last executing test programs: 2m42.780778932s ago: executing program 3 (id=2501): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002"], 0xdc}}, 0x0) 2m39.087165515s ago: executing program 4 (id=2511): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x3c, r2, 0x1, 0x70bd29, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x3c}}, 0x0) 2m38.686801721s ago: executing program 1 (id=2512): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 2m38.461578395s ago: executing program 4 (id=2513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000018010040"]) 2m38.216421638s ago: executing program 1 (id=2514): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000f2, 0x0, 0xf07}]}) 2m37.634356882s ago: executing program 2 (id=2515): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) 2m37.365084318s ago: executing program 2 (id=2516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) 2m33.736460664s ago: executing program 0 (id=2521): r0 = io_uring_setup(0x5ae4, &(0x7f0000005840)) r1 = epoll_create1(0x0) r2 = dup3(r1, r0, 0x0) epoll_pwait2(r2, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0xfffffffffffffc8a) 2m28.091097443s ago: executing program 2 (id=2522): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x2, [{{0xa, 0x4e21, 0xb, @loopback, 0x2}}, {{0xa, 0x4e24, 0x9, @loopback}}]}, 0x190) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa42, @mcast1, 0xbf9}}, {{0xa, 0x4e24, 0xc7e2, @loopback={0xa4}, 0xfffffe01}}}, 0x108) 2m27.904964049s ago: executing program 3 (id=2523): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) 2m27.509839239s ago: executing program 3 (id=2524): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) 2m27.503222934s ago: executing program 2 (id=2525): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 2m27.497184466s ago: executing program 4 (id=2526): r0 = io_uring_setup(0x5ef5, &(0x7f00000002c0)={0x0, 0xe6c, 0x100, 0xfffffffc, 0x8040001}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2m27.175816031s ago: executing program 3 (id=2527): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2m27.154941648s ago: executing program 2 (id=2528): r0 = syz_io_uring_setup(0x8dd, &(0x7f0000000340)={0x0, 0x7826, 0x100, 0x8, 0x3c1}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m26.908689417s ago: executing program 3 (id=2529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 2m26.748619673s ago: executing program 0 (id=2530): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 2m25.352738002s ago: executing program 4 (id=2531): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) 2m25.315821732s ago: executing program 1 (id=2532): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000680)=[@in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0xa, 0x1ff, 0x2, 0xfffffff9, 0x8, 0x8001, 0x81, 0x0, r1}, &(0x7f0000000180)=0x20) 2m23.978656335s ago: executing program 4 (id=2533): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000680)}, 0x400c1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x7a, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) 2m23.965261047s ago: executing program 0 (id=2534): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) 2m23.958623136s ago: executing program 1 (id=2535): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000020480)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) read$FUSE(r0, &(0x7f0000004740)={0x2020}, 0x2020) write$binfmt_aout(r1, &(0x7f0000003700)=ANY=[], 0x1001) 2m23.925881712s ago: executing program 2 (id=2536): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x40, r1, 0x0, 0x17, 0x0, 0x0, 0x2}]) 2m23.778175821s ago: executing program 3 (id=2537): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast}, {0x11, 0x7c, 0x0, @loopback}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) 2m23.503750489s ago: executing program 0 (id=2538): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m23.35424079s ago: executing program 1 (id=2539): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3f, &(0x7f0000000380)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x9, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x0, 0xe22, 0x9, 0x0, @opaque="7f"}}}}}}, 0x0) 2m23.209853637s ago: executing program 4 (id=2540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) 2m23.105195439s ago: executing program 0 (id=2541): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[r1], 0x1, 0x80800}) 2m23.044227167s ago: executing program 1 (id=2542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0x2, 0x4) 1m10.204530792s ago: executing program 0 (id=2543): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 15.711111649s ago: executing program 32 (id=2542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0x2, 0x4) 0s ago: executing program 33 (id=2536): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x40, r1, 0x0, 0x17, 0x0, 0x0, 0x2}]) kernel console output (not intermixed with test programs): syz [ 180.130285][ T5923] usb 5-1: USB disconnect, device number 5 [ 180.210366][ T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 180.359226][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 180.387036][ T45] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 180.408558][ T45] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 180.408594][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.408617][ T45] usb 4-1: Product: syz [ 180.408633][ T45] usb 4-1: Manufacturer: syz [ 180.408710][ T45] usb 4-1: SerialNumber: syz [ 180.491587][ T5155] Bluetooth: hci3: command 0x0c1a tx timeout [ 180.539433][ T31] usb 1-1: 0:2 : does not exist [ 180.567565][ T45] usb 4-1: config 0 descriptor?? [ 180.679138][ T45] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 180.680306][ T45] usb 4-1: setting power ON [ 180.680332][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 180.804526][ T7185] dvb-usb: bulk message failed: -22 (3/0) [ 180.804554][ T7185] dvb-usb: bulk message failed: -22 (5/0) [ 180.805039][ T7185] dvb-usb: bulk message failed: -22 (3/0) [ 180.805061][ T7185] dvb-usb: bulk message failed: -22 (3/0) [ 180.843246][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 180.858763][ T45] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 180.860895][ T45] usb 4-1: media controller created [ 180.893169][ T5155] Bluetooth: hci4: command 0x0c1a tx timeout [ 181.000900][ T31] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 181.048153][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 181.106577][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.166627][ T31] usb 1-1: USB disconnect, device number 8 [ 181.257149][ T45] usb 4-1: selecting invalid altsetting 6 [ 181.257176][ T45] usb 4-1: digital interface selection failed (-22) [ 181.257193][ T45] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 181.272798][ T45] usb 4-1: setting power OFF [ 181.272830][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 181.272858][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 181.272872][ T45] (NULL device *): no alternate interface [ 181.567958][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 181.608685][ T45] usb 4-1: USB disconnect, device number 7 [ 181.634601][ T7216] Bluetooth: MGMT ver 1.23 [ 181.782404][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.928278][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 182.568116][ T5155] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.764624][ T7243] __nla_validate_parse: 46 callbacks suppressed [ 182.764648][ T7243] netlink: 32 bytes leftover after parsing attributes in process `syz.4.549'. [ 182.968316][ T5155] Bluetooth: hci4: command 0x0c1a tx timeout [ 184.008131][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 187.008260][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 187.161455][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.161487][ T9] usb 3-1: config 0 has no interface number 0 [ 187.165113][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 187.165146][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.165168][ T9] usb 3-1: Product: syz [ 187.165184][ T9] usb 3-1: Manufacturer: syz [ 187.165211][ T9] usb 3-1: SerialNumber: syz [ 187.230319][ T9] usb 3-1: config 0 descriptor?? [ 187.445258][ T9] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 187.502840][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 187.503305][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 187.503359][ T9] usb 3-1: media controller created [ 187.597277][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.888713][ T7352] tap0: tun_chr_ioctl cmd 2147767506 [ 188.090956][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.598'. [ 188.515735][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 188.515760][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 188.775394][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 188.945555][ T9] usb 3-1: USB disconnect, device number 6 [ 189.765716][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'. [ 192.756494][ T7438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.633'. [ 193.215490][ T7440] syz.0.634 (7440) used greatest stack depth: 16696 bytes left [ 193.318651][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 195.933726][ T7515] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 196.150352][ T7506] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.153058][ T7506] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 196.262609][ T7506] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 196.262828][ T7506] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 196.263040][ T7506] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 197.498271][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 197.608229][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 197.651522][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 197.654312][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.654361][ T9] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 197.654386][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.670676][ T9] usb 2-1: config 0 descriptor?? [ 198.132993][ T9] hid-multitouch 0003:0EEF:72C4.0006: unknown main item tag 0x0 [ 198.133036][ T9] hid-multitouch 0003:0EEF:72C4.0006: unknown main item tag 0x0 [ 198.133067][ T9] hid-multitouch 0003:0EEF:72C4.0006: unknown main item tag 0x0 [ 198.133096][ T9] hid-multitouch 0003:0EEF:72C4.0006: unknown main item tag 0x0 [ 198.133125][ T9] hid-multitouch 0003:0EEF:72C4.0006: unknown main item tag 0x0 [ 198.213812][ T9] hid-multitouch 0003:0EEF:72C4.0006: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 198.328286][ T5155] Bluetooth: hci4: command 0x0c1a tx timeout [ 198.328302][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.328335][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 198.370700][ T7551] netlink: 165 bytes leftover after parsing attributes in process `syz.0.682'. [ 198.420649][ T9] usb 2-1: USB disconnect, device number 6 [ 198.633664][ T7554] serio: Serial port ptm0 [ 199.209295][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 199.693196][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.694211][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.694296][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.781299][ T7588] syzkaller1: tun_chr_ioctl cmd 35108 [ 200.769393][ T7619] tap0: tun_chr_ioctl cmd 2147767507 [ 200.990227][ T7624] program syz.0.712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.768231][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 203.589146][ T7688] netlink: 'syz.0.736': attribute type 2 has an invalid length. [ 203.589172][ T7688] netlink: 51 bytes leftover after parsing attributes in process `syz.0.736'. [ 203.599387][ T7688] netlink: 'syz.0.736': attribute type 2 has an invalid length. [ 203.599413][ T7688] netlink: 51 bytes leftover after parsing attributes in process `syz.0.736'. [ 204.268162][ T989] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 204.428228][ T989] usb 3-1: Using ep0 maxpacket: 16 [ 204.431202][ T989] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 204.431231][ T989] usb 3-1: config 0 has no interface number 0 [ 204.431283][ T989] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 204.434512][ T989] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 204.434543][ T989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.434565][ T989] usb 3-1: Product: syz [ 204.434580][ T989] usb 3-1: Manufacturer: syz [ 204.434596][ T989] usb 3-1: SerialNumber: syz [ 204.461254][ T989] usb 3-1: config 0 descriptor?? [ 204.568142][ T5923] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 204.725096][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 204.735059][ T5923] usb 2-1: unable to get BOS descriptor or descriptor too short [ 204.736707][ T5923] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 204.736765][ T5923] usb 2-1: config 7 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 204.736794][ T5923] usb 2-1: No eUSB2 isoc ep 7 companion for config 7 interface 0 altsetting 0 [ 204.736817][ T5923] usb 2-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.790625][ T5923] usb 2-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 204.790657][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.790680][ T5923] usb 2-1: Product: syz [ 204.790696][ T5923] usb 2-1: Manufacturer: syz [ 204.790713][ T5923] usb 2-1: SerialNumber: syz [ 205.112289][ T989] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.214/input/input14 [ 205.194427][ T5923] usb 2-1: USB disconnect, device number 7 [ 205.329620][ T31] usb 3-1: USB disconnect, device number 7 [ 205.818203][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 205.970907][ T45] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.970950][ T45] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 205.970995][ T45] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 205.971021][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.035331][ T7720] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 206.078544][ T45] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.402351][ T45] usb 5-1: USB disconnect, device number 6 [ 206.542847][ T6473] udevd[6473]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.708208][ T989] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 206.861131][ T989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.861166][ T989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 206.861203][ T989] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 206.861224][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.871850][ T989] usb 2-1: config 0 descriptor?? [ 206.876574][ T7737] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 207.347368][ T989] saitek 0003:06A3:0CCD.0007: item fetching failed at offset 0/2 [ 207.351045][ T989] saitek 0003:06A3:0CCD.0007: parse failed [ 207.351186][ T989] saitek 0003:06A3:0CCD.0007: probe with driver saitek failed with error -22 [ 207.483528][ T7750] netlink: 44 bytes leftover after parsing attributes in process `syz.4.754'. [ 207.483936][ T7750] netem: unknown loss type 12 [ 207.483956][ T7750] netem: change failed [ 207.608924][ T989] usb 2-1: USB disconnect, device number 8 [ 207.741640][ T7754] netlink: 'syz.3.756': attribute type 2 has an invalid length. [ 210.222420][ T7816] ipvlan2: entered promiscuous mode [ 210.222479][ T7816] ipvlan2: entered allmulticast mode [ 210.222495][ T7816] macvlan1: entered allmulticast mode [ 210.222509][ T7816] veth1_vlan: entered allmulticast mode [ 211.120923][ T7835] program syz.0.786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.082440][ T7943] autofs4:pid:7943:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4), cmd(0xc018937e) [ 215.082473][ T7943] autofs4:pid:7943:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 215.488508][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.831'. [ 215.689876][ T5821] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 215.850382][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 215.867440][ T5821] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 215.867476][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.919759][ T5821] usb 2-1: config 0 descriptor?? [ 216.004885][ T5821] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 216.608106][ T5923] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 216.763018][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.763056][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.763098][ T5923] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 216.763124][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.814267][ T5821] gspca_vc032x: reg_w err -71 [ 216.814298][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.814309][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.814319][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.814329][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.814337][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.814347][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.814356][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.814365][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.814374][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.814383][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.814393][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.814402][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.814412][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.814421][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.814431][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.814441][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.814450][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.814459][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.814468][ T5821] gspca_vc032x: Unknown sensor... [ 216.814559][ T5821] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 216.833819][ T5821] usb 2-1: USB disconnect, device number 9 [ 216.952869][ T5923] usb 5-1: config 0 descriptor?? [ 217.411073][ T5923] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 217.411115][ T5923] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 217.439366][ T7979] netlink: 'syz.2.844': attribute type 4 has an invalid length. [ 217.464753][ T5923] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 217.842336][ T5923] usb 5-1: USB disconnect, device number 7 [ 217.968313][ T5821] kernel read not supported for file /dsp (pid: 5821 comm: kworker/0:3) [ 218.303260][ T7997] 9pnet_fd: Insufficient options for proto=fd [ 218.779707][ T5839] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 218.781926][ T5839] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 218.852647][ T8015] netlink: 128 bytes leftover after parsing attributes in process `syz.0.860'. [ 219.001517][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.863'. [ 219.210731][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.865'. [ 219.217808][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 220.120877][ T8041] erspan0: entered promiscuous mode [ 220.808878][ T8061] Attempt to restore checkpoint with obsolete wellknown handles [ 220.814655][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 220.835201][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 221.107185][ T8068] syz.1.885 uses obsolete (PF_INET,SOCK_PACKET) [ 221.344994][ T8078] netlink: 31 bytes leftover after parsing attributes in process `syz.4.888'. [ 221.359860][ T8075] gretap0: entered promiscuous mode [ 221.778219][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 221.929272][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 221.933010][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 221.933048][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.937318][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 221.937351][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.937373][ T31] usb 3-1: Product: syz [ 221.937395][ T31] usb 3-1: Manufacturer: syz [ 221.937412][ T31] usb 3-1: SerialNumber: syz [ 222.068164][ T5821] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 222.261118][ T5821] usb 1-1: Using ep0 maxpacket: 32 [ 222.266676][ T5821] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 222.266708][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.280670][ T5821] usb 1-1: config 0 descriptor?? [ 222.309406][ T31] usbhid 3-1:1.0: can't add hid device: -71 [ 222.309544][ T31] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 222.337313][ T8096] Driver unsupported XDP return value 0 on prog (id 76) dev N/A, expect packet loss! [ 222.351082][ T31] usb 3-1: USB disconnect, device number 8 [ 222.390301][ T6384] udevd[6384]: setting mode of /dev/bus/usb/003/008 to 020664 failed: No such file or directory [ 222.390537][ T6384] udevd[6384]: setting owner of /dev/bus/usb/003/008 to uid=0, gid=0 failed: No such file or directory [ 222.536327][ T8098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.565015][ T5821] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 222.579404][ T5821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 222.584426][ T5821] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 222.584484][ T5821] usb 1-1: media controller created [ 222.759004][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.811609][ T5839] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 222.813810][ T5839] Bluetooth: hci1: Injecting HCI hardware error event [ 222.815905][ T5839] Bluetooth: hci1: hardware error 0x00 [ 222.868191][ T5821] az6027: usb out operation failed. (-71) [ 222.869709][ T5821] az6027: usb out operation failed. (-71) [ 222.869730][ T5821] stb0899_attach: Driver disabled by Kconfig [ 222.869742][ T5821] az6027: no front-end attached [ 222.869742][ T5821] [ 222.870179][ T5821] az6027: usb out operation failed. (-71) [ 222.870195][ T5821] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 222.882193][ T5821] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 222.886937][ T5821] dvb-usb: schedule remote query interval to 400 msecs. [ 222.886965][ T5821] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 222.906904][ T5821] usb 1-1: USB disconnect, device number 9 [ 223.023317][ T8109] netlink: 216 bytes leftover after parsing attributes in process `syz.1.905'. [ 223.238289][ T5945] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 223.249378][ T5821] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 223.400860][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 223.400922][ T5945] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 223.400950][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.491116][ T5945] usb 4-1: config 0 descriptor?? [ 223.954545][ T5945] logitech 0003:046D:CA03.0009: unbalanced delimiter at end of report description [ 223.955491][ T5945] logitech 0003:046D:CA03.0009: parse failed [ 223.955606][ T5945] logitech 0003:046D:CA03.0009: probe with driver logitech failed with error -22 [ 224.399258][ T5923] usb 4-1: USB disconnect, device number 8 [ 224.888325][ T5839] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 225.293334][ T8154] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.922'. [ 225.608840][ T8161] input: syz0 as /devices/virtual/input/input16 [ 226.383986][ T8167] cgroup: fork rejected by pids controller in /syz4 [ 226.544083][ T8212] xt_socket: unknown flags 0x6 [ 228.108125][ T5923] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 228.260368][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.260410][ T5923] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 228.260431][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.265666][ T5923] usb 1-1: config 0 descriptor?? [ 228.388117][ T5821] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 228.538147][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 228.540824][ T5821] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 228.540855][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.590930][ T5821] usb 5-1: config 0 descriptor?? [ 228.813781][ T5923] nintendo 0003:057E:200E.000A: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 228.870063][ T5923] nintendo 0003:057E:200E.000A: Failed charging grip handshake [ 228.870096][ T5923] nintendo 0003:057E:200E.000A: Failed to initialize controller; ret=-110 [ 228.904348][ T5821] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 228.973855][ T5821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 228.988871][ T5821] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 228.988931][ T5821] usb 5-1: media controller created [ 229.043368][ T5923] nintendo 0003:057E:200E.000A: probe - fail = -110 [ 229.043620][ T5923] nintendo 0003:057E:200E.000A: probe with driver nintendo failed with error -110 [ 229.066245][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.172821][ T5923] usb 1-1: USB disconnect, device number 10 [ 229.225517][ T8255] fido_id[8255]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 229.244795][ T5821] az6027: usb out operation failed. (-71) [ 229.245221][ T5821] az6027: usb out operation failed. (-71) [ 229.245235][ T5821] stb0899_attach: Driver disabled by Kconfig [ 229.245245][ T5821] az6027: no front-end attached [ 229.245245][ T5821] [ 229.245656][ T5821] az6027: usb out operation failed. (-71) [ 229.245671][ T5821] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 229.322115][ T5821] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 229.343707][ T5821] dvb-usb: schedule remote query interval to 400 msecs. [ 229.343733][ T5821] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 229.369232][ T5821] usb 5-1: USB disconnect, device number 8 [ 229.594898][ T5821] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 230.021573][ T8273] serio: Serial port ptm0 [ 231.902012][ T8315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.979'. [ 232.119829][ T38] audit: type=1326 audit(1757361466.017:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8317 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 232.119889][ T38] audit: type=1326 audit(1757361466.017:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8317 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 232.140435][ T38] audit: type=1326 audit(1757361466.047:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8317 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 232.140492][ T38] audit: type=1326 audit(1757361466.047:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8317 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 232.140540][ T38] audit: type=1326 audit(1757361466.047:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8317 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 232.140588][ T38] audit: type=1326 audit(1757361466.047:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8317 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 232.140635][ T38] audit: type=1326 audit(1757361466.047:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8317 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 232.140683][ T38] audit: type=1326 audit(1757361466.047:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8317 comm="syz.0.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 232.620421][ T8333] netlink: 32 bytes leftover after parsing attributes in process `syz.1.986'. [ 232.620461][ T8333] netlink: 152 bytes leftover after parsing attributes in process `syz.1.986'. [ 232.709277][ T8333] netlink: 152 bytes leftover after parsing attributes in process `syz.1.986'. [ 232.758927][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 232.921026][ T45] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 232.921056][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.941480][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.989'. [ 232.941857][ T8339] netlink: 39 bytes leftover after parsing attributes in process `syz.1.989'. [ 232.975839][ T45] usb 1-1: config 0 descriptor?? [ 232.997512][ T45] cp210x 1-1:0.0: cp210x converter detected [ 233.412155][ T45] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 233.442827][ T45] usb 1-1: cp210x converter now attached to ttyUSB0 [ 233.490392][ T8348] netlink: 100 bytes leftover after parsing attributes in process `syz.3.994'. [ 233.642768][ T45] usb 1-1: USB disconnect, device number 11 [ 233.677165][ T45] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 233.864841][ T45] cp210x 1-1:0.0: device disconnected [ 233.949993][ T8353] tun0: tun_chr_ioctl cmd 1074025680 [ 234.078382][ T989] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 234.241496][ T989] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 234.241532][ T989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.280694][ T989] usb 4-1: config 0 descriptor?? [ 234.291346][ T989] cp210x 4-1:0.0: cp210x converter detected [ 234.394692][ T8366] netlink: 'syz.2.1002': attribute type 11 has an invalid length. [ 234.394718][ T8366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1002'. [ 234.891234][ T989] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 234.891304][ T989] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 234.915440][ T989] usb 4-1: cp210x converter now attached to ttyUSB0 [ 234.967458][ T989] usb 4-1: USB disconnect, device number 9 [ 235.050228][ T989] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 235.051042][ T989] cp210x 4-1:0.0: device disconnected [ 235.582741][ T8387] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 235.582899][ T8387] SQUASHFS error: Failed to read block 0x0: -5 [ 235.845294][ T8392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1013'. [ 238.179597][ T38] audit: type=1326 audit(1757361472.087:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8408 comm="syz.1.1021" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94eda4ebe9 code=0x0 [ 238.306361][ T8446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.948886][ T8462] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1045'. [ 239.357550][ T8472] netem: incorrect ge model size [ 239.357592][ T8472] netem: change failed [ 239.759198][ T8483] program syz.2.1055 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.066008][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1059'. [ 240.369403][ T8504] macvlan0: entered promiscuous mode [ 240.394015][ T8504] netlink: 'syz.1.1066': attribute type 2 has an invalid length. [ 240.530818][ T8514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.801944][ T8520] bridge0: entered promiscuous mode [ 240.802437][ T8520] macsec2: entered allmulticast mode [ 240.802455][ T8520] bridge0: entered allmulticast mode [ 241.234882][ T8533] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1079'. [ 241.262172][ T38] audit: type=1326 audit(1757361475.167:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.3.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4d18ebe9 code=0x7ffc0000 [ 241.273587][ T38] audit: type=1326 audit(1757361475.167:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.3.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4d18ebe9 code=0x7ffc0000 [ 241.286510][ T38] audit: type=1326 audit(1757361475.187:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.3.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f9b4d18ebe9 code=0x7ffc0000 [ 241.286573][ T38] audit: type=1326 audit(1757361475.187:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.3.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4d18ebe9 code=0x7ffc0000 [ 241.286621][ T38] audit: type=1326 audit(1757361475.187:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.3.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4d18ebe9 code=0x7ffc0000 [ 241.298361][ T38] audit: type=1326 audit(1757361475.207:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.3.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f9b4d18ebe9 code=0x7ffc0000 [ 241.315978][ T38] audit: type=1326 audit(1757361475.217:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.3.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4d18ebe9 code=0x7ffc0000 [ 241.349699][ T38] audit: type=1326 audit(1757361475.257:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.3.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4d18ebe9 code=0x7ffc0000 [ 241.385520][ T38] audit: type=1326 audit(1757361475.287:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.3.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f9b4d18ebe9 code=0x7ffc0000 [ 241.788465][ T8542] kvm: kvm [8539]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x81 [ 241.882094][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1085'. [ 241.998204][ T5923] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 242.150639][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 242.153367][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.153401][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.153442][ T5923] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 242.153467][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.207802][ T5923] usb 3-1: config 0 descriptor?? [ 242.388163][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 242.574300][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.574328][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.576833][ T45] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 242.576863][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 242.576885][ T45] usb 1-1: SerialNumber: syz [ 242.734501][ T5923] corsair 0003:1B1C:1B02.000B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 242.975112][ T45] usb 1-1: 0:2 : does not exist [ 243.057421][ T45] usb 1-1: USB disconnect, device number 12 [ 243.111167][ T5923] usb 3-1: USB disconnect, device number 9 [ 243.248153][ T6384] udevd[6384]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.319010][ T8563] fido_id[8563]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 243.901392][ T8576] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 244.420088][ T8592] loop2: detected capacity change from 0 to 7 [ 244.567306][ T8592] Dev loop2: unable to read RDB block 7 [ 244.567360][ T8592] loop2: AHDI p1 p2 p3 [ 244.567395][ T8592] loop2: partition table partially beyond EOD, truncated [ 244.586294][ T8592] loop2: p1 start 1601398130 is beyond EOD, truncated [ 244.586332][ T8592] loop2: p2 start 1702059890 is beyond EOD, truncated [ 244.605942][ T8591] Invalid logical block size (5) [ 245.018371][ T8602] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 245.026927][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 246.279360][ T8637] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1129'. [ 246.453882][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 246.453910][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 246.837191][ T8641] cgroup: fork rejected by pids controller in /syz3 [ 246.988301][ T989] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 247.144543][ T989] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 247.144576][ T989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.190317][ T989] usb 5-1: config 0 descriptor?? [ 247.239793][ T989] gspca_main: spca508-2.14.0 probing 8086:0110 [ 247.447896][ T989] gspca_spca508: reg_read err -71 [ 247.448513][ T989] gspca_spca508: reg_read err -71 [ 247.448996][ T989] gspca_spca508: reg_read err -71 [ 247.449425][ T989] gspca_spca508: reg_read err -71 [ 247.449876][ T989] gspca_spca508: reg_read err -71 [ 247.450469][ T989] gspca_spca508: reg write: error -71 [ 247.450565][ T989] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 247.479320][ T989] usb 5-1: USB disconnect, device number 9 [ 247.896039][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 247.896081][ T8932] netlink: 'syz.0.1141': attribute type 30 has an invalid length. [ 247.896100][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1141'. [ 248.927390][ T8964] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1157'. [ 249.018258][ T989] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 249.169591][ T989] usb 4-1: Using ep0 maxpacket: 16 [ 249.172696][ T989] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.172762][ T989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.172793][ T989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 249.172817][ T989] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 249.172843][ T989] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.174519][ T989] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 249.174549][ T989] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 249.174571][ T989] usb 4-1: Manufacturer: syz [ 249.193052][ T989] usb 4-1: config 0 descriptor?? [ 249.638148][ T989] rc_core: IR keymap rc-hauppauge not found [ 249.638171][ T989] Registered IR keymap rc-empty [ 249.638368][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.658248][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.689917][ T989] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 249.693358][ T989] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 249.762472][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.794721][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.810210][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.828221][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.848214][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.868203][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.888205][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.908297][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.928572][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.948532][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.997700][ T989] mceusb 4-1:0.0: Registered Ð… with mce emulator interface version 1 [ 249.997730][ T989] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 250.071019][ T989] usb 4-1: USB disconnect, device number 10 [ 251.437617][ T9025] loop7: detected capacity change from 0 to 7 [ 251.467509][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.467757][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 251.482111][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.482162][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 251.482489][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.482524][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 251.482771][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.482805][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 251.483133][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.483166][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 251.489153][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.489197][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 251.551683][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.551752][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 251.570166][ T9025] ldm_validate_partition_table(): Disk read failed. [ 251.591554][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.591600][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 251.601259][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.601303][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 251.611670][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.611807][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 251.613865][ T9025] Dev loop7: unable to read RDB block 0 [ 251.615177][ T9025] loop7: unable to read partition table [ 251.615583][ T9025] loop7: partition table beyond EOD, truncated [ 251.615607][ T9025] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 253.408118][ T5923] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 253.572798][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 253.572836][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34456, setting to 1024 [ 253.572884][ T5923] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 253.572909][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.624260][ T5923] usb 5-1: config 0 descriptor?? [ 253.625690][ T9068] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.055592][ T5923] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 254.055726][ T5923] cm6533_jd 0003:0D8C:0022.000C: item fetching failed at offset 4/5 [ 254.094646][ T5923] cm6533_jd 0003:0D8C:0022.000C: parse failed [ 254.094768][ T5923] cm6533_jd 0003:0D8C:0022.000C: probe with driver cm6533_jd failed with error -22 [ 254.282508][ T989] usb 5-1: USB disconnect, device number 10 [ 254.495729][ T9086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1215'. [ 254.570948][ T9090] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 254.571249][ T9090] macvtap1: entered allmulticast mode [ 254.571929][ T9090] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 254.665143][ T9090] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 254.665311][ T9090] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 254.818492][ T9096] openvswitch: netlink: Multiple metadata blocks provided [ 257.424946][ T9177] program syz.4.1254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.642101][ T9211] netlink: 'syz.0.1271': attribute type 322 has an invalid length. [ 261.144789][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.144868][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.501828][ T9275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1298'. [ 262.068676][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 262.221304][ T9] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 262.221334][ T9] usb 2-1: config 0 has no interface number 0 [ 262.225374][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 262.225407][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.225430][ T9] usb 2-1: Product: syz [ 262.225445][ T9] usb 2-1: Manufacturer: syz [ 262.225460][ T9] usb 2-1: SerialNumber: syz [ 262.262370][ T9] usb 2-1: config 0 descriptor?? [ 262.486812][ T9] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in cold state, will try to load a firmware [ 262.645412][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 262.645497][ T9] dib0700: firmware download failed at 7 with -22 [ 262.675091][ T9] usb 2-1: USB disconnect, device number 10 [ 263.151863][ T9312] netlink: 'syz.1.1315': attribute type 12 has an invalid length. [ 263.151890][ T9312] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1315'. [ 263.278109][ T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 263.430873][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 263.434046][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 263.434078][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.434100][ T9] usb 1-1: Product: syz [ 263.434191][ T9] usb 1-1: Manufacturer: syz [ 263.434207][ T9] usb 1-1: SerialNumber: syz [ 263.442099][ T9] usb 1-1: config 0 descriptor?? [ 263.672201][ T9323] tipc: Started in network mode [ 263.672237][ T9323] tipc: Node identity ac14140f, cluster identity 4711 [ 263.675032][ T9323] tipc: New replicast peer: 255.255.255.255 [ 263.677040][ T9323] tipc: Enabled bearer , priority 10 [ 263.705358][ T9323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1320'. [ 263.964544][ T9] usb 1-1: USB disconnect, device number 13 [ 264.159463][ T9330] IPVS: persistence engine module ip_vs_pe_ not found [ 264.740563][ T9346] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1331'. [ 264.791593][ T31] tipc: Node number set to 2886997007 [ 265.528262][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 265.608282][ T9367] Falling back ldisc for ptm0. [ 265.678055][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 265.681037][ T31] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 265.681100][ T31] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 265.681127][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.739832][ T31] hub 3-1:32.0: bad descriptor, ignoring hub [ 265.739875][ T31] hub 3-1:32.0: probe with driver hub failed with error -5 [ 266.363241][ T31] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 266.377869][ T9386] netlink: 'syz.1.1348': attribute type 18 has an invalid length. [ 266.476841][ T9384] mkiss: ax0: crc mode is auto. [ 266.964846][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1354'. [ 267.341409][ T9407] netlink: 'syz.0.1358': attribute type 3 has an invalid length. [ 267.518559][ T5923] usb 3-1: USB disconnect, device number 10 [ 267.832070][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1365'. [ 268.195026][ T9432] netlink: 'syz.1.1368': attribute type 7 has an invalid length. [ 268.195049][ T9432] netlink: 'syz.1.1368': attribute type 8 has an invalid length. [ 268.195063][ T9432] netlink: 'syz.1.1368': attribute type 4 has an invalid length. [ 268.195077][ T9432] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1368'. [ 268.594651][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 268.594671][ T38] audit: type=1326 audit(1757361503.499:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9441 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fa3bebe9 code=0x7ffc0000 [ 268.594726][ T38] audit: type=1326 audit(1757361503.499:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9441 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fa3bebe9 code=0x7ffc0000 [ 268.648714][ T38] audit: type=1326 audit(1757361503.499:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9441 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f67fa3bebe9 code=0x7ffc0000 [ 268.762882][ T38] audit: type=1326 audit(1757361503.669:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9448 comm="syz.0.1378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc0dc1ebe9 code=0x0 [ 268.901774][ T38] audit: type=1326 audit(1757361503.809:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9441 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fa3bebe9 code=0x7ffc0000 [ 268.901832][ T38] audit: type=1326 audit(1757361503.809:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9441 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fa3bebe9 code=0x7ffc0000 [ 269.044569][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1380'. [ 269.885656][ T9487] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1394'. [ 269.896996][ T9483] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 269.897211][ T9483] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 269.897751][ T9483] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 269.897917][ T9483] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 269.899177][ T9483] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 269.899345][ T9483] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 269.899501][ T9483] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 269.899664][ T9483] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 269.899836][ T9483] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 269.900003][ T9483] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 270.257477][ T9497] netlink: 'syz.1.1399': attribute type 1 has an invalid length. [ 270.257504][ T9497] netlink: 'syz.1.1399': attribute type 1 has an invalid length. [ 270.257519][ T9497] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1399'. [ 270.257549][ T9497] netlink: 'syz.1.1399': attribute type 1 has an invalid length. [ 270.257564][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1399'. [ 271.148123][ T989] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 271.300650][ T989] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 271.300713][ T989] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 271.300738][ T989] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 271.300764][ T989] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 271.300792][ T989] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 243 [ 271.304005][ T989] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 271.304037][ T989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.304060][ T989] usb 3-1: Product: syz [ 271.304076][ T989] usb 3-1: Manufacturer: syz [ 271.304092][ T989] usb 3-1: SerialNumber: syz [ 271.435753][ T9514] loop7: detected capacity change from 0 to 524255232 [ 271.440737][ T9506] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 271.443004][ T989] usb 3-1: ucan: probing device on interface #0 [ 271.443035][ T989] usb 3-1: ucan: invalid out_ep MaxPacketSize [ 271.443052][ T989] usb 3-1: ucan: probe failed; try to update the device firmware [ 271.706897][ T989] usb 3-1: USB disconnect, device number 11 [ 272.507490][ T9534] input: syz1 as /devices/virtual/input/input19 [ 272.610909][ T67] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.610970][ T67] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.611015][ T67] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.611058][ T67] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.743955][ T9540] ======================================================= [ 272.743955][ T9540] WARNING: The mand mount option has been deprecated and [ 272.743955][ T9540] and is ignored by this kernel. Remove the mand [ 272.743955][ T9540] option from the mount to silence this warning. [ 272.743955][ T9540] ======================================================= [ 273.951728][ T5821] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 274.108215][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 274.110853][ T5821] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 274.110883][ T5821] usb 3-1: config 0 has no interface number 0 [ 274.110957][ T5821] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 274.110995][ T5821] usb 3-1: config 0 interface 196 has no altsetting 0 [ 274.117491][ T5821] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 274.117525][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.117552][ T5821] usb 3-1: Product: syz [ 274.117567][ T5821] usb 3-1: Manufacturer: syz [ 274.117583][ T5821] usb 3-1: SerialNumber: syz [ 274.149511][ T5821] usb 3-1: config 0 descriptor?? [ 274.151037][ T9571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 274.877304][ T5821] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 275.106051][ T5821] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 275.158669][ T5821] usb 3-1: USB disconnect, device number 12 [ 275.481271][ T5821] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 276.047731][ T9613] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1450'. [ 276.421591][ T9627] program syz.4.1457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.760335][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1463'. [ 277.008306][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1466'. [ 277.538802][ T9666] program syz.1.1474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.851740][ T9678] syz.3.1480 (9678): /proc/9676/oom_adj is deprecated, please use /proc/9676/oom_score_adj instead. [ 278.070318][ T5839] Bluetooth: hci2: unexpected cc 0x2039 length: 2 > 1 [ 278.070355][ T5839] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 279.468415][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 279.500046][ T9729] can0: slcan on ttyS3. [ 279.638132][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 279.644398][ T31] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 279.650697][ T31] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 279.650731][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.650751][ T31] usb 2-1: Product: syz [ 279.650766][ T31] usb 2-1: Manufacturer: syz [ 279.650783][ T31] usb 2-1: SerialNumber: syz [ 279.703581][ T31] usb 2-1: config 0 descriptor?? [ 279.714687][ T31] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 279.714748][ T31] usb 2-1: setting power ON [ 279.714769][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 279.732135][ T9729] can0 (unregistered): slcan off ttyS3. [ 279.732746][ T9729] Falling back ldisc for ttyS3. [ 279.748579][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 279.752904][ T31] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 279.752977][ T31] usb 2-1: media controller created [ 279.827317][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.864677][ T31] usb 2-1: selecting invalid altsetting 6 [ 279.864704][ T31] usb 2-1: digital interface selection failed (-22) [ 279.864721][ T31] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 279.865565][ T31] usb 2-1: setting power OFF [ 279.865584][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 279.865601][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 279.865614][ T31] (NULL device *): no alternate interface [ 279.918725][ T9725] dvb-usb: bulk message failed: -22 (3/0) [ 279.918754][ T9725] dvb-usb: bulk message failed: -22 (37/0) [ 279.919233][ T9725] dvb-usb: bulk message failed: -22 (3/0) [ 279.919255][ T9725] dvb-usb: bulk message failed: -22 (4/0) [ 279.919271][ T9725] cxusb: i2c read failed [ 280.005935][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 280.020679][ T31] usb 2-1: USB disconnect, device number 11 [ 280.211897][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'. [ 280.212108][ T9742] net_ratelimit: 44 callbacks suppressed [ 280.212122][ T9742] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 280.212152][ T9742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.790987][ T5923] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 280.960945][ T5923] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 280.960977][ T5923] usb 2-1: config 7 has no interface number 0 [ 280.989010][ T5923] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 280.989045][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.989068][ T5923] usb 2-1: Product: syz [ 280.989084][ T5923] usb 2-1: Manufacturer: syz [ 280.989100][ T5923] usb 2-1: SerialNumber: syz [ 281.882399][ T5923] as10x_usb: device has been detected [ 281.883481][ T5923] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 