ 486.839775][T12857] bridge_slave_1: entered promiscuous mode [ 486.944611][ T7408] hsr_slave_0: left promiscuous mode [ 486.948857][ T7408] hsr_slave_1: left promiscuous mode [ 486.969169][ T7408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.984433][ T7408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.984455][ T7408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.198018][ T7408] veth1_macvtap: left promiscuous mode [ 487.198097][ T7408] veth0_macvtap: left promiscuous mode [ 487.230037][ T7408] veth1_vlan: left promiscuous mode [ 488.961516][T13056] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 4294967272. macoff=96 [ 489.090499][ T7408] team0 (unregistering): Port device team_slave_1 removed [ 489.163105][ T7408] team0 (unregistering): Port device team_slave_0 removed [ 489.815275][ T5252] 8021q: adding VLAN 0 to HW filter on device eth12 [ 490.024143][ T5323] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 490.108174][T12857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.192885][T12857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.281097][ T5323] usb 4-1: Using ep0 maxpacket: 16 [ 490.307145][ T5323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.307170][ T5323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.307198][ T5323] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 490.307216][ T5323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.396810][ T5323] usb 4-1: config 0 descriptor?? [ 490.784628][T13067] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2621'. [ 491.213420][ T5323] usb 4-1: language id specifier not provided by device, defaulting to English [ 491.368830][T12857] team0: Port device team_slave_0 added [ 491.411137][ T5323] letsketch 0003:6161:4D15.000E: Device info: Ы [ 491.443337][T12857] team0: Port device team_slave_1 added [ 491.628096][ T5323] letsketch 0003:6161:4D15.000E: Device info:  [ 491.818370][T13069] input: syz0 as /devices/virtual/input/input20 [ 491.837746][ T5323] letsketch 0003:6161:4D15.000E: Device info: Ь [ 492.090297][T12681] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 492.106481][ T5323] usb 4-1: Max retries (5) exceeded reading string descriptor 1 [ 492.106544][ T5323] letsketch 0003:6161:4D15.000E: probe with driver letsketch failed with error -71 [ 492.212210][ T5323] usb 4-1: USB disconnect, device number 22 [ 492.244821][T12681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 492.442643][T12681] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 492.468190][T12681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 492.486069][T12857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.486081][T12857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.486103][T12857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.488707][T12681] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 492.577661][T12681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 492.589690][T12857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.589705][T12857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.589726][T12857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.676092][T12681] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 492.697865][T12681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 492.972215][T12857] hsr_slave_0: entered promiscuous mode [ 492.977952][T12857] hsr_slave_1: entered promiscuous mode [ 493.013663][T12857] debugfs: 'hsr0' already exists in 'hsr' [ 493.013685][T12857] Cannot create hsr debugfs directory [ 494.954444][T12681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.155923][T12681] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.208551][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.208674][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.405615][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.405736][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.426646][ T5252] 8021q: adding VLAN 0 to HW filter on device eth13 [ 498.249079][ T5252] 8021q: adding VLAN 0 to HW filter on device eth14 [ 498.600254][T13140] netlink: 'syz.1.2633': attribute type 4 has an invalid length. [ 500.076455][T13135] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[9232] was attempted by " [ 501.264842][T12681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.628962][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.629042][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.316336][T12857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 504.540971][T12857] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 504.549101][T12857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 504.598524][T12857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 