last executing test programs: 8.402101118s ago: executing program 0 (id=1669): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f903, 0x0, '\x00', @p_u16=0x0}}) socket$kcm(0x10, 0x3, 0x10) r1 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mq_open(&(0x7f0000001140)='rmdF\x17\x16\xbc\xec', 0x1, 0x4, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) syz_io_uring_setup(0x1868, &(0x7f00000003c0), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000000180)) 7.991235021s ago: executing program 2 (id=1671): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8480) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f0000000040)={{0xa, 0x5, 0x5c4, 0xfffff39b, '\x00', 0x800}, 0x0, [0x1, 0x3000, 0x8, 0xa1b, 0xd, 0x2, 0x23, 0x4, 0x3f2d, 0x80000001, 0x8, 0x1, 0x1, 0xa, 0x800, 0x5, 0x4, 0x1, 0x6, 0x80000000, 0x80000000, 0x29e, 0x4, 0x7, 0x7fffffff, 0x3, 0xd35a, 0x9, 0x17aa, 0x4, 0x3, 0x6, 0x401, 0x2, 0x8, 0x800, 0x1000, 0xb9c0, 0x0, 0x3f5c, 0x8000, 0x1, 0x100, 0x825, 0x7f, 0x8, 0xfffffffb, 0x7, 0x2e0d, 0x800, 0x8000, 0x2b, 0xcf, 0x2, 0x3, 0x4, 0x10001, 0x0, 0x0, 0x1, 0x5, 0x101, 0x3, 0x5, 0x101, 0x2, 0x4, 0xf, 0x8, 0x1, 0x12, 0x7b66, 0xfe2, 0x5, 0xfff, 0x4, 0xfff, 0x10000, 0xfffffffa, 0x5, 0x0, 0x1, 0xfffffffa, 0x2, 0x3, 0x4, 0x2, 0x8, 0x101, 0x401, 0x2, 0xf, 0xffffffff, 0x200000, 0x2, 0x0, 0x6, 0x8, 0xfffffff8, 0x0, 0x4, 0x8f, 0xffffffff, 0x7, 0x70427fc5, 0x1ff, 0x6, 0x6064, 0x8, 0x3, 0x4, 0x100, 0xfffffff7, 0x8, 0x2, 0x0, 0x0, 0x8, 0x6, 0x80, 0x10000, 0x7, 0x2, 0x7, 0x8, 0x7, 0x604, 0x2]}) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x6) recvmsg$qrtr(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)=""/216, 0xd8}, {&(0x7f0000000440)=""/236, 0xec}, {&(0x7f0000000540)=""/208, 0xd0}, {&(0x7f0000000640)=""/165, 0xa5}, {&(0x7f0000000700)=""/93, 0x5d}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x6, &(0x7f00000017c0)=[{0x5c, 0x0, 0x0, ""/78}, {0xe0, 0x0, 0x0, ""/212}], 0x13c, 0x100}, 0x1c, 0x40012103) r1 = gettid() capset(&(0x7f0000001940)={0x19980330, r1}, &(0x7f0000001980)={0x3, 0x4, 0x865d, 0xfffffffb, 0x38554d4, 0x4}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001b80)={'tunl0\x00', &(0x7f0000001b00)={'syztnl2\x00', 0x0, 0x7, 0x10, 0x8, 0xb4, {{0x11, 0x4, 0x2, 0x3c, 0x44, 0x64, 0x0, 0x3a, 0x29, 0x0, @broadcast, @rand_addr=0x64010101, {[@timestamp={0x44, 0x24, 0xf9, 0x0, 0x0, [0x5, 0x0, 0x4, 0x3, 0x0, 0xc, 0x3ff, 0x4]}, @timestamp_addr={0x44, 0xc, 0x4d, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x4, 0x0}, 0x7}]}]}}}}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001c00)={0x1b, 0x0, 0x0, 0xffff7fff, 0x0, r0, 0x61, '\x00', 0x0, r0, 0x4, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=@bloom_filter={0x1e, 0xb4de, 0x3, 0x1, 0x883, 0x1, 0x4, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0xa, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0x11, 0x13, &(0x7f00000019c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x84}, @exit, @exit, @ldst={0x2, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}]}, &(0x7f0000001a80)='syzkaller\x00', 0xc50, 0xc, &(0x7f0000001ac0)=""/12, 0x41000, 0x5c, '\x00', r2, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001bc0)={0x5, 0x4, 0x400, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d00)=[r0, r3, r0, r0, r0, r0, r0, r0, r0, r4], 0x0, 0x10, 0xf, @void, @value}, 0x94) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, &(0x7f0000001e00)) execveat(r0, &(0x7f0000001e40)='./file0\x00', &(0x7f0000001f80)={[&(0x7f0000001e80)='syztnl2\x00', &(0x7f0000001ec0)='\x00', &(0x7f0000001f00)='!\x00', &(0x7f0000001f40)='-$*)&!\\\x00']}, &(0x7f0000002100)={[&(0x7f0000001fc0)='\x00', &(0x7f0000002000)='\x00', &(0x7f0000002040)='syzkaller\x00', &(0x7f0000002080)='[{/:\"\x00', &(0x7f00000020c0)='+-,\x00']}, 0x400) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000002140)={0x1, 0x2}) flock(r4, 0x9) mount(&(0x7f0000002180)=@md0, &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)='configfs\x00', 0x1000, 0x0) write$P9_RWRITE(r0, &(0x7f0000002240)={0xb, 0x77, 0x1, 0x3}, 0xb) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = openat$iommufd(0xffffff9c, &(0x7f0000002280), 0x80400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000022c0)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r6, 0x3ba0, &(0x7f0000002300)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x100000001, 0x426}) fsopen(&(0x7f0000002380)='binder\x00', 0x1) ioctl$RTC_EPOCH_READ(r7, 0x8004700d, &(0x7f00000023c0)) unlinkat(r0, &(0x7f0000002400)='./file0\x00', 0x200) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000002440)=0x100) ioctl$SNDCTL_TMR_START(r0, 0x5402) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000002480)={0x0, 0xffff, 0x9}, &(0x7f00000024c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000002500)=@sack_info={r8, 0xfffeffff, 0x800}, 0xc) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000002540), 0x8) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000002580)=0x5) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000025c0)=@req3={0x2, 0xfac, 0x1b8, 0x6, 0x7, 0x4627c3fe, 0x1000}, 0x1c) 7.99057404s ago: executing program 2 (id=1672): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) rmdir(0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) shutdown(r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x19, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.522570167s ago: executing program 0 (id=1673): r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3}, 0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000003900)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='adfs\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r5, &(0x7f0000000080)='./file0\x00') 7.447451403s ago: executing program 0 (id=1674): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x1, 0x8000) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffa, 0x0, 0x9, 0xb, 0x8, "915bf2606e731708f9e3209adc24651a9d278283177eff8af5cdd94ffee2f852a6bc8495611bd2c60b5a090acbec4ed522438832dcca27b4f8feb6b4b9ca25f7", "88888cd5e44760580a0f882892d53ef32be2b04fa3c138b521bb5b9a0647337ca2408222bc3a0d5e71e7b28ba0a403a308c4ceaac8d47ff77b8979958a2e5907", "8957655c95ee470eb768d4ecef8afb0363058f7ea824e935ae80b7fb24bd21c1", [0x2, 0x9]}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x271) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7.319431854s ago: executing program 0 (id=1675): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000140), 0x0, 0x844, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @local}, 0x14) 7.076192099s ago: executing program 0 (id=1679): dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x104) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019480)={0x8, 0x1c29, &(0x7f0000019440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000200), 0x10) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) dup3(r3, r5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000d38000/0x3000)=nil, 0x3000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xfffffffffffffc93}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f7c000/0x3000)=nil, 0x3000, 0x14) 7.075726428s ago: executing program 2 (id=1680): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000dc820000000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000007c0)={0x0, 0x0}) statx(r3, &(0x7f0000000800)='./file0\x00', 0x4000, 0x10, &(0x7f0000000840)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000980)=0x0) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r10, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000001bc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000440)="2b2318f87b8be9703a921ab904e15eb3d590d8549c060911bfb4052aa95b3f8892bbad29a037d4e5f5949ee0286d57ca1094ca2ad658575d9e00b5d8fadda3e052b756b54d613a970b55722240fa7565b9a691a3d0d2ec9a41583f6e119babea8accaf8d9e862ea928d88a324fcea770082318cc26e0b54858d470651e25ea11eb9631ee48a42d46e2b9b8c1f0e5580a399f13ee0600c378453924f778e46f520df96d469f4f07b938a6406ebe021378ea957b06b67d38d18d6e91d05a859239c7ac41b66699c1116de49a5cd3c85c580b4c2f5dbbd7108376a677528be55cbf65b1f242c87d", 0xe6}, {&(0x7f0000000540)="be49f3cbf13c024371e985345f914838e2d307f33f8c7d54299919d985f6055b722bf5751049324f954a9c60042490301e2fbb34094d7092ba1e19326480e1d6f102801d91af18ec1af2e577e5c5", 0x4e}, {&(0x7f0000000300)}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f00000005c0)="0706d53d6d862e607771c2fc3671c7dfcc7cfa12b9ca8262741023535fec99b79ff8bc9fe21a0a2b3620cffc7870a56dccc3472bb772d98120b9a09b9c3f7a181c453c8a15277688c0f0f665e3449d6726a1a517ae8065e45d267f73e1766997ea06a372e347abc96bb6f813470899bb61b201f34cc6e122065dfd4087fa7f33b72f316564870d92b71364d00530f91c7fd0ebd5501da042fd04d7e44c51340174051d7f44fdae9fa5cbf4455b487da25da465331bd1eceb75255b5f7846306562e9a3bfec818ea4", 0xc8}], 0x5, &(0x7f0000003c00)=ANY=[@ANYBLOB="200000000100000001", @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0300", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200000000100000001000000", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="1800000001000000020000", @ANYRES32=r9, @ANYRES32=r11], 0xb4, 0x800}}], 0x1, 0x80) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r12, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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"/613, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xfd85) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 6.981997571s ago: executing program 2 (id=1684): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x10}, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = gettid() ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000200)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a5bfcb2a66ef507540a2a54fcaf1860b5a61f8e207db0000009f1bb9930200000000000000cf61f3164a3790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca193f8dd5ecfdc81f22af8042677e0b2543667e306c360ce82f41f7d0430000868f4a367fb9ecd32042417917653a8a", "f7a78adde4baffaed544f59b58ae3151b9dd0fe9ca443e8ae600"}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$audio(0xffffff9c, &(0x7f0000000540), 0x1a040, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfe, &(0x7f0000000580)) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f00000005c0)={0x81, 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611227180000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="3f000e0080000000ffffffff"], 0x5c}}, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x9}}) r6 = openat2(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x600020, 0xee, 0x22}, 0x18) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x5, 0x3, 0x10, "ffec70b6fa8b5cc5af688f3882d6af9885a4715c99573d0bf37e2d3fdc21b6b3e37dcae43efec1b234f9a0f194cdf1a11433c0a5bda5cc89795ba998a0950bec", "dd25e6455cb2b131500a95c11451213fa7e0562df69ea24a570dcad49a0a96fc27b43e786e118ffc17408a438f883313c8eae4dccc252652107bab8997a5be28", "ef3279d7d4e87835f8e6208aa231ec39f400ad082b3f9b3f028afd941cadd9ba", [0x5, 0x7]}) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x40, 0x0, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb52d}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) 6.868972821s ago: executing program 3 (id=1685): prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket(0x21, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000024c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r2, &(0x7f0000004500)={0x2020}, 0x2020) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0) lchown(&(0x7f00000000c0)='./file1\x00', 0x0, r4) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000180)={[{@gid={'gid', 0x3d, r4}}]}) openat$zero(0xffffff9c, &(0x7f00000000c0), 0x200, 0x0) 5.441641191s ago: executing program 3 (id=1687): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000140), 0x0, 0x844, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @local}, 0x14) 4.930791166s ago: executing program 3 (id=1688): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r2, 0x1, 0x2e, 0x0, &(0x7f0000001240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x64}, [], {0x4, 0x4, 0x1, 0x1000000}}, 0x64}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612", 0x1d}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000001040)={0x0, 0x64, 0x0}, 0x40002022) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) r5 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r6, @ANYBLOB=',wfd', @ANYRESHEX]) r7 = socket$alg(0x26, 0x5, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040f1400000d20f674c13de401f5e0a336e7d9"], 0x7) read$alg(r8, &(0x7f0000000000)=""/35, 0x23) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0xfffffe01, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x6, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x9, 0x4, 0xc0000}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r9], &(0x7f00000006c0)=[{0x0, 0x2, 0x6, 0x9}, {0x3, 0x2, 0x6, 0x6}, {0x2, 0x2, 0x0, 0x3}, {0x5, 0x4, 0xc, 0x5}], 0x10, 0x1, @void, @value}, 0x90) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}}, 0x840) 4.574109267s ago: executing program 2 (id=1691): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='rpc_pipefs\x00', 0x0, &(0x7f0000000640)='usrquota') (async) chdir(&(0x7f0000000140)='./file1\x00') (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f00000021c0)=""/4072, &(0x7f0000001180)=0xfe8) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04"], 0x7) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7a2, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9b0902, 0x0, '\x00', @p_u8=&(0x7f0000000180)=0x3}}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x3d) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) (async) connect$inet6(r3, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c9000a0006000500010842580e2a64adc9b138f92294bdeebc1ecb348ff152b7108cd561ee4d2c89f6f3bfa05c3f441bd20d1c6ba70e9ed467d5a2b8fd8f67e24d29b35829db02ea386f2b2bf9b81a0b4495877a1b5a2625e79bb29899f85cd07263597bb8ec3117c8e59fd935e3df6c7673feca56a9807ad8515d9bdb88cd8cbb8d6d5f8ba8055205a576717197c6c63a7eb9b71ca1ef176ba5aa73f8fa7bda01b1c8a997b9cbb31f7d6a43f2fd45becca37149c7e02c5e01010000f6edc52d9cd3a82bb77a32a3a7e54582bcff1cc806edd49403"], 0xf) (async) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0xf231, 0x4000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x39, 0x0, 0x0, 0x10007f, 0x0, @void, @value}, 0x20) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000ffdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0c00238006000c0008000000557098f8a4ebce2c42ea53e7d0cdfa3270e9c20d4339b7e6c0ea9e4c9e7ecc1ef59c1c0b50f6ddd381a48b4c9f4dbcc79035d8923880b6afa16c0d4e6138b9c58e88fbdfda0241fc757bc29f6df7abdc54fb2201989f7ece90d061c422ede703bf28ff28197575da7edeb2926f5d0afa81b9a40a38586c7384330d186074d7078c48081dc193f2960578e32e7fefa4403a315e9b8331df99"], 0x28}}, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) 3.352588862s ago: executing program 1 (id=1694): prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket(0x21, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000024c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r2, &(0x7f0000004500)={0x2020}, 0x2020) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0) lchown(&(0x7f00000000c0)='./file1\x00', 0x0, r4) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000180)={[{@gid={'gid', 0x3d, r4}}]}) openat$zero(0xffffff9c, &(0x7f00000000c0), 0x200, 0x0) 3.232117313s ago: executing program 3 (id=1695): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000140)="a6bea8a120e5f8", 0x7, 0x844, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @local}, 0x14) 3.172421282s ago: executing program 3 (id=1696): r0 = io_uring_setup(0xb3e, &(0x7f00000002c0)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x3c, r4, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x20, 0x0, @remote}}, {{0xa, 0x4e23, 0x4, @mcast1, 0x91c}}}, 0x104) socket$alg(0x26, 0x5, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x3) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) r6 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000150000/0x2000)=nil) shmctl$SHM_LOCK(r6, 0xb) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xdeU#\xebp7-\x9f\xb8\xf3A\xb2CX\xd37/\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90v0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB="080004000001000008000a00", @ANYRES32=r2], 0x4c}}, 0x0) 1.621977327s ago: executing program 2 (id=1699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xffffffffffffffa9) timer_create(0x2, 