281.979397][ T5923] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 282.137600][ T9784] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1529'. [ 282.286271][ T5923] as10x_usb: error during firmware upload part1 [ 282.287142][ T5923] Registered device Elgato EyeTV DTT Deluxe [ 282.302603][ T5923] usb 2-1: USB disconnect, device number 12 [ 282.476024][ T5923] Unregistered device Elgato EyeTV DTT Deluxe [ 282.499286][ T5923] as10x_usb: device has been disconnected [ 282.534072][ T9792] ptrace attach of "./syz-executor exec"[5847] was attempted by "TIPCv2 Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ [ 283.026973][ T9805] gfs2: gfs2 mount does not exist [ 283.033071][ T38] audit: type=1804 audit(1757361517.889:960): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1537" name="/newroot/313/bus" dev="tmpfs" ino=1601 res=1 errno=0 [ 283.329394][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 284.022060][ T9836] capability: warning: `syz.1.1551' uses 32-bit capabilities (legacy support in use) [ 284.158199][ T5821] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 284.283114][ T9843] vxlan1: entered promiscuous mode [ 284.283149][ T9843] vxlan1: entered allmulticast mode [ 284.308094][ T5821] usb 4-1: Using ep0 maxpacket: 8 [ 284.310689][ T5821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 284.314062][ T5821] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 284.314095][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.314116][ T5821] usb 4-1: Product: syz [ 284.314132][ T5821] usb 4-1: Manufacturer: syz [ 284.314148][ T5821] usb 4-1: SerialNumber: syz [ 284.339132][ T5821] usb 4-1: config 0 descriptor?? [ 284.384020][ T5821] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 284.558721][ T5821] snd_usb_toneport 4-1:0.0: set_interface failed [ 284.559377][ T5821] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 284.559596][ T5821] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 284.592806][ T5821] usb 4-1: USB disconnect, device number 11 [ 287.601800][ T38] audit: type=1326 audit(1757361522.499:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9919 comm="syz.4.1589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67fa3bebe9 code=0x0 [ 288.141577][ T9937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.008893][ T9966] netlink: 'syz.3.1611': attribute type 1 has an invalid length. [ 289.409275][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.684144][ T9975] batadv_slave_0: entered promiscuous mode [ 289.712667][ T9974] batadv_slave_0: left promiscuous mode [ 289.790824][ T9978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.158210][ T989] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 290.308183][ T989] usb 3-1: Using ep0 maxpacket: 32 [ 290.311485][ T989] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 290.322148][ T989] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 290.322188][ T989] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 290.322212][ T989] usb 3-1: Product: syz [ 290.322230][ T989] usb 3-1: Manufacturer: syz [ 290.322248][ T989] usb 3-1: SerialNumber: syz [ 290.375077][ T989] usb 3-1: config 0 descriptor?? [ 290.376329][ T9982] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 290.619291][T10001] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.621560][T10001] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.651263][ T989] usb 3-1: USB disconnect, device number 13 [ 290.988580][T10010] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 292.028851][ T38] audit: type=1326 audit(1757361526.939:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10045 comm="syz.4.1648" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67fa3bebe9 code=0x0 [ 292.048311][ T6024] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 292.201048][ T6024] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 292.201082][ T6024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.206747][ T6024] usb 2-1: config 0 descriptor?? [ 292.239912][ T6024] cp210x 2-1:0.0: cp210x converter detected [ 292.376152][T10057] netlink: 'syz.3.1652': attribute type 25 has an invalid length. [ 292.376176][T10057] netlink: 'syz.3.1652': attribute type 28 has an invalid length. [ 292.664588][ T6024] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 292.868297][ T6024] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 292.868329][ T6024] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 292.876333][ T6024] usb 2-1: cp210x converter now attached to ttyUSB0 [ 292.916091][ T6024] usb 2-1: USB disconnect, device number 13 [ 292.930646][ T6024] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 292.932821][ T6024] cp210x 2-1:0.0: device disconnected [ 292.987494][ T38] audit: type=1326 audit(1757361527.889:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10069 comm="syz.3.1658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b4d18ebe9 code=0x0 [ 295.562248][T10141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1686'. [ 296.310828][T10165] input: syz0 as /devices/virtual/input/input20 [ 296.934715][ T38] audit: type=1326 audit(1757361531.839:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10158 comm="syz.1.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94eda4ebe9 code=0x7fc00000 [ 297.121985][T10192] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 297.148332][T10192] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 299.485233][T10247] netlink: 'syz.4.1736': attribute type 10 has an invalid length. [ 299.847097][T10256] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 10256 comm: syz.4.1740) [ 299.884992][ T38] audit: type=1800 audit(1757361534.749:965): pid=10256 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1740" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=26232 res=0 errno=0 [ 300.640110][ T45] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 300.804647][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.804696][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.816905][ T45] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 300.816946][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.816972][ T45] usb 4-1: Product: syz [ 300.816989][ T45] usb 4-1: Manufacturer: syz [ 300.817007][ T45] usb 4-1: SerialNumber: syz [ 300.844490][ T45] usb 4-1: config 0 descriptor?? [ 300.869572][ T45] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 300.905430][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 300.906814][ T45] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 300.906875][ T45] usb 4-1: media controller created [ 301.007121][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.165466][ T45] DVB: Unable to find symbol tda10046_attach() [ 301.165485][ T45] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 301.165501][ T45] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 301.492279][ T989] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 301.575642][ T45] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 301.585001][ T45] usb 4-1: USB disconnect, device number 12 [ 301.642913][ T989] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 301.642943][ T989] usb 3-1: config 0 has no interface number 0 [ 301.645994][ T989] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 301.646027][ T989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.646047][ T989] usb 3-1: Product: syz [ 301.646062][ T989] usb 3-1: Manufacturer: syz [ 301.646076][ T989] usb 3-1: SerialNumber: syz [ 301.721548][ T989] usb 3-1: config 0 descriptor?? [ 301.939718][ T989] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 301.947834][ T989] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 301.970012][ T989] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 301.970082][ T989] usb 3-1: media controller created [ 302.026844][ T989] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.151735][ T989] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 302.204158][ T989] usb 3-1: USB disconnect, device number 14 [ 302.648154][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 303.401938][T10336] 9pnet_fd: p9_fd_create_unix (10336): problem connecting socket: ./file0: -30 [ 303.670008][ T38] audit: type=1326 audit(1757361538.579:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10343 comm="syz.2.1777" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca2202ebe9 code=0x0 [ 303.970333][ T5839] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 304.244621][T10370] tap0: tun_chr_ioctl cmd 1074025677 [ 304.244864][T10370] tap0: linktype set to 823 [ 305.084395][ T45] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 305.193979][ T45] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 305.220442][T10395] bond0: entered promiscuous mode [ 305.220468][T10395] bond_slave_0: entered promiscuous mode [ 305.220745][T10395] bond_slave_1: entered promiscuous mode [ 305.260643][T10395] bond0: left promiscuous mode [ 305.260668][T10395] bond_slave_0: left promiscuous mode [ 305.260962][T10395] bond_slave_1: left promiscuous mode [ 305.594988][T10405] syz_tun: entered promiscuous mode [ 305.640642][T10405] syz_tun: left promiscuous mode [ 305.768461][ T6024] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 305.920737][ T6024] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 305.920769][ T6024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.938226][ T6024] usb 3-1: config 0 descriptor?? [ 305.968817][ T6024] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 306.182833][ T6024] gp8psk: usb in 128 operation failed. [ 306.390994][ T6024] gp8psk: FW Version = 244.249.196 (0xf4f9c4) Build 2015/223/09 [ 306.598997][ T6024] gp8psk: usb in 149 operation failed. [ 306.599022][ T6024] gp8psk: failed to get FPGA version [ 306.600077][ T6024] gp8psk: usb in 138 operation failed. [ 306.600113][ T6024] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 306.600156][ T6024] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 306.666079][ T6024] usb 3-1: USB disconnect, device number 15 [ 307.000832][ T38] audit: type=1326 audit(1757361541.909:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10427 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 307.000892][ T38] audit: type=1326 audit(1757361541.909:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10427 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 307.046260][ T38] audit: type=1326 audit(1757361541.949:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10427 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 307.046329][ T38] audit: type=1326 audit(1757361541.949:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10427 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 307.046384][ T38] audit: type=1326 audit(1757361541.949:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10427 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 307.055354][ T38] audit: type=1326 audit(1757361541.959:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10427 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 307.071392][ T38] audit: type=1326 audit(1757361541.969:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10427 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 307.071459][ T38] audit: type=1326 audit(1757361541.979:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10427 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 307.131568][ T38] audit: type=1326 audit(1757361542.039:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10427 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 307.132012][ T38] audit: type=1326 audit(1757361542.039:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10427 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 308.275651][T10473] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.108205][ T989] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 309.288316][ T989] usb 3-1: Using ep0 maxpacket: 8 [ 309.295623][ T989] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 309.295687][ T989] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 309.295720][ T989] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.295749][ T989] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 309.295779][ T989] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 309.300577][ T989] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 309.300638][ T989] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 309.300669][ T989] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.300697][ T989] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 309.300725][ T989] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 309.304966][ T989] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 309.305034][ T989] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 309.305068][ T989] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.305100][ T989] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 309.305131][ T989] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 309.327284][ T989] usb 3-1: string descriptor 0 read error: -22 [ 309.327471][ T989] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 309.327502][ T989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.470926][ T989] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 309.641282][ T989] usb 3-1: USB disconnect, device number 16 [ 309.790486][T10519] netlink: 'syz.1.1856': attribute type 14 has an invalid length. [ 309.941100][T10521] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 309.951918][T10521] hsr1: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network [ 309.951951][T10521] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 309.953066][T10521] hsr1: entered promiscuous mode [ 310.120384][T10530] binder: 10527:10530 ioctl 40046205 0 returned -22 [ 310.255816][T10535] ipvlan2: entered promiscuous mode [ 310.256003][T10535] ipvlan2: entered allmulticast mode [ 310.256020][T10535] hsr0: entered allmulticast mode [ 310.256035][T10535] hsr_slave_0: entered allmulticast mode [ 310.256060][T10535] hsr_slave_1: entered allmulticast mode [ 310.368459][ C0] vkms_vblank_simulate: vblank timer overrun [ 310.513689][T10543] netlink: 'syz.0.1866': attribute type 21 has an invalid length. [ 310.558339][T10543] netlink: 'syz.0.1866': attribute type 1 has an invalid length. [ 310.558366][T10543] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1866'. [ 310.636495][T10546] loop6: detected capacity change from 0 to 524288000 [ 310.799264][T10546] loop6: detected capacity change from 524288000 to 1 [ 310.922094][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1871'. [ 310.922138][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1871'. [ 311.223823][T10560] sp0: Synchronizing with TNC [ 311.516803][T10571] netlink: 'syz.3.1879': attribute type 1 has an invalid length. [ 311.516830][T10571] netlink: 'syz.3.1879': attribute type 2 has an invalid length. [ 311.538780][T10571] netlink: 'syz.3.1879': attribute type 1 has an invalid length. [ 311.538804][T10571] netlink: 'syz.3.1879': attribute type 2 has an invalid length. [ 311.541968][ T5847] block device autoloading is deprecated and will be removed. [ 311.636009][T10574] tun0: tun_chr_ioctl cmd 1074025673 [ 311.918422][T10582] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1885'. [ 312.167453][T10591] vivid-002: disconnect [ 312.171920][T10587] vivid-002: reconnect [ 312.448268][T10599] overlay: filesystem on ./file0 is read-only [ 313.018714][ T45] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 313.180309][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 313.182904][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.186089][ T45] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 313.186122][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.186144][ T45] usb 5-1: Product: syz [ 313.186160][ T45] usb 5-1: Manufacturer: syz [ 313.186176][ T45] usb 5-1: SerialNumber: syz [ 313.201026][ T45] usb 5-1: config 0 descriptor?? [ 313.300204][ T45] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 313.454709][ T989] usb 5-1: USB disconnect, device number 11 [ 313.467745][ T67] usb 5-1: Failed to submit usb control message: -71 [ 313.467788][ T67] usb 5-1: unable to send the bmi data to the device: -71 [ 313.467815][ T67] usb 5-1: unable to get target info from device [ 313.467833][ T67] usb 5-1: could not get target info (-71) [ 313.470997][ T67] usb 5-1: could not probe fw (-71) [ 313.500934][T10623] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1902'. [ 313.500992][T10623] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1902'. [ 314.988549][ T38] audit: type=1326 audit(1757361549.889:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10659 comm="syz.4.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67fa3b5ba7 code=0x7ffc0000 [ 314.988864][ T38] audit: type=1326 audit(1757361549.899:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10659 comm="syz.4.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f67fa35adb9 code=0x7ffc0000 [ 314.989184][ T38] audit: type=1326 audit(1757361549.899:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10659 comm="syz.4.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67fa3b5ba7 code=0x7ffc0000 [ 314.989453][ T38] audit: type=1326 audit(1757361549.899:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10659 comm="syz.4.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f67fa35adb9 code=0x7ffc0000 [ 314.991394][ T38] audit: type=1326 audit(1757361549.899:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10659 comm="syz.4.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67fa3b5ba7 code=0x7ffc0000 [ 314.991724][ T38] audit: type=1326 audit(1757361549.899:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10659 comm="syz.4.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f67fa35adb9 code=0x7ffc0000 [ 315.000768][ T38] audit: type=1326 audit(1757361549.909:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10659 comm="syz.4.