last executing test programs: 7.315546206s ago: executing program 4 (id=4754): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) 6.475489527s ago: executing program 4 (id=4758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) syz_usb_connect$cdc_ncm(0x3, 0x87, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) getpid() r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendfile(r7, r7, 0x0, 0x1000000201005) openat(r6, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 3.98693771s ago: executing program 1 (id=4772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 3.920047952s ago: executing program 3 (id=4774): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001180)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 3.803438791s ago: executing program 0 (id=4775): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) 3.776892301s ago: executing program 1 (id=4777): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x8000000, 0x2, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 3.304904282s ago: executing program 0 (id=4778): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000140)=0x9, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 3.24754288s ago: executing program 1 (id=4780): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000d00f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 3.190040759s ago: executing program 4 (id=4781): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='Q') 2.999381612s ago: executing program 0 (id=4783): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000380)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000002000080080002"], 0x1c}], 0x1}, 0x0) 2.968245942s ago: executing program 0 (id=4785): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 2.934656032s ago: executing program 3 (id=4786): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 2.863503609s ago: executing program 0 (id=4787): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX=r0], 0x44}}, 0x20008040) 2.861892026s ago: executing program 3 (id=4788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x5c}}, 0x0) 2.816191488s ago: executing program 3 (id=4789): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) 2.789410784s ago: executing program 3 (id=4790): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) 2.695373201s ago: executing program 0 (id=4791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) syz_usb_connect$cdc_ncm(0x3, 0x87, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) getpid() r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) openat(r6, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 1.690754858s ago: executing program 1 (id=4792): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f0f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB="0409f47f0000551741cb68bf53f049cfb802f2b8efad359987e58c646f91453638cf15ce1346e8d6423b0a32c397bb497062f5759db5006b00af13aafa9b065cd71c8b9f23ffc62a37e8cd646369931a048a6908fcbc51fb7acccda910cda9c832d3"], 0x23) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000b40)={0x0, 0xe}, &(0x7f0000000b80)=0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) prlimit64(r0, 0x1, 0x0, &(0x7f0000000080)) ftruncate(r5, 0x2000009) r6 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r6, 0x0, 0x0, 0x80000) sendfile(r3, r5, 0x0, 0x7ffff004) 1.332091747s ago: executing program 3 (id=4793): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000010080)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000010140), 0x48c02, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000010040)={'wlan1\x00'}) connect$unix(r2, 0x0, 0xffffffcc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) fchdir(0xffffffffffffffff) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000010440)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 955.290513ms ago: executing program 2 (id=4794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x74}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000004) 944.875349ms ago: executing program 2 (id=4795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000380)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000002000080080002"], 0x1c}], 0x1}, 0x0) 873.536565ms ago: executing program 2 (id=4796): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000140)=0x9, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 804.326253ms ago: executing program 2 (id=4797): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, 0x0, 0x4000) 752.670573ms ago: executing program 2 (id=4798): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 678.85091ms ago: executing program 1 (id=4799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000006b40), 0x0, 0x40000000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) 322.634242ms ago: executing program 4 (id=4800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x5c}}, 0x0) 304.761659ms ago: executing program 2 (id=4801): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4, "b0d5b301d1f8337291bd9c59c55dc059097d659cfe0320cadd0901cd3b14689e1c77bcf683e35c68f0455930ab19ce80052e1b4d478fc7c371bd292e05a810", 0x3a}, 0x80, 0x0}}], 0x1, 0x48094) 244.344836ms ago: executing program 4 (id=4802): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040), 0x8) connect$bt_sco(r0, &(0x7f0000001880)={0x1f, @none}, 0x8) 159.576224ms ago: executing program 1 (id=4803): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000280)={0x0, 0x1, 0x1c, 0x7, 0x1f5, &(0x7f0000000880)="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"}) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x8145, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)}}], 0x1, 0x4000000) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x2007, @fd=r4, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b000000000000001c000000000004"], 0x48) io_uring_enter(r1, 0x26c3, 0xdfffeffb, 0x4c, 0x0, 0x1d) 0s ago: executing program 4 (id=4804): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x44e52, 0x7fe80}}, 0x20}, 0x1, 0x0, 0x0, 0x4008880}, 0x8002) kernel console output (not intermixed with test programs): 1353.798631][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 1353.809786][ T30] audit: type=1326 audit(1757558985.326:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21392 comm="syz.4.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb380d8eba9 code=0x7fc00000 [ 1354.157880][ T5909] usb 1-1: config 0 has an invalid descriptor of length 164, skipping remainder of the config [ 1354.185933][ T5909] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1354.205112][ T5909] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1354.215829][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.231171][ T5909] usb 1-1: config 0 descriptor?? [ 1354.412459][T21400] syz.1.3940 (21400): drop_caches: 2 [ 1355.325209][ T57] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1355.502043][ T57] usb 3-1: Using ep0 maxpacket: 16 [ 1355.513522][ T57] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.765043][T11412] usb 1-1: USB disconnect, device number 74 [ 1355.827503][T21455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3957'. [ 1355.883153][T21455] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3957'. [ 1355.917193][ T57] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.929141][ T57] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1355.970243][ T57] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1355.981527][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.009155][ T57] usb 3-1: config 0 descriptor?? [ 1356.433432][ T57] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 1356.442392][T11412] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1356.563764][ T57] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0012/input/input50 [ 1356.617420][T11412] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1356.632780][T11412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.641176][T11412] usb 1-1: Product: syz [ 1356.655859][T11412] usb 1-1: Manufacturer: syz [ 1356.672721][T11412] usb 1-1: SerialNumber: syz [ 1356.707011][T11412] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1356.732469][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1356.797660][ T57] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1356.978236][ T57] usb 3-1: USB disconnect, device number 59 [ 1357.046865][ C0] usb 1-1: ath9k_htc: invalid pkt_len (fd7e) [ 1357.129932][T21470] fido_id[21470]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1357.201088][T21472] smc: net device bond0 erased user defined pnetid SYZ0 [ 1357.211634][T21472] veth0_to_bridge: entered promiscuous mode [ 1357.221307][T21472] FAULT_INJECTION: forcing a failure. [ 1357.221307][T21472] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.234054][T21472] CPU: 1 UID: 0 PID: 21472 Comm: syz.4.3961 Not tainted syzkaller #0 PREEMPT(full) [ 1357.234069][T21472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1357.234076][T21472] Call Trace: [ 1357.234080][T21472] [ 1357.234084][T21472] dump_stack_lvl+0x16c/0x1f0 [ 1357.234102][T21472] should_fail_ex+0x512/0x640 [ 1357.234117][T21472] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1357.234130][T21472] should_failslab+0xc2/0x120 [ 1357.234143][T21472] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1357.234154][T21472] ? __alloc_skb+0x2b2/0x380 [ 1357.234169][T21472] __alloc_skb+0x2b2/0x380 [ 1357.234180][T21472] ? __pfx___alloc_skb+0x10/0x10 [ 1357.234194][T21472] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1357.234211][T21472] netlink_alloc_large_skb+0x69/0x130 [ 1357.234226][T21472] netlink_sendmsg+0x6a1/0xdd0 [ 1357.234242][T21472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1357.234260][T21472] sock_write_iter+0x4fc/0x5b0 [ 1357.234277][T21472] ? __pfx_sock_write_iter+0x10/0x10 [ 1357.234298][T21472] ? bpf_lsm_file_permission+0x9/0x10 [ 1357.234312][T21472] ? security_file_permission+0x71/0x210 [ 1357.234329][T21472] ? rw_verify_area+0xcf/0x6c0 [ 1357.234347][T21472] vfs_write+0x7d3/0x11d0 [ 1357.234358][T21472] ? __pfx_sock_write_iter+0x10/0x10 [ 1357.234375][T21472] ? __pfx_vfs_write+0x10/0x10 [ 1357.234385][T21472] ? find_held_lock+0x2b/0x80 [ 1357.234406][T21472] ksys_write+0x1f8/0x250 [ 1357.234416][T21472] ? __pfx_ksys_write+0x10/0x10 [ 1357.234430][T21472] do_syscall_64+0xcd/0x4c0 [ 1357.234446][T21472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.234457][T21472] RIP: 0033:0x7fb380d8eba9 [ 1357.234466][T21472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1357.234476][T21472] RSP: 002b:00007fb381caa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1357.234487][T21472] RAX: ffffffffffffffda RBX: 00007fb380fd5fa0 RCX: 00007fb380d8eba9 [ 1357.234493][T21472] RDX: 0000000000000027 RSI: 0000200000000040 RDI: 000000000000000a [ 1357.234499][T21472] RBP: 00007fb381caa090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.234506][T21472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1357.234512][T21472] R13: 00007fb380fd6038 R14: 00007fb380fd5fa0 R15: 00007ffcf22a9068 [ 1357.234525][T21472] [ 1357.234930][T21471] veth0_to_bridge: left promiscuous mode [ 1357.513651][ T10] usb 1-1: USB disconnect, device number 75 [ 1357.720149][T21476] syzkaller1: entered promiscuous mode [ 1357.725872][T21476] syzkaller1: entered allmulticast mode [ 1357.876074][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1357.886911][ T9] ath9k_htc: Failed to initialize the device [ 1357.898347][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 1359.422130][ T57] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1359.584464][T11412] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1359.642183][ T57] usb 1-1: Using ep0 maxpacket: 16 [ 1359.691785][ T57] usb 1-1: config 0 has an invalid interface number: 222 but max is 0 [ 1359.740728][T21512] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 1359.761460][ T57] usb 1-1: config 0 has no interface number 0 [ 1359.793498][ T57] usb 1-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 1359.802488][T11412] usb 2-1: Using ep0 maxpacket: 16 [ 1359.807528][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.821985][ T57] usb 1-1: Product: syz [ 1359.975810][T11412] usb 2-1: config 0 has an invalid interface number: 222 but max is 0 [ 1359.981985][ T57] usb 1-1: Manufacturer: syz [ 1360.013242][T11412] usb 2-1: config 0 has no interface number 0 [ 1360.380632][ T57] usb 1-1: SerialNumber: syz [ 1360.410435][ T57] usb 1-1: config 0 descriptor?? [ 1360.415420][T11412] usb 2-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 1360.415446][T11412] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.415465][T11412] usb 2-1: Product: syz [ 1360.415479][T11412] usb 2-1: Manufacturer: syz [ 1360.415491][T11412] usb 2-1: SerialNumber: syz [ 1360.419150][T11412] usb 2-1: config 0 descriptor?? [ 1360.491570][ T5895] IPVS: starting estimator thread 0... [ 1360.704659][T21519] IPVS: using max 79 ests per chain, 189600 per kthread [ 1360.718890][ T57] usb 1-1: USB disconnect, device number 76 [ 1360.746074][T21522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3977'. [ 1360.824831][T21524] dvmrp1: tun_chr_ioctl cmd 1074025676 [ 1360.830319][T21524] dvmrp1: owner set to 0 [ 1360.841207][T11412] usb 2-1: USB disconnect, device number 56 [ 1360.860864][T21522] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3977'. [ 1361.159777][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.166183][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.649008][T21543] evm: overlay not supported [ 1362.525097][T21550] FAULT_INJECTION: forcing a failure. [ 1362.525097][T21550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1362.593067][T21550] CPU: 0 UID: 0 PID: 21550 Comm: syz.3.3985 Not tainted syzkaller #0 PREEMPT(full) [ 1362.593092][T21550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1362.593103][T21550] Call Trace: [ 1362.593109][T21550] [ 1362.593116][T21550] dump_stack_lvl+0x16c/0x1f0 [ 1362.593143][T21550] should_fail_ex+0x512/0x640 [ 1362.593169][T21550] _copy_from_user+0x2e/0xd0 [ 1362.593196][T21550] copy_msghdr_from_user+0x98/0x160 [ 1362.593218][T21550] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1362.593251][T21550] ___sys_sendmsg+0xfe/0x1d0 [ 1362.593274][T21550] ? __pfx____sys_sendmsg+0x10/0x10 [ 1362.593322][T21550] __sys_sendmsg+0x16d/0x220 [ 1362.593346][T21550] ? __pfx___sys_sendmsg+0x10/0x10 [ 1362.593384][T21550] do_syscall_64+0xcd/0x4c0 [ 1362.593410][T21550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.593428][T21550] RIP: 0033:0x7fb96138eba9 [ 1362.593442][T21550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1362.593458][T21550] RSP: 002b:00007fb962175038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1362.593476][T21550] RAX: ffffffffffffffda RBX: 00007fb9615d5fa0 RCX: 00007fb96138eba9 [ 1362.593487][T21550] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1362.593498][T21550] RBP: 00007fb962175090 R08: 0000000000000000 R09: 0000000000000000 [ 1362.593508][T21550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1362.593518][T21550] R13: 00007fb9615d6038 R14: 00007fb9615d5fa0 R15: 00007ffe478f4b88 [ 1362.593542][T21550] [ 1363.176005][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1363.176043][ T30] audit: type=1400 audit(1757558995.886:838): avc: denied { map } for pid=21551 comm="syz.3.3986" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1363.319940][T21556] input: syz1 as /devices/virtual/input/input51 [ 1363.590221][T21558] FAULT_INJECTION: forcing a failure. [ 1363.590221][T21558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1363.603331][T21558] CPU: 0 UID: 0 PID: 21558 Comm: syz.4.3988 Not tainted syzkaller #0 PREEMPT(full) [ 1363.603347][T21558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1363.603353][T21558] Call Trace: [ 1363.603357][T21558] [ 1363.603361][T21558] dump_stack_lvl+0x16c/0x1f0 [ 1363.603378][T21558] should_fail_ex+0x512/0x640 [ 1363.603395][T21558] _copy_from_user+0x2e/0xd0 [ 1363.603411][T21558] __sys_bpf+0x21d/0x4de0 [ 1363.603427][T21558] ? __pfx___sys_bpf+0x10/0x10 [ 1363.603441][T21558] ? ksys_write+0x190/0x250 [ 1363.603455][T21558] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1363.603476][T21558] ? fput+0x9b/0xd0 [ 1363.603491][T21558] ? ksys_write+0x1ac/0x250 [ 1363.603501][T21558] ? __pfx_ksys_write+0x10/0x10 [ 1363.603514][T21558] __x64_sys_bpf+0x78/0xc0 [ 1363.603528][T21558] ? lockdep_hardirqs_on+0x7c/0x110 [ 1363.603545][T21558] do_syscall_64+0xcd/0x4c0 [ 1363.603564][T21558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.603575][T21558] RIP: 0033:0x7fb380d8eba9 [ 1363.603584][T21558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1363.603594][T21558] RSP: 002b:00007fb381caa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1363.603605][T21558] RAX: ffffffffffffffda RBX: 00007fb380fd5fa0 RCX: 00007fb380d8eba9 [ 1363.603612][T21558] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1363.603618][T21558] RBP: 00007fb381caa090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.603624][T21558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.603630][T21558] R13: 00007fb380fd6038 R14: 00007fb380fd5fa0 R15: 00007ffcf22a9068 [ 1363.603643][T21558] [ 1364.031786][T21569] FAULT_INJECTION: forcing a failure. [ 1364.031786][T21569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1364.046983][T21568] FAULT_INJECTION: forcing a failure. [ 1364.046983][T21568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1364.060262][T21569] CPU: 1 UID: 0 PID: 21569 Comm: syz.3.3991 Not tainted syzkaller #0 PREEMPT(full) [ 1364.060279][T21569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1364.060285][T21569] Call Trace: [ 1364.060289][T21569] [ 1364.060293][T21569] dump_stack_lvl+0x16c/0x1f0 [ 1364.060311][T21569] should_fail_ex+0x512/0x640 [ 1364.060327][T21569] _copy_from_user+0x2e/0xd0 [ 1364.060343][T21569] get_timespec64+0x8b/0x240 [ 1364.060360][T21569] ? __pfx_get_timespec64+0x10/0x10 [ 1364.060376][T21569] ? __fget_files+0x20e/0x3c0 [ 1364.060390][T21569] __x64_sys_ppoll+0x185/0x2d0 [ 1364.060403][T21569] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1364.060413][T21569] ? ksys_write+0x1ac/0x250 [ 1364.060424][T21569] ? __pfx_ksys_write+0x10/0x10 [ 1364.060438][T21569] do_syscall_64+0xcd/0x4c0 [ 1364.060453][T21569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.060465][T21569] RIP: 0033:0x7fb96138eba9 [ 1364.060474][T21569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1364.060484][T21569] RSP: 002b:00007fb962154038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1364.060494][T21569] RAX: ffffffffffffffda RBX: 00007fb9615d6090 RCX: 00007fb96138eba9 [ 1364.060501][T21569] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 0000200000000100 [ 1364.060508][T21569] RBP: 00007fb962154090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.060514][T21569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.060520][T21569] R13: 00007fb9615d6128 R14: 00007fb9615d6090 R15: 00007ffe478f4b88 [ 1364.060533][T21569] [ 1364.266958][T21568] CPU: 0 UID: 0 PID: 21568 Comm: syz.4.3990 Not tainted syzkaller #0 PREEMPT(full) [ 1364.266984][T21568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1364.266994][T21568] Call Trace: [ 1364.267001][T21568] [ 1364.267008][T21568] dump_stack_lvl+0x16c/0x1f0 [ 1364.267036][T21568] should_fail_ex+0x512/0x640 [ 1364.267063][T21568] _copy_from_user+0x2e/0xd0 [ 1364.267090][T21568] copy_msghdr_from_user+0x98/0x160 [ 1364.267114][T21568] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1364.267142][T21568] ? __lock_acquire+0x62e/0x1ce0 [ 1364.267174][T21568] ___sys_recvmsg+0xdb/0x1a0 [ 1364.267197][T21568] ? __pfx____sys_recvmsg+0x10/0x10 [ 1364.267239][T21568] __sys_recvmsg+0x16a/0x220 [ 1364.267263][T21568] ? __pfx___sys_recvmsg+0x10/0x10 [ 1364.267302][T21568] do_syscall_64+0xcd/0x4c0 [ 1364.267328][T21568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.267347][T21568] RIP: 0033:0x7fb380d8eba9 [ 1364.267362][T21568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1364.267379][T21568] RSP: 002b:00007fb381c89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1364.267397][T21568] RAX: ffffffffffffffda RBX: 00007fb380fd6090 RCX: 00007fb380d8eba9 [ 1364.267409][T21568] RDX: 0000000000000122 RSI: 0000200000000100 RDI: 0000000000000007 [ 1364.267420][T21568] RBP: 00007fb381c89090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.267431][T21568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.267441][T21568] R13: 00007fb380fd6128 R14: 00007fb380fd6090 R15: 00007ffcf22a9068 [ 1364.267465][T21568] [ 1364.619598][T21574] smc: net device bond0 applied user defined pnetid SYZ0 [ 1365.611387][ T30] audit: type=1326 audit(1757558998.386:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21578 comm="syz.2.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5198eba9 code=0x7ffc0000 [ 1365.659607][ T30] audit: type=1326 audit(1757558998.386:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21578 comm="syz.2.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f8e5198eba9 code=0x7ffc0000 [ 1365.754557][ T30] audit: type=1326 audit(1757558998.386:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21578 comm="syz.2.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5198eba9 code=0x7ffc0000 [ 1365.777949][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.838423][T21589] pim6reg: entered allmulticast mode [ 1365.851210][T21576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3993'. [ 1365.989822][ T30] audit: type=1326 audit(1757558998.386:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21578 comm="syz.2.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8e5198eba9 code=0x7ffc0000 [ 1366.013152][ C0] vkms_vblank_simulate: vblank timer overrun [ 1366.166699][T21598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3998'. [ 1366.438027][ T30] audit: type=1326 audit(1757558998.386:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21578 comm="syz.2.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5198eba9 code=0x7ffc0000 [ 1366.560662][ T30] audit: type=1326 audit(1757558998.386:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21578 comm="syz.2.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e5198eba9 code=0x7ffc0000 [ 1366.645598][T21604] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.786382][ T30] audit: type=1326 audit(1757558998.386:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21578 comm="syz.2.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5198eba9 code=0x7ffc0000 [ 1367.272132][ T30] audit: type=1326 audit(1757558998.386:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21578 comm="syz.2.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e5198eba9 code=0x7ffc0000 [ 1367.340817][ T30] audit: type=1326 audit(1757558998.386:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21578 comm="syz.2.