0x0, &(0x7f0000000540)) unshare(0x22020000) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x5, 0x802}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x2}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000140)={0x5, 0x802}) clock_gettime(0xb, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r5, @ANYBLOB="92010000000000000a000200bbbbbbbbbbbb00001c0016801800018014000a00010000001000000000100000002c00"], 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 680.13519ms ago: executing program 3 (id=1700): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000500)={[{@clone_children}], [{@fowner_gt}]}) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xa0000, 0x0, 0x0, 0x0, 0x10001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x10000) dup3(r0, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000080)={0x7, 0x0, 0x8, 0x7d, 0xc, 0x20, 0xd, "aee351361385f53becfd95622c8f6ef2a5682327", "edbd2550d8d6e16888534c0dbb953bbd2e4ac8f6"}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x15, 0x0, 0x0, 0x80000000}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) ioctl$KDFONTOP_GET(r10, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x4000080) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r11 = gettid() waitid(0x2, r11, 0x0, 0x4, &(0x7f0000000000)) 571.549413ms ago: executing program 1 (id=1701): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) dup(r0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x6a0401) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x75, &(0x7f0000000040)={r5, 0x0, 0x0, 0x3, 0x1}, &(0x7f0000000080)=0x18) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000bc0)={0x0, r1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x18, &(0x7f0000000080)=0xd, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000200)="3ce2de0ad56f287b9c85dd001163d87efa1d524d8d957a8de4e490e10b2009ea6c4ee904bb7db6fc03b988d4edef164bd3377aa381b5f50b7ca414010000000000008082e9bde22b2b7c1c7606d56547070000000000000012", 0x59, 0x0, 0x0, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv2(r8, &(0x7f0000000040)=[{&(0x7f0000000180)=""/231, 0xe7}], 0x1, 0x0, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) 151.734359ms ago: executing program 1 (id=1702): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x45d0f61f, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010001fff000000000000000000000012", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468"], 0x34}}, 0x0) 523.961µs ago: executing program 1 (id=1703): syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x44, 0x2) socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) write$binfmt_script(r0, 0x0, 0xffffff3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0xffff, 0x410001) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9}}, 0x50) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r7, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x401}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000002380), 0x0) read$usbmon(r1, 0x0, 0x0) 0s ago: executing program 0 (id=1681): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f903, 0x0, '\x00', @p_u16=0x0}}) socket$kcm(0x10, 0x3, 0x10) r1 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mq_open(&(0x7f0000001140)='rmdF\x17\x16\xbc\xec', 0x1, 0x4, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) syz_io_uring_setup(0x1868, &(0x7f00000003c0), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000000180)) kernel console output (not intermixed with test programs): 98][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.304292][ T35] usb 8-1: Product: syz [ 301.305925][ T35] usb 8-1: Manufacturer: syz [ 301.313971][ T35] usb 8-1: SerialNumber: syz [ 301.317477][ T35] usb 8-1: config 0 descriptor?? [ 301.525008][ T5225] usb 8-1: USB disconnect, device number 31 [ 301.657967][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 301.735847][ T9251] Invalid option length (1031570) for dns_resolver key [ 301.770743][ T9263] netlink: 'syz.0.1117': attribute type 7 has an invalid length. [ 301.773176][ T9263] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1117'. [ 302.286310][ T9272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1120'. [ 303.108803][ T9288] trusted_key: encrypted_key: insufficient parameters specified [ 303.192328][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1127'. [ 303.393714][ T9306] xt_HMARK: spi-set and port-set can't be combined [ 303.410025][ T9306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1129'. [ 303.789408][ T9326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1134'. [ 304.141313][ T9336] CIFS: Unable to determine destination address [ 304.207117][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 304.249656][ T9344] ip6gretap1: entered allmulticast mode [ 304.816500][ T9372] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 305.469767][ T9401] __nla_validate_parse: 2 callbacks suppressed [ 305.469787][ T9401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1156'. [ 305.539948][ T9405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1157'. [ 306.711673][ T9415] overlayfs: failed to resolve './file1': -2 [ 306.716345][ T5345] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 308.239754][ T9440] net_ratelimit: 155 callbacks suppressed [ 308.239775][ T9440] netlink: zone id is out of range [ 308.244311][ T9440] netlink: zone id is out of range [ 308.246367][ T9440] netlink: zone id is out of range [ 308.266900][ T9440] netlink: zone id is out of range [ 308.296118][ T9440] netlink: set zone limit has 4 unknown bytes [ 309.687003][ T35] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 309.857965][ T35] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 309.860653][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.863163][ T35] usb 8-1: Product: syz [ 309.864594][ T35] usb 8-1: Manufacturer: syz [ 309.866130][ T35] usb 8-1: SerialNumber: syz [ 309.884257][ T35] usb 8-1: config 0 descriptor?? [ 310.052754][ T9455] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 310.055080][ T9455] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 310.059358][ T9455] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 310.097234][ T1994] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 310.098440][ T5383] usb 8-1: USB disconnect, device number 32 [ 310.165749][ T9463] devtmpfs: Unknown parameter 'hege' [ 310.301258][ T1994] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 310.304481][ T1994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.307790][ T1994] usb 5-1: Product: syz [ 310.319592][ T9447] Invalid option length (1031570) for dns_resolver key [ 310.323686][ T1994] usb 5-1: Manufacturer: syz [ 310.325497][ T1994] usb 5-1: SerialNumber: syz [ 310.337451][ T1994] usb 5-1: config 0 descriptor?? [ 310.578196][ T5383] usb 5-1: USB disconnect, device number 33 [ 310.801340][ T9449] Invalid option length (1031570) for dns_resolver key [ 310.922019][ T9470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1178'. [ 311.000518][ T9472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1179'. [ 311.469075][ T9482] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 311.471870][ T9482] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 311.475748][ T9482] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 311.717094][ T57] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 311.870385][ T57] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 311.874048][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.878197][ T57] usb 7-1: Product: syz [ 311.879375][ T57] usb 7-1: Manufacturer: syz [ 311.880798][ T57] usb 7-1: SerialNumber: syz [ 311.887728][ T57] usb 7-1: config 0 descriptor?? [ 312.131689][ T57] usb 7-1: USB disconnect, device number 40 [ 312.139133][ T9484] Invalid option length (1031570) for dns_resolver key [ 312.397027][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 312.741244][ T9494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1187'. [ 312.809087][ T9496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1188'. [ 312.988729][ T9500] block nbd2: shutting down sockets [ 313.463689][ T9516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1192'. [ 313.478497][ T9517] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 313.481305][ T9517] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 313.484637][ T9517] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 313.725720][ T9529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1197'. [ 313.782605][ T9527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.877116][ T35] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 314.028010][ T8] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 314.047057][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 314.063310][ T35] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 314.066328][ T35] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 314.077008][ T35] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 314.079946][ T35] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 314.082995][ T35] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 314.086463][ T35] usb 6-1: config 0 interface 0 has no altsetting 0 [ 314.108701][ T35] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 314.111339][ T35] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 314.113517][ T35] usb 6-1: Product: syz [ 314.114617][ T35] usb 6-1: Manufacturer: syz [ 314.115868][ T35] usb 6-1: SerialNumber: syz [ 314.120232][ T35] usb 6-1: config 0 descriptor?? [ 314.122251][ T9526] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 314.125359][ T35] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 314.128537][ T35] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 314.177001][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 314.182276][ T8] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 314.184624][ T8] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 314.187392][ T8] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 314.194127][ T8] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 314.207901][ T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 314.217701][ T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 314.229267][ T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 314.243274][ T8] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 314.245977][ T8] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 314.249020][ T8] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 314.259823][ T8] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 314.271512][ T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 314.284605][ T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 314.295139][ T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 314.305395][ T8] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 314.308886][ T8] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 314.310995][ T8] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 314.313437][ T8] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 314.334116][ T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 314.344284][ T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 314.352081][ T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 314.366789][ T8] usb 7-1: string descriptor 0 read error: -22 [ 314.368523][ T8] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 314.370989][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.377773][ T8] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux1 [ 314.499518][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1196'. [ 315.339036][ T8] usb 7-1: USB disconnect, device number 41 [ 316.071649][ T9551] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 316.074003][ T9551] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 316.081520][ T9551] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 316.354610][ T9560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1207'. [ 316.477882][ T1373] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.479630][ T1373] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.660993][ T56] usb 6-1: USB disconnect, device number 34 [ 316.667594][ T56] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 316.959466][ T9569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.286955][ T8] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 317.437010][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 317.442698][ T8] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 317.449574][ T8] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 317.456751][ T8] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 317.466326][ T8] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 317.477114][ T57] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 317.477358][ T8] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 317.482818][ T8] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 317.486256][ T8] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 317.529517][ T8] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 317.536660][ T8] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 317.542633][ T8] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 317.545414][ T8] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 317.558113][ T8] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 317.561335][ T8] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 317.564422][ T8] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 317.583381][ T8] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 317.586017][ T8] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 317.588409][ T8] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 317.590753][ T8] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 317.594381][ T8] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 317.598112][ T8] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 317.600978][ T8] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 317.618061][ T8] usb 6-1: string descriptor 0 read error: -22 [ 317.619775][ T8] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 317.622089][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.630251][ T57] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 317.632760][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.634717][ T57] usb 8-1: Product: syz [ 317.637669][ T8] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 317.643318][ T57] usb 8-1: Manufacturer: syz [ 317.644657][ T57] usb 8-1: SerialNumber: syz [ 317.654131][ T57] usb 8-1: config 0 descriptor?? [ 317.670048][ T9580] : entered promiscuous mode [ 317.878532][ T57] usb 8-1: USB disconnect, device number 33 [ 318.406698][ T8] usb 6-1: USB disconnect, device number 35 [ 318.985227][ T9587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1216'. [ 319.259101][ T9590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.455809][ T9595] capability: warning: `syz.2.1219' uses deprecated v2 capabilities in a way that may be insecure [ 319.461588][ T9595] 9pnet_rdma: rdma_create_trans (9595): problem binding to privport: 13 [ 319.587448][ T57] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 319.596944][ T56] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 319.669982][ T9600] netlink: 'syz.2.1221': attribute type 9 has an invalid length. [ 319.672214][ T9600] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1221'. [ 319.707397][ T9600] netlink: 'syz.2.1221': attribute type 9 has an invalid length. [ 319.710221][ T9600] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1221'. [ 319.746982][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 319.747738][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 319.754215][ T57] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 319.758698][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.760310][ T56] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 319.761662][ T57] usb 5-1: Product: syz [ 319.764621][ T56] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 319.765967][ T57] usb 5-1: Manufacturer: syz [ 319.765984][ T57] usb 5-1: SerialNumber: syz [ 319.769286][ T56] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 319.775584][ T56] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 319.776312][ T57] usb 5-1: config 0 descriptor?? [ 319.780324][ T56] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 319.785413][ T56] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 