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67fa3b5ba7 code=0x7ffc0000 [ 315.000844][ T38] audit: type=1326 audit(1757361549.909:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10659 comm="syz.4.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f67fa35adb9 code=0x7ffc0000 [ 315.000895][ T38] audit: type=1326 audit(1757361549.909:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10659 comm="syz.4.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fa3bebe9 code=0x7ffc0000 [ 315.002986][ T38] audit: type=1326 audit(1757361549.909:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10659 comm="syz.4.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f67fa3b5ba7 code=0x7ffc0000 [ 315.089318][T10662] netlink: 'syz.0.1919': attribute type 10 has an invalid length. [ 315.197460][T10662] bond0: (slave bond_slave_0): Releasing backup interface [ 316.679202][T10714] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1943'. [ 317.050419][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1945'. [ 317.050451][T10719] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1945'. [ 319.040609][T10772] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.052735][T10772] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.110122][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1970'. [ 319.110150][T10772] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 319.523551][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1977'. [ 319.523584][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1977'. [ 320.188155][ T6024] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 320.344643][ T6024] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.344674][ T6024] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 320.344730][ T6024] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 320.344757][ T6024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.390538][ T6024] usb 5-1: config 0 descriptor?? [ 320.411362][ T6024] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 320.411427][ T6024] dvb-usb: bulk message failed: -22 (3/0) [ 320.416654][ T6024] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 320.417831][ T6024] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 320.417896][ T6024] usb 5-1: media controller created [ 320.455248][ T6024] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.471563][ T6024] dvb-usb: bulk message failed: -22 (6/0) [ 320.471691][ T6024] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 320.473851][T10819] netlink: 'syz.0.1993': attribute type 5 has an invalid length. [ 320.476489][ T6024] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 320.499605][ T989] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 320.529157][ T6024] dvb-usb: schedule remote query interval to 150 msecs. [ 320.529186][ T6024] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 320.658338][ T989] usb 4-1: Using ep0 maxpacket: 16 [ 320.661161][ T989] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 320.661191][ T989] usb 4-1: config 0 has no interface number 0 [ 320.661242][ T989] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 320.661280][ T989] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 320.668708][ T989] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 320.668745][ T989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.668770][ T989] usb 4-1: Product: syz [ 320.668789][ T989] usb 4-1: Manufacturer: syz [ 320.668808][ T989] usb 4-1: SerialNumber: syz [ 320.689707][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 320.689759][ T5924] dvb-usb: error while querying for an remote control event. [ 320.689899][ T989] usb 4-1: config 0 descriptor?? [ 320.692725][T10815] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 320.705317][T10815] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 320.848200][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 320.848239][ T5924] dvb-usb: error while querying for an remote control event. [ 320.992266][T10815] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 320.993007][T10815] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 321.011441][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 321.011481][ T5924] dvb-usb: error while querying for an remote control event. [ 321.169510][ T6024] dvb-usb: bulk message failed: -22 (1/0) [ 321.169548][ T6024] dvb-usb: error while querying for an remote control event. [ 321.329811][ T6024] dvb-usb: bulk message failed: -22 (1/0) [ 321.329845][ T6024] dvb-usb: error while querying for an remote control event. [ 321.411454][ T989] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 321.411789][ T989] asix 4-1:0.251: probe with driver asix failed with error -524 [ 321.489005][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 321.489046][ T5924] dvb-usb: error while querying for an remote control event. [ 321.630756][ T989] usb 4-1: USB disconnect, device number 13 [ 321.648131][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 321.648162][ T5924] dvb-usb: error while querying for an remote control event. [ 321.655495][ T5924] usb 5-1: USB disconnect, device number 12 [ 321.733276][ T5924] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 322.574896][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.574980][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.623585][T10934] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2042'. [ 326.077706][ T5924] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 326.231024][ T5924] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 326.231061][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.236544][ T5924] usb 1-1: config 0 descriptor?? [ 326.337462][T10956] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2052'. [ 326.387866][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2053'. [ 326.476266][ T5924] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 326.736554][ T5924] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 326.736582][ T5924] [drm] Initialized udl on minor 2 [ 326.873923][ T5924] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 326.889852][ T5924] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 327.031218][T10976] netlink: 'syz.2.2062': attribute type 13 has an invalid length. [ 327.086716][ T45] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 327.096310][ T5821] usb 1-1: USB disconnect, device number 14 [ 327.106209][ T45] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 327.120258][T10976] gretap0: refused to change device tx_queue_len [ 327.120824][T10976] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 328.268277][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 328.318391][T11017] block nbd1: server does not support multiple connections per device. [ 328.322496][T11017] block nbd1: shutting down sockets [ 328.428115][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 328.432900][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 328.432935][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.476199][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 328.476226][ T9] pvrusb2: ********** [ 328.476233][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 328.476248][ T9] pvrusb2: Important functionality might not be entirely working. [ 328.476258][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 328.476271][ T9] pvrusb2: ********** [ 328.737077][ T2370] pvrusb2: Invalid write control endpoint [ 328.932140][ T5924] usb 3-1: USB disconnect, device number 17 [ 328.954056][ T2370] pvrusb2: Invalid write control endpoint [ 328.954074][ T2370] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 328.954086][ T2370] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 328.954095][ T2370] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 328.954111][ T2370] pvrusb2: Device being rendered inoperable [ 328.984189][ T2370] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 328.985444][ T2370] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 329.005298][ T2370] pvrusb2: Attached sub-driver cx25840 [ 329.005330][ T2370] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 329.005345][ T2370] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 329.798078][ T5924] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 329.838677][T11063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.951692][ T5924] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 329.951725][ T5924] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 329.951746][ T5924] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 329.951769][ T5924] usb 4-1: config 220 has no interface number 2 [ 329.951967][ T5924] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 329.951999][ T5924] usb 4-1: config 220 interface 0 has no altsetting 0 [ 329.952020][ T5924] usb 4-1: config 220 interface 76 has no altsetting 0 [ 329.952041][ T5924] usb 4-1: config 220 interface 1 has no altsetting 0 [ 329.955880][ T5924] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 329.955911][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.955932][ T5924] usb 4-1: Product: syz [ 329.955943][ T5924] usb 4-1: Manufacturer: syz [ 329.955954][ T5924] usb 4-1: SerialNumber: syz [ 330.108900][T11065] netlink: 'syz.2.2105': attribute type 1 has an invalid length. [ 330.231456][ T5924] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 330.231504][ T5924] usb 4-1: No valid video chain found. [ 330.231587][ T5924] usb 4-1: selecting invalid altsetting 0 [ 330.379911][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 330.379931][ T38] audit: type=1326 audit(1757361565.289:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11072 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2202ebe9 code=0x7ffc0000 [ 330.383445][ T38] audit: type=1326 audit(1757361565.289:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11072 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2202ebe9 code=0x7ffc0000 [ 330.383744][ T38] audit: type=1326 audit(1757361565.289:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11072 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca2202ebe9 code=0x7ffc0000 [ 330.384331][ T38] audit: type=1326 audit(1757361565.289:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11072 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2202ebe9 code=0x7ffc0000 [ 330.384604][ T38] audit: type=1326 audit(1757361565.289:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11072 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2202ebe9 code=0x7ffc0000 [ 330.385416][ T38] audit: type=1326 audit(1757361565.289:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11072 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fca2202ebe9 code=0x7ffc0000 [ 330.386251][ T38] audit: type=1326 audit(1757361565.289:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11072 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2202ebe9 code=0x7ffc0000 [ 330.386585][ T38] audit: type=1326 audit(1757361565.289:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11072 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2202ebe9 code=0x7ffc0000 [ 330.387127][ T38] audit: type=1326 audit(1757361565.289:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11072 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fca2202ebe9 code=0x7ffc0000 [ 330.387678][ T38] audit: type=1326 audit(1757361565.289:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11072 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2202ebe9 code=0x7ffc0000 [ 330.410939][ T5924] usb 4-1: selecting invalid altsetting 0 [ 330.410989][ T5924] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 330.431836][ T5924] usb 4-1: USB disconnect, device number 14 [ 331.279218][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'. [ 331.582564][T11112] vxcan0: tx address claim with dest, not broadcast [ 332.588187][ T5924] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 332.738156][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 332.740861][ T5924] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 332.740890][ T5924] usb 3-1: config 179 has no interface number 0 [ 332.740941][ T5924] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 332.740971][ T5924] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 332.740998][ T5924] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 332.741027][ T5924] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 1024 [ 332.741057][ T5924] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 332.741105][ T5924] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 332.741132][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.794745][ T5924] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 332.816971][ T5924] xpad 3-1:179.65: probe with driver xpad failed with error -90 [ 333.022291][ T5924] usb 3-1: USB disconnect, device number 18 [ 333.202024][T11157] ./file0: Can't lookup blockdev [ 333.358222][ T5821] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 333.508090][ T5821] usb 1-1: Using ep0 maxpacket: 16 [ 333.515954][ T5821] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 333.515992][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 333.548771][ T5821] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 333.548806][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.548829][ T5821] usb 1-1: Product: syz [ 333.548846][ T5821] usb 1-1: Manufacturer: syz [ 333.548862][ T5821] usb 1-1: SerialNumber: syz [ 333.589659][ T5821] usb 1-1: config 0 descriptor?? [ 333.595702][ T5821] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 333.595741][ T5821] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 334.226075][ T5821] em28xx 1-1:0.0: chip ID is em2710 [ 334.303796][T11178] veth0: entered promiscuous mode [ 334.307515][T11177] veth0: left promiscuous mode [ 334.430833][ T5821] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 334.432615][ T5821] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 334.432642][ T5821] em28xx 1-1:0.0: No AC97 audio processor [ 334.469809][ T5821] usb 1-1: USB disconnect, device number 15 [ 334.474996][ T5821] em28xx 1-1:0.0: Disconnecting em28xx [ 334.504097][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.522616][ T5821] em28xx 1-1:0.0: Freeing device [ 335.828637][T11226] netlink: 544 bytes leftover after parsing attributes in process `syz.3.2178'. [ 336.248890][T11245] openvswitch: netlink: IP tunnel dst address not specified [ 337.040426][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2199'. [ 337.040466][T11271] netlink: 'syz.3.2199': attribute type 21 has an invalid length. [ 337.121296][T11275] program syz.0.2201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.601446][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.484535][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2218'. [ 338.506480][ T6024] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 338.650967][ T6024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.651005][ T6024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.651047][ T6024] usb 3-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 338.651083][ T6024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.666343][ T6024] usb 3-1: config 0 descriptor?? [ 338.722463][T11316] netlink: 'syz.3.2220': attribute type 2 has an invalid length. [ 338.722492][T11316] netlink: 'syz.3.2220': attribute type 8 has an invalid length. [ 338.722509][T11316] netlink: 1160 bytes leftover after parsing attributes in process `syz.3.2220'. [ 339.114992][ T6024] ntrig 0003:1B96:000F.000E: unknown main item tag 0x0 [ 339.134293][ T6024] ntrig 0003:1B96:000F.000E: hidraw0: USB HID v0.00 Device [HID 1b96:000f] on usb-dummy_hcd.2-1/input0 [ 339.313186][ T6024] ntrig 0003:1B96:000F.000E: Firmware version: 7.15.12.55.4 (3dbf fc9e) [ 339.346946][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2229'. [ 339.525865][ T9] usb 3-1: USB disconnect, device number 19 [ 339.718161][ T5821] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 339.794979][T11349] tipc: Enabling of bearer rejected, already enabled [ 339.870272][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 339.872688][ T5821] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 339.872718][ T5821] usb 2-1: config 0 has no interface number 0 [ 339.875903][ T5821] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 339.875936][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.875968][ T5821] usb 2-1: Product: syz [ 339.875985][ T5821] usb 2-1: Manufacturer: syz [ 339.876001][ T5821] usb 2-1: SerialNumber: syz [ 339.934353][ T5821] usb 2-1: config 0 descriptor?? [ 339.950197][ T5821] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 340.194038][ T5821] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 340.268730][ T5821] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 340.625452][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 340.634249][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2248'. [ 340.634403][T11371] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2248'. [ 340.660994][ T5821] usb 2-1: USB disconnect, device number 14 [ 340.680757][ T5821] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 340.705314][ T5821] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 340.719852][ T5821] quatech2 2-1:0.51: device disconnected [ 340.900965][T11382] loop9: detected capacity change from 0 to 8 [ 340.916170][T11382] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 340.916212][T11382] loop9: partition table partially beyond EOD, truncated [ 340.916393][T11382] loop9: p1 size 81768186 extends beyond EOD, truncated [ 340.993431][T11384] binder: 11383:11384 ioctl c0306201 2000000003c0 returned -22 [ 341.171629][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2256'. [ 341.408212][ T5924] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 341.562839][ T5924] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 341.562883][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.591109][ T5924] usb 1-1: config 0 descriptor?? [ 341.629471][ T5924] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 342.436382][ T5924] usb 1-1: USB disconnect, device number 16 [ 342.619596][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 343.339877][T11432] netlink: 'syz.4.2276': attribute type 83 has an invalid length. [ 343.868341][ T45] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 343.941661][T11452] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2285'. [ 344.009983][T11453] macvlan2: entered promiscuous mode [ 344.010011][T11453] bridge0: entered promiscuous mode [ 344.021495][ T45] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 344.021528][ T45] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 344.021553][ T45] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 344.021578][ T45] usb 4-1: config 220 has no interface number 2 [ 344.021685][ T45] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 344.021720][ T45] usb 4-1: config 220 interface 0 has no altsetting 0 [ 344.021744][ T45] usb 4-1: config 220 interface 76 has no altsetting 0 [ 344.021766][ T45] usb 4-1: config 220 interface 1 has no altsetting 0 [ 344.030077][ T45] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 344.030116][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.030142][ T45] usb 4-1: Product: syz [ 344.030161][ T45] usb 4-1: Manufacturer: syz [ 344.030181][ T45] usb 4-1: SerialNumber: syz [ 344.316748][ T45] usb 4-1: selecting invalid altsetting 0 [ 344.344417][ T45] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 344.344452][ T45] usb 4-1: No valid video chain found. [ 344.370318][ T45] usb 4-1: selecting invalid altsetting 0 [ 344.370364][ T45] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 344.465717][ T45] usb 4-1: USB disconnect, device number 15 [ 345.037802][ T5821] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 345.188055][ T5821] usb 5-1: Using ep0 maxpacket: 16 [ 345.190893][ T5821] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 345.190924][ T5821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.190947][ T5821] usb 5-1: config 0 has no interface number 0 [ 345.197475][ T5821] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 345.197510][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.197533][ T5821] usb 5-1: Product: syz [ 345.197550][ T5821] usb 5-1: Manufacturer: syz [ 345.197566][ T5821] usb 5-1: SerialNumber: syz [ 345.270431][ T5821] usb 5-1: config 0 descriptor?? [ 345.288542][ T5821] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 345.288579][ T5821] usb 5-1: No valid video chain found. [ 345.378749][T11498] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2305'. [ 345.512695][ T45] usb 5-1: USB disconnect, device number 13 [ 346.635928][T11525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2317'. [ 347.642985][T11544] vxcan1: tx address claim with dest, not broadcast [ 347.945340][T11550] dummy0: entered allmulticast mode [ 350.356635][T11542] comedi comedi0: comedi_bond: 3:2 3:3 attached, 48 channels from 2 devices [ 354.178923][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 354.390917][ T45] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 354.390952][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.430647][ T45] usb 4-1: config 0 descriptor?? [ 354.665444][ T45] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 354.693999][T11588] netlink: 'syz.0.2344': attribute type 2 has an invalid length. [ 354.743782][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 354.743802][ T38] audit: type=1326 audit(1757361589.649:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11587 comm="syz.4.2345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67fa3bebe9 code=0x0 [ 354.867402][ T45] [drm:udl_init] *ERROR* Selecting channel failed [ 354.990881][ T45] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 354.990910][ T45] [drm] Initialized udl on minor 2 [ 354.995155][ T45] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 354.995523][ T45] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 355.048191][ T5924] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 355.078388][ T45] usb 4-1: USB disconnect, device number 16 [ 355.082356][ T5924] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 355.082564][ T5924] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 355.984487][T11604] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2350'. [ 355.999351][T11604] batadv1: entered allmulticast mode [ 356.722914][ T1365] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 357.262254][ T68] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 357.888868][ T68] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 358.449245][ T68] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 358.993090][ T68] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 359.532084][ T68] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 363.471165][ T5924] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 363.618167][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 363.621113][ T5924] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 363.621154][ T5924] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 363.621181][ T5924] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 363.622790][ T5924] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 363.622821][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 363.622844][ T5924] usb 2-1: SerialNumber: syz [ 363.739987][T11660] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 367.991437][ T5924] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 368.030252][ T5924] usb 2-1: USB disconnect, device number 15 [ 373.301743][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2395'. [ 373.870809][T11717] netlink: 'syz.1.2401': attribute type 1 has an invalid length. [ 374.889900][T11732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2407'. [ 375.278302][ T5924] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 375.465848][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 375.475122][ T5924] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 375.475154][ T5924] usb 5-1: config 0 has no interface number 0 [ 375.475207][ T5924] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 375.475236][ T5924] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 375.475264][ T5924] usb 5-1: config 0 interface 126 has no altsetting 0 [ 375.612349][ T5924] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 375.612386][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.612409][ T5924] usb 5-1: Product: syz [ 375.612425][ T5924] usb 5-1: Manufacturer: syz [ 375.612441][ T5924] usb 5-1: SerialNumber: syz [ 375.716140][ T5924] usb 5-1: config 0 descriptor?? [ 375.727200][T11736] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 375.727416][T11736] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 375.851822][ T45] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 376.026843][ T45] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 376.026876][ T45] usb 3-1: config 0 has no interface number 0 [ 376.026980][ T45] usb 3-1: config 0 interface 106 has no altsetting 0 [ 376.056717][ T45] usb 3-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 376.056817][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.056841][ T45] usb 3-1: Product: syz [ 376.056857][ T45] usb 3-1: Manufacturer: syz [ 376.056874][ T45] usb 3-1: SerialNumber: syz [ 376.243193][ T45] usb 3-1: config 0 descriptor?? [ 376.377800][ T5924] ir_usb 5-1:0.126: IR Dongle converter detected [ 376.573031][ T5924] usb 5-1: IRDA class descriptor not found, device not bound [ 376.655880][ T45] usb 3-1: USB disconnect, device number 20 [ 376.792303][ T31] usb 5-1: USB disconnect, device number 14 [ 378.544070][T11772] sctp: [Deprecated]: syz.4.2426 (pid 11772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.544070][T11772] Use struct sctp_sack_info instead [ 378.725229][ T5924] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 378.883093][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 378.886109][ T5924] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 378.886143][ T5924] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 378.886171][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 379.008226][ T5924] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 379.008262][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.008285][ T5924] usb 4-1: Product: syz [ 379.008301][ T5924] usb 4-1: Manufacturer: syz [ 379.008318][ T5924] usb 4-1: SerialNumber: syz [ 379.060789][ T5924] usb 4-1: config 0 descriptor?? [ 379.617229][ T5924] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 379.999700][ T5924] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 380.000307][ T5924] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 380.001091][ T5924] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 380.160048][ T5924] usb 4-1: USB disconnect, device number 17 [ 380.306166][T11780] loop0: Can't mount, would change RO state [ 383.220172][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2432'. [ 383.971429][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2446'. [ 383.971463][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2446'. [ 384.031815][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.032055][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.357815][T11821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2448'. [ 384.438877][ T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 384.782325][ T1117] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 385.291178][ T5924] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 385.848911][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 385.849258][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 385.888383][ T5924] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 386.428520][ T5924] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 386.594965][ T5924] usb 5-1: unable to get BOS descriptor or descriptor too short [ 386.595752][ T5924] usb 5-1: not running at top speed; connect to a high speed hub [ 386.597456][ T5924] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 386.597481][ T5924] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 386.597503][ T5924] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.722407][ T5924] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 386.722443][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.722466][ T5924] usb 5-1: Product: syz [ 386.722482][ T5924] usb 5-1: Manufacturer: syz [ 386.722498][ T5924] usb 5-1: SerialNumber: syz [ 386.978273][ T31] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 387.154887][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 387.167592][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 387.181245][ T31] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 387.181283][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 16129, setting to 1024 [ 387.181312][ T31] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 387.281267][ T45] Process accounting resumed [ 387.314521][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 387.314622][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.314646][ T31] usb 4-1: Product: syz [ 387.314662][ T31] usb 4-1: Manufacturer: syz [ 387.314679][ T31] usb 4-1: SerialNumber: syz [ 387.471377][ T5924] usb 5-1: 0:2 : does not exist [ 387.800137][ T5924] usb 5-1: USB disconnect, device number 15 [ 388.702241][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2460'. [ 388.702370][T11850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2460'. [ 388.731190][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2460'. [ 388.731293][T11850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2460'. [ 389.768329][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 390.211021][ T31] cdc_ncm 4-1:1.0: bind() failure [ 390.315668][ T31] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 390.315721][ T31] cdc_ncm 4-1:1.1: bind() failure [ 390.451050][ T31] usb 4-1: USB disconnect, device number 18 [ 392.398195][ T6024] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 392.558216][ T6024] usb 3-1: Using ep0 maxpacket: 16 [ 392.560982][ T6024] usb 3-1: config 0 has an invalid interface number: 203 but max is 0 [ 392.561014][ T6024] usb 3-1: config 0 has no interface number 0 [ 392.561065][ T6024] usb 3-1: config 0 interface 203 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 392.564627][ T6024] usb 3-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice=e8.af [ 392.564667][ T6024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.564690][ T6024] usb 3-1: Product: syz [ 392.564706][ T6024] usb 3-1: Manufacturer: syz [ 392.564722][ T6024] usb 3-1: SerialNumber: syz [ 392.649869][ T6024] usb 3-1: config 0 descriptor?? [ 392.651192][T11879] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 392.684746][ T6024] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 393.460513][ C0] sched: DL replenish lagged too much [ 393.515524][ T6024] usb 3-1: USB disconnect, device number 21 [ 393.544905][T11862] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2464'. [ 393.544933][T11862] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 394.480661][T11898] netlink: 'syz.1.2478': attribute type 49 has an invalid length. [ 395.618379][ T6024] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 395.808269][ T6024] usb 4-1: Using ep0 maxpacket: 16 [ 395.812744][ T6024] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.812808][ T6024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 395.812840][ T6024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 395.812962][ T6024] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 395.812991][ T6024] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.814916][ T6024] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 395.814947][ T6024] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 395.814969][ T6024] usb 4-1: Manufacturer: syz [ 395.952077][ T6024] usb 4-1: config 0 descriptor?? [ 397.108370][ T6024] rc_core: IR keymap rc-hauppauge not found [ 397.108396][ T6024] Registered IR keymap rc-empty [ 397.108606][ T6024] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 397.161494][ T6024] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 397.209976][ T6024] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 397.251050][ T6024] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23 [ 397.339778][ T6024] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 397.374731][ T6024] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 397.391870][ T6024] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 397.408905][ T6024] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 397.441890][ T6024] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 397.458198][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 397.458863][ T6024] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 397.488389][ T6024] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 397.509722][ T6024] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 397.538429][ T6024] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 397.566489][ T6024] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 397.637113][ T6024] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 397.637141][ T6024] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 397.822683][ T6024] usb 4-1: USB disconnect, device number 19 [ 399.265958][T11938] tmpfs: Invalid gid '0x00000000ffffffff' [ 400.270274][T11947] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2497'. [ 400.270342][T11947] netem: change failed [ 400.579632][ T38] audit: type=1326 audit(1757361635.489:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11954 comm="syz.0.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 400.584878][ T38] audit: type=1326 audit(1757361635.489:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11954 comm="syz.0.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 400.601356][T11956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2501'. [ 400.672558][ T38] audit: type=1326 audit(1757361635.569:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11954 comm="syz.0.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 400.708131][ T38] audit: type=1326 audit(1757361635.609:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11954 comm="syz.0.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 400.742941][ T38] audit: type=1326 audit(1757361635.649:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11954 comm="syz.0.