504.613274][T12857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 504.669650][T12857] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 504.698520][T12857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 504.855173][T12857] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.945845][T12681] veth0_vlan: entered promiscuous mode [ 505.079658][T12681] veth1_vlan: entered promiscuous mode [ 505.156387][T13240] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 505.701699][T12681] veth0_macvtap: entered promiscuous mode [ 505.776256][T12681] veth1_macvtap: entered promiscuous mode [ 505.971713][T12857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.076219][T12681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.161886][T12681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.251332][T12857] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.282819][ T1190] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.287069][ T1190] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.317179][ T1190] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.342236][ T1190] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.346430][T11833] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.346543][T11833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.499715][ T1190] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.499832][ T1190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.768145][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.768162][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.106866][ T1297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.106882][ T1297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.641886][T13315] overlayfs: upper fs does not support file handles, falling back to index=off. [ 510.817823][T12857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.869068][T13308] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 510.869090][T13308] overlayfs: failed to set xattr on upper [ 510.869096][T13308] overlayfs: ...falling back to redirect_dir=nofollow. [ 510.869102][T13308] overlayfs: ...falling back to index=off. [ 510.869115][T13308] overlayfs: ...falling back to uuid=null. [ 510.869121][T13308] overlayfs: ...falling back to xino=off. [ 510.946644][T13308] overlayfs: failed to clone lowerpath [ 511.488150][T12857] veth0_vlan: entered promiscuous mode [ 511.770770][T12857] veth1_vlan: entered promiscuous mode [ 511.824602][T13333] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2677'. [ 512.475767][T12857] veth0_macvtap: entered promiscuous mode [ 512.538873][T12857] veth1_macvtap: entered promiscuous mode [ 512.708862][T12857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.795525][T12857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.078061][ T151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.078541][ T151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.078757][ T151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.078787][ T151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.680564][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.680581][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.272174][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.272190][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.825030][T13426] netlink: 'syz.3.2700': attribute type 21 has an invalid length. [ 517.154833][T13426] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2700'. [ 525.939803][T13553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2731'. [ 526.038305][ T6344] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 526.220306][ T6344] usb 7-1: Using ep0 maxpacket: 8 [ 526.223533][ T6344] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.223559][ T6344] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 526.223590][ T6344] usb 7-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 526.223607][ T6344] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.298392][ T6344] usb 7-1: config 0 descriptor?? [ 526.928625][ T6344] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 526.928656][ T6344] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 526.928676][ T6344] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 526.928695][ T6344] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 526.928713][ T6344] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 526.928732][ T6344] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 526.928750][ T6344] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 526.928769][ T6344] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 526.928787][ T6344] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 