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e5198eba9 code=0x7ffc0000 [ 1367.364215][ C0] vkms_vblank_simulate: vblank timer overrun [ 1367.636823][T21621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4004'. [ 1367.675817][T21621] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4004'. [ 1368.570148][T21635] 9pnet_fd: Insufficient options for proto=fd [ 1368.632558][T21633] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4008'. [ 1368.811334][T21642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4011'. [ 1369.455259][T21642] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1369.462807][T21642] macvlan2: entered allmulticast mode [ 1369.500397][T21642] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1369.678709][T21649] Invalid source name [ 1369.682782][T21649] UBIFS error (pid: 21649): cannot open "./file0", error -22 [ 1371.196365][T21660] FAULT_INJECTION: forcing a failure. [ 1371.196365][T21660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1371.237963][T21660] CPU: 0 UID: 0 PID: 21660 Comm: syz.1.4020 Not tainted syzkaller #0 PREEMPT(full) [ 1371.237989][T21660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1371.237999][T21660] Call Trace: [ 1371.238006][T21660] [ 1371.238014][T21660] dump_stack_lvl+0x16c/0x1f0 [ 1371.238041][T21660] should_fail_ex+0x512/0x640 [ 1371.238068][T21660] _copy_from_user+0x2e/0xd0 [ 1371.238095][T21660] copy_msghdr_from_user+0x98/0x160 [ 1371.238119][T21660] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1371.238153][T21660] ___sys_sendmsg+0xfe/0x1d0 [ 1371.238177][T21660] ? __pfx____sys_sendmsg+0x10/0x10 [ 1371.238229][T21660] __sys_sendmsg+0x16d/0x220 [ 1371.238252][T21660] ? __pfx___sys_sendmsg+0x10/0x10 [ 1371.238290][T21660] do_syscall_64+0xcd/0x4c0 [ 1371.238316][T21660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.238335][T21660] RIP: 0033:0x7f4ba5b8eba9 [ 1371.238349][T21660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1371.238366][T21660] RSP: 002b:00007f4ba6a15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1371.238383][T21660] RAX: ffffffffffffffda RBX: 00007f4ba5dd5fa0 RCX: 00007f4ba5b8eba9 [ 1371.238394][T21660] RDX: 00000000000048c0 RSI: 0000200000000440 RDI: 0000000000000003 [ 1371.238404][T21660] RBP: 00007f4ba6a15090 R08: 0000000000000000 R09: 0000000000000000 [ 1371.238414][T21660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1371.238424][T21660] R13: 00007f4ba5dd6038 R14: 00007f4ba5dd5fa0 R15: 00007ffd88895bd8 [ 1371.238448][T21660] [ 1371.397257][ C0] vkms_vblank_simulate: vblank timer overrun [ 1372.856592][T21686] FAULT_INJECTION: forcing a failure. [ 1372.856592][T21686] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.891343][T21686] CPU: 0 UID: 0 PID: 21686 Comm: syz.0.4024 Not tainted syzkaller #0 PREEMPT(full) [ 1372.891369][T21686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1372.891380][T21686] Call Trace: [ 1372.891387][T21686] [ 1372.891395][T21686] dump_stack_lvl+0x16c/0x1f0 [ 1372.891422][T21686] should_fail_ex+0x512/0x640 [ 1372.891444][T21686] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1372.891466][T21686] should_failslab+0xc2/0x120 [ 1372.891486][T21686] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1372.891505][T21686] ? getname_flags.part.0+0x4c/0x550 [ 1372.891535][T21686] getname_flags.part.0+0x4c/0x550 [ 1372.891563][T21686] getname_flags+0x93/0xf0 [ 1372.891588][T21686] do_sys_openat2+0xb8/0x1d0 [ 1372.891612][T21686] ? __pfx_do_sys_openat2+0x10/0x10 [ 1372.891638][T21686] ? __fget_files+0x20e/0x3c0 [ 1372.891662][T21686] __x64_sys_openat+0x174/0x210 [ 1372.891686][T21686] ? __pfx___x64_sys_openat+0x10/0x10 [ 1372.891710][T21686] ? ksys_write+0x1ac/0x250 [ 1372.891737][T21686] do_syscall_64+0xcd/0x4c0 [ 1372.891762][T21686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.891780][T21686] RIP: 0033:0x7f7e8678eba9 [ 1372.891795][T21686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1372.891812][T21686] RSP: 002b:00007f7e8765b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1372.891829][T21686] RAX: ffffffffffffffda RBX: 00007f7e869d5fa0 RCX: 00007f7e8678eba9 [ 1372.891841][T21686] RDX: 0000000000000042 RSI: 00002000000013c0 RDI: ffffffffffffff9c [ 1372.891852][T21686] RBP: 00007f7e8765b090 R08: 0000000000000000 R09: 0000000000000000 [ 1372.891862][T21686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1372.891872][T21686] R13: 00007f7e869d6038 R14: 00007f7e869d5fa0 R15: 00007ffca1c97218 [ 1372.891896][T21686] [ 1373.071385][ C0] vkms_vblank_simulate: vblank timer overrun [ 1373.652256][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1373.652268][ T30] audit: type=1400 audit(1757559006.406:853): avc: denied { map } for pid=21691 comm="syz.0.4027" path="socket:[78180]" dev="sockfs" ino=78180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1373.684234][T21694] fuse: Bad value for 'group_id' [ 1373.689189][T21694] fuse: Bad value for 'group_id' [ 1373.918505][ T30] audit: type=1400 audit(1757559006.506:854): avc: denied { setattr } for pid=21688 comm="syz.1.4026" name="SCTPv6" dev="sockfs" ino=77529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1374.028145][T21701] FAULT_INJECTION: forcing a failure. [ 1374.028145][T21701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1374.041283][T21701] CPU: 1 UID: 0 PID: 21701 Comm: syz.2.4028 Not tainted syzkaller #0 PREEMPT(full) [ 1374.041306][T21701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1374.041317][T21701] Call Trace: [ 1374.041323][T21701] [ 1374.041330][T21701] dump_stack_lvl+0x16c/0x1f0 [ 1374.041356][T21701] should_fail_ex+0x512/0x640 [ 1374.041383][T21701] _copy_from_user+0x2e/0xd0 [ 1374.041410][T21701] __sys_bpf+0x21d/0x4de0 [ 1374.041434][T21701] ? rcu_is_watching+0x12/0xc0 [ 1374.041458][T21701] ? trace_sched_exit_tp+0xb0/0x120 [ 1374.041479][T21701] ? __pfx___sys_bpf+0x10/0x10 [ 1374.041527][T21701] ? schedule+0xe0/0x3a0 [ 1374.041546][T21701] ? preempt_count_add+0x82/0x150 [ 1374.041574][T21701] __x64_sys_bpf+0x78/0xc0 [ 1374.041597][T21701] ? lockdep_hardirqs_on+0x7c/0x110 [ 1374.041618][T21701] do_syscall_64+0xcd/0x4c0 [ 1374.041643][T21701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.041661][T21701] RIP: 0033:0x7f8e5198eba9 [ 1374.041675][T21701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1374.041692][T21701] RSP: 002b:00007f8e4fbb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1374.041709][T21701] RAX: ffffffffffffffda RBX: 00007f8e51bd6180 RCX: 00007f8e5198eba9 [ 1374.041721][T21701] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 0000000000000000 [ 1374.041731][T21701] RBP: 00007f8e4fbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1374.041741][T21701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1374.041751][T21701] R13: 00007f8e51bd6218 R14: 00007f8e51bd6180 R15: 00007fff8a6b57a8 [ 1374.041775][T21701] [ 1374.369714][ T30] audit: type=1400 audit(1757559007.166:855): avc: denied { map } for pid=21702 comm="syz.1.4030" path="/dev/dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1374.438997][ T30] audit: type=1400 audit(1757559007.206:856): avc: denied { associate } for pid=21702 comm="syz.1.4030" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1374.463720][ T30] audit: type=1400 audit(1757559007.206:857): avc: denied { append } for pid=21702 comm="syz.1.4030" name="pfkey" dev="proc" ino=4026533986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1375.782349][ T10] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1375.992790][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1376.000679][ T10] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1376.013426][ T10] usb 1-1: config 0 has no interface number 0 [ 1376.020722][ T10] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1376.385159][ T9] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1376.543124][ T9] usb 2-1: device descriptor read/64, error -71 [ 1376.550590][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1376.574393][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.033222][ T10] usb 1-1: Product: syz [ 1377.037409][ T10] usb 1-1: Manufacturer: syz [ 1377.042032][ T10] usb 1-1: SerialNumber: syz [ 1377.048707][ T10] usb 1-1: config 0 descriptor?? [ 1377.070007][ T10] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1377.120439][ T10] em28xx 1-1:0.89: Video interface 89 found: bulk [ 1377.183089][ T9] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1377.322014][ T9] usb 2-1: device descriptor read/64, error -71 [ 1377.432486][ T9] usb usb2-port1: attempt power cycle [ 1378.513916][ T57] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 1378.915212][ T10] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1379.277433][ T10] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1379.302135][ T10] em28xx 1-1:0.89: board has no eeprom [ 1379.365133][ T57] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1379.374381][ T57] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1379.401340][ T10] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1379.428821][ T10] em28xx 1-1:0.89: analog set to bulk mode. [ 1379.439609][T14848] em28xx 1-1:0.89: Registering V4L2 extension [ 1379.697715][T11412] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1379.747877][ T10] usb 1-1: USB disconnect, device number 77 [ 1379.770157][ T57] usb 3-1: Product: syz [ 1379.922122][T11412] usb 4-1: Using ep0 maxpacket: 32 [ 1379.936429][ T10] em28xx 1-1:0.89: Disconnecting em28xx [ 1380.175569][T15783] IPVS: starting estimator thread 0... [ 1380.181360][ T57] usb 3-1: Manufacturer: syz [ 1380.186430][ T57] usb 3-1: SerialNumber: syz [ 1380.206332][ T57] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1380.222331][T11412] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1380.265010][T11412] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1380.292174][T21765] IPVS: using max 41 ests per chain, 98400 per kthread [ 1380.389723][T14848] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1380.407441][T14848] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1380.422583][T11412] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1380.434761][T14848] em28xx 1-1:0.89: No AC97 audio processor [ 1380.513556][T21769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4048'. [ 1380.856076][T11412] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1380.870647][T14848] usb 1-1: Decoder not found [ 1380.871080][ T57] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1380.875287][T11412] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 1380.875310][T11412] usb 4-1: Product: syz [ 1380.875324][T11412] usb 4-1: Manufacturer: syz [ 1380.875337][T11412] usb 4-1: SerialNumber: syz [ 1380.877190][T11412] usb 4-1: config 0 descriptor?? [ 1380.912407][T14848] em28xx 1-1:0.89: failed to create media graph [ 1380.918668][T14848] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1380.918707][ T57] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1380.998546][T14848] em28xx 1-1:0.89: Registering snapshot button... [ 1381.042775][T14848] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input52 [ 1381.058871][T14848] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1381.067596][ T10] em28xx 1-1:0.89: Closing input extension [ 1381.077204][ T10] em28xx 1-1:0.89: Deregistering snapshot button [ 1381.143486][ T10] em28xx 1-1:0.89: Freeing device [ 1381.441754][ T5895] usb 3-1: USB disconnect, device number 60 [ 1381.472203][ T10] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1381.485588][T11412] gs_usb 4-1:0.0: Configuring for 176 interfaces [ 1381.492527][T11412] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1381.500399][T11412] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 1381.517980][T21782] binder: 21781:21782 ioctl c0306201 200000000080 returned -14 [ 1381.531245][T21782] FAULT_INJECTION: forcing a failure. [ 1381.531245][T21782] name failslab, interval 1, probability 0, space 0, times 0 [ 1381.546386][T21782] CPU: 1 UID: 0 PID: 21782 Comm: syz.1.4052 Not tainted syzkaller #0 