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc0dc1ebe9 code=0x7ffc0000 [ 406.778254][ T45] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 406.966311][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.966361][ T45] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 406.966387][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.010500][ T45] usb 1-1: config 0 descriptor?? [ 407.756467][ T45] razer 0003:1532:010E.000F: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0 [ 407.992643][ T45] usb 1-1: USB disconnect, device number 17 [ 412.808338][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 419.418236][T12027] syz.3.2529 (12027) used greatest stack depth: 15440 bytes left [ 420.374800][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.421741][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.468102][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.500195][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.533850][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.566576][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.598979][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.665879][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.718447][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.750021][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.801629][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.833486][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.899895][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.951550][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.998177][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.058872][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.085854][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.133416][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.171014][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.218885][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.256064][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.325451][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.352395][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.386996][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.418271][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.457799][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.503606][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.567244][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.599377][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.665619][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.708591][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.734280][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.767175][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.798279][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.840805][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.905232][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.950362][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.000357][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.034828][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.066101][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.118567][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.184357][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.215801][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.270595][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.367838][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.453169][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.483898][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.567128][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.604357][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.669792][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.701253][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.764946][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.815659][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.848084][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.899590][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.951049][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.982822][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.048047][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.081598][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.133928][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.198381][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.255412][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.298911][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.383924][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.467837][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.506861][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.551493][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.583714][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.634785][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.672685][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.715321][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.768681][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.800570][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.833504][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.916236][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.971773][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.034492][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.099484][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.203422][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.247764][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.299863][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.393753][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.416202][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.461784][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.482709][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.514723][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.565287][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.616636][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.677684][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.699187][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.751465][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.816063][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.850518][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.901722][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.932423][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.983916][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.098434][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.150627][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.184348][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.233521][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.264729][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.811378][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 466.969414][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 466.980414][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.017396][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 535.819523][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.018470][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 583.730187][ T39] INFO: task syz.2.2536:12036 blocked for more than 143 seconds. [ 583.730224][ T39] Not tainted syzkaller #0 [ 583.730238][ T39] Blocked by coredump. [ 583.730245][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 583.730261][ T39] task:syz.2.2536 state:D stack:25128 pid:12036 tgid:12036 ppid:5852 task_flags:0x40004c flags:0x00004000 [ 583.730345][ T39] Call Trace: [ 583.730354][ T39] [ 583.730372][ T39] __schedule+0x16f3/0x4c20 [ 583.730447][ T39] ? __lock_acquire+0xab9/0xd20 [ 583.730483][ T39] ? __pfx___schedule+0x10/0x10 [ 583.730538][ T39] ? schedule+0x91/0x360 [ 583.730576][ T39] schedule+0x165/0x360 [ 583.730621][ T39] schedule_timeout+0x9a/0x270 [ 583.730655][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 583.730703][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 583.730740][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 583.730773][ T39] ? wait_for_completion+0x267/0x5d0 [ 583.730812][ T39] wait_for_completion+0x2bf/0x5d0 [ 583.730953][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 583.731020][ T39] exit_aio+0x2f1/0x3b0 [ 583.731060][ T39] ? __pfx_exit_aio+0x10/0x10 [ 583.731108][ T39] ? uprobe_clear_state+0x280/0x2a0 [ 583.731134][ T39] ? mm_update_next_owner+0xa7/0x870 [ 583.731162][ T39] __mmput+0x68/0x3d0 [ 583.731198][ T39] exit_mm+0x1da/0x2c0 [ 583.731225][ T39] ? __pfx_exit_mm+0x10/0x10 [ 583.731252][ T39] ? rcu_is_watching+0x15/0xb0 [ 583.731297][ T39] do_exit+0x648/0x2300 [ 583.731317][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 583.731357][ T39] ? rt_mutex_slowunlock+0x668/0x8a0 [ 583.731392][ T39] ? __pfx_do_exit+0x10/0x10 [ 583.731416][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 583.731457][ T39] ? __rcu_read_unlock+0x84/0xe0 [ 583.731492][ T39] do_group_exit+0x21c/0x2d0 [ 583.731524][ T39] __x64_sys_exit_group+0x3f/0x40 [ 583.731549][ T39] x64_sys_call+0x21f7/0x2200 [ 583.731574][ T39] do_syscall_64+0xfa/0x3b0 [ 583.731597][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 583.731631][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.731652][ T39] ? clear_bhb_loop+0x60/0xb0 [ 583.731678][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.731714][ T39] RIP: 0033:0x7fca2202ebe9 [ 583.731740][ T39] RSP: 002b:00007ffe34bdfd58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 583.731766][ T39] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fca2202ebe9 [ 583.731784][ T39] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 583.731800][ T39] RBP: 00007ffe34bdfdbc R08: 0000000434bdfe4f R09: 0000000000000062 [ 583.731818][ T39] R10: 00000000000058ac R11: 0000000000000246 R12: 00000000000001d1 [ 583.731835][ T39] R13: 0000000000000062 R14: 0000000000065e8b R15: 00007ffe34bdfe10 [ 583.731882][ T39] [ 583.731917][ T39] [ 583.731917][ T39] Showing all locks held in the system: [ 583.731928][ T39] 4 locks held by kworker/0:0/9: [ 583.731943][ T39] #0: ffff888059571d38 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.732018][ T39] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.732109][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.732172][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.732238][ T39] 7 locks held by kworker/u8:0/12: [ 583.732253][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.732318][ T39] #1: ffffc90000117bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.732385][ T39] #2: ffff8880238ea300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 583.732465][ T39] #3: ffff88805baa6d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 583.732536][ T39] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 583.732598][ T39] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.732661][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.732723][ T39] 2 locks held by ksoftirqd/0/15: [ 583.732737][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.732799][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.732872][ T39] 2 locks held by rcuc/0/20: [ 583.732885][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.732948][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.733012][ T39] 2 locks held by rcuc/1/28: [ 583.733026][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.733090][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.733153][ T39] 2 locks held by ktimers/1/29: [ 583.733166][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.733230][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.733292][ T39] 2 locks held by ksoftirqd/1/30: [ 583.733305][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.733367][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.733430][ T39] 4 locks held by kworker/1:0/31: [ 583.733444][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.733507][ T39] #1: ffffc90000a5fbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.733572][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.733632][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.733697][ T39] 5 locks held by kworker/u8:2/37: [ 583.733711][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.733773][ T39] #1: ffffc90000ac7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.733837][ T39] #2: ffff88805dfb0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 583.733913][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.733974][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.734037][ T39] 1 lock held by khungtaskd/39: [ 583.734050][ T39] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 583.734109][ T39] 5 locks held by kworker/u8:3/57: [ 583.734123][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.734186][ T39] #1: ffffc9000123fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.734249][ T39] #2: ffff8880394c0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 583.734313][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.734374][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.734439][ T39] 5 locks held by kworker/u8:4/67: [ 583.734453][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.734516][ T39] #1: ffffc9000152fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.734579][ T39] #2: ffff88805cd50898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 583.734643][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.734705][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.734768][ T39] 6 locks held by kworker/u8:5/68: [ 583.734781][ T39] #0: ffff888059eaa138 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.734850][ T39] #1: ffffc9000153fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.734920][ T39] #2: ffff888059ed95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 583.734983][ T39] #3: ffff888037de1928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 583.735043][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.735119][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.735193][ T39] 6 locks held by kworker/u8:6/1117: [ 583.735208][ T39] #0: ffff888059694138 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.735271][ T39] #1: ffffc90004b57bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.735335][ T39] #2: ffff8880599415f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 583.735396][ T39] #3: ffff88805b39ae58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 583.735457][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.735518][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.735582][ T39] 5 locks held by kworker/u8:7/1164: [ 583.735596][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.735659][ T39] #1: ffffc90004c97bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.735722][ T39] #2: ffff88805cd80898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 583.735794][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.735863][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.735926][ T39] 4 locks held by kworker/u8:8/1182: [ 583.735940][ T39] #0: ffff888030c95938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.736002][ T39] #1: ffffc90004d47bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.736067][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.736128][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.736194][ T39] 2 locks held by aoe_tx0/1322: [ 583.736207][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.736269][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.736332][ T39] 6 locks held by kworker/u8:9/1365: [ 583.736346][ T39] #0: ffff888059692938 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.736414][ T39] #1: ffffc90005077bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.736479][ T39] #2: ffff8880353dd5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 583.736803][ T39] #3: ffff88805b318e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 583.736921][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.736983][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.737060][ T39] 4 locks held by kworker/u8:11/3620: [ 583.737075][ T39] #0: ffff888059eaa138 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.737142][ T39] #1: ffffc9000d907bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.737208][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.737271][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.737336][ T39] 3 locks held by dhcpcd/5501: [ 583.737350][ T39] #0: ffff888026a80350 (sk_lock-AF_UNIX){+.+.