526.928806][ T6344] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 527.122974][ T6344] logitech 0003:046D:C50C.000F: hidraw0: USB HID v0.81 Device [HID 046d:c50c] on usb-dummy_hcd.6-1/input0 [ 527.162621][ T6344] usb 7-1: USB disconnect, device number 2 [ 527.451841][T13561] fido_id[13561]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 528.647785][T13584] input: syz0 as /devices/virtual/input/input21 [ 532.873857][ T38] audit: type=1326 audit(1785263442.422:54): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13616 comm="syz.6.2754" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f811ed1de99 code=0x0 [ 535.321919][T13659] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 535.322415][T13659] CIFS: Attempting to mount //127.0.0.1/share [ 535.701077][ T199] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 535.906657][ T199] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.906794][ T199] usb 4-1: config 0 has no interfaces? [ 535.906818][ T199] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 535.906844][ T199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.967425][ T199] usb 4-1: config 0 descriptor?? [ 536.445067][T13659] CIFS: VFS: \\127.0.0.1 Error -512 sending data on socket to server [ 536.502207][T13659] CIFS: VFS: cifs_mount failed w/return code = -103 [ 536.568946][T13667] ------------[ cut here ]------------ [ 536.568957][T13667] server->in_flight == 0 [ 536.568973][T13667] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x125b/0x2b90, CPU#0: cifsd/13667 [ 536.569014][T13667] Modules linked in: [ 536.569034][T13667] CPU: 0 UID: 0 PID: 13667 Comm: cifsd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 536.569056][T13667] Tainted: [L]=SOFTLOCKUP [ 536.569062][T13667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 536.569071][T13667] RIP: 0010:smb2_add_credits+0x125b/0x2b90 [ 536.569095][T13667] Code: de 83 e6 01 31 ff e8 54 7d c2 fe f6 c3 01 75 0a e8 9a 78 c2 fe e9 22 13 00 00 0f 1f 44 00 00 e8 8b 78 c2 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d 7e 3e b7 0c 01 0f 85 9e 03 00 00 e8 70 78 c2 fe 49 [ 536.569109][T13667] RSP: 0018:ffffc90005927458 EFLAGS: 00010246 [ 536.569122][T13667] RAX: ffffffff83031cce RBX: 1ffff11004c47489 RCX: ffff888031b39f40 [ 536.569136][T13667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.569146][T13667] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 [ 536.569155][T13667] R10: 0000000000000000 R11: ffffffff83034a40 R12: ffff88802623a448 [ 536.569166][T13667] R13: ffffc90005927520 R14: ffff88802623a000 R15: 0000000000000000 [ 536.569178][T13667] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 536.569191][T13667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.569202][T13667] CR2: 00007f811fad56b8 CR3: 000000003398c000 CR4: 00000000003526f0 [ 536.569216][T13667] Call Trace: [ 536.569222][T13667] [ 536.569231][T13667] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 536.569260][T13667] cifs_compound_last_callback+0x181/0x2d0 [ 536.569289][T13667] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 536.569317][T13667] ? rt_spin_unlock+0x157/0x200 [ 536.569341][T13667] ? rt_spin_unlock+0x163/0x200 [ 536.569361][T13667] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 536.569389][T13667] cifs_abort_connection+0x949/0xf60 [ 536.569413][T13667] ? __pfx_cifs_abort_connection+0x10/0x10 [ 536.569429][T13667] ? rt_spin_unlock+0x157/0x200 [ 536.569454][T13667] ? rt_spin_unlock+0x163/0x200 [ 536.569477][T13667] _cifs_reconnect+0xbba/0x1670 [ 536.569503][T13667] ? lockdep_hardirqs_on+0x7a/0x110 [ 536.569518][T13667] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 536.569534][T13667] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 536.569558][T13667] ? reacquire_held_locks+0x117/0x1a0 [ 536.569576][T13667] ? rt_spin_lock+0x1e0/0x400 [ 536.569600][T13667] ? __pfx__cifs_reconnect+0x10/0x10 [ 536.569625][T13667] ? rt_spin_unlock+0x157/0x200 [ 536.569655][T13667] ? rt_spin_unlock+0x163/0x200 [ 536.569681][T13667] cifs_readv_from_socket+0x78b/0x8e0 [ 536.569722][T13667] cifs_demultiplex_thread+0x53d/0x3310 [ 536.569781][T13667] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 536.569817][T13667] ? do_raw_spin_lock+0x12b/0x2f0 [ 536.573330][T13667] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 536.573370][T13667] ? __lock_acquire+0x6df/0x2e40 [ 536.573420][T13667] ? __kthread_parkme+0x196/0x1f0 [ 536.573444][T13667] kthread+0x388/0x470 [ 536.573467][T13667] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 536.573493][T13667] ? __pfx_kthread+0x10/0x10 [ 536.573516][T13667] ret_from_fork+0x514/0xb70 [ 536.573541][T13667] ? __pfx_ret_from_fork+0x10/0x10 [ 