PREEMPT(full) [ 1381.546409][T21782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1381.546419][T21782] Call Trace: [ 1381.546426][T21782] [ 1381.546433][T21782] dump_stack_lvl+0x16c/0x1f0 [ 1381.546460][T21782] should_fail_ex+0x512/0x640 [ 1381.546482][T21782] ? fs_reclaim_acquire+0xae/0x150 [ 1381.546508][T21782] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1381.546534][T21782] should_failslab+0xc2/0x120 [ 1381.546556][T21782] __kmalloc_noprof+0xd2/0x510 [ 1381.546579][T21782] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1381.546607][T21782] ? tomoyo_profile+0x47/0x60 [ 1381.546627][T21782] tomoyo_path_number_perm+0x245/0x580 [ 1381.546648][T21782] ? tomoyo_path_number_perm+0x237/0x580 [ 1381.546673][T21782] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1381.546698][T21782] ? find_held_lock+0x2b/0x80 [ 1381.546751][T21782] ? find_held_lock+0x2b/0x80 [ 1381.546772][T21782] ? hook_file_ioctl_common+0x145/0x410 [ 1381.546796][T21782] ? __fget_files+0x20e/0x3c0 [ 1381.546820][T21782] security_file_ioctl+0x9b/0x240 [ 1381.546847][T21782] __x64_sys_ioctl+0xb7/0x210 [ 1381.546876][T21782] do_syscall_64+0xcd/0x4c0 [ 1381.546901][T21782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.546919][T21782] RIP: 0033:0x7f4ba5b8eba9 [ 1381.546933][T21782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1381.546950][T21782] RSP: 002b:00007f4ba6a15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1381.546967][T21782] RAX: ffffffffffffffda RBX: 00007f4ba5dd5fa0 RCX: 00007f4ba5b8eba9 [ 1381.546978][T21782] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1381.546989][T21782] RBP: 00007f4ba6a15090 R08: 0000000000000000 R09: 0000000000000000 [ 1381.547000][T21782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1381.547010][T21782] R13: 00007f4ba5dd6038 R14: 00007f4ba5dd5fa0 R15: 00007ffd88895bd8 [ 1381.547036][T21782] [ 1381.547043][T21782] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1381.662113][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1381.801574][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1381.824911][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1381.836998][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.849596][ T10] usb 1-1: Product: syz [ 1381.855793][ T10] usb 1-1: Manufacturer: syz [ 1381.861116][ T10] usb 1-1: SerialNumber: syz [ 1382.206526][ T10] usb 1-1: config 0 descriptor?? [ 1382.228246][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1382.247454][ T10] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1382.471060][T21794] pimreg: entered allmulticast mode [ 1382.592142][ T5895] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1382.611985][T15783] usb 5-1: new low-speed USB device number 77 using dummy_hcd [ 1382.742172][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 1382.752571][ T5895] usb 2-1: config 0 has an invalid interface number: 222 but max is 0 [ 1382.760733][ T5895] usb 2-1: config 0 has no interface number 0 [ 1382.769168][T15783] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1382.778465][T15783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.788199][ T5895] usb 2-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 1382.798663][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.807376][T15783] usb 5-1: config 0 descriptor?? [ 1382.820142][ T5895] usb 2-1: Product: syz [ 1382.824759][ T5895] usb 2-1: Manufacturer: syz [ 1382.832925][ T5895] usb 2-1: SerialNumber: syz [ 1382.839630][ T5895] usb 2-1: config 0 descriptor?? [ 1382.858424][ T57] usb 4-1: USB disconnect, device number 65 [ 1383.332137][ T5895] usb 2-1: USB disconnect, device number 60 [ 1383.362501][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1383.540797][ T10] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1383.555819][ T10] em28xx 1-1:0.0: board has no eeprom [ 1383.635695][ T10] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1383.647583][ T10] em28xx 1-1:0.0: dvb set to bulk mode. [ 1383.762757][T11412] em28xx 1-1:0.0: Binding DVB extension [ 1383.787041][ T10] usb 1-1: USB disconnect, device number 78 [ 1383.794956][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 1383.956125][T21792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.282297][T21792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.309456][T21792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.324176][T21792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.388229][T15783] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1384.408176][T15783] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1384.425942][T11412] em28xx 1-1:0.0: Registering input extension [ 1384.435180][ T10] em28xx 1-1:0.0: Closing input extension [ 1384.518003][T15783] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1384.528729][ T10] em28xx 1-1:0.0: Freeing device [ 1384.534925][T15783] usb 5-1: USB disconnect, device number 77 [ 1384.646498][T21815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4062'. [ 1384.891477][T21819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4064'. [ 1385.111211][T21819] macvlan3: entered allmulticast mode [ 1385.839299][ T5895] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1385.911056][T21827] sp0: Synchronizing with TNC [ 1386.024376][T21827] [U] è [ 1386.230503][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1386.253337][ T5895] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1386.267243][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.285231][ T5895] usb 4-1: config 0 descriptor?? [ 1386.817248][ T30] audit: type=1400 audit(1757559019.616:858): avc: denied { bind } for pid=21818 comm="syz.3.4063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1386.854602][ T30] audit: type=1400 audit(1757559019.616:859): avc: denied { listen } for pid=21818 comm="syz.3.4063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1386.928124][ T30] audit: type=1400 audit(1757559019.616:860): avc: denied { accept } for pid=21818 comm="syz.3.4063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1387.158979][T21846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.234026][T21846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1387.271251][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1387.946461][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1387.986543][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1387.995888][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.010048][T14848] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1388.028867][ T10] usb 3-1: Product: syz [ 1388.041278][ T10] usb 3-1: Manufacturer: syz [ 1388.068868][ T10] usb 3-1: SerialNumber: syz [ 1388.137347][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1388.147490][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 1388.250573][T14848] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1388.265006][T14848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.280180][T14848] usb 2-1: config 0 descriptor?? [ 1388.290329][T14848] cp210x 2-1:0.0: cp210x converter detected [ 1388.418659][ T30] audit: type=1400 audit(1757559021.206:861): avc: denied { read } for pid=21847 comm="syz.2.4071" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1388.508451][T21876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4078'. [ 1388.523277][T21876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4078'. [ 1388.877827][T14848] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1388.991169][ T5895] usbhid 4-1:0.0: can't add hid device: -71 [ 1389.018571][ T5895] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1389.041799][ T5895] usb 4-1: USB disconnect, device number 66 [ 1389.821216][T21897] fuse: Bad value for 'fd' [ 1389.962949][T21848] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1389.973865][T21848] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1389.989806][T21848] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1389.996502][T21848] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1390.007101][T21848] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1390.014348][T21848] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1390.021650][T21848] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1390.050321][T14848] usb 2-1: USB disconnect, device number 61 [ 1390.119601][T14848] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1390.129777][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1390.156464][ T10] r8152-cfgselector 3-1: bad CDC descriptors [ 1390.169717][T14848] cp210x 2-1:0.0: device disconnected [ 1390.183786][ T10] r8152-cfgselector 3-1: USB disconnect, device number 61 [ 1390.761979][ T57] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1391.023468][T13740] Bluetooth: hci2: command 0x0406 tx timeout [ 1391.151687][ T57] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1391.382127][ T57] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1391.538165][T21935] input: syz1 as /devices/virtual/input/input54 [ 1391.798412][ T57] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1391.805095][ T57] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1391.925108][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.984362][ T57] usb 4-1: config 0 descriptor?? [ 1392.022120][T13740] Bluetooth: hci4: command 0x0405 tx timeout [ 1392.022136][T18431] Bluetooth: hci3: command 0x0406 tx timeout [ 1392.022190][T18431] Bluetooth: hci1: command 0x0406 tx timeout [ 1392.401126][ T57] usbhid 4-1:0.0: can't add hid device: -71 [ 1392.430986][ T57] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1392.474778][ T57] usb 4-1: USB disconnect, device number 67 [ 1392.852325][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1392.962564][ T57] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 1393.106430][T21955] FAULT_INJECTION: forcing a failure. [ 1393.106430][T21955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1393.119566][T21955] CPU: 1 UID: 0 PID: 21955 Comm: syz.0.4101 Not tainted syzkaller #0 PREEMPT(full) [ 1393.119589][T21955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1393.119600][T21955] Call Trace: [ 1393.119606][T21955] [ 1393.119612][T21955] dump_stack_lvl+0x16c/0x1f0 [ 1393.119639][T21955] should_fail_ex+0x512/0x640 [ 1393.119666][T21955] _copy_from_user+0x2e/0xd0 [ 1393.119692][T21955] copy_msghdr_from_user+0x98/0x160 [ 1393.119715][T21955] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1393.119750][T21955] ___sys_sendmsg+0xfe/0x1d0 [ 1393.119773][T21955] ? __pfx____sys_sendmsg+0x10/0x10 [ 1393.119826][T21955] __sys_sendmsg+0x16d/0x220 [ 1393.119849][T21955] ? __pfx___sys_sendmsg+0x10/0x10 [ 1393.119886][T21955] do_syscall_64+0xcd/0x4c0 [ 1393.119911][T21955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.119929][T21955] RIP: 0033:0x7f7e8678eba9 [ 1393.119943][T21955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1393.119960][T21955] RSP: 002b:00007f7e87619038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1393.119977][T21955] RAX: ffffffffffffffda RBX: 00007f7e869d6180 RCX: 00007f7e8678eba9 [ 1393.119989][T21955] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000007 [ 1393.120008][T21955] RBP: 00007f7e87619090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.120019][T21955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.120029][T21955] R13: 00007f7e869d6218 R14: 00007f7e869d6180 R15: 00007ffca1c97218 [ 1393.120053][T21955] [ 1393.254155][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 1393.311990][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1393.372313][ T57] usb 4-1: device descriptor read/64, error -71 [ 1393.379818][ T10] usb 2-1: config 0 has an invalid interface