}-{0:0}, at: sk_setsockopt+0xc2f/0x2a70 [ 583.737420][ T39] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.737482][ T39] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.837254][ T39] 2 locks held by getty/5597: [ 583.837280][ T39] #0: ffff88823bf828a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 583.837357][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 583.837420][ T39] 2 locks held by kworker/0:3/5821: [ 583.837435][ T39] 3 locks held by syz-executor/5825: [ 583.837447][ T39] #0: ffff88802b5e1290 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 583.837507][ T39] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.837580][ T39] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.837649][ T39] 1 lock held by syz-executor/5840: [ 583.837670][ T39] 4 locks held by kworker/0:4/5904: [ 583.837684][ T39] #0: ffff88805988a138 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.837751][ T39] #1: ffffc900052c7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.868463][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.868527][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.868593][ T39] 4 locks held by kworker/1:6/6024: [ 583.868608][ T39] #0: ffff88805988a138 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.868687][ T39] #1: ffffc90005a17bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.868795][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.868854][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.868917][ T39] 5 locks held by kworker/0:6/11572: [ 583.868931][ T39] #0: ffff888059a4a938 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.868996][ T39] #1: ffffc90004c6fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.869081][ T39] #2: ffff88805b31ce20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 583.869141][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.869201][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.869262][ T39] 2 locks held by kworker/0:9/11992: [ 583.869275][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.869335][ T39] #1: ffffc90006057bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.869395][ T39] 5 locks held by kworker/0:10/12001: [ 583.869444][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.869505][ T39] #1: ffffc900060cfbc0 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.869568][ T39] #2: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x13f0 [ 583.869631][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.869692][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.869754][ T39] 4 locks held by kworker/u8:13/12058: [ 583.869767][ T39] #0: ffff888059ead938 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.869832][ T39] #1: ffffc9000636fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.869894][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.869954][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.870017][ T39] 4 locks held by kworker/u8:14/12059: [ 583.870030][ T39] #0: ffff888059695938 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.870096][ T39] #1: ffffc90006517bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.870158][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.870217][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.870278][ T39] 6 locks held by kworker/u8:16/12061: [ 583.870292][ T39] #0: ffff8880363b1138 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.870357][ T39] #1: ffffc900060efbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.870419][ T39] #2: ffff888035ac15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 583.870478][ T39] #3: ffff888037de2e58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 583.870536][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.870596][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.870665][ T39] 4 locks held by kworker/u8:17/12062: [ 583.870679][ T39] 6 locks held by kworker/u8:18/12063: [ 583.870693][ T39] #0: ffff888059693938 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.870758][ T39] #1: ffffc90006a0fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.870819][ T39] #2: ffff8880598fd5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 583.870879][ T39] #3: ffff88805b39b8f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 583.870937][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.870996][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.871056][ T39] 6 locks held by kworker/u8:19/12064: [ 583.871069][ T39] #0: ffff888059ead938 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.871134][ T39] #1: ffffc90006207bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.871196][ T39] #2: ffff888059edd5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 583.871273][ T39] #3: ffff88805b39ede8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 583.871331][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.871390][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.871451][ T39] 4 locks held by kworker/u8:20/12065: [ 583.871465][ T39] #0: ffff888059ea9938 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.871531][ T39] #1: ffffc90006a1fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.871593][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.871660][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.871721][ T39] 7 locks held by kworker/u8:21/12066: [ 583.871734][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.871794][ T39] #1: ffffc90006a2fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.871858][ T39] #2: ffff888020fe9300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 583.871930][ T39] #3: ffff88805b381120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 583.871996][ T39] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 583.872055][ T39] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.872114][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.872176][ T39] 6 locks held by kworker/u8:22/12067: [ 583.872190][ T39] #0: ffff888059ea9938 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.872255][ T39] #1: ffffc90006a3fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.872317][ T39] #2: ffff888035e755f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 583.872376][ T39] #3: ffff88805b39e350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 583.872434][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.872494][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.872571][ T39] 6 locks held by kworker/u8:23/12068: [ 583.872584][ T39] #0: ffff88803d81f938 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.872653][ T39] #1: ffffc90006e37bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.872715][ T39] #2: ffff88803c6f55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 583.872774][ T39] #3: ffff88805b3183f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 583.872832][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.872893][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.872953][ T39] 7 locks held by kworker/u8:24/12069: [ 583.872966][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.873027][ T39] #1: ffffc90006e47bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.873090][ T39] #2: ffff88805b20e300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 583.873161][ T39] #3: ffff88805b14d920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 583.873245][ T39] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 583.873302][ T39] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.873360][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.873422][ T39] 6 locks held by kworker/u8:25/12070: [ 583.873437][ T39] 6 locks held by kworker/1:8/12074: [ 583.873451][ T39] #0: ffff888059888d38 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.873516][ T39] #1: ffffc900061e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.873600][ T39] #2: ffff8880598f95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 583.873667][ T39] #3: ffff88805b399928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 583.873726][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.873785][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.873846][ T39] 4 locks held by kworker/0:12/12079: [ 583.873859][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.873920][ T39] #1: ffffc90007a77bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.873982][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.874041][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.874102][ T39] 4 locks held by kworker/u8:28/12080: [ 583.874116][ T39] #0: ffff888059695938 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.874181][ T39] #1: ffffc90007e7fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.874243][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.874303][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.874364][ T39] 2 locks held by kworker/1:10/12081: [ 583.874377][ T39] 1 lock held by dhcpcd/12085: [ 583.874391][ T39] #0: ffff88803d5c2af8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 583.874454][ T39] 1 lock held by dhcpcd/12089: [ 583.874468][ T39] #0: ffff88803d5c3f38 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 583.874531][ T39] 4 locks held by dhcpcd/12092: [ 583.874544][ T39] #0: ffff88803d5c5378 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 583.874606][ T39] #1: ffff88805abc2350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_release+0x798/0xd30 [ 583.874669][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.874728][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.874788][ T39] 4 locks held by kworker/u8:31/12093: [ 583.874802][ T39] #0: ffff8880363b1138 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.874866][ T39] #1: ffffc900061c7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.874929][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.874988][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.875049][ T39] 7 locks held by kworker/u8:32/12094: [ 583.875062][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.875123][ T39] #1: ffffc900086bfbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.875187][ T39] #2: ffff888021ae6300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 583.875253][ T39] #3: ffff88805ae18520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 583.875318][ T39] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 583.875376][ T39] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.875435][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.875496][ T39] 4 locks held by kworker/u8:33/12095: [ 583.875510][ T39] #0: ffff888059b62938 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.875576][ T39] #1: ffffc900060ffbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.875654][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.875713][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.875774][ T39] 7 locks held by kworker/u8:34/12096: [ 583.875788][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 583.875849][ T39] #1: ffffc900086dfbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 583.875911][ T39] #2: ffff88805b9d4300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 583.875981][ T39] #3: ffff88805ba24120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 583.876040][ T39] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 583.876094][ T39] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 583.876152][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 583.876212][ T39] 1 lock held by syz-executor/12097: [ 583.876231][ T39] [ 583.876236][ T39] ============================================= [ 583.876236][ T39] [ 583.876259][ T39] NMI backtrace for cpu 0 [ 583.876285][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 583.876311][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 583.876325][ T39] Call Trace: [ 583.876335][ T39] [ 583.876345][ T39] dump_stack_lvl+0x189/0x250 [ 583.876386][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.876421][ T39] ? __pfx__printk+0x10/0x10 [ 583.876461][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 583.876494][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 583.876527][ T39] ? __pfx__printk+0x10/0x10 [ 583.876557][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 583.876589][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 583.876627][ T39] watchdog+0xf93/0xfe0 [ 583.876665][ T39] ? watchdog+0x1de/0xfe0 [ 583.876700][ T39] kthread+0x70e/0x8a0 [ 583.876740][ T39] ? __pfx_watchdog+0x10/0x10 [ 583.876768][ T39] ? __pfx_kthread+0x10/0x10 [ 583.876809][ T39] ? __pfx_kthread+0x10/0x10 [ 583.876847][ T39] ret_from_fork+0x3f9/0x770 [ 583.876882][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 583.876918][ T39] ? __switch_to_asm+0x39/0x70 [ 583.876940][ T39] ? __switch_to_asm+0x33/0x70 [ 583.876961][ T39] ? __pfx_kthread+0x10/0x10 [ 583.876997][ T39] ret_from_fork_asm+0x1a/0x30 [ 583.877037][ T39] [ 583.877046][ T39] Sending NMI from CPU 0 to CPUs 1: [ 583.877077][ C1] NMI backtrace for cpu 1 [ 583.877092][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 583.877113][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 583.877125][ C1] RIP: 0010:dev_hard_start_xmit+0x5/0x870 [ 583.877147][ C1] Code: fd ff ff e8 2d f3 de f8 e9 8f f3 ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 <41> 57 41 56 41 55 41 54 53 48 81 ec 88 00 00 00 48 89 cb 49 89 d7 [ 583.877164][ C1] RSP: 0018:ffffc90000a3e750 EFLAGS: 00000246 [ 583.877181][ C1] RAX: ffffffff89001a4c RBX: ffffc90000a3e7c0 RCX: ffffc90000a3e7c0 [ 583.877195][ C1] RDX: ffff888058e2b800 RSI: ffff888034be2000 RDI: ffff88806cbf1dc0 [ 583.877209][ C1] RBP: ffffc90000a3e830 R08: 0000000000000000 R09: 0000000000000100 [ 583.877222][ C1] R10: 0000000000000100 R11: 0000000000004888 R12: 0000000100000000 [ 583.877234][ C1] R13: ffff888058e2b9d0 R14: 1ffff1100b1c573a R15: ffff888058e2b800 [ 583.877249][ C1] FS: 0000000000000000(0000) GS:ffff8881269bf000(0000) knlGS:0000000000000000 [ 583.877265][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 583.877278][ C1] CR2: 0000559847226660 CR3: 00000000274c8000 CR4: 00000000003526f0 [ 583.877295][ C1] Call Trace: [ 583.877314][ C1] [ 583.877322][ C1] sch_direct_xmit+0x241/0x4b0 [ 583.877350][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 583.877379][ C1] __dev_queue_xmit+0x19fc/0x3b70 [ 583.877405][ C1] ? __dev_queue_xmit+0x26f/0x3b70 [ 583.877425][ C1] ? synproxy_pernet+0x23/0x240 [ 583.877457][ C1] ? synproxy_pernet+0x23/0x240 [ 583.877484][ C1] ? synproxy_pernet+0x23/0x240 [ 583.877510][ C1] ? synproxy_pernet+0x23/0x240 [ 583.877538][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 583.877557][ C1] ? __asan_memset+0x22/0x50 [ 583.877578][ C1] ? ipv6_synproxy_hook+0x297/0xda0 [ 583.877614][ C1] ? __lock_acquire+0xab9/0xd20 [ 583.877647][ C1] ? synproxy_send_tcp_ipv6+0x4c1/0x680 [ 583.877680][ C1] ? ip6_finish_output2+0x1079/0x1720 [ 583.877708][ C1] ? ip6_finish_output2+0x710/0x1720 [ 583.877732][ C1] ip6_finish_output2+0x122a/0x1720 [ 583.877761][ C1] ? ip6_finish_output2+0x710/0x1720 [ 583.877791][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 583.877822][ C1] ? ip6_mtu+0x7d/0x3f0 [ 583.877846][ C1] ? ip6_finish_output+0x2ef/0x4e0 [ 583.877880][ C1] synproxy_send_tcp_ipv6+0x4c1/0x680 [ 583.877914][ C1] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 583.877944][ C1] ? rcu_is_watching+0x15/0xb0 [ 583.877980][ C1] ? __build_skb_around+0x257/0x3e0 [ 583.878010][ C1] ? synproxy_send_client_synack_ipv6+0x34f/0xca0 [ 583.878039][ C1] ? skb_put+0x11b/0x210 [ 583.878068][ C1] synproxy_send_client_synack_ipv6+0x80e/0xca0 [ 583.878108][ C1] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 583.878139][ C1] ? nft_symhash_init+0xa4/0x310 [ 583.878167][ C1] ? synproxy_pernet+0x45/0x270 [ 583.878191][ C1] nft_synproxy_eval_v6+0x36e/0x560 [ 583.878216][ C1] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 583.878238][ C1] ? nf_ip_checksum+0x13c/0x510 [ 583.878260][ C1] nft_synproxy_do_eval+0x3d7/0x570 [ 583.878284][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 583.878304][ C1] ? __local_bh_enable_ip+0x1b2/0x270 [ 583.878327][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 583.878364][ C1] nft_do_chain+0x409/0x1920 [ 583.878391][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 583.878409][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 583.878457][ C1] nft_do_chain_inet+0x25d/0x340 [ 583.878477][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 583.878496][ C1] ? __lock_acquire+0xab9/0xd20 [ 583.878527][ C1] ? NF_HOOK+0x9a/0x3a0 [ 583.878552][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 583.878572][ C1] nf_hook_slow+0xc2/0x220 [ 583.878602][ C1] NF_HOOK+0x206/0x3a0 [ 583.878635][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 583.878661][ C1] ? NF_HOOK+0x9a/0x3a0 [ 583.878684][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 583.878711][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 583.878744][ C1] ip6_input+0x16a/0x270 [ 583.878767][ C1] ? ip6_input+0x23/0x270 [ 583.878794][ C1] NF_HOOK+0x309/0x3a0 [ 583.878818][ C1] ? skb_orphan+0xaf/0xd0 [ 583.878843][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 583.878872][ C1] ? NF_HOOK+0x9a/0x3a0 [ 583.878896][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 583.878922][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 583.878954][ C1] __netif_receive_skb+0xd3/0x380 [ 583.878977][ C1] ? rt_spin_unlock+0x65/0x80 [ 583.879003][ C1] ? process_backlog+0x27b/0x900 [ 583.879027][ C1] process_backlog+0x31e/0x900 [ 583.879060][ C1] __napi_poll+0xb3/0x540 [ 583.879086][ C1] net_rx_action+0x707/0xe00 [ 583.879110][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 583.879149][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 583.879195][ C1] handle_softirqs+0x22f/0x710 [ 583.879225][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 583.879255][ C1] run_ktimerd+0xcf/0x190 [ 583.879282][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 583.879308][ C1] ? schedule+0x91/0x360 [ 583.879338][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 583.879361][ C1] smpboot_thread_fn+0x53f/0xa60 [ 583.879385][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 583.879414][ C1] kthread+0x70e/0x8a0 [ 583.879445][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 583.879469][ C1] ? __pfx_kthread+0x10/0x10 [ 583.879501][ C1] ? __pfx_kthread+0x10/0x10 [ 583.879531][ C1] ret_from_fork+0x3f9/0x770 [ 583.879557][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 583.879586][ C1] ? __switch_to_asm+0x39/0x70 [ 583.879604][ C1] ? __switch_to_asm+0x33/0x70 [ 583.879622][ C1] ? __pfx_kthread+0x10/0x10 [ 583.879652][ C1] ret_from_fork_asm+0x1a/0x30 [ 583.879680][ C1] [ 583.971932][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 583.971958][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 583.971986][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 583.972007][ T39] Call Trace: [ 583.972016][ T39] [ 583.972028][ T39] dump_stack_lvl+0x99/0x250 [ 583.972068][ T39] ? __asan_memcpy+0x40/0x70 [ 583.972095][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.972130][ T39] ? __pfx__printk+0x10/0x10 [ 583.972170][ T39] vpanic+0x281/0x750 [ 583.972209][ T39] ? __pfx_vpanic+0x10/0x10 [ 583.972243][ T39] ? preempt_schedule+0xae/0xc0 [ 583.972279][ T39] ? preempt_schedule_common+0x83/0xd0 [ 583.972320][ T39] panic+0xb9/0xc0 [ 583.972353][ T39] ? __pfx_panic+0x10/0x10 [ 583.972389][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 583.972425][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 583.972458][ T39] watchdog+0xfd2/0xfe0 [ 583.972495][ T39] ? watchdog+0x1de/0xfe0 [ 583.972532][ T39] kthread+0x70e/0x8a0 [ 583.972572][ T39] ? __pfx_watchdog+0x10/0x10 [ 583.972601][ T39] ? __pfx_kthread+0x10/0x10 [ 583.972652][ T39] ? __pfx_kthread+0x10/0x10 [ 583.972689][ T39] ret_from_fork+0x3f9/0x770 [ 583.972723][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 583.972761][ T39] ? __switch_to_asm+0x39/0x70 [ 583.972783][ T39] ? __switch_to_asm+0x33/0x70 [ 583.972804][ T39] ? __pfx_kthread+0x10/0x10 [ 583.972841][ T39] ret_from_fork_asm+0x1a/0x30 [ 583.972880][ T39] [ 583.973050][ T39] Kernel Offset: disabled