last executing test programs: 2m6.33011195s ago: executing program 1 (id=773): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x2, 0x0, [{0x4, 0x0, 0x7ff}, {0x10000000}, {0x10000, 0x0, 0xfffffffffffffff8}, {0xfffffffd}, {0x0, 0x0, 0x8000}, {0x3ff, 0x0, 0x6}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1000000000000}, {}, {0x200}, {0xfffff43e}, {}, {0x3}, {0x80, 0x0, 0x8}, {0x1ff, 0x0, 0x100000000}, {0x3ff}]}) 2m5.935204929s ago: executing program 1 (id=777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 2m5.525322319s ago: executing program 2 (id=779): openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x801) r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2m5.495902212s ago: executing program 1 (id=781): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00') exit(0x8) fstat(r0, 0x0) 2m5.125854721s ago: executing program 2 (id=784): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 2m4.87909243s ago: executing program 2 (id=787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m4.690599315s ago: executing program 2 (id=790): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x8108}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x8) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) 2m4.68972917s ago: executing program 3 (id=791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 2m4.51314479s ago: executing program 3 (id=792): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) syz_emit_ethernet(0x86, &(0x7f0000000140)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4402, 0x0, 0x0, 0x11, 0x0, @loopback, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "9300002925723d55c712e63c92b492a3c50c9c3d27093a79585e8b73b300", "8aa4c506a2ba17a29171ce08a1e0f09d", {"c952a7f1f0443ce3114cee3518bfb345"}}}}}}}, 0x0) 2m4.471833931s ago: executing program 1 (id=793): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x38, r2, 0x101, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b3"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x48081}, 0x4850) 2m4.356034393s ago: executing program 1 (id=795): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e23, 0x4a3, @local, 0x4ef}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x210) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4624, 0x9, @empty, 0xfffffe01}}}, 0x108) 2m4.296937756s ago: executing program 3 (id=796): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000001000/0x3000)=nil) 2m4.270784888s ago: executing program 0 (id=797): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0xfff, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 2m4.160934318s ago: executing program 1 (id=799): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "eb31b7d2"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200110"], 0x0}) 2m4.029970167s ago: executing program 0 (id=800): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12) 2m3.978482204s ago: executing program 4 (id=801): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC], 0x27) 2m3.95585347s ago: executing program 3 (id=802): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000121) 2m3.929649329s ago: executing program 0 (id=803): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="24002d80050001"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2m3.747244929s ago: executing program 0 (id=804): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x8, 0x0, &(0x7f0000000000)) 2m3.733762837s ago: executing program 4 (id=805): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x3, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2m3.698399294s ago: executing program 2 (id=806): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000330c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='\x00', 0x0) 2m3.459599016s ago: executing program 2 (id=807): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x800000008ec0, 0xa) 2m3.458568043s ago: executing program 0 (id=808): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8000008}, 0x0, {}, 0x67, 0x2, 0x2}) 2m3.409984473s ago: executing program 4 (id=809): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="99", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) 2m2.855422081s ago: executing program 4 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4901}, 0x0) 2m2.664290087s ago: executing program 3 (id=811): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES64], 0x1c}}, 0x0) 2m2.373796905s ago: executing program 4 (id=812): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x38011, r0, 0x3000) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r1, &(0x7f0000007940)={0x2020}, 0x2020) 2m2.225936132s ago: executing program 3 (id=813): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0xb6}, &(0x7f0000000180)=0x8) 1m42.310656367s ago: executing program 0 (id=814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x28, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m32.206463331s ago: executing program 32 (id=799): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "eb31b7d2"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200110"], 0x0}) 1m9.693680477s ago: executing program 4 (id=816): unshare(0x22020400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000100)) 1m8.165470203s ago: executing program 33 (id=814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x28, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m0.022243033s ago: executing program 34 (id=807): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x800000008ec0, 0xa) 40.736919634s ago: executing program 35 (id=813): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0xb6}, &(0x7f0000000180)=0x8) 0s ago: executing program 36 (id=816): unshare(0x22020400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000100)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. [ 90.770436][ T5825] cgroup: Unknown subsys name 'net' [ 91.016933][ T5825] cgroup: Unknown subsys name 'cpuset' [ 91.071794][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.015356][ T31] cfg80211: failed to load regulatory.db [ 93.174346][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.847806][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.881988][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.884266][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.885593][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.886481][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.920023][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.928418][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.929379][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.953230][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.954079][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.078694][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.089898][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.091464][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.103870][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.106282][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.106618][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.109255][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.111903][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.132275][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.142078][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.213547][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.216306][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.217669][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.219587][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.222866][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.068295][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 99.125097][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 99.525805][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 99.573525][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 99.606336][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 100.012238][ T5842] Bluetooth: hci1: command tx timeout [ 100.012246][ T59] Bluetooth: hci0: command tx timeout [ 100.117176][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.117884][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.118342][ T5841] bridge_slave_0: entered allmulticast mode [ 100.120474][ T5841] bridge_slave_0: entered promiscuous mode [ 100.171747][ T59] Bluetooth: hci3: command tx timeout [ 100.171857][ T59] Bluetooth: hci2: command tx timeout [ 100.243562][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.243739][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.243935][ T5838] bridge_slave_0: entered allmulticast mode [ 100.245964][ T5838] bridge_slave_0: entered promiscuous mode [ 100.250327][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.250457][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.250590][ T5841] bridge_slave_1: entered allmulticast mode [ 100.252127][ T5842] Bluetooth: hci4: command tx timeout [ 100.254382][ T5841] bridge_slave_1: entered promiscuous mode [ 100.315778][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.315962][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.316302][ T5838] bridge_slave_1: entered allmulticast mode [ 100.319606][ T5838] bridge_slave_1: entered promiscuous mode [ 100.869703][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.952702][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.952930][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.953121][ T5848] bridge_slave_0: entered allmulticast mode [ 100.955274][ T5848] bridge_slave_0: entered promiscuous mode [ 101.065646][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.068631][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.152665][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.152806][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.153002][ T5848] bridge_slave_1: entered allmulticast mode [ 101.156425][ T5848] bridge_slave_1: entered promiscuous mode [ 101.158090][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.158235][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.158426][ T5852] bridge_slave_0: entered allmulticast mode [ 101.168509][ T5852] bridge_slave_0: entered promiscuous mode [ 101.188171][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.433775][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.433954][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.434113][ T5849] bridge_slave_0: entered allmulticast mode [ 101.436046][ T5849] bridge_slave_0: entered promiscuous mode [ 101.555175][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.555316][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.555515][ T5852] bridge_slave_1: entered allmulticast mode [ 101.557672][ T5852] bridge_slave_1: entered promiscuous mode [ 101.726740][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.726885][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.727090][ T5849] bridge_slave_1: entered allmulticast mode [ 101.729079][ T5849] bridge_slave_1: entered promiscuous mode [ 101.965879][ T5841] team0: Port device team_slave_0 added [ 102.046751][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.091159][ T5842] Bluetooth: hci0: command tx timeout [ 102.091211][ T5842] Bluetooth: hci1: command tx timeout [ 102.146883][ T5838] team0: Port device team_slave_0 added [ 102.161281][ T5841] team0: Port device team_slave_1 added [ 102.244907][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.248195][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.250360][ T5838] team0: Port device team_slave_1 added [ 102.251451][ T59] Bluetooth: hci2: command tx timeout [ 102.251487][ T59] Bluetooth: hci3: command tx timeout [ 102.331356][ T5842] Bluetooth: hci4: command tx timeout [ 102.356544][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.427926][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.867574][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.092574][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.092587][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.092608][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.189021][ T5848] team0: Port device team_slave_0 added [ 103.265643][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.265668][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.265698][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.268494][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.268510][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.268538][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.374741][ T5848] team0: Port device team_slave_1 added [ 103.377719][ T5852] team0: Port device team_slave_0 added [ 103.380428][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.380445][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.380475][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.402832][ T5849] team0: Port device team_slave_0 added [ 103.495768][ T5852] team0: Port device team_slave_1 added [ 103.513159][ T5849] team0: Port device team_slave_1 added [ 103.903897][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.903915][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.903944][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.136162][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.136180][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.136210][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.138119][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.138134][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.138165][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.171622][ T5842] Bluetooth: hci1: command tx timeout [ 104.171657][ T5842] Bluetooth: hci0: command tx timeout [ 104.288134][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.288153][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.288182][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.331270][ T59] Bluetooth: hci3: command tx timeout [ 104.331323][ T59] Bluetooth: hci2: command tx timeout [ 104.397301][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.397319][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.397341][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.418734][ T5841] hsr_slave_0: entered promiscuous mode [ 104.420492][ T5841] hsr_slave_1: entered promiscuous mode [ 104.431079][ T5842] Bluetooth: hci4: command tx timeout [ 104.447297][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.447317][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.447351][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.588400][ T5838] hsr_slave_0: entered promiscuous mode [ 104.589889][ T5838] hsr_slave_1: entered promiscuous mode [ 104.592247][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 104.592378][ T5838] Cannot create hsr debugfs directory [ 105.241713][ T5848] hsr_slave_0: entered promiscuous mode [ 105.243272][ T5848] hsr_slave_1: entered promiscuous mode [ 105.244303][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 105.244329][ T5848] Cannot create hsr debugfs directory [ 105.404080][ T5852] hsr_slave_0: entered promiscuous mode [ 105.405425][ T5852] hsr_slave_1: entered promiscuous mode [ 105.406104][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 105.406129][ T5852] Cannot create hsr debugfs directory [ 105.461519][ T5849] hsr_slave_0: entered promiscuous mode [ 105.463075][ T5849] hsr_slave_1: entered promiscuous mode [ 105.464083][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 105.464108][ T5849] Cannot create hsr debugfs directory [ 106.251385][ T5842] Bluetooth: hci0: command tx timeout [ 106.251420][ T5842] Bluetooth: hci1: command