number: 222 but max is 0 [ 1393.483692][ T10] usb 2-1: config 0 has no interface number 0 [ 1393.531853][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 1393.544031][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.554248][ T10] usb 2-1: Product: syz [ 1393.558966][ T10] usb 2-1: Manufacturer: syz [ 1393.589121][ T10] usb 2-1: SerialNumber: syz [ 1393.598455][ T10] usb 2-1: config 0 descriptor?? [ 1393.880072][ T10] usb 2-1: USB disconnect, device number 62 [ 1393.940393][T21964] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4104'. [ 1394.071343][T21964] overlayfs: overlapping lowerdir path [ 1394.163500][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 1394.169491][T18431] Bluetooth: hci1: command 0x0406 tx timeout [ 1394.423064][T21972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4106'. [ 1394.692001][T14848] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1394.863856][T14848] usb 1-1: Using ep0 maxpacket: 16 [ 1394.877181][T14848] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.235695][T14848] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1395.262140][T14848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.275611][T14848] usb 1-1: Product: syz [ 1395.289914][T14848] usb 1-1: Manufacturer: syz [ 1395.324917][T14848] usb 1-1: SerialNumber: syz [ 1395.347061][T14848] usb 1-1: config 0 descriptor?? [ 1396.194762][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 1397.321995][T22011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4113'. [ 1397.384752][T22011] macvlan4: entered allmulticast mode [ 1397.452238][ T5895] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1397.533842][ T9] usb 1-1: USB disconnect, device number 79 [ 1397.713971][ T30] audit: type=1400 audit(1757559030.516:862): avc: denied { create } for pid=22012 comm="syz.0.4114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1397.722681][T22013] netlink: 'syz.0.4114': attribute type 21 has an invalid length. [ 1397.742857][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 1397.783942][ T5895] usb 4-1: config 0 has an invalid interface number: 222 but max is 0 [ 1397.801988][ T5895] usb 4-1: config 0 has no interface number 0 [ 1397.824736][ T5895] usb 4-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 1397.966310][T22017] autofs: Bad value for 'fd' [ 1398.056053][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.222089][ T5895] usb 4-1: Product: syz [ 1398.241339][ T5895] usb 4-1: Manufacturer: syz [ 1398.273680][ T5895] usb 4-1: SerialNumber: syz [ 1398.335994][ T5895] usb 4-1: config 0 descriptor?? [ 1398.385902][T22013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4114'. [ 1398.567271][ T5895] usb 4-1: USB disconnect, device number 70 [ 1400.162333][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1400.334054][T22046] sp0: Synchronizing with TNC [ 1400.362210][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1400.377103][T22046] [U] è [ 1400.380698][ T10] usb 3-1: config 0 has an invalid interface number: 222 but max is 0 [ 1400.397770][ T10] usb 3-1: config 0 has no interface number 0 [ 1400.424584][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 1400.444845][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.454489][ T10] usb 3-1: Product: syz [ 1400.459349][ T10] usb 3-1: Manufacturer: syz [ 1400.465015][ T10] usb 3-1: SerialNumber: syz [ 1400.485195][ T10] usb 3-1: config 0 descriptor?? [ 1400.708221][ T10] usb 3-1: USB disconnect, device number 62 [ 1401.723545][T22055] mkiss: ax0: crc mode is auto. [ 1403.485785][T22085] binder: 22077:22085 ioctl c0306201 0 returned -14 [ 1403.944868][ T5930] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1404.215913][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 1404.238728][ T5930] usb 2-1: config 0 has an invalid descriptor of length 164, skipping remainder of the config [ 1404.287227][ T5930] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1404.299140][ T5930] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1404.309510][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.402039][ T57] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1404.410917][ T5930] usb 2-1: config 0 descriptor?? [ 1404.852189][ T57] usb 1-1: Using ep0 maxpacket: 16 [ 1404.868602][ T57] usb 1-1: config 0 has an invalid interface number: 222 but max is 0 [ 1404.881074][ T57] usb 1-1: config 0 has no interface number 0 [ 1404.968898][ T57] usb 1-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 1405.041274][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.136728][ T57] usb 1-1: Product: syz [ 1405.202771][ T57] usb 1-1: Manufacturer: syz [ 1405.207500][ T57] usb 1-1: SerialNumber: syz [ 1405.215145][ T57] usb 1-1: config 0 descriptor?? [ 1405.697474][ T57] usb 1-1: USB disconnect, device number 80 [ 1406.308265][ T9] usb 2-1: USB disconnect, device number 63 [ 1406.938791][T18431] Bluetooth: hci4: command 0x0405 tx timeout [ 1408.601191][T22146] netlink: 'syz.2.4145': attribute type 10 has an invalid length. [ 1408.623904][T22146] batman_adv: batadv0: Adding interface: team0 [ 1408.630185][T22146] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.683426][T22148] netlink: 'syz.2.4145': attribute type 10 has an invalid length. [ 1408.691284][T22148] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4145'. [ 1408.700695][T22146] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1409.392660][T22148] team0: entered promiscuous mode [ 1409.414258][T22148] team_slave_0: entered promiscuous mode [ 1409.424161][T22148] team_slave_1: entered promiscuous mode [ 1409.470103][T22148] dummy0: entered promiscuous mode [ 1409.606009][T22148] 8021q: adding VLAN 0 to HW filter on device team0 [ 1409.668837][T22156] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4154'. [ 1409.783261][T22148] batman_adv: batadv0: Interface activated: team0 [ 1409.869299][T22148] batman_adv: batadv0: Interface deactivated: team0 [ 1409.916520][T22148] batman_adv: batadv0: Removing interface: team0 [ 1409.957026][T22148] bridge0: port 3(team0) entered blocking state [ 1409.963950][T22148] bridge0: port 3(team0) entered disabled state [ 1409.971095][T22148] team0: entered allmulticast mode [ 1409.984701][T22148] team_slave_0: entered allmulticast mode [ 1410.008047][T22148] team_slave_1: entered allmulticast mode [ 1410.019298][T22148] dummy0: entered allmulticast mode [ 1410.085123][T22148] bridge0: port 3(team0) entered blocking state [ 1410.091478][T22148] bridge0: port 3(team0) entered forwarding state [ 1413.036857][T22180] FAULT_INJECTION: forcing a failure. [ 1413.036857][T22180] name failslab, interval 1, probability 0, space 0, times 0 [ 1413.060494][T22180] CPU: 1 UID: 0 PID: 22180 Comm: syz.0.4161 Not tainted syzkaller #0 PREEMPT(full) [ 1413.060520][T22180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1413.060531][T22180] Call Trace: [ 1413.060537][T22180] [ 1413.060544][T22180] dump_stack_lvl+0x16c/0x1f0 [ 1413.060572][T22180] should_fail_ex+0x512/0x640 [ 1413.060595][T22180] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1413.060624][T22180] should_failslab+0xc2/0x120 [ 1413.060645][T22180] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1413.060672][T22180] ? avc_has_perm+0x144/0x1f0 [ 1413.060689][T22180] ? alloc_pipe_info+0x10e/0x590 [ 1413.060714][T22180] alloc_pipe_info+0x10e/0x590 [ 1413.060739][T22180] splice_direct_to_actor+0x77d/0xa30 [ 1413.060760][T22180] ? __pfx_direct_splice_actor+0x10/0x10 [ 1413.060779][T22180] ? inode_has_perm+0x16f/0x1d0 [ 1413.060800][T22180] ? file_has_perm+0x27d/0x350 [ 1413.060819][T22180] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1413.060839][T22180] ? __pfx_file_has_perm+0x10/0x10 [ 1413.060868][T22180] do_splice_direct+0x174/0x240 [ 1413.060887][T22180] ? __pfx_do_splice_direct+0x10/0x10 [ 1413.060906][T22180] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1413.060925][T22180] ? bpf_lsm_file_permission+0x9/0x10 [ 1413.060948][T22180] ? security_file_permission+0x71/0x210 [ 1413.060974][T22180] ? rw_verify_area+0xcf/0x6c0 [ 1413.061001][T22180] do_sendfile+0xb06/0xe50 [ 1413.061023][T22180] ? __pfx_do_sendfile+0x10/0x10 [ 1413.061040][T22180] ? __fget_files+0x20e/0x3c0 [ 1413.061067][T22180] __x64_sys_sendfile64+0x1d8/0x220 [ 1413.061088][T22180] ? ksys_write+0x1ac/0x250 [ 1413.061106][T22180] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1413.061136][T22180] do_syscall_64+0xcd/0x4c0 [ 1413.061160][T22180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.061179][T22180] RIP: 0033:0x7f7e8678eba9 [ 1413.061194][T22180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1413.061210][T22180] RSP: 002b:00007f7e8765b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1413.061227][T22180] RAX: ffffffffffffffda RBX: 00007f7e869d5fa0 RCX: 00007f7e8678eba9 [ 1413.061239][T22180] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008 [ 1413.061249][T22180] RBP: 00007f7e8765b090 R08: 0000000000000000 R09: 0000000000000000 [ 1413.061260][T22180] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 1413.061271][T22180] R13: 00007f7e869d6038 R14: 00007f7e869d5fa0 R15: 00007ffca1c97218 [ 1413.061295][T22180] [ 1413.778643][T22188] binder: 22187:22188 ioctl c0306201 0 returned -14 [ 1413.971594][T22190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4163'. [ 1413.980707][T22190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4163'. [ 1418.807624][T22243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4177'. [ 1419.637151][ T30] audit: type=1400 audit(1757559052.436:863): avc: denied { read } for pid=22246 comm="syz.0.4179" path="socket:[80445]" dev="sockfs" ino=80445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1420.091974][T14848] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1420.273624][T14848] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1420.282191][T14848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1420.293416][T14848] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1420.303255][T14848] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1420.311236][T14848] usb 5-1: Manufacturer: syz [ 1420.332686][T14848] usb 5-1: config 0 descriptor?? [ 1420.347501][ T30] audit: type=1326 audit(1757559053.146:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22246 comm="syz.0.