319.789612][ T56] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 319.794746][ T57] option 5-1:0.0: GSM modem (1-port) converter detected [ 319.796767][ T56] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 319.800730][ T56] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 319.815394][ T56] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 319.819293][ T56] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 319.822624][ T56] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 319.825868][ T56] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 319.828866][ T56] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 319.834079][ T56] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 319.836526][ T56] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 319.839115][ T56] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 319.841707][ T56] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 319.844868][ T56] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 319.848256][ T56] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 319.851958][ T56] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 319.863376][ T56] usb 6-1: string descriptor 0 read error: -22 [ 319.868494][ T56] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 319.871046][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.880918][ T56] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 320.185739][ T9612] macvlan3: entered promiscuous mode [ 320.190924][ T9612] macvlan3: entered allmulticast mode [ 320.441600][ T9618] overlay: Unknown parameter '/' [ 321.035240][ T9622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1226'. [ 321.350022][ T8] usb 6-1: USB disconnect, device number 36 [ 321.495528][ T9625] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 321.677274][ T9628] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 321.746937][ T5404] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 321.919786][ T5404] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 321.922140][ T5404] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.927372][ T5404] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 321.930670][ T5404] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.935552][ T5404] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 321.938147][ T5404] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 321.940279][ T5404] usb 7-1: Product: syz [ 321.941394][ T5404] usb 7-1: Manufacturer: syz [ 321.947088][ T5404] cdc_wdm 7-1:1.0: skipping garbage [ 321.956046][ T5404] cdc_wdm 7-1:1.0: skipping garbage [ 321.960373][ T5404] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 321.961979][ T5404] cdc_wdm 7-1:1.0: Unknown control protocol [ 322.151822][ T1994] usb 5-1: USB disconnect, device number 34 [ 322.154857][ T1994] option 5-1:0.0: device disconnected [ 322.454153][ T9635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.757442][ T5386] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 322.917082][ T5386] usb 5-1: Using ep0 maxpacket: 8 [ 322.942676][ T5386] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 322.961391][ T5386] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 322.964601][ T5386] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 322.968361][ T5386] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 322.972587][ T5386] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 322.976769][ T5386] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 322.981568][ T5386] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 322.986513][ T5386] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 322.990289][ T5386] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 322.993578][ T5386] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 322.997352][ T5386] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 323.001849][ T5386] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 323.006218][ T5386] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 323.010965][ T5386] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 323.016228][ T5386] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 323.023090][ T5386] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 323.026387][ T5386] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 323.031044][ T5386] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 323.035496][ T5386] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 323.041050][ T5386] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 323.044369][ T5386] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 323.058860][ T5386] usb 5-1: string descriptor 0 read error: -22 [ 323.060568][ T5386] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 323.062917][ T5386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.077795][ T5386] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux1 [ 323.673838][ T1994] usb 5-1: USB disconnect, device number 35 [ 324.171039][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1233'. [ 324.260803][ T1994] usb 7-1: USB disconnect, device number 42 [ 324.517613][ T8] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 324.695049][ T8] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 324.705167][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.708252][ T8] usb 8-1: Product: syz [ 324.710432][ T8] usb 8-1: Manufacturer: syz [ 324.713619][ T8] usb 8-1: SerialNumber: syz [ 324.722606][ T8] usb 8-1: config 0 descriptor?? [ 324.808175][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1239'. [ 324.811961][ T9662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.816284][ T9662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.820677][ T9662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.946374][ T8] usb 8-1: USB disconnect, device number 34 [ 325.161557][ T9650] Invalid option length (1031570) for dns_resolver key [ 325.185125][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1240'. [ 325.264402][ T9668] veth0_to_team: entered promiscuous mode [ 325.266699][ T9668] veth0_to_team: entered allmulticast mode [ 325.465833][ T9673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.466749][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'. [ 325.596007][ T9684] fuse: Unknown parameter 'ÿ0x0000000000000003' [ 325.596010][ T9685] fuse: Unknown parameter 'ÿ0x0000000000000003' [ 325.711245][ T9685] netlink: 'syz.0.1246': attribute type 4 has an invalid length. [ 325.730763][ T9685] netlink: 'syz.0.1246': attribute type 4 has an invalid length. [ 325.737023][ T1994] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 325.756383][ T9686] netlink: 'syz.0.1246': attribute type 4 has an invalid length. [ 325.886739][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 325.896948][ T1994] usb 7-1: Using ep0 maxpacket: 8 [ 325.903318][ T1994] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 325.906777][ T1994] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 325.910568][ T1994] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 325.914160][ T1994] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 325.918625][ T1994] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 325.922371][ T1994] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 325.927198][ T1994] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 325.945552][ T1994] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 325.949533][ T1994] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 325.952569][ T1994] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 325.956102][ T1994] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 325.961140][ T1994] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 325.975749][ T1994] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 325.980071][ T1994] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 325.987672][ T1994] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 325.991280][ T1994] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 325.995581][ T1994] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 326.000405][ T1994] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 326.005776][ T1994] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 326.015772][ T1994] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 326.021461][ T1994] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 326.041880][ T1994] usb 7-1: string descriptor 0 read error: -22 [ 326.044781][ T1994] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 326.048590][ T1994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.070795][ T1994] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 326.476998][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 327.271898][ T8] usb 7-1: USB disconnect, device number 43 [ 327.757709][ T9708] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 327.864979][ T9713] xt_HMARK: spi-set and port-set can't be combined [ 328.244364][ T9722] syz.2.1257: attempt to access beyond end of device [ 328.244364][ T9722] nbd2: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 328.248052][ T9722] XFS (nbd2): SB validate failed with error -5. [ 328.367173][ T9732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1258'. [ 328.505986][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1260'. [ 328.639649][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'. [ 328.930790][ T9765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1268'. [ 328.934849][ T9767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1267'. [ 328.962842][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 328.962932][ T39] audit: type=1804 audit(1727988847.701:168): pid=9760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1266" name="/" dev="pidfs" ino=10058 res=1 errno=0 [ 329.273729][ T9778] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 329.273729][ T9778] program syz.1.1270 not setting count and/or reply_len properly [ 329.760487][ T9783] __nla_validate_parse: 1 callbacks suppressed [ 329.760665][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1272'. [ 329.940293][ T9790] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1275'. [ 330.387779][ T9805] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1279'. [ 330.397772][ T9805] Êü: entered promiscuous mode [ 331.567555][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1282'. [ 332.375815][ T39] audit: type=1326 audit(1727988851.111:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.0.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 332.386925][ T39] audit: type=1326 audit(1727988851.111:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.0.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 332.392632][ T39] audit: type=1326 audit(1727988851.121:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.0.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 332.400607][ T39] audit: type=1326 audit(1727988851.121:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.0.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 332.406231][ T39] audit: type=1326 audit(1727988851.121:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.0.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 332.412036][ T39] audit: type=1326 audit(1727988851.131:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.0.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=187 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 332.418412][ T39] audit: type=1326 audit(1727988851.131:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.0.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 332.424136][ T39] audit: type=1326 audit(1727988851.131:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.0.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 332.431971][ T39] audit: type=1326 audit(1727988851.141:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.0.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=97 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 332.583690][ T9840] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.647799][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 332.704582][ T9848] netlink: 'syz.1.1293': attribute type 29 has an invalid length. [ 332.708053][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 332.714389][ T9848] netlink: 'syz.1.1293': attribute type 29 has an invalid length. [ 332.716648][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 332.748211][ T9855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1295'. [ 333.673107][ T1098] Bluetooth: hci4: Frame reassembly failed (-84) [ 333.676994][ T5357] Bluetooth: hci3: command 0x0405 tx timeout [ 333.684969][ T9868] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 333.689486][ T9869] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 334.777079][ T9880] 9pnet_fd: Insufficient options for proto=fd [ 335.358620][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'. [ 335.555242][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 335.560807][ T9902] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 335.678364][ T5345] Bluetooth: hci4: command 0x1003 tx timeout [ 335.682675][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 335.861827][ T9910] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 336.641781][ T9928] overlayfs: failed to resolve './file0': -2 [ 337.132240][ T9940] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1320'. [ 337.526291][ T9950] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 337.529429][ T9950] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 337.532988][ T9950] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 337.799059][ T9960] openvswitch: netlink: Flow actions attr not present in new flow. [ 338.051183][ T9972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1330'. [ 338.457087][ T5386] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 338.623234][ T5386] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 338.625984][ T5386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.628868][ T5386] usb 6-1: Product: syz [ 338.630006][ T5386] usb 6-1: Manufacturer: syz [ 338.631502][ T5386] usb 6-1: SerialNumber: syz [ 338.634576][ T5386] usb 6-1: config 0 descriptor?? [ 338.723911][ T9983] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 338.726353][ T9983] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 338.730245][ T9983] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 338.846286][ T9989] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1335'. [ 338.850472][ T5386] usb 6-1: USB disconnect, device number 37 [ 338.855958][ T9979] Invalid option length (1031570) for dns_resolver key [ 339.120149][ T9993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1336'. [ 339.540139][ T9999] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 339.991562][T10015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.136982][ T1422] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 340.246931][ T30] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 340.267061][ T1422] usb 7-1: device descriptor read/64, error -71 [ 340.396941][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 340.400069][ T30] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 340.402350][ T30] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 340.404759][ T30] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 340.408341][ T30] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 340.411605][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 340.414840][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 340.417714][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 340.421385][ T30] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 340.423714][ T30] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 340.426215][ T30] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 340.431284][ T30] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 340.434300][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 340.437222][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 340.440004][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 340.443421][ T30] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 340.446491][ T30] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 340.449198][ T30] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 340.451649][ T30] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 340.454838][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 