tx timeout [ 106.411332][ T59] Bluetooth: hci2: command tx timeout [ 106.412452][ T59] Bluetooth: hci3: command tx timeout [ 106.491162][ T59] Bluetooth: hci4: command tx timeout [ 107.134353][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.186249][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.216619][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.277865][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.400940][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.440547][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.471588][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.532197][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.680640][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.739689][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.786426][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.844098][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.056346][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.115912][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.159950][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.223048][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.418344][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.460720][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.500758][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.544441][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.589437][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.737717][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.749722][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.798624][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.799291][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.866184][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.866404][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.909701][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.956709][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.983496][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.983727][ T1477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.035564][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.035698][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.117882][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.137977][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.187173][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.187330][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.258997][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.259117][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.351655][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.414976][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.438993][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.439215][ T1477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.499508][ T1477] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.502373][ T1477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.629948][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.710946][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.711195][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.782510][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.782672][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.995755][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.183295][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.441563][ T5841] veth0_vlan: entered promiscuous mode [ 110.572727][ T5841] veth1_vlan: entered promiscuous mode [ 110.596797][ T5838] veth0_vlan: entered promiscuous mode [ 110.668557][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.688069][ T5838] veth1_vlan: entered promiscuous mode [ 110.715286][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.867578][ T5841] veth0_macvtap: entered promiscuous mode [ 110.896289][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.909010][ T5841] veth1_macvtap: entered promiscuous mode [ 110.989744][ T5838] veth0_macvtap: entered promiscuous mode [ 111.047576][ T5838] veth1_macvtap: entered promiscuous mode [ 111.056511][ T5848] veth0_vlan: entered promiscuous mode [ 111.093832][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.166759][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.203774][ T5848] veth1_vlan: entered promiscuous mode [ 111.234728][ T1113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.264379][ T1113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.266504][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.269197][ T1113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.303893][ T1113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.324920][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.389233][ T5849] veth0_vlan: entered promiscuous mode [ 111.415711][ T160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.477143][ T160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.506506][ T160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.524624][ T160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.607122][ T5849] veth1_vlan: entered promiscuous mode [ 111.767237][ T5848] veth0_macvtap: entered promiscuous mode [ 111.825420][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.825446][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.830151][ T5852] veth0_vlan: entered promiscuous mode [ 111.888339][ T5848] veth1_macvtap: entered promiscuous mode [ 111.996808][ T5852] veth1_vlan: entered promiscuous mode [ 112.018376][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.018399][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.096056][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.128298][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.128321][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.149805][ T5849] veth0_macvtap: entered promiscuous mode [ 112.175399][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.222259][ T5849] veth1_macvtap: entered promiscuous mode [ 112.265829][ T3619] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.289560][ T3619] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.296777][ T3619] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.316243][ T3619] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.327314][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.327341][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.435017][ T5852] veth0_macvtap: entered promiscuous mode [ 112.540827][ T5852] veth1_macvtap: entered promiscuous mode [ 112.556842][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.703632][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.861098][ T1477] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.867853][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.867874][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.870452][ T1477] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.918534][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.945523][ T1477] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.964695][ T1477] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.042420][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.093512][ T5167] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.157679][ T5963] capability: warning: `syz.2.7' uses 32-bit capabilities (legacy support in use) [ 113.240624][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.240645][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.240956][ T1477] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.298221][ T1477] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.325613][ T5167] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 113.325643][ T5167] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 113.325664][ T5167] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 113.325688][ T5167] usb 2-1: config 220 has no interface number 2 [ 113.325770][ T5167] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 113.325799][ T5167] usb 2-1: config 220 interface 0 has no altsetting 0 [ 113.325819][ T5167] usb 2-1: config 220 interface 76 has no altsetting 0 [ 113.325839][ T5167] usb 2-1: config 220 interface 1 has no altsetting 0 [ 113.328891][ T1477] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.351927][ T1477] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.428163][ T5167] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 113.428198][ T5167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.428220][ T5167] usb 2-1: Product: syz [ 113.428236][ T5167] usb 2-1: Manufacturer: syz [ 113.428252][ T5167] usb 2-1: SerialNumber: syz [ 113.845843][ T5167] usb 2-1: selecting invalid altsetting 0 [ 113.867016][ T5167] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 113.867058][ T5167] usb 2-1: No valid video chain found. [ 113.948086][ T5167] usb 2-1: selecting invalid altsetting 0 [ 113.948129][ T5167] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 113.991920][ T5167] usb 2-1: USB disconnect, device number 2 [ 113.996868][ T1477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.996890][ T1477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.026475][ T5972] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.250570][ T1477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.250593][ T1477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.489335][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.489359][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.723050][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.723073][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.581187][ T5167] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.751754][ T5167] usb 1-1: Using ep0 maxpacket: 8 [ 115.754637][ T5167] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 115.754664][ T5167] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 115.754683][ T5167] usb 1-1: config 3 has no interface number 0 [ 115.755141][ T5167] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.755173][ T5167] usb 1-1: config 3 interface 45 has no altsetting 0 [ 115.758331][ T5167] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 115.758361][ T5167] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.758383][ T5167] usb 1-1: Product: syz [ 115.758399][ T5167] usb 1-1: Manufacturer: syz [ 115.758415][ T5167] usb 1-1: SerialNumber: syz [ 116.449365][ T5167] usb 1-1: USB disconnect, device number 2 [ 116.514454][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.374188][ T6009] process 'syz.4.23' launched './file2' with NULL argv: empty string added [ 117.502956][ T5889] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.656872][ T5889] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 117.656901][ T5889] usb 4-1: config 0 has no interface number 0 [ 117.679682][ T5889] usb 4-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 117.679725][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.679748][ T5889] usb 4-1: Product: syz [ 117.679763][ T5889] usb 4-1: Manufacturer: syz [ 117.679779][ T5889] usb 4-1: SerialNumber: syz [ 117.748567][ T5889] usb 4-1: config 0 descriptor?? [ 117.993943][ T5889] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in cold state, will try to load a firmware [ 118.141803][ T5889] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 118.141869][ T5889] dib0700: firmware download failed at 7 with -22 [ 118.169768][ T5889] usb 4-1: USB disconnect, device number 2 [ 119.052742][ T38] audit: type=1326 audit(1757265386.813:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6032 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4725aebe9 code=0x7fc00000 [ 119.751885][ T38] audit: type=1326 audit(1757265387.513:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6032 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4725aebe9 code=0x7fc00000 [ 120.094005][ T6054] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.477519][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.641383][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 120.649166][ T31] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 120.649230][ T31] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.649260][ T31] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.649284][ T31] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 120.649314][ T31] usb 1-1: config 7 interface 0 has no altsetting 0 [ 120.649369][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 120.649395][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.299856][ T31] hid (null): invalid report_size 812540268 [ 121.534866][ T31] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0001/input/input5 [ 121.723653][ T31] kye 0003:0458:5010.0001: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 121.799206][ T31] usb 1-1: USB disconnect, device number 3 [ 122.092948][ T6074] fido_id[6074]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 122.447079][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'. [ 123.874626][ T6119] warning: `syz.2.67' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 124.751251][ T5911] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.911432][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 124.915441][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.915500][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.915532][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 124.915557][ T5911] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 124.915582][ T5911] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.918026][ T5911] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 124.918054][ T5911] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 124.918072][ T5911] usb 1-1: Manufacturer: syz [ 125.025279][ T5911] usb 1-1: config 0 descriptor?? [ 125.031921][ T6150] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 125.084535][ T6150] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 125.111706][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.254655][ T6145] bridge_slave_1: left allmulticast mode [ 125.254688][ T6145] bridge_slave_1: left promiscuous mode [ 125.254991][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.281063][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 125.288844][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.288958][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 125.288990][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 125.289030][ T31] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.339107][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.339140][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.339163][ T31] usb 4-1: Product: syz [ 125.339187][ T31] usb 4-1: Manufacturer: syz [ 125.339202][ T31] usb 4-1: SerialNumber: syz [ 125.400798][ T6145] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 125.461095][ T5911] rc_core: IR keymap rc-hauppauge not found [ 125.461128][ T5911] Registered IR keymap rc-empty [ 125.463539][ T5911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 125.492575][ T5911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 125.523484][ T5911] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 125.570496][ T5911] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 125.606134][ T31] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 125.606171][ T31] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 125.606196][ T31] usb 4-1: 2:1 : sample bitwidth 16 in over sample bytes 1 [ 125.606269][ T31] usb 4-1: 2:1 : invalid channels 0 [ 125.666269][ T5911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 125.681325][ T5911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 125.701771][ T5911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 125.721427][ T5911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 125.741208][ T5911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 125.761190][ T5911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 125.781198][ T5911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 125.801500][ T5911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 125.821578][ T5911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 125.841255][ T5911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 125.849183][ T31] usb 4-1: USB disconnect, device number 3 [ 125.895058][ T5911] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 125.895084][ T5911] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 125.941610][ T5911] usb 1-1: USB disconnect, device number 4 [ 126.129488][ T6163] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.85'. [ 126.471212][ T5925] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 126.645820][ T5925] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 126.645854][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.673880][ T5925] usb 5-1: config 0 descriptor?? [ 126.887193][ T5925] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 127.031163][ T6015] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.123221][ T5925] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 127.123247][ T5925] [drm] Initialized udl on minor 2 [ 127.187239][ T6015] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.187269][ T6015] usb 1-1: config 0 has no interface number 0 [ 127.187322][ T6015] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.187350][ T6015] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.187373][ T6015] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.187418][ T6015] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 127.187443][ T6015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.200172][ T6015] usb 1-1: config 0 descriptor?? [ 127.278579][ T5918] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.292588][ T5925] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 127.294650][ T5925] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 127.447119][ T5918] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 127.447149][ T5918] usb 2-1: config 0 has no interface number 0 [ 127.472402][ T5918] usb 2-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 127.472497][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.472519][ T5918] usb 2-1: Product: syz [ 127.472534][ T5918] usb 2-1: Manufacturer: syz [ 127.472549][ T5918] usb 2-1: SerialNumber: syz [ 127.523095][ T5918] usb 2-1: config 0 descriptor?? [ 127.579697][ T5911] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 127.585475][ T5926] usb 5-1: USB disconnect, device number 2 [ 127.630557][ T5911] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 127.809316][ T5918] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in cold state, will try to load a firmware [ 127.835042][ T5918] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 127.881273][ T5918] dib0700: firmware download failed at 7 with -22 [ 127.886088][ T5918] usb 2-1: USB disconnect, device number 3 [ 128.028744][ T6015] input: HID 28bd:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.0002/input/input7 [ 128.127863][ T6015] uclogic 0003:28BD:0042.0002: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1 [ 128.203261][ T6015] usb 1-1: USB disconnect, device number 5 [ 128.842777][ T6202] mkiss: ax0: crc mode is auto. [ 129.213181][ T6221] ======================================================= [ 129.213181][ T6221] WARNING: The mand mount option has been deprecated and [ 129.213181][ T6221] and is ignored by this kernel. Remove the mand [ 129.213181][ T6221] option from the mount to silence this warning. [ 129.213181][ T6221] ======================================================= [ 129.271122][ T5911] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 129.421446][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 129.424141][ T5911] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 129.424172][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.487612][ T5911] pvrusb2: Hardware description: Terratec Grabster AV400 [ 129.487635][ T5911] pvrusb2: ********** [ 129.487643][ T5911] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 129.487656][ T5911] pvrusb2: Important functionality might not be entirely working. [ 129.487665][ T5911] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 129.487676][ T5911] pvrusb2: ********** [ 129.592224][ T5926] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.722077][ T2371] pvrusb2: Invalid write control endpoint [ 129.741139][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 129.743539][ T5926] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 129.743568][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.776858][ T5926] usb 2-1: config 0 descriptor?? [ 129.877419][ T2371] pvrusb2: Invalid write control endpoint [ 129.877482][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 129.877492][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 129.877501][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 129.877512][ T2371] pvrusb2: Device being rendered inoperable [ 129.925213][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 129.925300][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 129.946610][ T2371] pvrusb2: Attached sub-driver cx25840 [ 129.946640][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 129.946651][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 129.998576][ T6212] pvrusb2: Attempted to execute control transfer when device not ok [ 130.017409][ T5925] usb 3-1: USB disconnect, device number 2 [ 130.021242][ T5926] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 130.151787][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.158193][ T5926] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 130.158300][ T5926] usb 2-1: media controller created [ 130.280375][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.391133][ T5926] az6027: usb out operation failed. (-71) [ 130.397732][ T5926] az6027: usb out operation failed. (-71) [ 130.397753][ T5926] stb0899_attach: Driver disabled by Kconfig [ 130.397764][ T5926] az6027: no front-end attached [ 130.397764][ T5926] [ 130.400631][ T5926] az6027: usb out operation failed. (-71) [ 130.400661][ T5926] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 130.405570][ T5926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 130.430557][ T5926] dvb-usb: schedule remote query interval to 400 msecs. [ 130.430584][ T5926] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 130.438985][ T5926] usb 2-1: USB disconnect, device number 4 [ 130.715351][ T5926] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 130.796801][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 130.797052][ T6250] netlink: 'syz.2.122': attribute type 20 has an invalid length. [ 130.797070][ T6250] netlink: 'syz.2.122': attribute type 21 has an invalid length. [ 131.114096][ T6254] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.351111][ T5926] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.470541][ T6271] netlink: 'syz.0.130': attribute type 10 has an invalid length. [ 131.501165][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 131.504109][ T5926] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 131.504138][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.515077][ T5926] usb 2-1: config 0 descriptor?? [ 131.588535][ T5926] gspca_main: sq930x-2.14.0 probing 041e:403c [ 131.602557][ T6271] bond0: (slave bond_slave_0): Releasing backup interface [ 131.652028][ T5889] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.829462][ T5889] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 131.829889][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.861083][ T5889] usb 4-1: config 0 descriptor?? [ 131.882545][ T5889] cp210x 4-1:0.0: cp210x converter detected [ 131.970632][ T6277] vim2m vim2m.0: vidioc_s_fmt queue busy [ 132.280935][ T5889] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 132.301097][ T5167] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.421277][ T5926] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 132.461104][ T5167] usb 3-1: Using ep0 maxpacket: 32 [ 132.463723][ T5167] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 132.463752][ T5167] usb 3-1: config 0 has no interface number 0 [ 132.463802][ T5167] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 132.463831][ T5167] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 132.463858][ T5167] usb 3-1: config 0 interface 126 has no altsetting 0 [ 132.467110][ T5167] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 132.467141][ T5167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.467173][ T5167] usb 3-1: Product: syz [ 132.467190][ T5167] usb 3-1: Manufacturer: syz [ 132.467205][ T5167] usb 3-1: SerialNumber: syz [ 132.481391][ T5926] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 132.486968][ T5889] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 132.487001][ T5889] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 132.513971][ T5926] usb 2-1: USB disconnect, device number 5 [ 132.525312][ T5889] usb 4-1: cp210x converter now attached to ttyUSB0 [ 132.566458][ T5889] usb 4-1: USB disconnect, device number 4 [ 132.612320][ T5889] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 132.612959][ T5889] cp210x 4-1:0.0: device disconnected [ 132.619743][ T5167] usb 3-1: config 0 descriptor?? [ 132.639376][ T6280] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 132.639590][ T6280] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 132.721437][ T5911] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 132.888748][ T5911] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 132.888779][ T5911] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 132.888860][ T5911] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 132.888883][ T5911] usb 1-1: config 220 has no interface number 2 [ 132.889027][ T5911] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 132.889058][ T5911] usb 1-1: config 220 interface 0 has no altsetting 0 [ 132.889079][ T5911] usb 1-1: config 220 interface 76 has no altsetting 0 [ 132.889099][ T5911] usb 1-1: config 220 interface 1 has no altsetting 0 [ 132.984349][ T5911] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 132.984453][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.984476][ T5911] usb 1-1: Product: syz [ 132.984492][ T5911] usb 1-1: Manufacturer: syz [ 132.984508][ T5911] usb 1-1: SerialNumber: syz [ 133.078021][ T5167] ir_usb 3-1:0.126: IR Dongle converter detected [ 133.278146][ T5167] usb 3-1: IR Dongle converter now attached to ttyUSB0 [ 133.282541][ T5911] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 133.282577][ T5911] usb 1-1: No valid video chain found. [ 133.282637][ T5911] usb 1-1: selecting invalid altsetting 0 [ 133.335460][ T5926] kernel write not supported for file /input/mouse0 (pid: 5926 comm: kworker/0:4) [ 133.335797][ T5911] usb 1-1: selecting invalid altsetting 0 [ 133.335833][ T5911] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 133.339789][ T5911] usb 1-1: USB disconnect, device number 6 [ 133.358500][ T6290] input: syz1 as /devices/virtual/input/input9 [ 133.411321][ T5889] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.493069][ T5930] usb 3-1: USB disconnect, device number 3 [ 133.522304][ T5930] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 133.523021][ T5930] ir_usb 3-1:0.126: device disconnected [ 133.575693][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 133.579439][ T5889] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.579470][ T5889] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.579497][ T5889] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.579524][ T5889] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.579569][ T5889] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.579595][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.854626][ T5889] usb 2-1: GET_CAPABILITIES returned 0 [ 133.854680][ T5889] usbtmc 2-1:16.0: can't read capabilities [ 134.087037][ T5889] usb 2-1: USB disconnect, device number 6 [ 134.338846][ T6311] capability: warning: `syz.0.149' uses deprecated v2 capabilities in a way that may be insecure [ 134.348341][ T38] audit: type=1400 audit(1757265402.113:4): lsm=SMACK fn=smack_task_setpgid action=denied subject="w" object="_" requested=w pid=6309 comm="syz.0.149" opid=6309 ocomm="syz.0.149" [ 134.800190][ T6324] netlink: 'syz.2.154': attribute type 83 has an invalid length. [ 135.600149][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 135.631231][ T5925] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.771963][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 135.777382][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.777444][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.777492][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.777515][ T5925] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 135.777543][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.779528][ T5925] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 135.779557][ T5925] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 135.779579][ T5925] usb 4-1: Manufacturer: syz [ 135.926532][ T5925] usb 4-1: config 0 descriptor?? [ 136.363284][ T5925] rc_core: IR keymap rc-hauppauge not found [ 136.363307][ T5925] Registered IR keymap rc-empty [ 136.363461][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 136.391275][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 136.432492][ T5925] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 136.468626][ T5925] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 136.531220][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 136.551388][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 136.584088][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 136.611397][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 136.631362][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 136.652877][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 136.685302][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 136.701324][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 136.721301][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 136.741225][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 136.779551][ T5925] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 136.779578][ T5925] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 136.910414][ T5925] usb 4-1: USB disconnect, device number 5 [ 137.111841][ T5889] IPVS: starting estimator thread 0... [ 137.201376][ T6374] IPVS: using max 9 ests per chain, 21600 per kthread [ 137.448093][ T6381] syz.1.177 (6381) used greatest stack depth: 18712 bytes left [ 137.735467][ T6389] netlink: 71 bytes leftover after parsing attributes in process `syz.4.182'. [ 138.122993][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.123103][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.400299][ T6406] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 139.155480][ T6426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.197'. [ 139.862034][ T6451] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 139.963719][ T6455] program syz.4.210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.527073][ T6500] netlink: 104 bytes leftover after parsing attributes in process `syz.3.230'. [ 141.581685][ T5930] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 141.742716][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 141.748835][ T5930] usb 5-1: config 0 has an invalid interface number: 203 but max is 0 [ 141.748866][ T5930] usb 5-1: config 0 has no interface number 0 [ 141.748917][ T5930] usb 5-1: config 0 interface 203 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 141.761764][ T5930] usb 5-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice=e8.af [ 141.761803][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.761829][ T5930] usb 5-1: Product: syz [ 141.761847][ T5930] usb 5-1: Manufacturer: syz [ 141.761865][ T5930] usb 5-1: SerialNumber: syz [ 141.796831][ T5930] usb 5-1: config 0 descriptor?? [ 141.801495][ T6491] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.809561][ T5930] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 142.236364][ T6514] binder: 6513:6514 ioctl c0306201 2000000003c0 returned -22 [ 142.497821][ T6521] netlink: 'syz.0.239': attribute type 14 has an invalid length. [ 142.762516][ T6525] bridge0: entered promiscuous mode [ 142.762772][ T6525] macsec1: entered allmulticast mode [ 142.762787][ T6525] bridge0: entered allmulticast mode [ 143.222194][ T5167] usb 5-1: USB disconnect, device number 3 [ 143.491930][ T5911] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.645526][ T5911] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 143.645560][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.677801][ T5911] usb 3-1: config 0 descriptor?? [ 143.698886][ T5911] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 143.992783][ T5911] gspca_sn9c2028: read1 error -32 [ 143.996454][ T5911] gspca_sn9c2028: read1 error -32 [ 144.261845][ T5167] usb 3-1: USB disconnect, device number 4 [ 145.082977][ T6576] Invalid logical block size (5) [ 145.107059][ T6583] netlink: 40 bytes leftover after parsing attributes in process `syz.3.266'. [ 146.327219][ T6631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.289'. [ 146.872331][ T6645] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 147.321993][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 147.482334][ T6665] ./file0: Can't lookup blockdev [ 148.047193][ T6690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.317'. [ 148.047412][ T6690] Zero length message leads to an empty skb [ 148.406990][ T6696] hsr0: entered promiscuous mode [ 148.407438][ T6696] macsec1: entered allmulticast mode [ 148.407454][ T6696] hsr0: entered allmulticast mode [ 148.407467][ T6696] hsr_slave_0: entered allmulticast mode [ 148.407491][ T6696] hsr_slave_1: entered allmulticast mode [ 148.483388][ T6696] hsr0: left allmulticast mode [ 148.483412][ T6696] hsr_slave_0: left allmulticast mode [ 148.483437][ T6696] hsr_slave_1: left allmulticast mode [ 148.531103][ T5167] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 148.681206][ T5167] usb 4-1: Using ep0 maxpacket: 8 [ 148.685265][ T5167] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.685329][ T5167] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 148.685355][ T5167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.732617][ T5167] usb 4-1: config 0 descriptor?? [ 148.751258][ T5167] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 148.762861][ T5930] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 148.921117][ T5930] usb 1-1: Using ep0 maxpacket: 32 [ 148.925873][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.925908][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.925950][ T5930] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 148.925976][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.965208][ T5930] usb 1-1: config 0 descriptor?? [ 149.053202][ T57] wlan1: Trigger new scan to find an IBSS to join [ 149.415922][ T5930] ft260 0003:0403:6030.0003: unknown main item tag 0x7 [ 149.595049][ T5167] gspca_vc032x: reg_w err -71 [ 149.595146][ T5167] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 149.606244][ T5930] ft260 0003:0403:6030.0003: chip code: 6424 8183 [ 149.625190][ T5167] usb 4-1: USB disconnect, device number 6 [ 149.807877][ T5930] ft260 0003:0403:6030.0003: failed to retrieve system status [ 149.808356][ T5930] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -71 [ 149.841591][ T5930] usb 1-1: USB disconnect, device number 7 [ 151.772438][ T38] audit: type=1326 audit(1757265419.543:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9dfdebe9 code=0x7ffc0000 [ 151.772488][ T38] audit: type=1326 audit(1757265419.543:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9dfdebe9 code=0x7ffc0000 [ 151.779517][ T38] audit: type=1326 audit(1757265419.543:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0f9dfdebe9 code=0x7ffc0000 [ 151.779574][ T38] audit: type=1326 audit(1757265419.543:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9dfdebe9 code=0x7ffc0000 [ 151.779622][ T38] audit: type=1326 audit(1757265419.543:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9dfdebe9 code=0x7ffc0000 [ 151.797729][ T38] audit: type=1326 audit(1757265419.553:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f0f9dfdebe9 code=0x7ffc0000 [ 151.797796][ T38] audit: type=1326 audit(1757265419.563:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9dfdebe9 code=0x7ffc0000 [ 151.797850][ T38] audit: type=1326 audit(1757265419.563:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9dfdebe9 code=0x7ffc0000 [ 151.889363][ T6764] loop7: detected capacity change from 0 to 7 [ 152.016335][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 152.016483][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.043993][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 152.044038][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.057081][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 152.057130][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.057474][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 152.057505][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.059094][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 152.059128][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.059467][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 152.059498][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.068434][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 152.068478][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.083522][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 152.083577][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.091211][ T6764] ldm_validate_partition_table(): Disk read failed. [ 152.094288][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 152.094327][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.095051][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 152.095085][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.095744][ T6764] Dev loop7: unable to read RDB block 0 [ 152.098596][ T6764] loop7: unable to read partition table [ 152.098881][ T6764] loop7: partition table beyond EOD, truncated [ 152.098926][ T6764] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 152.342378][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 153.188083][ T5930] kernel write not supported for file /sg0 (pid: 5930 comm: kworker/0:6) [ 153.982235][ T6803] Falling back ldisc for ptm0. [ 154.013248][ T57] wlan1: Trigger new scan to find an IBSS to join [ 154.346189][ T38] audit: type=1326 audit(1757265422.113:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6812 comm="syz.0.371" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f034c15ebe9 code=0x0 [ 154.471195][ T5926] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 154.621126][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 154.623452][ T5926] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 154.623483][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.678270][ T5926] pvrusb2: Hardware description: Terratec Grabster AV400 [ 154.678288][ T5926] pvrusb2: ********** [ 154.678295][ T5926] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 154.678308][ T5926] pvrusb2: Important functionality might not be entirely working. [ 154.678318][ T5926] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 154.678330][ T5926] pvrusb2: ********** [ 154.713536][ T6823] netlink: 64 bytes leftover after parsing attributes in process `syz.2.374'. [ 154.893952][ T2371] pvrusb2: Invalid write control endpoint [ 154.954353][ T57] wlan1: Creating new IBSS network, BSSID 66:17:0d:d6:a4:a0 [ 155.005588][ T2371] pvrusb2: Invalid write control endpoint [ 155.005603][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 155.005614][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 155.005623][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 155.005634][ T2371] pvrusb2: Device being rendered inoperable [ 155.005705][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 155.005759][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 155.008496][ T2371] pvrusb2: Attached sub-driver cx25840 [ 155.008509][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 155.008520][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 155.110076][ T6808] pvrusb2: Attempted to execute control transfer when device not ok [ 155.120375][ T5926] usb 4-1: USB disconnect, device number 7 [ 155.722597][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 156.071518][ T5925] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 156.255942][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 156.258546][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.258584][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.258627][ T5925] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 156.258651][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.314381][ T5925] usb 1-1: config 0 descriptor?? [ 156.451104][ T5927] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 156.602032][ T5927] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 156.603596][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.603657][ T5927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.603687][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.605148][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.605207][ T5927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.605238][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.606718][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.606777][ T5927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.606814][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.610157][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.610217][ T5927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.610246][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.730664][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.730727][ T5927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.730756][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.751052][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.751117][ T5927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.751147][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.765663][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.765795][ T5927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.765828][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.788502][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.788571][ T5927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.788601][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.809545][ T5925] hid (null): invalid report_size -301085748 [ 156.848612][ T5927] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 156.848643][ T5927] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 156.848666][ T5927] usb 2-1: Product: syz [ 156.848681][ T5927] usb 2-1: Manufacturer: syz [ 156.848697][ T5927] usb 2-1: SerialNumber: syz [ 156.896388][ T5927] usb 2-1: config 0 descriptor?? [ 156.960541][ T5925] usb 1-1: string descriptor 0 read error: -71 [ 156.993137][ T5925] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 156.993235][ T5925] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -32 [ 156.994341][ T5927] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 157.073364][ T5925] usb 1-1: USB disconnect, device number 8 [ 157.173852][ T5927] usb 2-1: USB disconnect, device number 7 [ 157.188807][ T5927] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 157.657031][ T6879] netlink: 'syz.0.399': attribute type 1 has an invalid length. [ 157.657055][ T6879] netlink: 'syz.0.399': attribute type 2 has an invalid length. [ 158.340867][ T6904] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 158.340890][ T6904] netlink: 'syz.1.411': attribute type 2 has an invalid length. [ 158.343277][ T6904] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 158.343299][ T6904] netlink: 'syz.1.411': attribute type 2 has an invalid length. [ 160.251354][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.421'. [ 160.781167][ T5927] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 160.974802][ T5927] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.974831][ T5927] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.978785][ T5927] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.978818][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.978840][ T5927] usb 3-1: Product: syz [ 160.978856][ T5927] usb 3-1: Manufacturer: syz [ 160.978872][ T5927] usb 3-1: SerialNumber: syz [ 161.312644][ T5927] usb 3-1: 0:2 : does not exist [ 161.342667][ T5927] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 161.399516][ T5927] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 161.426978][ T6934] syz.3.426 (6934) used greatest stack depth: 16760 bytes left [ 161.476215][ T6940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.428'. [ 161.479086][ T5927] usb 3-1: USB disconnect, device number 5 [ 161.630045][ T5918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 161.864206][ T3619] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 161.961291][ T5925] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 162.016364][ T6957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.073929][ T6959] sctp: [Deprecated]: syz.4.436 (pid 6959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.073929][ T6959] Use struct sctp_sack_info instead [ 162.198620][ T6963] dummy0: entered promiscuous mode [ 162.225717][ T6963] dummy0: left promiscuous mode [ 162.395515][ T6974] mmap: syz.1.445 (6974) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 162.460715][ T6970] block device autoloading is deprecated and will be removed. [ 162.891702][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 162.892022][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 162.951086][ T5925] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 163.104082][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 163.107317][ T5925] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 163.107350][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.152329][ T5930] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.160297][ T5925] pvrusb2: Hardware description: Terratec Grabster AV400 [ 163.160316][ T5925] pvrusb2: ********** [ 163.160323][ T5925] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 163.160335][ T5925] pvrusb2: Important functionality might not be entirely working. [ 163.160344][ T5925] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 163.160356][ T5925] pvrusb2: ********** [ 163.332511][ T6995] netlink: 'syz.0.454': attribute type 4 has an invalid length. [ 163.332539][ T6995] netlink: 116 bytes leftover