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8678eba9 code=0x7fc00000 [ 1420.472416][T15783] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1420.502142][T14848] rc_core: IR keymap rc-hauppauge not found [ 1420.509141][T14848] Registered IR keymap rc-empty [ 1420.516672][T14848] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1420.517871][T22269] binder: 22268:22269 ioctl c0306201 0 returned -14 [ 1420.622765][T15783] usb 2-1: Using ep0 maxpacket: 16 [ 1420.673295][T15783] usb 2-1: config 0 has an invalid interface number: 222 but max is 0 [ 1420.791823][T15783] usb 2-1: config 0 has no interface number 0 [ 1420.931130][T15783] usb 2-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 1420.953837][T14848] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input56 [ 1420.973963][T15783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.136280][T15783] usb 2-1: Product: syz [ 1421.226771][T22279] random: crng reseeded on system resumption [ 1421.307612][T22280] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4186'. [ 1421.316977][T22280] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4186'. [ 1421.539990][T15783] usb 2-1: Manufacturer: syz [ 1421.544820][ T30] audit: type=1400 audit(1757559054.336:865): avc: denied { firmware_load } for pid=13 comm="kworker/u8:1" path="/lib/firmware/regulatory.db.p7s" dev="sda1" ino=449 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1421.576584][T15783] usb 2-1: SerialNumber: syz [ 1421.585282][T15783] usb 2-1: config 0 descriptor?? [ 1421.612753][T22274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.637758][T22274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.713214][T22274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4181'. [ 1421.723607][T22280] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4186'. [ 1421.733234][T22280] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4186'. [ 1421.983253][T15783] usb 2-1: USB disconnect, device number 64 [ 1422.584451][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.590791][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.258119][T22298] input: syz1 as /devices/virtual/input/input57 [ 1424.315315][T14848] usb 5-1: USB disconnect, device number 78 [ 1424.862217][ T10] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1426.011965][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1426.037469][ T10] usb 1-1: config 0 has an invalid interface number: 222 but max is 0 [ 1426.052084][ T10] usb 1-1: config 0 has no interface number 0 [ 1426.072578][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 1426.084799][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.102431][ T10] usb 1-1: Product: syz [ 1426.106745][ T10] usb 1-1: Manufacturer: syz [ 1426.111342][ T10] usb 1-1: SerialNumber: syz [ 1426.122767][ T10] usb 1-1: config 0 descriptor?? [ 1426.177246][T22344] fuse: Bad value for 'user_id' [ 1426.182544][T22344] fuse: Bad value for 'user_id' [ 1426.193789][T22343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1426.388137][ T30] audit: type=1400 audit(1757559058.976:866): avc: denied { create } for pid=22342 comm="syz.3.4203" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1426.546830][ T10] usb 1-1: USB disconnect, device number 81 [ 1426.565115][ T30] audit: type=1400 audit(1757559058.976:867): avc: denied { mounton } for pid=22342 comm="syz.3.4203" path="/230/file0" dev="tmpfs" ino=1249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1426.602794][ T30] audit: type=1400 audit(1757559059.326:868): avc: denied { setattr } for pid=22342 comm="syz.3.4203" name="NETLINK" dev="sockfs" ino=80938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1426.784275][ T30] audit: type=1400 audit(1757559059.326:869): avc: denied { write } for pid=22342 comm="syz.3.4203" name="file0" dev="tmpfs" ino=1249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1426.807099][ T30] audit: type=1400 audit(1757559059.326:870): avc: denied { open } for pid=22342 comm="syz.3.4203" path="/230/file0" dev="tmpfs" ino=1249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1427.350809][ T30] audit: type=1400 audit(1757559060.046:871): avc: denied { unlink } for pid=17665 comm="syz-executor" name="file0" dev="tmpfs" ino=1249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1427.570975][ T30] audit: type=1400 audit(1757559060.366:872): avc: denied { getopt } for pid=22359 comm="syz.2.4207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1427.689810][T22362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4206'. [ 1427.724550][T22362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4206'. [ 1427.807705][T22362] netlink: 'syz.0.4206': attribute type 6 has an invalid length. [ 1427.927231][ T30] audit: type=1400 audit(1757559060.726:873): avc: denied { ioctl } for pid=22370 comm="syz.4.4208" path="/dev/input/mouse0" dev="devtmpfs" ino=984 ioctlcmd=0x552d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1427.952766][ C1] vkms_vblank_simulate: vblank timer overrun [ 1428.245121][T22376] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 1428.251722][T22376] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1428.287104][T22376] vhci_hcd vhci_hcd.0: Device attached [ 1428.372393][T22362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4206'. [ 1428.381597][T22362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4206'. [ 1428.381630][ T53] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1428.427115][ T53] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1428.436282][ T53] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1428.446611][ T3539] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1428.446869][T22362] netlink: 'syz.0.4206': attribute type 6 has an invalid length. [ 1428.482162][ T57] vhci_hcd: vhci_device speed not set [ 1428.588986][ T57] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 1429.802157][T22377] vhci_hcd: connection reset by peer [ 1429.813243][ T7125] vhci_hcd: stop threads [ 1429.818194][ T7125] vhci_hcd: release socket [ 1429.857137][ T7125] vhci_hcd: disconnect device [ 1429.886035][T22393] binder: 22392:22393 ioctl c0306201 0 returned -14 [ 1432.331314][ T30] audit: type=1400 audit(1757559065.126:874): avc: denied { create } for pid=22422 comm="syz.3.4220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1432.506106][ T30] audit: type=1400 audit(1757559065.156:875): avc: denied { bind } for pid=22422 comm="syz.3.4220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1434.262005][ T57] vhci_hcd: vhci_device speed not set [ 1434.750804][ T30] audit: type=1400 audit(1757559067.516:876): avc: denied { ioctl } for pid=22442 comm="syz.0.4225" path="socket:[82012]" dev="sockfs" ino=82012 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1434.779191][T14848] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1434.952603][T14848] usb 3-1: Using ep0 maxpacket: 32 [ 1434.996158][T14848] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1435.009502][T14848] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1435.032247][T14848] usb 3-1: config 0 has no interface number 0 [ 1435.066052][T14848] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1435.122349][T14848] usb 3-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1435.179029][T14848] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1435.251720][T14848] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1435.263350][T14848] usb 3-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1435.330277][T14848] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 1435.352557][T14848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.367241][T14848] usb 3-1: Product: syz [ 1435.375676][T14848] usb 3-1: Manufacturer: syz [ 1435.385779][T14848] usb 3-1: SerialNumber: syz [ 1435.406480][T14848] usb 3-1: config 0 descriptor?? [ 1435.480790][T22461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4231'. [ 1435.712173][T22438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1435.719782][T22438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1435.973973][ T57] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1435.982608][ T30] audit: type=1326 audit(1757559068.786:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22464 comm="syz.3.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96138eba9 code=0x7ffc0000 [ 1436.142000][ T57] usb 5-1: device descriptor read/64, error -71 [ 1436.158655][ T30] audit: type=1326 audit(1757559068.786:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22464 comm="syz.3.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96138eba9 code=0x7ffc0000 [ 1436.225077][ T30] audit: type=1326 audit(1757559068.806:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22464 comm="syz.3.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb96138eba9 code=0x7ffc0000 [ 1436.248477][ T30] audit: type=1326 audit(1757559068.806:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22464 comm="syz.3.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96138eba9 code=0x7ffc0000 [ 1436.271825][ C0] vkms_vblank_simulate: vblank timer overrun [ 1436.348930][ T30] audit: type=1326 audit(1757559068.806:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22464 comm="syz.3.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96138eba9 code=0x7ffc0000 [ 1436.372563][ C0] vkms_vblank_simulate: vblank timer overrun [ 1436.497736][ T30] audit: type=1326 audit(1757559068.806:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22464 comm="syz.3.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb96138eba9 code=0x7ffc0000 [ 1436.521041][ C0] vkms_vblank_simulate: vblank timer overrun [ 1436.537894][ T30] audit: type=1326 audit(1757559068.806:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22464 comm="syz.3.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96138eba9 code=0x7ffc0000 [ 1436.547058][ T9] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 1437.053155][ T9] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 1437.060577][ T9] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 1437.068191][ T9] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 1437.075702][ T9] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 1437.083202][ T9] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 1437.116886][ T9] hid-generic 0006:0004:0009.0013: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1437.152228][ T57] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1437.280802][T22476] fido_id[22476]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1437.297402][ T57] usb 5-1: device descriptor read/64, error -71 [ 1437.412395][ T57] usb usb5-port1: attempt power cycle [ 1437.980575][ T57] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1437.988967][T14848] usb 3-1: probing VID:PID(0424:012C) [ 1437.996317][T14848] usb 3-1: vub300 testing BULK OUT EndPoint(0) 0B [ 1438.006778][T14848] usb 3-1: vub300 testing UNKNOWN EndPoint(1) 8F [ 1438.015718][T14848] usb 3-1: vub300 ignoring EndPoint(1) 8F [ 1438.034931][T14848] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 1438.051337][T14848] vub300 3-1:0.133: probe with driver vub300 failed with error -22 [ 1438.064500][ T57] usb 5-1: device descriptor read/8, error -71 [ 1438.086067][T14848] usb 3-1: USB disconnect, device number 63 [ 1438.408842][T22490] binder: 22485:22490 ioctl c0306201 0 returned -14 [ 1438.905721][ T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1439.104569][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1439.170903][ T10] usb 1-1: config 0 has an invalid descriptor of length 164, skipping remainder of the config [ 1439.181566][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1439.195157][ T10] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1439.207484][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.231514][T22499] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4241'. [ 1439.249668][ T10] usb 1-1: config 0 descriptor?? [ 1440.419260][T22510] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1440.426770][T22510] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1440.545962][T22513] binder: 22512:22513 ioctl c0306201 0 returned -14 [ 1440.622866][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1440.877749][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1440.879134][T22514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4246'. [ 1440.892389][T22514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4246'. [ 1440.936948][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1440.948042][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1440.958272][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.971534][ T10] usb 2-1: config 0 descriptor?? [ 1441.125688][T14848] usb 1-1: USB disconnect, device number 82 [ 1441.241708][ T10] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1441.421094][T22519] overlayfs: missing 'lowerdir' [ 1441.527179][T22526] binder: 22520:22526 ioctl c0306201 0 returned -14 [ 