340.457793][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 340.460740][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 340.466522][ T30] usb 8-1: string descriptor 0 read error: -22 [ 340.469616][ T30] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 340.472094][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.481576][ T30] adutux 8-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 340.507078][ T1422] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 340.619241][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 340.619253][ T39] audit: type=1326 audit(1727988859.361:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.1.1344" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x0 [ 340.637177][ T1422] usb 7-1: device descriptor read/64, error -71 [ 340.757053][ T1422] usb usb7-port1: attempt power cycle [ 341.025489][T10013] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 341.097063][ T1422] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 341.117548][ T1422] usb 7-1: device descriptor read/8, error -71 [ 341.358071][ T1422] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 341.377784][ T1422] usb 7-1: device descriptor read/8, error -71 [ 341.487612][ T1422] usb usb7-port1: unable to enumerate USB device [ 342.607042][ T5404] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 342.719478][ T1994] usb 8-1: USB disconnect, device number 35 [ 342.761749][ T5404] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 342.765104][ T5404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.768571][ T5404] usb 5-1: Product: syz [ 342.770080][ T5404] usb 5-1: Manufacturer: syz [ 342.771764][ T5404] usb 5-1: SerialNumber: syz [ 342.776217][ T5404] usb 5-1: config 0 descriptor?? [ 342.991700][ T1994] usb 5-1: USB disconnect, device number 36 [ 342.995014][T10028] Invalid option length (1031570) for dns_resolver key [ 344.734094][T10047] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 345.153676][T10063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1357'. [ 345.502752][T10089] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 345.506010][T10089] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 345.510564][T10089] overlayfs: missing 'lowerdir' [ 345.628647][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1368'. [ 345.847053][ T5345] Bluetooth: hci3: command 0x0405 tx timeout [ 345.936993][ T5386] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 346.108468][ T5386] usb 6-1: No LPM exit latency info found, disabling LPM. [ 346.114777][ T5386] usb 6-1: config 9 has an invalid interface number: 208 but max is 1 [ 346.126786][ T5386] usb 6-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 346.130443][ T5386] usb 6-1: config 9 has an invalid interface number: 161 but max is 1 [ 346.133527][ T5386] usb 6-1: config 9 has an invalid descriptor of length 158, skipping remainder of the config [ 346.136492][ T5386] usb 6-1: config 9 has no interface number 0 [ 346.146934][ T5386] usb 6-1: config 9 has no interface number 1 [ 346.149277][ T5386] usb 6-1: config 9 interface 208 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 346.152597][ T5386] usb 6-1: config 9 interface 208 altsetting 14 endpoint 0x5 has invalid maxpacket 512, setting to 8 [ 346.155795][ T5386] usb 6-1: config 9 interface 208 altsetting 14 endpoint 0xB has invalid maxpacket 1023, setting to 8 [ 346.162570][ T5386] usb 6-1: config 9 interface 208 altsetting 14 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 346.165753][ T5386] usb 6-1: config 9 interface 208 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 346.169693][ T5386] usb 6-1: config 9 interface 208 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 346.172756][ T5386] usb 6-1: config 9 interface 208 altsetting 14 endpoint 0x3 has invalid maxpacket 1023, setting to 8 [ 346.176642][ T5386] usb 6-1: config 9 interface 208 altsetting 14 endpoint 0x7 has invalid maxpacket 16, setting to 8 [ 346.181741][ T5386] usb 6-1: config 9 interface 208 altsetting 14 endpoint 0x6 has invalid maxpacket 1023, setting to 8 [ 346.185258][ T5386] usb 6-1: config 9 interface 208 altsetting 14 has a duplicate endpoint with address 0xA, skipping [ 346.188996][ T5386] usb 6-1: config 9 interface 208 altsetting 14 has a duplicate endpoint with address 0x6, skipping [ 346.192041][ T5386] usb 6-1: config 9 interface 208 altsetting 14 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 346.195041][ T5386] usb 6-1: config 9 interface 208 altsetting 14 has a duplicate endpoint with address 0xA, skipping [ 346.201203][ T5386] usb 6-1: config 9 interface 161 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 346.204939][ T5386] usb 6-1: config 9 interface 208 has no altsetting 0 [ 346.206793][ T5386] usb 6-1: config 9 interface 161 has no altsetting 0 [ 346.327218][T10113] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 347.209397][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1379'. [ 347.687066][T10147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1384'. [ 348.697292][ T5386] usb 6-1: New USB device found, idVendor=06a3, idProduct=fa5e, bcdDevice=dc.cd [ 348.699573][ T5386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.701505][ T5386] usb 6-1: Product: ㊠[ 348.702530][ T5386] usb 6-1: Manufacturer: ã ³ [ 348.709670][ T5386] usb 6-1: can't set config #9, error -71 [ 348.717486][ T5386] usb 6-1: USB disconnect, device number 38 [ 348.894490][T10159] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 349.112103][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'. [ 349.657560][T10176] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1393'. [ 349.988522][T10183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.227306][ T8] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 350.386949][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 350.408888][ T8] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 350.414645][ T8] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 350.423896][ T8] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 350.432774][ T8] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 350.438849][ T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 350.441949][ T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 350.445866][ T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 350.472280][ T8] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 350.489647][ T8] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 350.498135][ T8] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 350.501062][ T8] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 350.509092][ T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 350.514352][ T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 350.520500][ T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 350.537038][ T8] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 350.539394][ T8] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 350.543603][ T8] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 350.547042][ T8] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 350.551499][ T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 350.557296][ T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 350.560531][ T8] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 350.581950][ T8] usb 7-1: string descriptor 0 read error: -22 [ 350.583989][ T8] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 350.587467][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.618874][ T8] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 351.379942][T10202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1399'. [ 352.881779][ T8] usb 7-1: USB disconnect, device number 48 [ 353.134597][ T5345] Bluetooth: hci3: command 0x0405 tx timeout [ 353.221782][T10217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1403'. [ 353.647104][ T1422] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 353.800493][ T1422] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 353.803726][ T1422] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.806282][ T1422] usb 6-1: Product: syz [ 353.807892][ T1422] usb 6-1: Manufacturer: syz [ 353.809456][ T1422] usb 6-1: SerialNumber: syz [ 353.816186][ T1422] usb 6-1: config 0 descriptor?? [ 354.039555][ T1422] usb 6-1: USB disconnect, device number 39 [ 354.261075][T10221] Invalid option length (1031570) for dns_resolver key [ 355.065903][T10236] vivid-003: ================= START STATUS ================= [ 355.068990][T10236] vivid-003: Radio HW Seek Mode: Bounded [ 355.070734][T10236] vivid-003: Radio Programmable HW Seek: false [ 355.072596][T10236] vivid-003: RDS Rx I/O Mode: Block I/O [ 355.076389][T10236] vivid-003: Generate RBDS Instead of RDS: false [ 355.078666][T10236] vivid-003: RDS Reception: true [ 355.080155][T10236] vivid-003: RDS Program Type: 0 inactive [ 355.081848][T10236] vivid-003: RDS PS Name: inactive [ 355.083394][T10236] vivid-003: RDS Radio Text: inactive [ 355.084949][T10236] vivid-003: RDS Traffic Announcement: false inactive [ 355.087918][T10236] vivid-003: RDS Traffic Program: false inactive [ 355.093047][T10236] vivid-003: RDS Music: false inactive [ 355.102050][T10236] vivid-003: ================== END STATUS ================== [ 356.559541][T10262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.797141][ T35] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 356.957002][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 356.962547][ T35] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 356.965100][ T35] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 356.970010][ T35] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 356.972683][ T35] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 356.976775][ T35] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 356.979990][ T35] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 356.982965][ T35] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 356.986388][ T35] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 356.993827][ T35] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 356.996477][ T35] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 356.999963][ T35] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 357.003820][ T35] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 357.010501][ T35] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 357.013676][ T35] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 357.017680][ T35] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 357.020260][ T35] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 357.022231][ T35] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 357.025174][ T35] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 357.029129][ T35] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 357.032779][ T35] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 357.036039][ T35] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 357.049741][ T35] usb 5-1: string descriptor 0 read error: -22 [ 357.052044][ T35] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 357.055160][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.083449][ T35] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 357.377033][ T1422] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 357.531131][ T1422] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 357.534546][ T1422] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.538205][ T1422] usb 6-1: Product: syz [ 357.539474][ T1422] usb 6-1: Manufacturer: syz [ 357.541021][ T1422] usb 6-1: SerialNumber: syz [ 357.544058][ T1422] usb 6-1: config 0 descriptor?? [ 357.677469][T10272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1419'. [ 357.753480][ T1422] usb 6-1: USB disconnect, device number 40 [ 357.967057][ T35] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 357.979482][T10268] Invalid option length (1031570) for dns_resolver key [ 358.127755][ T35] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 358.134637][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 358.140376][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 358.144780][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 358.150238][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 358.154221][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 358.158597][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 358.162481][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 358.165170][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 358.171342][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 358.174806][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 358.177552][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 358.180854][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 358.183815][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 358.187071][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 358.190567][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 358.194447][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 358.199807][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 358.202893][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 358.205740][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 358.209002][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 358.212193][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 358.214994][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 358.218216][ T35] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 358.222265][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 358.226213][ T35] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 358.229449][ T35] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 358.232316][ T35] usb 7-1: Product: syz [ 358.233962][ T35] usb 7-1: Manufacturer: syz [ 358.235779][ T35] usb 7-1: SerialNumber: syz [ 358.239878][ T35] usb 7-1: config 0 descriptor?? [ 358.246072][ T35] yurex 7-1:0.0: USB YUREX device now attached to Yurex #1 [ 359.284725][ T5383] usb 5-1: USB disconnect, device number 37 [ 359.868791][T10288] (syz.0.1424,10288,2):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 359.872034][T10288] (syz.0.1424,10288,2):ocfs2_fill_super:1178 ERROR: status = -22 [ 360.993799][ T30] usb 7-1: USB disconnect, device number 49 [ 361.007790][ T30] yurex 7-1:0.0: USB YUREX #1 now disconnected [ 361.148406][T10309] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 361.151501][T10309] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 361.154749][T10309] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 361.335585][T10314] syz.2.1431 (10314): drop_caches: 2 [ 361.956518][T10322] netlink: 'syz.3.1434': attribute type 10 has an invalid length. [ 361.989019][T10322] bridge0: port 3(wlan1) entered blocking state [ 361.991006][T10322] bridge0: port 3(wlan1) entered disabled state [ 361.993706][T10322] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 363.490167][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1442'. [ 363.546940][ T30] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 363.583747][T10358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1443'. [ 363.606941][ T5345] Bluetooth: hci3: command 0x0405 tx timeout [ 363.697036][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 363.708639][ T30] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 363.711500][ T30] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 363.713710][ T30] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 363.716422][ T30] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 363.720653][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 363.723953][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 363.732121][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 363.737791][ T30] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 363.740492][ T30] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 363.742690][ T30] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 363.745103][ T30] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 363.786000][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 363.798556][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 363.801777][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 363.821899][ T30] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 363.824698][ T30] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 363.829201][ T30] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 363.832263][ T30] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 363.835637][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 363.839395][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 363.842969][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 363.879435][ T30] usb 8-1: string descriptor 0 read error: -22 [ 363.881396][ T30] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 363.884115][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.901941][ T30] adutux 8-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 365.033242][ T5383] usb 8-1: USB disconnect, device number 36 [ 365.053988][T10342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.295255][T10368] mkiss: ax0: crc mode is auto. [ 365.701468][T10383] netlink: 'syz.0.1451': attribute type 4 has an invalid length. [ 365.704671][T10383] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1451'. [ 365.748271][T10385] fuse: Unknown parameter 'dfTXÞF@"i‡ÜnI–›Ý‹…ÈM' [ 365.759156][T10385] bond0: (slave bridge0): Releasing backup interface [ 365.772459][T10385] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.775064][T10385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.777841][T10385] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.779988][T10385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.800972][T10385] team0: Port device bridge0 added [ 365.820532][T10385] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 365.823150][T10385] bridge0: port 3(wlan1) entered disabled state [ 365.827965][T10385] bridge_slave_1: left allmulticast mode [ 365.829789][T10385] bridge_slave_1: left promiscuous mode [ 365.831789][T10385] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.834752][T10385] bridge_slave_0: left allmulticast mode [ 365.836407][T10385] bridge_slave_0: left promiscuous mode [ 365.838444][T10385] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.870686][T10385] team0: Port device bridge0 removed [ 366.357010][ T5383] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 366.567229][ T5383] usb 5-1: Using ep0 maxpacket: 8 [ 366.620166][ T5383] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 366.622547][ T5383] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 366.624590][ T5383] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 366.632122][ T5383] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 366.637100][ T5383] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 366.641860][ T5383] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 366.644762][ T5383] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 366.665851][ T5383] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 366.668954][ T5383] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 366.671132][ T5383] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 366.673780][ T5383] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 366.677322][ T5225] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 366.679389][ T5383] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 366.682604][ T5383] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 366.685710][ T5383] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 366.705600][ T5383] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 366.715069][ T5383] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 366.727372][ T5383] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 366.729957][ T5383] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 366.733015][ T5383] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 366.736119][ T5383] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 366.746558][ T5383] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 366.759032][ T5383] usb 5-1: string descriptor 0 read error: -22 [ 366.761183][ T5383] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 366.764247][ T5383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.782762][ T5383] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 366.829200][ T5225] usb 6-1: Using ep0 maxpacket: 8 [ 366.838006][ T5225] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 366.840572][ T5225] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 366.842500][ T5225] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 366.845072][ T5225] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 366.852148][ T5225] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 366.855474][ T5225] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 366.858823][ T5225] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 366.864050][ T5225] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 366.868105][ T5225] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 366.870326][ T5225] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 366.873053][ T5225] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 366.876751][ T5225] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 366.883254][ T5225] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 366.886123][ T5225] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 366.891327][ T5225] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 366.894548][ T5225] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 366.899841][ T5225] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 366.902324][ T5225] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 366.905331][ T5225] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 366.909282][ T5225] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 366.912920][ T5225] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 366.922123][ T5225] usb 6-1: string descriptor 0 read error: -22 [ 366.923988][ T5225] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 366.926338][ T5225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.943502][ T5225] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux1 [ 367.557196][ T5383] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 367.717452][ T5383] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 367.723553][ T5383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.726085][T10387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.729270][ T5383] usb 7-1: Product: syz [ 367.732315][ T5383] usb 7-1: Manufacturer: syz [ 367.736520][ T5383] usb 7-1: SerialNumber: syz [ 367.738873][ T5404] usb 5-1: USB disconnect, device number 38 [ 367.742242][ T5383] usb 7-1: config 0 descriptor?? [ 367.956927][ T5404] usb 7-1: USB disconnect, device number 50 [ 368.023540][ T5383] usb 6-1: USB disconnect, device number 41 [ 368.031150][T10402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.173923][T10413] Invalid option length (1031570) for dns_resolver key [ 368.282969][T10415] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 368.285651][T10415] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 368.289456][T10415] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 368.405830][T10424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1465'. [ 368.603358][T10433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1470'. [ 368.701364][T10436] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1468'. [ 369.317016][T10456] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 369.319406][T10456] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 369.322552][T10456] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 369.496162][T10460] veth0_macvtap: left promiscuous mode [ 369.757065][ T56] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 369.909987][ T56] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 369.912456][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.914583][ T56] usb 6-1: Product: syz [ 369.915725][ T56] usb 6-1: Manufacturer: syz [ 369.917531][ T56] usb 6-1: SerialNumber: syz [ 369.921277][ T56] usb 6-1: config 0 descriptor?? [ 369.941395][ T5383] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 370.116234][ T5383] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 370.124123][ T5383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.126298][ T5383] usb 5-1: Product: syz [ 370.133757][ T5383] usb 5-1: Manufacturer: syz [ 370.135047][ T5383] usb 5-1: SerialNumber: syz [ 370.137432][ T5383] usb 5-1: config 0 descriptor?? [ 370.173520][T10470] netlink: del zone limit has 4 unknown bytes [ 370.177008][T10471] netlink: del zone limit has 4 unknown bytes [ 370.182424][ T5383] usb 6-1: USB disconnect, device number 42 [ 370.420146][T10463] Invalid option length (1031570) for dns_resolver key [ 370.425014][ T5404] usb 5-1: USB disconnect, device number 39 [ 370.653447][T10466] Invalid option length (1031570) for dns_resolver key [ 371.173143][T10491] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 371.175588][T10491] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 371.194005][T10491] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 371.485361][T10506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.551321][T10510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1490'. [ 371.737001][ T5383] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 371.803100][T10515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1492'. [ 371.840976][T10517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1493'. [ 371.897140][ T5383] usb 7-1: Using ep0 maxpacket: 8 [ 371.900579][ T5383] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 371.901820][T10520] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 371.903138][ T5383] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 371.905857][T10520] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 371.909507][ T5383] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 371.912634][T10520] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 371.914284][ T5383] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 371.919843][ T5383] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 371.922820][ T5383] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 371.925886][ T5383] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 371.931266][ T5383] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 371.933631][ T5383] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 371.935607][ T5383] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 371.938762][ T5383] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 371.942064][ T5383] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 371.944999][ T5383] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 371.948403][ T5383] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 371.952914][ T5383] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 371.955418][ T5383] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 371.957590][ T5383] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 371.960366][ T5383] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 371.963662][ T5383] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 371.966861][ T5383] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 371.969931][ T5383] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 371.976348][ T5383] usb 7-1: string descriptor 0 read error: -22 [ 371.978773][ T5383] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 371.981176][ T5383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.991247][ T5383] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 372.095504][ T64] Bluetooth: hci1: unexpected event for opcode 0x201c [ 372.266953][ T5383] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 372.441571][ T5383] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 372.444339][ T5383] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.446787][ T5383] usb 8-1: Product: syz [ 372.448181][ T5383] usb 8-1: Manufacturer: syz [ 372.449447][ T5383] usb 8-1: SerialNumber: syz [ 372.457297][ T5383] usb 8-1: config 0 descriptor?? [ 372.697242][ T5383] usb 8-1: USB disconnect, device number 37 [ 372.914173][T10524] Invalid option length (1031570) for dns_resolver key [ 373.011962][T10541] dccp_xmit_packet: Payload too large (65475) for featneg. [ 373.158347][T10546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1501'. [ 373.523321][T10550] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 373.526023][T10550] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 373.529295][T10550] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 374.240438][ T5383] usb 7-1: USB disconnect, device number 51 [ 374.863654][T10566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1509'. [ 375.023862][T10574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1510'. [ 375.151135][T10577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.171741][T10577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.386978][ T5225] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 375.516966][ T5225] usb 7-1: device descriptor read/64, error -71 [ 375.780676][T10584] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1513'. [ 375.797818][ T64] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 375.981402][T10593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1516'. [ 376.787112][ T8] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 376.919944][ T8] usb 5-1: device descriptor read/64, error -71 [ 376.972350][T10603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1519'. [ 377.157945][ T8] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 377.182658][T10607] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 377.326929][ T8] usb 5-1: device descriptor read/64, error -71 [ 377.439366][ T8] usb usb5-port1: attempt power cycle [ 377.757651][ T25] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 377.777203][ T8] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 377.797448][ T8] usb 5-1: device descriptor read/8, error -71 [ 377.917923][ T1373] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.920562][ T1373] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.921613][ T25] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 377.926031][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.928415][ T25] usb 6-1: Product: syz [ 377.929550][ T25] usb 6-1: Manufacturer: syz [ 377.930793][ T25] usb 6-1: SerialNumber: syz [ 377.933644][ T25] usb 6-1: config 0 descriptor?? [ 378.050553][ T8] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 378.084194][ T8] usb 5-1: device descriptor read/8, error -71 [ 378.193318][ T56] usb 6-1: USB disconnect, device number 43 [ 378.197088][ T8] usb usb5-port1: unable to enumerate USB device [ 378.408749][T10610] Invalid option length (1031570) for dns_resolver key [ 379.197206][ T8] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 379.376432][ T8] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 379.383188][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.391537][ T8] usb 6-1: Product: syz [ 379.393134][ T8] usb 6-1: Manufacturer: syz [ 379.394789][ T8] usb 6-1: SerialNumber: syz [ 379.406009][ T8] usb 6-1: config 0 descriptor?? [ 379.635334][ T5225] usb 6-1: USB disconnect, device number 44 [ 379.852702][T10637] Invalid option length (1031570) for dns_resolver key [ 381.917035][ T5345] Bluetooth: hci3: command 0x0405 tx timeout [ 382.783900][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1537'. [ 383.084374][T10678] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1539'. [ 383.177632][ T5404] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 383.349487][ T5404] usb 6-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 383.353290][ T5404] usb 6-1: config 1 interface 0 has no altsetting 0 [ 383.356795][ T5404] usb 6-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.40 [ 383.359279][ T5404] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.361426][ T5404] usb 6-1: Product: 曻㮽ᶡ᪄뵖ᇳ蟀떒䔘í’ä˜áˆŽã‡íˆ«ë– è¶ê£´ëšœÉ¨á¬´í”Œë¹¤ë¨‰ãŒì°›å¯è¨›îƒ’ã‰ë‰ëˆî”´ê­ãŽ§î¦¢à§‘ퟻꡪ宽ຣ൨尩é‰ã³¼ï…Ÿìµ¯ê‚æƒè»î✂嬬鑫㔲龴욓蟶ൕ뀤æ˜äžŒêŠë¿‚ã¼æ†á“„⋰颛넞䪃玓 [ 383.367626][ T5404] usb 6-1: Manufacturer: 矣㭷啾ᳳꦅ푉始ã¿í’‰à£„쿙鳆丈锿ç•î®Šâ¤Šï Ÿã°¤ã°çŽ­ì‰©â ¡ë‡¨ìµŽåŽ…껼五衡ì¯è°¢å¸¶çµ•í–¼è ¥ì´²å´™å…囶﹞〥無肓껅â·è•·ê´¼î¶…澶êœç¹–íšã¿ ä¢¼å¢µå¦›ë†î¢€ç„¤íœ€ã‘®åˆ£î†ã‡›å¦‚剩熓쭫Ỷ뤕瘚è‹é°›è¶ [ 383.374267][ T5404] usb 6-1: SerialNumber: çµ²éµã®î¶ƒç•šèª¨î›è—¨ä¹²ê¼¸ï¨á±œÃ¡å‘ƒî¬„䅩㻛乓璖꽞앯﯋⤼í†ë ìº«é±žâ€Šà±˜ì¾¤í†­à¶’㥩擌婳ظ呯▼䕂ㆀ键殱ᷢ묠ꨄ䤬í¦åŸ½í“㓮㪊î•è­·âª¿á‹ç•§ä µêŒ’=ﲂ۟ç‡ì”ºæ…½ì»‘訧㖬ᇢ쮓 [ 383.606956][T10693] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 383.608738][T10693] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 383.610870][T10693] vhci_hcd vhci_hcd.0: Device attached [ 383.613245][T10696] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 383.621228][ T12] vhci_hcd: stop threads [ 383.622447][ T12] vhci_hcd: release socket [ 383.623680][ T12] vhci_hcd: disconnect device [ 383.693780][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1544'. [ 383.795054][ T5404] usbhid 6-1:1.0: can't add hid device: -71 [ 383.796761][ T5404] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 383.801689][T10706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1546'. [ 383.804279][ T5404] usb 6-1: USB disconnect, device number 45 [ 383.911208][T10711] trusted_key: encrypted_key: insufficient parameters specified [ 383.916895][T10712] trusted_key: encrypted_key: insufficient parameters specified [ 384.339813][ T64] Bluetooth: hci2: unexpected event for opcode 0x080f [ 384.394590][ T5345] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 385.056918][ T5225] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 385.225401][ T5225] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 385.228028][ T5225] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.230208][ T5225] usb 8-1: Product: syz [ 385.231326][ T5225] usb 8-1: Manufacturer: syz [ 385.232567][ T5225] usb 8-1: SerialNumber: syz [ 385.242016][ T5225] usb 8-1: config 0 descriptor?? [ 385.459155][ T1422] usb 8-1: USB disconnect, device number 38 [ 385.679180][T10728] Invalid option length (1031570) for dns_resolver key [ 385.687284][ T5404] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 385.730195][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1555'. [ 385.831380][T10739] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1557'. [ 385.850112][ T5404] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 385.852548][ T5404] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.854872][ T5404] usb 7-1: Product: syz [ 385.863835][ T5404] usb 7-1: Manufacturer: syz [ 385.865323][ T5404] usb 7-1: SerialNumber: syz [ 385.875773][ T5404] usb 7-1: config 0 descriptor?? [ 386.104232][ T5404] usb 7-1: USB disconnect, device number 54 [ 386.324376][T10730] Invalid option length (1031570) for dns_resolver key [ 386.790400][T10756] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1562'. [ 387.344840][T10774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1567'. [ 387.548990][T10777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.675624][T10782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1570'. [ 387.754146][T10784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.807337][ T5404] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 387.970734][ T5404] usb 7-1: Using ep0 maxpacket: 8 [ 387.994627][ T5404] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 387.997039][ T5404] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 387.999131][ T1422] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 388.001180][ T5404] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 388.003729][ T5404] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 388.006932][ T5404] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 388.009951][ T5404] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 388.012923][ T5404] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 388.017172][ T5345] Bluetooth: hci3: command 0x0405 tx timeout [ 388.017539][ T5404] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 388.021241][ T5404] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 388.023434][ T5404] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 388.026173][ T5404] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 388.031079][ T5404] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 388.034223][ T5404] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 388.037412][ T5404] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 388.086947][ T5404] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 388.091201][ T5404] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 388.093357][ T5404] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 388.096597][ T5404] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 388.099928][ T5404] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 388.102839][ T5404] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 388.105614][ T5404] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 388.146932][ T1422] usb 6-1: Using ep0 maxpacket: 8 [ 388.160861][ T1422] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 388.163187][ T1422] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 388.165275][ T1422] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 388.168353][ T1422] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 388.171730][ T1422] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 388.175479][ T1422] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 388.178705][ T5404] usb 7-1: string descriptor 0 read error: -22 [ 388.178894][ T5404] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 388.181030][ T1422] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 388.182982][ T5404] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.188006][ T1422] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 388.188022][ T1422] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 388.188111][ T1422] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 388.188186][ T1422] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 388.188199][ T1422] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 388.188276][ T1422] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 388.205459][ T1422] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 388.212008][ T1422] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 388.214375][ T1422] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 388.216690][ T1422] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 388.220323][ T1422] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 388.225016][ T1422] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 388.229675][ T1422] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 388.234059][ T1422] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 388.244201][ T5404] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 388.252606][ T1422] usb 6-1: string descriptor 0 read error: -22 [ 388.254374][ T1422] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 388.256719][ T1422] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.281348][ T1422] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux1 [ 388.397029][ T5345] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 388.399512][ T5345] Bluetooth: hci2: Injecting HCI hardware error event [ 388.402938][ T5345] Bluetooth: hci2: hardware error 0x00 [ 388.749191][T10795] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 388.805845][T10796] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 389.443587][T10801] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 389.867947][T10804] input: syz0 as /devices/virtual/input/input24 [ 389.889725][T10804] kvm: kvm [10803]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000005c) = 0x0 [ 390.236944][T10744] Bluetooth: hci3: command 0x0405 tx timeout [ 390.465761][ T39] audit: type=1326 audit(1727988909.201:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.3.1576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 390.472777][ T39] audit: type=1326 audit(1727988909.201:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.3.1576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 390.480171][ T5345] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 390.483919][ T39] audit: type=1326 audit(1727988909.211:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.3.1576" exe="/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 390.492771][ T39] audit: type=1326 audit(1727988909.211:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.3.1576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 390.498745][ T39] audit: type=1326 audit(1727988909.211:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.3.1576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 390.505818][ T39] audit: type=1326 audit(1727988909.221:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.3.1576" exe="/syz-executor" sig=0 arch=40000003 syscall=187 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 390.514849][ T39] audit: type=1326 audit(1727988909.221:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.3.1576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 390.520944][ T39] audit: type=1326 audit(1727988909.221:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.3.1576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 390.528074][ T39] audit: type=1326 audit(1727988909.221:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.3.1576" exe="/syz-executor" sig=0 arch=40000003 syscall=97 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 390.534115][ T39] audit: type=1326 audit(1727988909.221:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.3.1576" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 390.559717][ T5404] usb 6-1: USB disconnect, device number 46 [ 390.578023][ T30] usb 7-1: USB disconnect, device number 55 [ 390.686998][ T5225] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 390.700029][T10812] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 390.845592][ T5225] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 390.849429][ T5225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.852213][ T5225] usb 5-1: Product: syz [ 390.853554][ T5225] usb 5-1: Manufacturer: syz [ 390.854886][ T5225] usb 5-1: SerialNumber: syz [ 390.864700][ T5225] usb 5-1: config 0 descriptor?? [ 391.167576][ T5225] usb 5-1: USB disconnect, device number 44 [ 391.368458][T10819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.403229][T10807] Invalid option length (1031570) for dns_resolver key [ 391.637002][ T5383] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 391.786914][ T5383] usb 6-1: Using ep0 maxpacket: 8 [ 391.802658][ T5383] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 391.807593][ T5383] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 391.810183][ T5383] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 391.813133][ T5383] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 391.816618][ T5383] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 391.821167][ T5383] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 391.824795][ T5383] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 391.831641][ T5383] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 391.835994][ T5383] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 391.838351][ T5383] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 391.840919][ T5383] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 391.844533][ T5383] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 391.848277][ T5383] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 391.851278][ T5383] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 391.857878][ T5383] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 391.861236][ T5383] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 391.863306][ T5383] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 391.866065][ T5383] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 391.869661][ T5383] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 391.873155][ T5383] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 391.876433][ T5383] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 391.892292][ T5383] usb 6-1: string descriptor 0 read error: -22 [ 391.894660][ T5383] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 391.897727][ T5383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.909493][ T5383] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 392.278364][T10828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1581'. [ 392.448013][T10834] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1583'. [ 392.596006][T10837] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 393.365068][ T35] usb 6-1: USB disconnect, device number 47 [ 393.460065][T10840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1586'. [ 393.537481][T10846] fuse: Unknown parameter 'ç©1Ô\' [ 394.030074][T10857] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1592'. [ 394.376948][ T35] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 394.530135][ T35] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 394.532644][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.535365][ T35] usb 6-1: Product: syz [ 394.537631][ T35] usb 6-1: Manufacturer: syz [ 394.539318][ T35] usb 6-1: SerialNumber: syz [ 394.547016][ T35] usb 6-1: config 0 descriptor?? [ 394.622846][T10875] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 394.805926][ T1422] usb 6-1: USB disconnect, device number 48 [ 395.016669][T10863] Invalid option length (1031570) for dns_resolver key [ 395.571996][T10883] netlink: 'syz.1.1598': attribute type 1 has an invalid length. [ 396.466767][T10897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1601'. [ 396.552637][T10905] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 396.555706][T10905] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 396.561387][T10905] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 396.673159][T10911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.713990][T10917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1608'. [ 396.726083][T10919] FAULT_INJECTION: forcing a failure. [ 396.726083][T10919] name failslab, interval 1, probability 0, space 0, times 0 [ 396.732396][T10919] CPU: 3 UID: 0 PID: 10919 Comm: syz.0.1609 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 396.735290][T10919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 396.738544][T10919] Call Trace: [ 396.739640][T10919] [ 396.740791][T10919] dump_stack_lvl+0x16c/0x1f0 [ 396.742278][T10919] should_fail_ex+0x497/0x5b0 [ 396.743579][T10919] ? fs_reclaim_acquire+0xae/0x160 [ 396.744923][T10919] should_failslab+0xc2/0x120 [ 396.746161][T10919] __kmalloc_node_noprof+0xd1/0x440 [ 396.747583][T10919] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 396.749197][T10919] __kvmalloc_node_noprof+0xad/0x1a0 [ 396.751378][T10919] io_pin_pages+0x8b/0x190 [ 396.753395][T10919] io_sqe_buffer_register+0x14d/0x20c0 [ 396.755457][T10919] ? copy_compat_iovec_from_user+0x138/0x180 [ 396.757052][T10919] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 396.759035][T10919] ? iovec_from_user.part.0+0x7e/0x130 [ 396.760587][T10919] io_sqe_buffers_register+0x3b3/0xa60 [ 396.762218][T10919] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 396.763935][T10919] ? rcu_is_watching+0x12/0xc0 [ 396.765346][T10919] ? __mutex_lock+0x1a6/0x9c0 [ 396.766837][T10919] ? __fget_files+0x23a/0x3f0 [ 396.768435][T10919] __io_uring_register+0x1e7c/0x1f00 [ 396.770219][T10919] ? __pfx___mutex_lock+0x10/0x10 [ 396.771693][T10919] ? __pfx___io_uring_register+0x10/0x10 [ 396.773171][T10919] ? __fget_files+0x244/0x3f0 [ 396.774667][T10919] __ia32_sys_io_uring_register+0x157/0x270 [ 396.776713][T10919] __do_fast_syscall_32+0x73/0x120 [ 396.778449][T10919] do_fast_syscall_32+0x32/0x80 [ 396.779919][T10919] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 396.781875][T10919] RIP: 0023:0xf7f8f579 [ 396.783083][T10919] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 396.788401][T10919] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 00000000000001ab [ 396.790597][T10919] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 396.792709][T10919] RDX: 00000000200004c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 396.794908][T10919] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 396.797782][T10919] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 396.800103][T10919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 396.802226][T10919] [ 396.845484][T10921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.882760][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1611'. [ 396.918893][ T1422] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 397.012766][T10931] overlayfs: failed to resolve './file1': -2 [ 397.067078][ T1422] usb 6-1: Using ep0 maxpacket: 8 [ 397.070710][ T1422] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 397.076943][ T5346] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 397.088402][ T1422] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 