536.573563][T13667] ? __switch_to+0xc89/0x1420 [ 536.573585][T13667] ? __pfx_kthread+0x10/0x10 [ 536.573608][T13667] ret_from_fork_asm+0x1a/0x30 [ 536.573648][T13667] [ 536.573656][T13667] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 536.573672][T13667] CPU: 0 UID: 0 PID: 13667 Comm: cifsd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 536.573694][T13667] Tainted: [L]=SOFTLOCKUP [ 536.573700][T13667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 536.573710][T13667] Call Trace: [ 536.573716][T13667] [ 536.573722][T13667] vpanic+0x56c/0xa60 [ 536.573739][T13667] ? __pfx__printk+0x10/0x10 [ 536.573759][T13667] ? __pfx_vpanic+0x10/0x10 [ 536.573773][T13667] ? is_bpf_text_address+0x292/0x2b0 [ 536.573791][T13667] ? is_bpf_text_address+0x26/0x2b0 [ 536.573816][T13667] panic+0xc5/0xd0 [ 536.573831][T13667] ? __pfx_panic+0x10/0x10 [ 536.573853][T13667] ? ret_from_fork_asm+0x1a/0x30 [ 536.573879][T13667] __warn+0x315/0x4c0 [ 536.573893][T13667] ? smb2_add_credits+0x125b/0x2b90 [ 536.573918][T13667] ? smb2_add_credits+0x125b/0x2b90 [ 536.573939][T13667] __report_bug+0x276/0x570 [ 536.573959][T13667] ? smb2_add_credits+0x125b/0x2b90 [ 536.573983][T13667] ? __pfx___report_bug+0x10/0x10 [ 536.574000][T13667] ? __lock_acquire+0x6df/0x2e40 [ 536.574015][T13667] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 536.574042][T13667] ? lock_acquire+0x115/0x350 [ 536.574078][T13667] ? smb2_add_credits+0x125b/0x2b90 [ 536.574102][T13667] report_bug+0x16a/0x220 [ 536.574118][T13667] ? smb2_add_credits+0x125b/0x2b90 [ 536.574139][T13667] ? smb2_add_credits+0x125d/0x2b90 [ 536.574161][T13667] handle_bug+0x9c/0x200 [ 536.574180][T13667] exc_invalid_op+0x1a/0x50 [ 536.574198][T13667] asm_exc_invalid_op+0x1a/0x20 [ 536.574215][T13667] RIP: 0010:smb2_add_credits+0x125b/0x2b90 [ 536.574237][T13667] Code: de 83 e6 01 31 ff e8 54 7d c2 fe f6 c3 01 75 0a e8 9a 78 c2 fe e9 22 13 00 00 0f 1f 44 00 00 e8 8b 78 c2 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d 7e 3e b7 0c 01 0f 85 9e 03 00 00 e8 70 78 c2 fe 49 [ 536.574251][T13667] RSP: 0018:ffffc90005927458 EFLAGS: 00010246 [ 536.574266][T13667] RAX: ffffffff83031cce RBX: 1ffff11004c47489 RCX: ffff888031b39f40 [ 536.574278][T13667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.574287][T13667] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 [ 536.574297][T13667] R10: 0000000000000000 R11: ffffffff83034a40 R12: ffff88802623a448 [ 536.574308][T13667] R13: ffffc90005927520 R14: ffff88802623a000 R15: 0000000000000000 [ 536.574322][T13667] ? __pfx_smb2_get_credits_field+0x10/0x10 [ 536.574346][T13667] ? smb2_add_credits+0x3fe/0x2b90 [ 536.574372][T13667] ? smb2_add_credits+0x3fe/0x2b90 [ 536.574395][T13667] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 536.574422][T13667] cifs_compound_last_callback+0x181/0x2d0 [ 536.574451][T13667] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 536.574479][T13667] ? rt_spin_unlock+0x157/0x200 [ 536.574503][T13667] ? rt_spin_unlock+0x163/0x200 [ 536.574523][T13667] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 536.574551][T13667] cifs_abort_connection+0x949/0xf60 [ 536.574575][T13667] ? __pfx_cifs_abort_connection+0x10/0x10 [ 536.574591][T13667] ? rt_spin_unlock+0x157/0x200 [ 536.574616][T13667] ? rt_spin_unlock+0x163/0x200 [ 536.574646][T13667] _cifs_reconnect+0xbba/0x1670 [ 536.574673][T13667] ? lockdep_hardirqs_on+0x7a/0x110 [ 536.574689][T13667] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 536.574705][T13667] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 536.574732][T13667] ? reacquire_held_locks+0x117/0x1a0 [ 536.574750][T13667] ? rt_spin_lock+0x1e0/0x400 [ 536.574773][T13667] ? __pfx__cifs_reconnect+0x10/0x10 [ 536.574800][T13667] ? rt_spin_unlock+0x157/0x200 [ 536.574824][T13667] ? rt_spin_unlock+0x163/0x200 [ 536.574847][T13667] cifs_readv_from_socket+0x78b/0x8e0 [ 536.574888][T13667] cifs_demultiplex_thread+0x53d/0x3310 [ 536.574941][T13667] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 536.574973][T13667] ? do_raw_spin_lock+0x12b/0x2f0 [ 536.574998][T13667] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 536.575027][T13667] ? __lock_acquire+0x6df/0x2e40 [ 536.575075][T13667] ? __kthread_parkme+0x196/0x1f0 [ 536.575098][T13667] kthread+0x388/0x470 [ 536.575120][T13667] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 536.575147][T13667] ? __pfx_kthread+0x10/0x10 [ 536.575170][T13667] ret_from_fork+0x514/0xb70 [ 536.575194][T13667] ? __pfx_ret_from_fork+0x10/0x10 [ 536.575216][T13667] ? __switch_to+0xc89/0x1420 [ 536.575237][T13667] ? __pfx_kthread+0x10/0x10 [ 536.575259][T13667] ret_from_fork_asm+0x1a/0x30 [ 536.575294][T13667] [ 536.575365][T13667] Kernel Offset: disabled