1441.792321][T14848] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1441.972072][T14848] usb 3-1: Using ep0 maxpacket: 32 [ 1441.996417][T14848] usb 3-1: config 0 has an invalid descriptor of length 164, skipping remainder of the config [ 1442.042392][T14848] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1442.061546][T14848] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1442.073796][T14848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.103834][T14848] usb 3-1: config 0 descriptor?? [ 1442.242095][T11412] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1442.492331][T11412] usb 4-1: Using ep0 maxpacket: 8 [ 1442.499484][T11412] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1442.509451][T11412] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1442.852983][T11412] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 1442.864029][T11412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.872603][T11412] usb 4-1: Product: syz [ 1442.876886][T11412] usb 4-1: Manufacturer: syz [ 1442.881528][T11412] usb 4-1: SerialNumber: syz [ 1443.154085][T11412] usbhid 4-1:1.0: can't add hid device: -22 [ 1443.237865][T11412] usbhid 4-1:1.0: probe with driver usbhid failed with error -22 [ 1443.268744][T11412] usb 4-1: USB disconnect, device number 71 [ 1443.332269][T14848] usb 2-1: USB disconnect, device number 65 [ 1443.480520][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1443.527942][ T30] audit: type=1400 audit(1757559076.276:900): avc: denied { bind } for pid=22547 comm="syz.0.4257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1443.816835][ T30] audit: type=1400 audit(1757559076.276:901): avc: denied { node_bind } for pid=22547 comm="syz.0.4257" saddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1444.361133][T14848] usb 3-1: USB disconnect, device number 64 [ 1444.448991][ T30] audit: type=1400 audit(1757559077.246:902): avc: denied { setopt } for pid=22562 comm="syz.2.4263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1444.753200][ T30] audit: type=1400 audit(1757559077.276:903): avc: denied { bind } for pid=22562 comm="syz.2.4263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1444.789092][T22572] binder: 22571:22572 ioctl c0306201 0 returned -14 [ 1444.887999][T22573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4264'. [ 1444.897073][T22573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4264'. [ 1445.101752][T22575] binder: 22574:22575 ioctl c0306201 0 returned -14 [ 1445.628198][T22575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4265'. [ 1445.637082][T22575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4265'. [ 1445.855921][T22582] sp0: Synchronizing with TNC [ 1445.911069][T22582] [U] è [ 1446.080728][T22590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4269'. [ 1446.162004][T11412] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1446.302213][T22597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4270'. [ 1446.373118][T22590] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1446.381568][T22590] macvlan2: entered allmulticast mode [ 1446.389892][T22590] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1446.450264][T11412] usb 4-1: Using ep0 maxpacket: 16 [ 1446.461876][T11412] usb 4-1: config 0 has an invalid interface number: 222 but max is 0 [ 1446.478866][T22597] macvlan5: entered allmulticast mode [ 1446.484544][T11412] usb 4-1: config 0 has no interface number 0 [ 1446.496855][T11412] usb 4-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 1446.506355][T11412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.517706][T11412] usb 4-1: Product: syz [ 1446.523849][T11412] usb 4-1: Manufacturer: syz [ 1446.528530][T11412] usb 4-1: SerialNumber: syz [ 1446.547545][T11412] usb 4-1: config 0 descriptor?? [ 1446.804087][T22599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4271'. [ 1446.817873][T22599] macvlan3: entered allmulticast mode [ 1447.054774][T22601] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4272'. [ 1447.075050][T22601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4272'. [ 1447.105685][ T53] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.116161][T22601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4272'. [ 1447.126590][ T53] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.162067][ T53] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.229023][ T53] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.303793][ T30] audit: type=1400 audit(1757559080.096:904): avc: denied { setopt } for pid=22600 comm="syz.2.4272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1447.314922][T22603] team0: left allmulticast mode [ 1447.344863][T22603] team_slave_0: left allmulticast mode [ 1447.350341][T22603] team_slave_1: left allmulticast mode [ 1447.435629][T22603] dummy0: left allmulticast mode [ 1447.445586][T22603] bridge0: port 3(team0) entered disabled state [ 1447.455658][T22603] dummy0: left promiscuous mode [ 1447.472816][T22603] team0: Port device dummy0 removed [ 1447.487887][T22603] bridge_slave_0: left allmulticast mode [ 1447.494593][T22603] bridge_slave_0: left promiscuous mode [ 1447.500310][T22603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.512016][T22603] bridge_slave_1: left allmulticast mode [ 1447.519236][T22603] bridge_slave_1: left promiscuous mode [ 1447.528015][T22603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.550435][T22603] bond0: (slave bond_slave_0): Releasing backup interface [ 1447.571234][T22603] team_slave_0: left promiscuous mode [ 1447.651691][T11412] usb 4-1: USB disconnect, device number 72 [ 1447.707712][T22603] team0: Port device team_slave_0 removed [ 1447.715642][T22603] team_slave_1: left promiscuous mode [ 1447.748867][T22603] team0: Port device team_slave_1 removed [ 1447.756275][T22603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1447.764534][T22603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.784233][T22603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1447.791611][T22603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.832390][T14848] lo speed is unknown, defaulting to 1000 [ 1447.846969][T22601] team0: Mode changed to "loadbalance" [ 1448.352993][T22620] : renamed from bridge_slave_0 (while UP) [ 1448.388751][T22622] tmpfs: Unknown parameter 'grpquota ' [ 1448.635590][T22617] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1448.642236][T22617] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1448.650491][T22617] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1448.661593][T22617] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1449.753042][T14848] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1449.923898][T14848] usb 2-1: Using ep0 maxpacket: 16 [ 1449.945309][T14848] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1449.967194][T14848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.981657][T14848] usb 2-1: Product: syz [ 1449.987914][T14848] usb 2-1: Manufacturer: syz [ 1449.993307][T14848] usb 2-1: SerialNumber: syz [ 1450.006088][T14848] usb 2-1: config 0 descriptor?? [ 1450.034171][T14848] ums-jumpshot 2-1:0.0: USB Mass Storage device detected [ 1450.055384][T14848] ums-jumpshot 2-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 1450.092728][ T57] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1450.302268][ T57] usb 3-1: Using ep0 maxpacket: 16 [ 1450.309555][ T57] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1450.447174][ T57] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1450.466747][ T30] audit: type=1400 audit(1757559083.266:905): avc: denied { bind } for pid=22624 comm="syz.1.4277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1450.630096][T14848] usb 2-1: USB disconnect, device number 66 [ 1450.662335][T18431] Bluetooth: hci1: command 0x0406 tx timeout [ 1450.665626][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 1450.691677][ T57] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1450.742455][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 1450.742464][T18431] Bluetooth: hci3: command 0x0406 tx timeout [ 1450.942022][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.216390][ T57] usb 3-1: Product: syz [ 1451.252994][ T57] usb 3-1: Manufacturer: syz [ 1451.271677][ T57] usb 3-1: SerialNumber: syz [ 1451.292742][ T57] usb 3-1: config 0 descriptor?? [ 1451.663088][ T57] appledisplay 3-1:0.0: Error while getting initial brightness: -32 [ 1451.705657][T22649] input input60: cannot allocate more than FF_MAX_EFFECTS effects [ 1451.743811][ T57] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -32 [ 1451.839003][ T57] usb 3-1: USB disconnect, device number 65 [ 1452.684594][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4285'. [ 1452.701089][T22660] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1452.701089][T22660] program syz.3.4285 not setting count and/or reply_len properly [ 1453.500510][T22662] random: crng reseeded on system resumption [ 1453.590559][T22662] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4284'. [ 1453.599589][T22662] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4284'. [ 1453.831344][T22663] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1453.839052][T22663] UDF-fs: Scanning with blocksize 512 failed [ 1453.845541][T22663] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1453.853026][T22663] UDF-fs: Scanning with blocksize 1024 failed [ 1453.859289][T22663] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1453.866746][T22663] UDF-fs: Scanning with blocksize 2048 failed [ 1453.872984][T22663] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1453.880410][T22663] UDF-fs: Scanning with blocksize 4096 failed [ 1453.889338][ T30] audit: type=1400 audit(1757559086.386:906): avc: denied { ioctl } for pid=22657 comm="syz.2.4284" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1454.116942][T11076] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1454.126760][T22662] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4284'. [ 1454.135873][T22662] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4284'. [ 1454.165090][ T10] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1454.734748][T22662] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4284'. [ 1454.743848][T22662] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4284'. [ 1454.782291][T11076] usb 3-1: Using ep0 maxpacket: 16 [ 1455.008149][T11076] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1455.022346][T11076] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1455.032151][T11076] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1455.034557][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1455.078694][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1455.094426][T11076] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1455.100398][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1455.130085][T11076] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1455.161791][T11076] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.193755][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1455.203027][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.228476][T11076] usb 3-1: config 0 descriptor?? [ 1455.241759][T22681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22681 comm=syz.4.4289 [ 1455.258423][ T10] usb 4-1: Product: syz [ 1455.264862][ T10] usb 4-1: Manufacturer: syz [ 1455.279401][ T10] usb 4-1: SerialNumber: syz [ 1455.300785][ T10] usb 4-1: config 0 descriptor?? [ 1455.342620][T11076] usbhid 3-1:0.0: can't add hid device: -71 [ 1455.403794][ T10] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 1455.432093][T11076] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1455.542941][T11076] usb 