397.090390][ T1422] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 397.093019][ T1422] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 397.102380][ T1422] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 397.106369][ T1422] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 397.111020][ T1422] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 397.115811][ T1422] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 397.126912][ T1422] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 397.129516][ T1422] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 397.132656][ T1422] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 397.135901][ T1422] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 397.156909][ T1422] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 397.161127][ T1422] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 397.182057][ T1422] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 397.185396][ T1422] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 397.196957][ T1422] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 397.200312][ T1422] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 397.204918][ T1422] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 397.214757][ T1422] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 397.219177][ T1422] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 397.233977][ T1422] usb 6-1: string descriptor 0 read error: -22 [ 397.236467][ T1422] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 397.242052][ T1422] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.257760][ T5346] usb 8-1: Using ep0 maxpacket: 8 [ 397.269002][ T5346] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 397.272102][ T5346] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 397.274808][ T5346] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 397.283340][ T5346] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 397.290934][ T5346] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 397.295056][ T1422] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 397.302572][ T5346] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 397.306599][ T5346] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 397.312541][ T5346] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 397.316044][ T5346] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 397.319229][ T5346] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 397.322439][ T5346] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 397.326297][ T5346] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 397.330331][ T5346] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 397.333348][ T5346] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 397.338236][ T5346] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 397.341534][ T5346] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 397.344432][ T5346] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 397.348617][ T5346] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 397.352860][ T5346] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 397.363423][ T5346] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 397.367992][ T5346] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 397.373074][ T5346] usb 8-1: string descriptor 0 read error: -22 [ 397.374908][ T5346] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 397.386892][ T5346] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.392048][ T5346] adutux 8-1:246.0: ADU100 now attached to /dev/usb/adutux1 [ 397.669846][T10946] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 397.672194][T10946] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 397.675172][T10946] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 397.798124][T10950] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 397.915020][T10954] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 398.242030][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 398.242042][ T39] audit: type=1800 audit(1727988916.981:234): pid=10962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1620" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 398.507096][ T5386] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 398.667090][ T5386] usb 5-1: Using ep0 maxpacket: 8 [ 398.674649][ T5386] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 398.678308][ T5386] usb 5-1: config 0 has no interface number 0 [ 398.680526][ T5386] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 398.684377][ T5386] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 398.692426][ T5386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.697487][ T5386] usb 5-1: config 0 descriptor?? [ 399.416966][ T35] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 399.521584][ T5383] usb 6-1: USB disconnect, device number 49 [ 399.523594][ T5386] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior2 [ 399.528582][ T5384] usb 8-1: USB disconnect, device number 39 [ 399.577160][ T35] usb 7-1: Using ep0 maxpacket: 16 [ 399.580293][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 399.584704][ T35] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 399.587329][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.589484][ T35] usb 7-1: Product: syz [ 399.590699][ T35] usb 7-1: Manufacturer: syz [ 399.591923][ T35] usb 7-1: SerialNumber: syz [ 399.594065][ T35] usb 7-1: config 0 descriptor?? [ 399.596573][ T35] hub 7-1:0.0: bad descriptor, ignoring hub [ 399.598491][ T35] hub 7-1:0.0: probe with driver hub failed with error -5 [ 399.601563][ T35] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input25 [ 399.819778][ T5384] usb 7-1: USB disconnect, device number 56 [ 400.073664][T10979] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 400.076135][T10979] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 400.079786][T10979] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 400.247589][T10744] Bluetooth: hci3: command 0x0405 tx timeout [ 400.672174][T11009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1632'. [ 400.899188][T11019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.125133][ T35] usb 5-1: USB disconnect, device number 45 [ 401.128986][ T35] iowarrior 5-1:0.1: I/O-Warror #2 now disconnected [ 401.136975][ T5346] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 401.189792][T11025] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 401.192812][T11025] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 401.196253][T11025] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 401.297101][ T5346] usb 6-1: Using ep0 maxpacket: 8 [ 401.300638][ T5346] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 401.303958][ T5346] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 401.306767][ T5346] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 401.311809][ T5346] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 401.315923][ T5346] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 401.336893][ T5346] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 401.340725][ T5346] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 401.345768][ T5346] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 401.349377][ T5346] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 401.351996][ T5346] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 401.356774][ T5346] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 401.371827][ T5346] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 401.375297][ T5346] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 401.383892][ T5346] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 401.390664][ T5346] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 401.393504][ T5346] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 401.397251][ T5346] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 401.404202][ T5346] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 401.417749][ T5346] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 401.431769][ T5346] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 401.444161][ T5346] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 401.459732][ T5346] usb 6-1: string descriptor 0 read error: -22 [ 401.461586][ T5346] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 401.464198][ T5346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.481954][ T5346] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 401.536393][ T5345] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 401.557073][T11032] syz.0.1638 (11032): drop_caches: 2 [ 401.560187][T11032] syz.0.1638 (11032): drop_caches: 2 [ 401.573479][T11032] syz.0.1638 (11032): drop_caches: 2 [ 401.576281][T11032] syz.0.1638 (11032): drop_caches: 2 [ 401.584210][T11032] futex_wake_op: syz.0.1638 tries to shift op by -1; fix this program [ 401.999185][T11047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1643'. [ 402.022517][T11049] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 403.176946][ T5384] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 403.346039][ T5384] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 403.348755][ T5384] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.351355][ T5384] usb 7-1: Product: syz [ 403.352452][ T5384] usb 7-1: Manufacturer: syz [ 403.353707][ T5384] usb 7-1: SerialNumber: syz [ 403.357722][ T5384] usb 7-1: config 0 descriptor?? [ 403.645456][ T5384] usb 7-1: USB disconnect, device number 57 [ 403.769837][ T5383] usb 6-1: USB disconnect, device number 50 [ 403.847359][T11056] Invalid option length (1031570) for dns_resolver key [ 404.407154][ T5383] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 404.480712][ T39] audit: type=1326 audit(1727988923.221:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.1.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 404.486380][ T39] audit: type=1326 audit(1727988923.221:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.1.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 404.492275][ T39] audit: type=1326 audit(1727988923.221:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.1.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 404.498669][ T39] audit: type=1326 audit(1727988923.221:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.1.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 404.504216][ T39] audit: type=1326 audit(1727988923.221:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.1.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 404.510179][ T39] audit: type=1326 audit(1727988923.221:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.1.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=187 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 404.517165][ T39] audit: type=1326 audit(1727988923.221:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.1.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 404.524228][ T39] audit: type=1326 audit(1727988923.221:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.1.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 404.530468][ T39] audit: type=1326 audit(1727988923.221:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.1.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=97 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 404.536514][ T39] audit: type=1326 audit(1727988923.221:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11079 comm="syz.1.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 404.551042][ T5383] usb 5-1: device descriptor read/64, error -71 [ 404.787224][ T5383] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 404.927022][ T5383] usb 5-1: device descriptor read/64, error -71 [ 405.037761][ T5383] usb usb5-port1: attempt power cycle [ 405.397669][ T5383] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 405.417750][ T5383] usb 5-1: device descriptor read/8, error -71 [ 405.575505][T11092] input: syz1 as /devices/virtual/input/input26 [ 405.667073][ T5383] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 405.697848][ T5383] usb 5-1: device descriptor read/8, error -71 [ 405.808107][ T5383] usb usb5-port1: unable to enumerate USB device [ 406.239910][T11096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1659'. [ 406.510053][T11100] netlink: 'syz.1.1661': attribute type 21 has an invalid length. [ 406.967080][ T5384] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 407.150961][ T5384] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 407.154102][ T5384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.166981][ T5384] usb 6-1: Product: syz [ 407.168712][ T5384] usb 6-1: Manufacturer: syz [ 407.170547][ T5384] usb 6-1: SerialNumber: syz [ 407.177859][ T5384] usb 6-1: config 0 descriptor?? [ 407.454149][ T5404] usb 6-1: USB disconnect, device number 51 [ 407.464621][T11124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1670'. [ 407.675512][T11113] Invalid option length (1031570) for dns_resolver key [ 408.008944][T11132] input: syz1 as /devices/virtual/input/input27 [ 408.029657][T11132] syz.0.1673: attempt to access beyond end of device [ 408.029657][T11132] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 408.036953][T11132] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 408.485106][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.614732][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.640218][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 408.646072][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 408.651929][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 408.657772][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 408.660427][ T64] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 408.662608][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 408.713204][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.763001][T11161] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.825515][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.939708][T11161] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.018639][T11161] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.061714][ T66] bridge_slave_1: left allmulticast mode [ 409.064239][ T66] bridge_slave_1: left promiscuous mode [ 409.068441][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.082952][ T66] bridge_slave_0: left allmulticast mode [ 409.084925][ T66] bridge_slave_0: left promiscuous mode [ 409.086497][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.714296][T10744] Bluetooth: hci3: command 0x0405 tx timeout [ 410.404871][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.411093][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.414869][ T66] bond0 (unregistering): Released all slaves [ 410.419840][ T66] bond1 (unregistering): Released all slaves [ 410.425849][T11154] chnl_net:caif_netlink_parms(): no params data found [ 410.454376][T11161] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.516597][ T66] : left promiscuous mode [ 410.584435][T11172] netlink: 'syz.3.1688': attribute type 1 has an invalid length. [ 410.717061][ T5345] Bluetooth: hci1: command tx timeout [ 410.735786][T11154] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.739252][T11154] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.742707][T11154] bridge_slave_0: entered allmulticast mode [ 410.745862][T11154] bridge_slave_0: entered promiscuous mode [ 410.751040][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1689'. [ 410.821332][T11154] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.827052][T11154] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.831254][T11154] bridge_slave_1: entered allmulticast mode [ 410.834714][T11154] bridge_slave_1: entered promiscuous mode [ 410.871493][T11161] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.895098][T11161] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.903592][T11161] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.908373][T11154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.919906][T11161] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.927892][T11154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.020307][T11154] team0: Port device team_slave_0 added [ 411.025632][T11154] team0: Port device team_slave_1 added [ 411.033886][T11178] infiniband syz2: set down [ 411.035424][T11178] infiniband syz2: added ipvlan0 [ 411.119820][T11154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.121821][T11154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.130531][T11178] RDS/IB: syz2: added [ 411.137022][T11154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.138060][T11178] smc: adding ib device syz2 with port count 1 [ 411.142984][T11178] smc: ib device syz2 port 1 has pnetid [ 411.147749][T11154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.152136][T11154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.173850][T11154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.366899][T11154] hsr_slave_0: entered promiscuous mode [ 411.372930][T11154] hsr_slave_1: entered promiscuous mode [ 411.380670][T11154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.387473][T11154] Cannot create hsr debugfs directory [ 412.075965][T11154] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 412.088906][T11154] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 412.104595][T11154] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 412.109238][T11154] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 412.113615][T11214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1693'. [ 412.206505][T11154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.237313][T11154] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.258661][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.260751][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.270823][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.273045][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.414623][ T66] hsr_slave_0: left promiscuous mode [ 412.428912][ T66] hsr_slave_1: left promiscuous mode [ 412.438630][T11236] 9pnet: Found fid 0 not clunked [ 412.472306][ T66] veth1_macvtap: left promiscuous mode [ 412.474690][ T66] veth1_vlan: left promiscuous mode [ 412.480350][ T66] veth0_vlan: left promiscuous mode [ 412.798065][T10744] Bluetooth: hci1: command tx timeout [ 413.711934][ T66] team0 (unregistering): Port device team_slave_1 removed [ 413.837478][ T66] team0 (unregistering): Port device team_slave_0 removed [ 414.876993][T10744] Bluetooth: hci1: command 0x040f tx timeout [ 415.006001][T11251] cgroup: Unknown subsys name 'fowner>00000000000000000000' [ 415.055337][T11154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.113366][T11154] veth0_vlan: entered promiscuous mode [ 415.135696][T11154] veth1_vlan: entered promiscuous mode [ 415.197640][T11154] veth0_macvtap: entered promiscuous mode [ 415.206075][T11154] veth1_macvtap: entered promiscuous mode [ 415.234584][T11154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.255931][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.260708][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.263741][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.266569][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.271891][T11154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.276724][T11154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.281838][T11154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.282338][T11256] dlm: non-version read from control device 231 [ 415.289495][T11154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.292429][T11154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.295125][T11154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.300541][T11154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.399731][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 415.455017][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.457349][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.474152][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.484400][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.595611][T11262] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x245 pfn:0x62814 [ 415.600661][T11262] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 415.603441][T11262] page_type: f0(buddy) [ 415.604882][T11262] raw: 04fff00000000000 ffffea00018b5d88 ffffea0001867608 0000000000000000 [ 415.608062][T11262] raw: 0000000000000245 0000000000000001 00000000f0000000 0000000000000000 [ 415.611146][T11262] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 415.614796][T11262] page_owner tracks the page as freed [ 415.618945][T11262] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 11251, tgid 11250 (syz.3.1700), ts 414870938291, free_ts 415102436980 [ 415.625746][T11262] post_alloc_hook+0x2d1/0x350 [ 415.627557][T11262] get_page_from_freelist+0x101e/0x3070 [ 415.629504][T11262] __alloc_pages_noprof+0x223/0x25c0 [ 415.631220][T11262] alloc_pages_mpol_noprof+0x2c9/0x610 [ 415.636701][T11262] folio_alloc_mpol_noprof+0x36/0xd0 [ 415.638878][T11262] shmem_alloc_folio+0x135/0x160 [ 415.640701][T11262] shmem_alloc_and_add_folio+0x48b/0xc00 [ 415.642676][T11262] shmem_get_folio_gfp+0x689/0x1530 [ 415.644398][T11262] shmem_fault+0x200/0xae0 [ 415.645906][T11262] __do_fault+0x10a/0x490 [ 415.647776][T11262] do_pte_missing+0xea8/0x3e50 [ 415.649482][T11262] __handle_mm_fault+0x100a/0x2a10 [ 415.651037][T11262] handle_mm_fault+0x3fa/0xaa0 [ 415.652646][T11262] __get_user_pages+0x90f/0x3b90 [ 415.654629][T11262] populate_vma_page_range+0x27f/0x3a0 [ 415.656637][T11262] __mm_populate+0x1d6/0x380 [ 415.658414][T11262] page last free pid 11257 tgid 11250 stack trace: [ 415.660784][T11262] free_unref_page+0x5f4/0xdc0 [ 415.662507][T11262] __folio_put+0x30d/0x3d0 [ 415.664091][T11262] collapse_file+0x2b51/0x2f50 [ 415.666014][T11262] hpage_collapse_scan_file+0x84e/0xc20 [ 415.668192][T11262] madvise_collapse+0x4c5/0xac0 [ 415.670117][T11262] madvise_vma_behavior+0x390/0x19e0 [ 415.672108][T11262] madvise_walk_vmas+0x1cf/0x2c0 [ 415.673967][T11262] do_madvise+0x2e1/0x760 [ 415.675738][T11262] __ia32_sys_madvise+0xa7/0x110 [ 415.678238][T11262] __do_fast_syscall_32+0x73/0x120 [ 415.681635][T11262] do_fast_syscall_32+0x32/0x80 [ 415.683231][T11262] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 415.687814][T11262] ------------[ cut here ]------------ [ 415.689449][T11262] kernel BUG at include/linux/mm.h:1444! [ 415.691087][T11262] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 415.693579][T11262] CPU: 1 UID: 0 PID: 11262 Comm: syz.1.1703 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 415.700033][T11262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 415.703947][T11262] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 415.706539][T11262] Code: b0 8b 48 89 df e8 d0 23 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 20 75 05 fd 48 c7 c6 60 c6 b0 8b 4c 89 e7 e8 b1 23 4b fd 90 <0f> 0b e8 09 75 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 415.713691][T11262] RSP: 0018:ffffc90004006ee0 EFLAGS: 00010293 [ 415.715981][T11262] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 415.718787][T11262] RDX: ffff888024680000 RSI: ffffffff84873a5f RDI: ffff888024680444 [ 415.721515][T11262] RBP: ffffea00018a0534 R08: 0000000000000001 R09: fffffbfff2d315bb [ 415.724326][T11262] R10: ffffffff9698addf R11: ffff88802b428a40 R12: ffffea00018a0500 [ 415.727134][T11262] R13: ffff888068ab3c00 R14: 0000000000001000 R15: 0000000000001000 [ 415.729814][T11262] FS: 0000000000000000(0000) GS:ffff88802b500000(0000) knlGS:0000000000000000 [ 415.732450][T11262] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 415.734210][T11262] CR2: 00000000f56fcda4 CR3: 00000000209ca000 CR4: 0000000000352ef0 [ 415.736362][T11262] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 415.738700][T11262] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 415.741398][T11262] Call Trace: [ 415.742673][T11262] [ 415.743596][T11262] ? die+0x31/0x80 [ 415.744819][T11262] ? do_trap+0x232/0x430 [ 415.746392][T11262] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 415.748474][T11262] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 415.750162][T11262] ? do_error_trap+0xf4/0x230 [ 415.751642][T11262] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 415.753269][T11262] ? handle_invalid_op+0x34/0x40 [ 415.755065][T11262] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 415.757405][T11262] ? exc_invalid_op+0x2e/0x50 [ 415.759170][T11262] ? asm_exc_invalid_op+0x1a/0x20 [ 415.761040][T11262] ? __iov_iter_get_pages_alloc+0x1d0f/0x2230 [ 415.763153][T11262] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 415.765180][T11262] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 415.767315][T11262] ? delete_node+0x207/0x8e0 [ 415.769091][T11262] iov_iter_get_pages_alloc2+0x53/0xf0 [ 415.771216][T11262] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 415.773782][T11262] ? p9pdu_vwritef+0x368/0x21d0 [ 415.775545][T11262] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 415.778090][T11262] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 415.779442][T11262] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 415.780876][T11262] ? p9_tag_alloc+0x4cc/0x870 [ 415.782590][T11262] ? reacquire_held_locks+0x466/0x4c0 [ 415.784715][T11262] p9_virtio_zc_request+0x1ac/0x1460 [ 415.786831][T11262] ? p9pdu_writef+0xc4/0x100 [ 415.788516][T11262] ? __pfx_p9pdu_writef+0x10/0x10 [ 415.790256][T11262] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 415.791769][T11262] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 415.793280][T11262] ? rcu_is_watching+0x12/0xc0 [ 415.794644][T11262] ? trace_9p_protocol_dump+0x192/0x220 [ 415.796063][T11262] ? rcu_is_watching+0x12/0xc0 [ 415.797351][T11262] ? p9_client_prepare_req+0x111/0x4d0 [ 415.798902][T11262] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 415.800948][T11262] ? hlock_class+0x4e/0x130 [ 415.802808][T11262] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 415.805113][T11262] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 415.807556][T11262] ? hlock_class+0x4e/0x130 [ 415.809150][T11262] ? mark_lock+0xb5/0xc60 [ 415.810705][T11262] ? __pfx_mark_lock+0x10/0x10 [ 415.812401][T11262] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 415.814480][T11262] p9_client_write+0x447/0x680 [ 415.816332][T11262] ? __pfx_p9_client_write+0x10/0x10 [ 415.818407][T11262] ? mark_held_locks+0x9f/0xe0 [ 415.820112][T11262] v9fs_issue_write+0xe2/0x180 [ 415.821834][T11262] ? __pfx_v9fs_issue_write+0x10/0x10 [ 415.823709][T11262] ? rcu_is_watching+0x12/0xc0 [ 415.825381][T11262] ? trace_netfs_sreq+0x193/0x220 [ 415.827214][T11262] netfs_do_issue_write+0x92/0x110 [ 415.828958][T11262] netfs_advance_write+0x384/0xc80 [ 415.830538][T11262] ? netfs_buffer_append_folio+0x276/0x360 [ 415.832690][T11262] netfs_write_folio+0xc19/0x1930 [ 415.834584][T11262] netfs_writepages+0x2ba/0xb90 [ 415.836389][T11262] ? __pfx_netfs_writepages+0x10/0x10 [ 415.838216][T11262] ? __pfx___lock_acquire+0x10/0x10 [ 415.839949][T11262] ? __pfx_netfs_writepages+0x10/0x10 [ 415.841838][T11262] do_writepages+0x1a3/0x7f0 [ 415.843479][T11262] ? __pfx_do_writepages+0x10/0x10 [ 415.845257][T11262] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 415.847325][T11262] ? do_raw_spin_lock+0x12d/0x2c0 [ 415.849172][T11262] ? do_raw_spin_unlock+0x172/0x230 [ 415.851028][T11262] ? _raw_spin_unlock+0x28/0x50 [ 415.852777][T11262] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 415.854896][T11262] filemap_fdatawrite_wbc+0x148/0x1c0 [ 415.856769][T11262] __filemap_fdatawrite_range+0xb3/0xf0 [ 415.858695][T11262] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 415.860908][T11262] v9fs_dir_release+0x429/0x590 [ 415.862681][T11262] ? __pfx_v9fs_dir_release+0x10/0x10 [ 415.864586][T11262] ? __pfx_v9fs_dir_release+0x10/0x10 [ 415.866664][T11262] __fput+0x3f6/0xb60 [ 415.868203][T11262] ? _raw_spin_unlock_irq+0x23/0x50 [ 415.870091][T11262] task_work_run+0x14e/0x250 [ 415.871749][T11262] ? __pfx_task_work_run+0x10/0x10 [ 415.873519][T11262] ? do_raw_spin_unlock+0x172/0x230 [ 415.875480][T11262] do_exit+0xadd/0x2d70 [ 415.877157][T11262] ? __pfx_do_exit+0x10/0x10 [ 415.878934][T11262] ? preempt_schedule_thunk+0x1a/0x30 [ 415.880736][T11262] do_group_exit+0xd3/0x2a0 [ 415.882345][T11262] __ia32_sys_exit_group+0x3e/0x50 [ 415.884140][T11262] ia32_sys_call+0x13f8/0x1bb0 [ 415.885803][T11262] __do_fast_syscall_32+0x73/0x120 [ 415.887670][T11262] do_fast_syscall_32+0x32/0x80 [ 415.889468][T11262] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 415.891881][T11262] RIP: 0023:0xf7f53579 [ 415.893427][T11262] Code: Unable to access opcode bytes at 0xf7f5354f. [ 415.895773][T11262] RSP: 002b:00000000ffd23e5c EFLAGS: 00000286 ORIG_RAX: 00000000000000fc [ 415.898672][T11262] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 415.901228][T11262] RDX: 0000000000000000 RSI: 00000000ffffff9c RDI: 00000000f73dbff4 [ 415.904132][T11262] RBP: 00000000f73dbff4 R08: 0000000000000000 R09: 0000000000000000 [ 415.906915][T11262] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 415.909545][T11262] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 415.912324][T11262] [ 415.913453][T11262] Modules linked in: [ 415.915413][T11262] ---[ end trace 0000000000000000 ]--- [ 415.936921][T11262] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 415.967728][T11262] Code: b0 8b 48 89 df e8 d0 23 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 20 75 05 fd 48 c7 c6 60 c6 b0 8b 4c 89 e7 e8 b1 23 4b fd 90 <0f> 0b e8 09 75 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 415.979395][T11262] RSP: 0018:ffffc90004006ee0 EFLAGS: 00010293 [ 415.983782][T11262] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 415.985859][T11262] RDX: ffff888024680000 RSI: ffffffff84873a5f RDI: ffff888024680444 [ 416.013400][T11262] RBP: ffffea00018a0534 R08: 0000000000000001 R09: fffffbfff2d315bb [ 416.015505][T11262] R10: ffffffff9698addf R11: ffff88802b428a40 R12: ffffea00018a0500 [ 416.018629][T11262] R13: ffff888068ab3c00 R14: 0000000000001000 R15: 0000000000001000 [ 416.020979][T11262] FS: 0000000000000000(0000) GS:ffff88802b700000(0000) knlGS:0000000000000000 [ 416.023817][T11262] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 416.025714][T11262] CR2: 00007f7d5ed68000 CR3: 00000000227d2000 CR4: 0000000000352ef0 [ 416.028130][T11262] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 416.030306][T11262] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 416.032271][T11262] Kernel panic - not syncing: Fatal exception [ 416.034374][T11262] Kernel Offset: disabled [ 416.035534][T11262] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:12:36 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffea00013bbec0 RCX=ffffffff8b062b80 RDX=ffff888024578000 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc900034575d0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=00000000000a2012 R12=00000014ac000101 R13=ffff8880425dec00 R14=ffff888021609050 R15=ffffc90003457700 RIP=ffffffff818cb001 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f6a148 CR3=000000002ec92000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73fbff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000049 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85035a15 RDI=ffffffff9a63a260 RBP=ffffffff9a63a220 RSP=ffffc90004006800 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7973203a6d6d6f43 R12=0000000000000000 R13=0000000000000049 R14=ffffffff850359b0 R15=0000000000000000 RIP=ffffffff85035a3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f56fcda4 CR3=00000000209ca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000000 RBX=ffff88801d408b02 RCX=0000000000000000 RDX=ffff888020390000 RSI=ffffffff8b0337f9 RDI=0000000000000005 RBP=000000000000003f RSP=ffffc90000e0f750 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000000 R11=ffff88802b628a40 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000030 R15=0000000000000030 RIP=ffffffff818caf88 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5765cc0 CR3=000000005d75e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=00000000f6600000 RCX=ffffffff81d506ad RDX=ffff8880238c8000 RSI=00000000f6600000 RDI=0000000000000006 RBP=00000000f6415000 RSP=ffffc9000d70f880 R8 =0000000000000006 R9 =00000000f6600000 R10=00000000f6415000 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000004 R14=ffffc9000d70f9a8 R15=00000000f6415000 RIP=ffffffff818caf7c RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001000 CR3=0000000023dc8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000800 Opmask01=00000000fffffffa Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdab0fb0b0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000a000a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000