after parsing attributes in process `syz.0.454'. [ 163.413873][ T2371] pvrusb2: Invalid write control endpoint [ 163.516752][ T2371] pvrusb2: Invalid write control endpoint [ 163.516769][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 163.516780][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 163.516790][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 163.516802][ T2371] pvrusb2: Device being rendered inoperable [ 163.563651][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 163.563730][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 163.564781][ T2371] pvrusb2: Attached sub-driver cx25840 [ 163.564793][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 163.564805][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 163.664982][ T6981] pvrusb2: Attempted to execute control transfer when device not ok [ 163.670213][ T5925] usb 5-1: USB disconnect, device number 4 [ 164.067268][ T7007] dummy0: entered promiscuous mode [ 164.100289][ T7007] dummy0: left promiscuous mode [ 164.366401][ T7013] netlink: 64 bytes leftover after parsing attributes in process `syz.3.462'. [ 165.234551][ T7041] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 165.234576][ T7041] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 165.234591][ T7041] netlink: 216 bytes leftover after parsing attributes in process `syz.1.476'. [ 165.883428][ T7061] program syz.2.484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.731243][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 166.878004][ T7090] Invalid ELF header magic: != ELF [ 167.168187][ T5927] kernel write not supported for file /215/setgroups (pid: 5927 comm: kworker/0:5) [ 167.473069][ T7106] 9pnet_fd: Insufficient options for proto=fd [ 168.674910][ T7137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.674928][ T7137] IPv6: NLM_F_CREATE should be set when creating new route [ 168.675251][ T7137] IPv6: NLM_F_CREATE should be set when creating new route [ 168.675287][ T7137] IPv6: NLM_F_CREATE should be set when creating new route [ 168.678130][ T7137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.102255][ T5918] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 169.139898][ T5925] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 169.251209][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 169.254793][ T5918] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 169.254824][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.302272][ T5925] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 169.302316][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.310062][ T5925] usb 5-1: config 0 descriptor?? [ 169.365868][ T5918] pvrusb2: Hardware description: Terratec Grabster AV400 [ 169.365888][ T5918] pvrusb2: ********** [ 169.365895][ T5918] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 169.365909][ T5918] pvrusb2: Important functionality might not be entirely working. [ 169.365919][ T5918] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 169.365996][ T5918] pvrusb2: ********** [ 169.495817][ T5167] hid-generic 0005:10CF:05DF.0005: unknown main item tag 0x0 [ 169.568320][ T5167] hid-generic 0005:10CF:05DF.0005: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 169.569246][ T2371] pvrusb2: Invalid write control endpoint [ 169.777622][ T5911] usb 1-1: USB disconnect, device number 9 [ 169.897167][ T2371] pvrusb2: Invalid write control endpoint [ 169.897186][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 169.897196][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 169.897205][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 169.897217][ T2371] pvrusb2: Device being rendered inoperable [ 169.897742][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 169.897801][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 169.917732][ T2371] pvrusb2: Attached sub-driver cx25840 [ 169.917752][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 169.917764][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 169.986669][ T5925] usb 5-1: Cannot set autoneg [ 169.987368][ T5925] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 170.018543][ T5925] usb 5-1: USB disconnect, device number 5 [ 170.643334][ T7180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.537'. [ 173.558269][ T7270] netlink: 14 bytes leftover after parsing attributes in process `syz.2.579'. [ 173.622428][ T7270] hsr_slave_0: left promiscuous mode [ 173.661269][ T7270] hsr_slave_1: left promiscuous mode [ 173.904920][ T7272] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 174.268054][ T7288] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 174.268085][ T7288] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.321204][ T7288] vhci_hcd vhci_hcd.0: Device attached [ 174.461603][ T7293] gretap0: entered promiscuous mode [ 174.468193][ T7293] gretap0: left promiscuous mode [ 174.541255][ T5918] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 174.570543][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 174.571325][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 174.601189][ T5911] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 174.699034][ T7301] netlink: 'syz.1.593': attribute type 1 has an invalid length. [ 174.761525][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 174.764133][ T5911] usb 5-1: config 0 has no interfaces? [ 174.764168][ T5911] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 174.764197][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.794375][ T5911] usb 5-1: config 0 descriptor?? [ 175.008060][ T7289] usb 41-1: recv xbuf, 0 [ 175.011387][ T5911] usb 5-1: USB disconnect, device number 6 [ 175.039163][ T160] vhci_hcd: stop threads [ 175.043054][ T160] vhci_hcd: release socket [ 175.060634][ T160] vhci_hcd: disconnect device [ 175.101176][ T5918] vhci_hcd: vhci_device speed not set [ 175.915162][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.611'. [ 175.935224][ T7342] Bluetooth: MGMT ver 1.23 [ 176.017049][ T7346] netlink: 33 bytes leftover after parsing attributes in process `syz.3.615'. [ 176.351313][ T5930] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 176.506006][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 176.526430][ T5930] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 176.526461][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.526482][ T5930] usb 4-1: Product: syz [ 176.526497][ T5930] usb 4-1: Manufacturer: syz [ 176.526513][ T5930] usb 4-1: SerialNumber: syz [ 176.594348][ T5930] usb 4-1: config 0 descriptor?? [ 176.945082][ T7394] io-wq is not configured for unbound workers [ 177.001310][ T7396] netlink: 'syz.0.624': attribute type 1 has an invalid length. [ 177.127663][ T5911] usb 4-1: USB disconnect, device number 8 [ 177.203805][ T7401] input: syz1 as /devices/virtual/input/input11 [ 177.706431][ T7402] mkiss: ax0: crc mode is auto. [ 178.834895][ T7442] netem: change failed [ 179.381611][ T7453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.648'. [ 180.021147][ T5918] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 180.155021][ T7471] input: syz0 as /devices/virtual/input/input12 [ 180.184652][ T5918] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 180.184684][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.184706][ T5918] usb 2-1: Product: syz [ 180.184720][ T5918] usb 2-1: Manufacturer: syz [ 180.184736][ T5918] usb 2-1: SerialNumber: syz [ 180.244434][ T5918] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 180.328341][ T5911] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 180.669671][ T7477] netlink: 'syz.4.658': attribute type 1 has an invalid length. [ 180.669696][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.658'. [ 180.669820][ T7477] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.031305][ T7483] netlink: 312 bytes leftover after parsing attributes in process `syz.3.662'. [ 181.167773][ T5927] usb 2-1: USB disconnect, device number 8 [ 181.418159][ T7490] syz_tun: entered promiscuous mode [ 181.453220][ T7490] syz_tun: left promiscuous mode [ 181.783421][ T5911] usb 2-1: Service connection timeout for: 257 [ 181.783447][ T5911] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 181.785360][ T5911] ath9k_htc: Failed to initialize the device [ 181.801829][ T5927] usb 2-1: ath9k_htc: USB layer deinitialized [ 181.936489][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 181.937108][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.671'. [ 181.937130][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 181.939060][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.671'. [ 181.971226][ T7502] netlink: 'syz.1.671': attribute type 6 has an invalid length. [ 182.721191][ T5911] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 182.880872][ T5911] usb 1-1: config 0 has an invalid interface number: 229 but max is 0 [ 182.880902][ T5911] usb 1-1: config 0 has no interface number 0 [ 182.895379][ T5911] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 182.895411][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.922335][ T5911] usb 1-1: config 0 descriptor?? [ 183.151341][ T45] usb 1-1: USB disconnect, device number 10 [ 184.984547][ T7383] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 185.431408][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 186.104100][ T5918] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 186.141121][ T5911] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 186.271278][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 186.273901][ T5918] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 186.273927][ T5918] usb 2-1: config 0 has no interface number 0 [ 186.302479][ T5911] usb 1-1: Using ep0 maxpacket: 8 [ 186.316595][ T5918] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 186.316686][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.316709][ T5918] usb 2-1: Product: syz [ 186.316725][ T5918] usb 2-1: Manufacturer: syz [ 186.316740][ T5918] usb 2-1: SerialNumber: syz [ 186.334623][ T5911] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 186.334654][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.390245][ T5918] usb 2-1: config 0 descriptor?? [ 186.404202][ T5918] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 186.427679][ T5911] pvrusb2: Hardware description: Terratec Grabster AV400 [ 186.427700][ T5911] pvrusb2: ********** [ 186.427768][ T5911] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 186.427782][ T5911] pvrusb2: Important functionality might not be entirely working. [ 186.427792][ T5911] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 186.427804][ T5911] pvrusb2: ********** [ 186.606803][ T2371] pvrusb2: Invalid write control endpoint [ 186.666304][ T5918] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 186.704035][ T5918] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 186.838271][ T7602] pvrusb2: Invalid write control endpoint [ 186.851666][ T5930] usb 1-1: USB disconnect, device number 11 [ 186.922808][ T2371] pvrusb2: Invalid write control endpoint [ 186.922825][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 186.922836][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 186.922844][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 186.922856][ T2371] pvrusb2: Device being rendered inoperable [ 186.922956][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 186.923017][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 186.928349][ T2371] pvrusb2: Attached sub-driver cx25840 [ 186.928364][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 186.928434][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 187.039916][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 187.041888][ T5927] usb 2-1: USB disconnect, device number 9 [ 187.067522][ T5927] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 187.092027][ T5927] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 187.094192][ T5927] quatech2 2-1:0.51: device disconnected [ 188.204609][ T7657] tmpfs: Cannot retroactively limit size [ 188.567031][ T7675] input: syz0 as /devices/virtual/input/input13 [ 189.057275][ T7694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.291267][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 190.987685][ T7743] netlink: 'syz.3.783': attribute type 1 has an invalid length. [ 192.001522][ T7776] blkio.reset_stats is deprecated [ 192.186015][ T7782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.803'. [ 192.211204][ T5911] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 192.381118][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 192.383794][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.383829][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.383871][ T5911] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 192.383896][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.436871][ T5911] usb 2-1: config 0 descriptor?? [ 192.972694][ T5911] playstation 0003:054C:05C4.0006: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 193.102818][ T5911] playstation 0003:054C:05C4.0006: Invalid reportID received, expected 18 got 0 [ 193.102848][ T5911] playstation 0003:054C:05C4.0006: Failed to retrieve DualShock4 pairing info: -22 [ 193.102902][ T5911] playstation 0003:054C:05C4.0006: Failed to get MAC address from DualShock4 [ 193.102923][ T5911] playstation 0003:054C:05C4.0006: Failed to create dualshock4. [ 193.188455][ T5911] playstation 0003:054C:05C4.0006: probe with driver playstation failed with error -22 [ 193.366087][ T5911] usb 2-1: USB disconnect, device number 10 [ 199.755989][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.776526][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.379085][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 222.853001][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 222.958935][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 223.872947][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 227.290961][ C1] sched: DL replenish lagged too much [ 241.603753][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.606906][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.609197][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.610441][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.734344][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.948005][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.959314][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.959752][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.960938][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 258.180620][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.833006][ T7823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.844676][ T7823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.845743][ T7823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.851335][ T7823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.852042][ T7823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.800876][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 274.813028][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.880834][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.905737][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.992404][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.004991][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.428718][ T7842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.390127][ T7842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.400368][ T7842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.905544][ T7842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.907948][ T7842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 281.458977][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 283.897095][ T7842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 293.223075][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 293.585204][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.411300][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.413193][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.414035][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 304.637881][ T7865] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 304.647606][ T7865] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 304.768481][ T7865] Bluetooth: hci4: command 0x0406 tx timeout [ 305.869117][ T7866] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 306.454333][ T7866] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.455210][ T7866] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 315.904522][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.943036][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.947286][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.948483][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 315.949310][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 326.002426][ T7846] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 327.270418][ T7865] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 339.118351][ T7846] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 339.775931][ T7846] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 339.800832][ T7846] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 339.802037][ T7846] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 339.804549][ T7846] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 339.820527][ T7878] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 339.825209][ T7878] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 340.827245][ T7878] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 341.833573][ T7878] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 342.087794][ T7878] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 345.017331][ T7865] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 345.020626][ T7865] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 345.579092][ T5842] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 346.556295][ T5842] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 346.565309][ T5842] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 346.567258][ T5842] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 346.568518][ T5842] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 346.569820][ T5842] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 346.603134][ T7879] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 346.607918][ T5842] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 347.250594][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 347.602253][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 347.606261][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 347.608473][ T5842] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 347.609345][ T5842] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 347.617854][ T7846] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 347.618343][ T7846] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 347.618758][ T7846] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 347.622030][ T7846] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 347.622818][ T7846] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 351.062221][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 351.082858][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.367555][ T7846] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 352.382804][ T7846] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 352.407014][ T7846] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 354.579565][ T5842] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 354.580407][ T5842] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 369.554263][ T7881] Bluetooth: hci11: Opcode 0x0c1a failed: -110 [ 388.838687][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.886148][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 404.403224][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 414.846663][ T7865] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 415.650131][ T7865] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 415.662144][ T7865] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 416.746378][ T7865] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 416.748080][ T7865] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 421.535551][ T5844] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 421.968496][ T5844] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 422.542132][ T5844] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 423.223958][ T5844] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 423.225743][ T5844] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 423.719755][ T7878] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 424.610747][ T7897] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 424.612256][ T7897] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 424.613518][ T7897] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 424.614388][ T7897] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 424.618942][ T7897] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 424.628871][ T5844] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 425.625208][ T7879] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 426.624951][ T7879] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 426.634526][ T7879] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 427.174063][ T5844] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 427.177335][ T5844] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 427.178159][ T5844] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 429.609193][ T7865] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 429.683717][ T7889] Bluetooth: hci11: Opcode 0x0c1a failed: -110 [ 429.882461][ T7878] Bluetooth: hci14: Opcode 0x1005 failed: -110 [ 432.206132][ T5155] Bluetooth: hci11: command 0x0c1a tx timeout [ 432.229912][ T5844] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 432.821529][ T7892] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 435.437615][ T5844] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 436.260803][ T5844] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 437.407868][ T7865] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 437.408855][ T7865] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 437.409535][ T7865] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 437.411021][ T7865] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 440.244431][ T7894] Bluetooth: hci14: Opcode 0x0c03 failed: -110 [ 441.130862][ T39] INFO: task syz-executor:7821 blocked for more than 144 seconds. [ 441.130894][ T39] Not tainted syzkaller #0 [ 441.130906][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 441.130920][ T39] task:syz-executor state:D stack:23368 pid:7821 tgid:7821 ppid:1 task_flags:0x400140 flags:0x00004006 [ 441.130995][ T39] Call Trace: [ 441.131003][ T39] [ 441.131018][ T39] __schedule+0x16f3/0x4c20 [ 441.131077][ T39] ? sched_clock+0x3f/0x60 [ 441.131106][ T39] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 441.131145][ T39] ? __pfx___schedule+0x10/0x10 [ 441.131206][ T39] rt_mutex_schedule+0x77/0xf0 [ 441.131229][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 441.131273][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 441.131307][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 441.131338][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 441.131368][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 441.131394][ T39] ? __lock_acquire+0xab9/0xd20 [ 441.131436][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 441.131469][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 441.131506][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 441.131527][ T39] mutex_lock_nested+0x16a/0x1d0 [ 441.131561][ T39] inet_rtm_newaddr+0x3b0/0x18b0 [ 441.131605][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 441.131652][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 441.131677][ T39] rtnetlink_rcv_msg+0x7cf/0xb70 [ 441.131709][ T39] ? __lock_acquire+0xab9/0xd20 [ 441.131742][ T39] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 441.131774][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 441.131826][ T39] netlink_rcv_skb+0x205/0x[ 441.131826][ T39] netlink_rcv_skb+0x205/0x470 [ 441.131855][ T39] ? __lock_acquire+0xab9/0xd20 [ 441.131886][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 441.131919][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.131963][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 441.132003][ T39] netlink_unicast+0x843/0xa10 [ 441.132042][ T39] ? __pfx_netlink_unicast+0x10/0x10 [ 441.132073][ T39] ? netlink_sendmsg+0x642/0xb30 [ 441.132103][ T39] ? skb_put+0x11b/0x210 [ 441.132142][ T39] netlink_sendmsg+0x805/0xb30 [ 441.132188][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.132230][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.132254][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.132287][ T39] __sock_sendmsg+0x219/0x270 [ 441.132320][ T39] __sys_sendto+0x3c7/0x520 [ 441.132359][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 441.132423][ T39] ? exc_page_fault+0x76/0xf0 [ 441.132460][ T39] ? do_user_addr_fault+0xc8a/0x1390 [ 441.132493][ T39] __x64_sys_sendto+0xde/0x100 [ 441.132532][ T39] do_syscall_64+0xfa/0x3b0 [ 441.132552][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.132592][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.132616][ T39] ? clear_bhb_loop+0x60/0xb0 [ 441.132645][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.132673][ T39] RIP: 0033:0x7fa624e00a7c [ 441.132697][ T39] RSP: 002b:00007fff00f84c00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 441.132719][ T39] RAX: ffffffffffffffda RBX: 00007fa625b64620 RCX: 00007fa624e00a7c [ 441.132736][ T39] RDX: 0000000000000028 RSI: 00007fa625b64670 RDI: 0000000000000003 [ 441.132751][ T39] RBP: 0000000000000000 R08: 00007fff00f84c54 R09: 000000000000000c [ 441.132765][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 441.132778][ T39] R13: 0000000000000000 R14: 00007fa625b64670 R15: 0000000000000000 [ 441.132813][ T39] [ 441.132850][ T39] [ 441.132850][ T39] Showing all locks held in the system: [ 441.132861][ T39] 4 locks held by kworker/0:0/9: [ 441.132874][ T39] #0: ffff88805c1cd938 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.132939][ T39] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.133018][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.133075][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.133135][ T39] 4 locks held by kworker/u8:1/13: [ 441.133148][ T39] #0: ffff888035fb6938 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.133212][ T39] #1: ffffc90000127bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.133272][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.133330][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.133389][ T39] 2 locks held by ksoftirqd/0/15: [ 441.133401][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.133457][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.133514][ T39] 2 locks held by rcuc/0/20: [ 441.133526][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.133595][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.133655][ T39] 2 locks held by rcuc/1/28: [ 441.133668][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.133726][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.133784][ T39] 13 locks held by ktimers/1/29: [ 441.133796][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.133853][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.133912][ T39] #2: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 441.133966][ T39] #3: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.134022][ T39] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x27b/0x900 [ 441.134080][ T39] #5: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 [ 441.134140][ T39] #6: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9a/0x3a0 [ 441.134198][ T39] #7: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x710/0x1720 [ 441.134257][ T39] #8: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.134315][ T39] #9: ffffffff8d9a8c20 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x26f/0x3b70 [ 441.134368][ T39] #10: ffff888039287318 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#7){+...}-{3:3}, at: __dev_queue_xmit+0xd58/0x3b70 [ 441.134427][ T39] #11: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 441.134481][ T39] #12: ffff888039287188 (&sch->root_lock_key#59){+...}-{3:3}, at: __dev_queue_xmit+0xd62/0x3b70 [ 441.134541][ T39] 2 locks held by ksoftirqd/1/30: [ 441.134553][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.134615][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.134672][ T39] 4 locks held by kworker/1:0/31: [ 441.134685][ T39] #0: ffff888036b1ad38 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.134748][ T39] #1: ffffc90000a5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.134826][ T39] #2: ffff888033efd5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 441.134886][ T39] #3: ffff888023110e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 441.134945][ T39] 7 locks held by kworker/u8:2/37: [ 441.134957][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.135016][ T39] #1: ffffc90000ac7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.135075][ T39] #2: ffff88805da61300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 441.135144][ T39] #3: ffff88805d9da920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 441.135208][ T39] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 441.135263][ T39] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.135321][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.135380][ T39] 1 lock held by khungtaskd/39: [ 441.135392][ T39] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 441.135446][ T39] 3 locks held by kworker/1:1/45: [ 441.135459][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.135517][ T39] #1: ffffc90000b67bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.135581][ T39] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 441.135636][ T39] 6 locks held by kworker/u8:3/57: [ 441.135648][ T39] #0: ffff88802fe1e938 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.135704][ T39] #1: ffffc9000123fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.135764][ T39] #2: ffff888033efd5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 441.135821][ T39] #3: ffff888023110e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 441.135876][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.135934][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.135993][ T39] 4 locks held by kworker/u9:0/59: [ 441.136006][ T39] #0: ffff888029a79138 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.136069][ T39] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.136126][ T39] #2: ffff888067a080a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 441.136187][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 441.136254][ T39] 6 locks held by kworker/u8:6/1039: [ 441.136267][ T39] #0: ffff888036240938 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.136324][ T39] #1: ffffc90004737bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.136385][ T39] #2: ffff8880361955f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 441.136441][ T39] #3: ffff8880231123c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 441.136495][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.136551][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.136616][ T39] 5 locks held by kworker/u8:7/1113: [ 441.136628][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.136686][ T39] #1: ffffc900048c7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.136745][ T39] #2: ffff88805eca0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 441.136806][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.136864][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.136925][ T39] 6 locks held by kworker/u8:11/1550: [ 441.136938][ T39] #0: ffff888036182938 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.137001][ T39] #1: ffffc90005597bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.137059][ T39] #2: ffff888039d615f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 441.137114][ T39] #3: ffff888023116350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 441.137168][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.137223][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.137295][ T39] 4 locks held by kworker/u9:1/5155: [ 441.137326][ T39] #0: ffff88814d5b1138 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.137384][ T39] #1: ffffc9000fb2fbc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.137443][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.137500][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.137557][ T39] 5 locks held by kworker/1:2/5167: [ 441.137570][ T39] #0: ffff888021b9bd38 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.137636][ T39] #1: ffffc9000fbafbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.137715][ T39] #2: ffff88803c1455f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 441.137772][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.137829][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.137890][ T39] 1 lock held by dhcpcd/5502: [ 441.137903][ T39] 2 locks held by getty/5600: [ 441.137916][ T39] #0: ffff88823bf7c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 441.137980][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 441.138037][ T39] 3 locks held by syz-executor/5825: [ 441.138050][ T39] #0: ffff88803c48c050 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_recvmsg+0xd3/0x560 [ 441.138106][ T39] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.138161][ T39] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.138221][ T39] 3 locks held by syz-executor/5838: [ 441.138234][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 441.138296][ T39] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.138351][ T39] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.138405][ T39] 4 locks held by kworker/u9:2/5840: [ 441.138417][ T39] #0: ffff88803aecb138 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.138481][ T39] #1: ffffc90004b57bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.138539][ T39] #2: ffff888069b500a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 441.138607][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 441.138667][ T39] 4 locks held by syz-executor/5841: [ 441.138679][ T39] #0: ffff88802445ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 441.138737][ T39] #1: ffff88802445c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 441.138798][ T39] #2: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 441.138850][ T39] #3: ffff888028f2a358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 441.138919][ T39] 4 locks held by kworker/u9:3/5842: [ 441.138932][ T39] #0: ffff888039eea138 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.138995][ T39] #1: ffffc90004b77bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.139054][ T39] #2: ffff888055fb40a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 441.139114][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 441.139173][ T39] 4 locks held by kworker/u9:4/5844: [ 441.139186][ T39] #0: ffff888071208938 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.139249][ T39] #1: ffffc90004ba7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.139308][ T39] #2: ffff8880764f80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 441.139365][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 441.139423][ T39] 3 locks held by syz-executor/5848: [ 441.139435][ T39] #0: ffff88805bc6ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 441.139492][ T39] #1: ffff88805bc6c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 441.139551][ T39] #2: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 441.139610][ T39] 3 locks held by syz-executor/5852: [ 441.139622][ T39] #0: ffff88805bc78e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 441.139679][ T39] #1: ffff88805bc780a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 441.139741][ T39] #2: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 441.139796][ T39] 4 locks held by kworker/0:3/5889: [ 441.139808][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.139868][ T39] #1: ffffc90004b87bc0 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.139927][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.139985][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.140048][ T39] 13 locks held by kworker/0:4/5926: [ 441.140062][ T39] 4 locks held by kworker/0:7/6015: [ 441.140074][ T39] #0: ffff8880316a2d38 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.140138][ T39] #1: ffffc900052c7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.140217][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.140275][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.140335][ T39] 7 locks held by kworker/u8:15/7351: [ 441.140347][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 441.140406][ T39] #1: ffffc9000f887bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 441.140467][ T39] #2: ffff88805dd34300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 441.140536][ T39] #3: ffff88805db59120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 441.140608][ T39] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 441.140664][ T39] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 441.140721][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 441.140780][ T39] 4 locks held by kworker/u8:16/7352: [ 441.140792][ T39] #0: ffff88805c554938 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.108469][ T39] #1: ffffc9000f827bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.108550][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.108610][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.108672][ T39] 6 locks held by kworker/u8:17/7353: [ 442.108685][ T39] #0: ffff88805c551138 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.108750][ T39] #1: ffffc9000f8b7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.108811][ T39] #2: ffff888039d655f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 442.108870][ T39] #3: ffff888023116de8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 442.108928][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.108987][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.109047][ T39] 3 locks held by kworker/u8:18/7354: [ 442.109060][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.109119][ T39] #1: ffffc9000f8e7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.109178][ T39] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 442.109232][ T39] 4 locks held by kworker/u8:19/7355: [ 442.109245][ T39] #0: ffff888039989938 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.109317][ T39] #1: ffffc9000f8f7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.109378][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.109436][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.109497][ T39] 3 locks held by kworker/u8:20/7356: [ 442.109509][ T39] #0: ffff88814d3ee938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.109570][ T39] #1: ffffc9000f927bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.109630][ T39] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 442.109690][ T39] 4 locks held by kworker/u8:21/7357: [ 442.109703][ T39] #0: ffff88803998d138 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.109768][ T39] #1: ffffc9000f937bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.109828][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.109886][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.109945][ T39] 4 locks held by kworker/u8:22/7358: [ 442.109958][ T39] #0: ffff888030d81138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.110018][ T39] #1: ffffc9000f897bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.110079][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.110138][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.110198][ T39] 4 locks held by kworker/u8:24/7360: [ 442.110211][ T39] #0: ffff88802f937138 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.110283][ T39] #1: ffffc9000f947bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.110343][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.110402][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.110464][ T39] 4 locks held by kworker/u8:28/7364: [ 442.110476][ T39] #0: ffff88802f937138 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.110541][ T39] #1: ffffc9000f987bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.110602][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.110661][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.110721][ T39] 5 locks held by kworker/u8:29/7365: [ 442.110733][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.110793][ T39] #1: ffffc9000f9a7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.110899][ T39] #2: ffff88805ea60898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 442.110962][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.111020][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.111081][ T39] 5 locks held by kworker/u8:31/7367: [ 442.111093][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.111153][ T39] #1: ffffc9000f847bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.111213][ T39] #2: ffff88805ec30898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 442.111282][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.111340][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.111400][ T39] 6 locks held by kworker/u8:32/7370: [ 442.111413][ T39] #0: ffff88802fe1e938 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.111473][ T39] #1: ffffc9000f9c7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.111533][ T39] #2: ffff888033efd5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 442.111591][ T39] #3: ffff888023111928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 442.111648][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.111706][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.111767][ T39] 6 locks held by kworker/u8:34/7374: [ 442.111780][ T39] #0: ffff888036180938 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.111844][ T39] #1: ffffc9000f9f7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.111905][ T39] #2: ffff8880354315f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 442.111961][ T39] #3: ffff88805e0503f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 442.112015][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.112071][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.112129][ T39] 7 locks held by kworker/u8:36/7378: [ 442.112142][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.112201][ T39] #1: ffffc9000fa37bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.112272][ T39] #2: ffff88801de95300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 442.112337][ T39] #3: ffff88805d1f1920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 442.112402][ T39] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 442.112458][ T39] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.112513][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.112573][ T39] 6 locks held by kworker/u8:38/7380: [ 442.112586][ T39] #0: ffff88805c554938 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.112650][ T39] #1: ffffc9000fa57bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.112709][ T39] #2: ffff888035da95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 442.112769][ T39] #3: ffff888023950e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 442.112827][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.112886][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.112947][ T39] 5 locks held by kworker/u8:39/7381: [ 442.112961][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.113021][ T39] #1: ffffc9000fa67bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.113082][ T39] #2: ffff888048980898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 442.113144][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.113202][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.113274][ T39] 5 locks held by kworker/u8:40/7382: [ 442.113287][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.113348][ T39] #1: ffffc9000f9d7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.113408][ T39] #2: ffff88805e810898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 442.113470][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.113529][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.113590][ T39] 6 locks held by kworker/u8:41/7383: [ 442.113604][ T39] #0: ffff888026e6a138 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.113669][ T39] #1: ffffc9000fa77bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.113731][ T39] #2: ffff88802f61d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 442.113789][ T39] #3: ffff88805e051928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 442.113847][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.113905][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.113966][ T39] 5 locks held by kworker/u8:42/7385: [ 442.113979][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.114040][ T39] #1: ffffc9000fa87bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.114100][ T39] #2: ffff888048bc0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 442.114162][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.114220][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.114288][ T39] 5 locks held by kworker/u8:43/7386: [ 442.114301][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.114362][ T39] #1: ffffc9000faa7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.114421][ T39] #2: ffff88805f6c0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 442.114483][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.114542][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.114602][ T39] 5 locks held by kworker/u8:44/7387: [ 442.114615][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.114675][ T39] #1: ffffc9000fab7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.114736][ T39] #2: ffff88805fc40898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 442.114798][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.114857][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.114917][ T39] 6 locks held by kworker/1:7/7811: [ 442.114930][ T39] #0: ffff8880316a2d38 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.114995][ T39] #1: ffffc9001c9afbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.115079][ T39] #2: ffff88803c1615f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 442.115139][ T39] #3: ffff888023114388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 442.115198][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.115263][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.115325][ T39] 4 locks held by kworker/1:10/7815: [ 442.115339][ T39] #0: ffff88805c1cd938 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.115404][ T39] #1: ffffc9001c9efbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.115488][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.115546][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.115607][ T39] 4 locks held by kworker/1:11/7819: [ 442.115620][ T39] #0: ffff88805bff2938 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.115685][ T39] #1: ffffc9001c9bfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.115769][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.115828][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.115889][ T39] 1 lock held by syz-executor/7821: [ 442.115902][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 442.115957][ T39] 4 locks held by kworker/0:9/7824: [ 442.115970][ T39] #0: ffff88805c400538 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.116035][ T39] #1: ffffc9001f27fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.116117][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.116175][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.116236][ T39] 3 locks held by syz.0.814/7829: [ 442.116248][ T39] #0: ffff888026214e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 442.116314][ T39] #1: ffff8880262140a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 442.116376][ T39] #2: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 442.116430][ T39] 4 locks held by kworker/1:17/7835: [ 442.116443][ T39] #0: ffff88805c400538 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.116508][ T39] #1: ffffc9001c55fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.116590][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.116649][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.116710][ T39] 5 locks held by kworker/1:19/7837: [ 442.116723][ T39] #0: ffff8880316a3938 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.116788][ T39] #1: ffffc9001c4ffbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.116872][ T39] #2: ffff88803c1655f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 442.116931][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.116990][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.117051][ T39] 4 locks held by kworker/u9:6/7842: [ 442.117064][ T39] #0: ffff88805e3c6938 ((wq_completion)hci0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.117129][ T39] #1: ffffc90004af7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.117190][ T39] #2: ffff88806b2540a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 442.117277][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 442.117339][ T39] 1 lock held by syz-executor/7843: [ 442.117351][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 442.117408][ T39] 4 locks held by kworker/u9:7/7846: [ 442.117421][ T39] #0: ffff8880396f7938 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.117486][ T39] #1: ffffc9001c76fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.117546][ T39] #2: ffff8880568b80a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 442.117609][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 442.117671][ T39] 4 locks held by kworker/0:12/7847: [ 442.117684][ T39] #0: ffff888021b9bd38 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.117750][ T39] #1: ffffc9001c74fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.117834][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.117893][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.117953][ T39] 5 locks held by kworker/0:13/7849: [ 442.117966][ T39] #0: ffff88805bff2938 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.118031][ T39] #1: ffffc9001c73fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.118114][ T39] #2: ffff888023112e58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 442.118173][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.118232][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.118300][ T39] 4 locks held by kworker/1:25/7858: [ 442.118313][ T39] #0: ffff88805c031938 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.118385][ T39] #1: ffffc9001c46fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.118468][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.118526][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.118587][ T39] 4 locks held by kworker/u9:8/7861: [ 442.118600][ T39] #0: ffff88801d6e6938 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.118665][ T39] #1: ffffc9001c3bfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.118725][ T39] #2: ffff88804c5d00a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 442.118787][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 442.118848][ T39] 1 lock held by syz-executor/7863: [ 442.118862][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 442.118917][ T39] 4 locks held by kworker/u9:10/7866: [ 442.118930][ T39] #0: ffff888029a7c938 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.118995][ T39] #1: ffffc9001c067bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.119055][ T39] #2: ffff888068d5c0a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 442.119116][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 442.119178][ T39] 1 lock held by syz-executor/7870: [ 442.119190][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 442.119245][ T39] 1 lock held by syz-executor/7875: [ 442.119265][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 442.119320][ T39] 1 lock held by syz-executor/7877: [ 442.119333][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 442.119388][ T39] 4 locks held by syz-executor/7891: [ 442.119401][ T39] #0: ffff88805f305a38 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 442.119464][ T39] #1: ffff88803d271350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_release+0x5b/0x540 [ 442.119531][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.119589][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.119651][ T39] 4 locks held by syz-executor/7896: [ 442.119665][ T39] 3 locks held by syz-executor/7898: [ 442.119678][ T39] #0: ffff888038865350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_ioctl+0x247/0x910 [ 442.119744][ T39] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 442.119803][ T39] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 442.119862][ T39] 1 lock held by dhcpcd/7899: [ 442.119876][ T39] #0: ffff8880387e8350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 442.119935][ T39] 1 lock held by dhcpcd/7901: [ 442.119948][ T39] #0: ffff888035262350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 442.120008][ T39] [ 442.120014][ T39] ============================================= [ 442.120014][ T39] [ 442.120043][ T39] NMI backtrace for cpu 1 [ 442.120072][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 442.120097][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 442.120112][ T39] Call Trace: [ 442.120121][ T39] [ 442.120131][ T39] dump_stack_lvl+0x189/0x250 [ 442.120172][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.120207][ T39] ? __pfx__printk+0x10/0x10 [ 442.120247][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 442.120288][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 442.120321][ T39] ? __pfx__printk+0x10/0x10 [ 442.120350][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 442.120382][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 442.120415][ T39] watchdog+0xf93/0xfe0 [ 442.120450][ T39] ? watchdog+0x1de/0xfe0 [ 442.120487][ T39] kthread+0x70e/0x8a0 [ 442.120527][ T39] ? __pfx_watchdog+0x10/0x10 [ 442.120556][ T39] ? __pfx_kthread+0x10/0x10 [ 442.120596][ T39] ? __pfx_kthread+0x10/0x10 [ 442.120632][ T39] ret_from_fork+0x3f9/0x770 [ 442.120665][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 442.120702][ T39] ? __switch_to_asm+0x39/0x70 [ 442.120723][ T39] ? __switch_to_asm+0x33/0x70 [ 442.120743][ T39] ? __pfx_kthread+0x10/0x10 [ 442.120779][ T39] ret_from_fork_asm+0x1a/0x30 [ 442.120819][ T39] [ 442.120866][ T39] Sending NMI from CPU 1 to CPUs 0: [ 442.120894][ C0] NMI backtrace for cpu 0 [ 442.120909][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 442.120930][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 442.120942][ C0] RIP: 0010:__lock_acquire+0x467/0xd20 [ 442.120970][ C0] Code: c5 45 8d 7c 24 01 49 ff cc 44 89 f9 83 c1 fe 78 44 44 89 e3 81 e3 ff ff ff 7f 83 f9 31 73 1d 48 8d 0c 9b 8b 8c cf 40 0b 00 00 <31> c1 41 ff cf 49 ff cc f7 c1 00 60 00 00 74 cf eb 1c 48 c7 c7 70 [ 442.120987][ C0] RSP: 0018:ffffc90000156840 EFLAGS: 00000083 [ 442.121002][ C0] RAX: 000000000002000b RBX: 0000000000000004 RCX: 000000000002000b [ 442.121015][ C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff88801ae85940 [ 442.121027][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8932eef3 [ 442.121039][ C0] R10: 0000000000000100 R11: ffffffff893341e0 R12: 0000000000000004 [ 442.121052][ C0] R13: 0000000000000001 R14: ffff88801ae865a0 R15: 0000000000000006 [ 442.121064][ C0] FS: 0000000000000000(0000) GS:ffff8881268bf000(0000) knlGS:0000000000000000 [ 442.121079][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 442.121092][ C0] CR2: 00007f7fab667d60 CR3: 00000000313f0000 CR4: 00000000003526f0 [ 442.121109][ C0] Call Trace: [ 442.121115][ C0] [ 442.121127][ C0] ? synproxy_pernet+0x23/0x240 [ 442.121153][ C0] lock_acquire+0x120/0x360 [ 442.121177][ C0] ? synproxy_pernet+0x23/0x240 [ 442.121207][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 442.121231][ C0] ? synproxy_pernet+0x23/0x240 [ 442.121258][ C0] synproxy_pernet+0x3f/0x240 [ 442.121285][ C0] ? synproxy_pernet+0x23/0x240 [ 442.121313][ C0] ipv6_synproxy_hook+0xa9/0xda0 [ 442.121347][ C0] ? __pfx_ipv6_synproxy_hook+0x10/0x10 [ 442.121381][ C0] ? nf_hook+0x9d/0x380 [ 442.121404][ C0] ? __pfx_ipv6_synproxy_hook+0x10/0x10 [ 442.121435][ C0] nf_hook_slow+0xc2/0x220 [ 442.121464][ C0] nf_hook+0x217/0x380 [ 442.121489][ C0] ? nf_hook+0x9d/0x380 [ 442.121516][ C0] ? __pfx_nf_hook+0x10/0x10 [ 442.121540][ C0] ? __pfx_ip6_finish_output+0x10/0x10 [ 442.121560][ C0] ? __pfx___ip6_local_out+0x10/0x10 [ 442.121588][ C0] ? __pfx_dst_output+0x10/0x10 [ 442.121613][ C0] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 442.121636][ C0] ip6_output+0x1d3/0x320 [ 442.121655][ C0] ? __pfx_ip6_finish_output+0x10/0x10 [ 442.121678][ C0] synproxy_send_tcp_ipv6+0x4c1/0x680 [ 442.121711][ C0] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 442.121739][ C0] ? rcu_is_watching+0x15/0xb0 [ 442.121773][ C0] ? __build_skb_around+0x257/0x3e0 [ 442.121802][ C0] ? synproxy_send_client_synack_ipv6+0x34f/0xca0 [ 442.121831][ C0] ? skb_put+0x11b/0x210 [ 442.121858][ C0] synproxy_send_client_synack_ipv6+0x80e/0xca0 [ 442.121895][ C0] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 442.121924][ C0] ? nft_symhash_reduce+0x1c4/0x560 [ 442.121952][ C0] ? synproxy_pernet+0x45/0x270 [ 442.121975][ C0] nft_synproxy_eval_v6+0x36e/0x560 [ 442.121997][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 442.122019][ C0] ? nf_ip_checksum+0x13c/0x510 [ 442.122039][ C0] nft_synproxy_do_eval+0x3d7/0x570 [ 442.122061][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 442.122081][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 442.122115][ C0] nft_do_chain+0x409/0x1920 [ 442.122141][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 442.122157][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 442.122202][ C0] nft_do_chain_inet+0x25d/0x340 [ 442.122221][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 442.122239][ C0] ? __lock_acquire+0xab9/0xd20 [ 442.122270][ C0] ? NF_HOOK+0x9a/0x3a0 [ 442.122294][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 442.122313][ C0] nf_hook_slow+0xc2/0x220 [ 442.122342][ C0] NF_HOOK+0x206/0x3a0 [ 442.122366][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 442.122391][ C0] ? NF_HOOK+0x9a/0x3a0 [ 442.122414][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 442.122439][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 442.122470][ C0] ip6_input+0x16a/0x270 [ 442.122494][ C0] ? ip6_input+0x23/0x270 [ 442.122524][ C0] NF_HOOK+0x309/0x3a0 [ 442.122548][ C0] ? skb_orphan+0xaf/0xd0 [ 442.122572][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 442.122596][ C0] ? NF_HOOK+0x9a/0x3a0 [ 442.122619][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 442.122644][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 442.122675][ C0] __netif_receive_skb+0xd3/0x380 [ 442.122697][ C0] ? rt_spin_unlock+0x65/0x80 [ 442.122721][ C0] ? process_backlog+0x27b/0x900 [ 442.122745][ C0] process_backlog+0x31e/0x900 [ 442.122776][ C0] __napi_poll+0xb3/0x540 [ 442.122800][ C0] net_rx_action+0x707/0xe00 [ 442.122824][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 442.122860][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 442.122903][ C0] handle_softirqs+0x22f/0x710 [ 442.122931][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 442.122960][ C0] run_ktimerd+0xcf/0x190 [ 442.122985][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 442.123010][ C0] ? schedule+0x91/0x360 [ 442.123039][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 442.123061][ C0] smpboot_thread_fn+0x53f/0xa60 [ 442.123085][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 442.123112][ C0] kthread+0x70e/0x8a0 [ 442.123141][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 442.123164][ C0] ? __pfx_kthread+0x10/0x10 [ 442.123194][ C0] ? __pfx_kthread+0x10/0x10 [ 442.123223][ C0] ret_from_fork+0x3f9/0x770 [ 442.123248][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 442.123277][ C0] ? __switch_to_asm+0x39/0x70 [ 442.123294][ C0] ? __switch_to_asm+0x33/0x70 [ 442.123311][ C0] ? __pfx_kthread+0x10/0x10 [ 442.123340][ C0] ret_from_fork_asm+0x1a/0x30 [ 442.123365][ C0] [ 442.130895][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 442.130918][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 442.130943][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 442.130957][ T39] Call Trace: [ 442.130965][ T39] [ 442.130975][ T39] dump_stack_lvl+0x99/0x250 [ 442.131014][ T39] ? __asan_memcpy+0x40/0x70 [ 442.131039][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.131073][ T39] ? __pfx__printk+0x10/0x10 [ 442.131111][ T39] vpanic+0x281/0x750 [ 442.131148][ T39] ? __pfx_vpanic+0x10/0x10 [ 442.131179][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 442.131203][ T39] ? preempt_schedule+0xae/0xc0 [ 442.131238][ T39] ? preempt_schedule_common+0x83/0xd0 [ 442.131287][ T39] panic+0xb9/0xc0 [ 442.131321][ T39] ? __pfx_panic+0x10/0x10 [ 442.131357][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 442.131393][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 442.131425][ T39] watchdog+0xfd2/0xfe0 [ 442.131463][ T39] ? watchdog+0x1de/0xfe0 [ 442.131500][ T39] kthread+0x70e/0x8a0 [ 442.131540][ T39] ? __pfx_watchdog+0x10/0x10 [ 442.131569][ T39] ? __pfx_kthread+0x10/0x10 [ 442.131611][ T39] ? __pfx_kthread+0x10/0x10 [ 442.131648][ T39] ret_from_fork+0x3f9/0x770 [ 442.131682][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 442.131719][ T39] ? __switch_to_asm+0x39/0x70 [ 442.131741][ T39] ? __switch_to_asm+0x33/0x70 [ 442.131762][ T39] ? __pfx_kthread+0x10/0x10 [ 442.131799][ T39] ret_from_fork_asm+0x1a/0x30 [ 442.131839][ T39] [ 442.132160][ T39] Kernel Offset: disabled