3-1: USB disconnect, device number 66 [ 1456.114458][T22677] netlink: 'syz.0.4288': attribute type 10 has an invalid length. [ 1456.122593][T22677] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4288'. [ 1456.424847][T22698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4291'. [ 1457.220362][T11076] usb 4-1: USB disconnect, device number 73 [ 1458.472614][T22735] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4302'. [ 1458.629808][T22736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4301'. [ 1461.343940][T22785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4315'. [ 1461.512034][ T57] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1461.988357][ T57] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1462.022293][ T57] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1462.100957][ T57] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1462.110263][ T57] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1462.160708][T22785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4315'. [ 1462.202008][ T57] usb 3-1: Product: syz [ 1462.206195][ T57] usb 3-1: Manufacturer: syz [ 1462.286200][ T57] usb 3-1: SerialNumber: syz [ 1462.312284][ T57] usb 3-1: config 0 descriptor?? [ 1462.328875][ T57] usb 3-1: selecting invalid altsetting 0 [ 1463.462330][T14848] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1463.812381][T14848] usb 5-1: Using ep0 maxpacket: 16 [ 1463.948940][ T57] usb 3-1: USB disconnect, device number 67 [ 1464.042559][T22811] binder: 22806:22811 ioctl c0306201 0 returned -14 [ 1464.394789][T14848] usb 5-1: config 0 has an invalid interface number: 222 but max is 0 [ 1464.403031][T14848] usb 5-1: config 0 has no interface number 0 [ 1464.414291][T14848] usb 5-1: New USB device found, idVendor=0458, idProduct=707f, bcdDevice=4f.37 [ 1464.433393][T14848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.443963][T14848] usb 5-1: Product: syz [ 1464.448863][T14848] usb 5-1: Manufacturer: syz [ 1464.481794][T14848] usb 5-1: SerialNumber: syz [ 1464.544307][T14848] usb 5-1: config 0 descriptor?? [ 1464.762313][T15783] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1465.159285][T14848] usb 5-1: USB disconnect, device number 83 [ 1465.202034][T15783] usb 2-1: Using ep0 maxpacket: 32 [ 1465.208440][T15783] usb 2-1: config 0 has an invalid descriptor of length 164, skipping remainder of the config [ 1465.259186][T15783] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1465.273575][T15783] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1465.285091][T15783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.304308][T15783] usb 2-1: config 0 descriptor?? [ 1465.781742][T22825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4325'. [ 1465.992273][T22830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4327'. [ 1466.137179][T22830] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1466.148290][T22830] macvlan2: entered allmulticast mode [ 1466.154283][T22830] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1466.788539][T22842] binder: 22841:22842 ioctl c0306201 0 returned -14 [ 1466.810775][T14848] usb 2-1: USB disconnect, device number 67 [ 1466.989787][T22844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4331'. [ 1466.999389][T22844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4331'. [ 1467.901418][T22853] binder: 22852:22853 ioctl c0306201 0 returned -14 [ 1468.977193][T22867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4337'. [ 1470.276802][T22885] pim6reg1: entered promiscuous mode [ 1470.318133][T22885] pim6reg1: entered allmulticast mode [ 1470.819710][T22894] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4345'. [ 1470.994874][T22896] binder: 22895:22896 ioctl c0306201 0 returned -14 [ 1471.311635][T22901] netlink: 'syz.1.4349': attribute type 1 has an invalid length. [ 1471.319648][T22901] netlink: 'syz.1.4349': attribute type 1 has an invalid length. [ 1471.584287][ T30] audit: type=1400 audit(1471.546:907): avc: denied { open } for pid=22900 comm="syz.1.4349" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1471.745010][ T30] audit: type=1400 audit(1471.556:908): avc: denied { ioctl } for pid=22900 comm="syz.1.4349" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xaeaa scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1471.890158][ T30] audit: type=1400 audit(1471.606:909): avc: denied { read } for pid=22909 comm="syz.2.4351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1472.267877][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1472.502518][T15783] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1472.583061][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1472.589896][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1472.602873][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.613012][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1472.624784][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1473.601452][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.609700][ T10] usb 5-1: Product: syz [ 1473.613987][ T10] usb 5-1: Manufacturer: syz [ 1473.618573][ T10] usb 5-1: SerialNumber: syz [ 1473.828805][T15783] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1473.863550][ T30] audit: type=1400 audit(1473.846:910): avc: denied { getopt } for pid=22941 comm="syz.0.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1473.897291][T15783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.937802][T15783] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1473.954525][T15783] usb 2-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 1473.963907][T15783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.004876][T15783] usb 2-1: config 0 descriptor?? [ 1474.084808][ T10] usb 5-1: 0:2 : does not exist [ 1474.356563][T22949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4366'. [ 1474.586024][T15783] thrustmaster 0003:044F:B323.0014: item fetching failed at offset 3/5 [ 1474.594940][T15783] thrustmaster 0003:044F:B323.0014: parse failed [ 1474.603628][T15783] thrustmaster 0003:044F:B323.0014: probe with driver thrustmaster failed with error -22 [ 1474.656823][T15783] usb 2-1: USB disconnect, device number 68 [ 1475.833042][ T10] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 1476.474557][ T10] usb 5-1: USB disconnect, device number 84 [ 1476.696913][ T7636] udevd[7636]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1479.828411][T23027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4390'. [ 1480.140319][T23031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4389'. [ 1480.473641][T23039] smc: net device bond0 erased user defined pnetid SYZ0 [ 1481.279016][ T30] audit: type=1400 audit(1481.256:911): avc: denied { connect } for pid=23053 comm="syz.0.4399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1483.550397][ T30] audit: type=1400 audit(1483.526:912): avc: denied { bind } for pid=23089 comm="syz.0.4411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1483.573115][ T30] audit: type=1400 audit(1483.526:913): avc: denied { name_bind } for pid=23089 comm="syz.0.4411" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1483.599261][ T30] audit: type=1400 audit(1483.526:914): avc: denied { node_bind } for pid=23089 comm="syz.0.4411" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1484.024173][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.030584][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.750870][T23103] Bluetooth: MGMT ver 1.23 [ 1485.250469][T15783] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1485.765694][T15783] usb 4-1: Using ep0 maxpacket: 16 [ 1485.773658][T15783] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.784284][T15783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1485.796003][T15783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1486.243376][T15783] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1486.257183][T15783] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1486.311511][T15783] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1486.321135][T15783] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1486.418739][T15783] usb 4-1: Manufacturer: syz [ 1486.442199][T15783] usb 4-1: config 0 descriptor?? [ 1487.162919][T15783] rc_core: IR keymap rc-hauppauge not found [ 1487.162938][T15783] Registered IR keymap rc-empty [ 1487.163067][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1487.182415][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1487.202919][T15783] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1487.204414][T15783] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input63 [ 1487.220975][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1487.236738][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1487.262672][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1487.292325][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1487.297400][T23122] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4421'. [ 1487.297490][T23122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4421'. [ 1487.332839][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1487.352008][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1487.382181][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1487.403879][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1487.503819][T23127] tipc: Enabling of bearer rejected, failed to enable media [ 1487.560488][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1487.572020][T15783] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1488.095320][T15783] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1488.095578][T15783] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1488.199306][T15783] usb 4-1: USB disconnect, device number 74 [ 1488.481200][T23118] tty tty25: ldisc open failed (-12), clearing slot 24 [ 1488.505075][T23133] tty tty4: ldisc open failed (-12), clearing slot 3 [ 1489.259954][T23148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4428'. [ 1490.814528][T23165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1492.330565][T23177] /dev/nullb0: Can't lookup blockdev [ 1492.808818][T23170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4434'. [ 1492.826619][ T30] audit: type=1400 audit(1492.786:915): avc: denied { map } for pid=23179 comm="syz.1.4437" path="/dev/sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1493.229706][ T30] audit: type=1400 audit(1492.786:916): avc: denied { execute } for pid=23179 comm="syz.1.4437" path="/dev/sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1494.003968][T23198] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4440'. [ 1494.013138][T23198] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4440'. [ 1494.023215][T23198] netlink: 'syz.1.4440': attribute type 1 has an invalid length. [ 1494.815093][ T30] audit: type=1400 audit(1494.016:917): avc: denied { name_bind } for pid=23191 comm="syz.1.4440" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1496.982243][T23224] block nbd2: Device being setup by another task [ 1497.000938][T23218] block nbd2: shutting down sockets [ 1497.643473][T23230] binder: 23227:23230 ioctl 40046205 0 returned -22 [ 1497.912472][T23237] openvswitch: netlink: Flow actions attr not present in new flow. [ 1498.125994][T23239] netlink: 'syz.1.4454': attribute type 1 has an invalid length. [ 1498.138944][T23239] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4454'. [ 1498.211536][T23244] netlink: zone id is out of range [ 1498.217760][T23244] netlink: zone id is out of range [ 1498.227528][T23244] netlink: zone id is out of range [ 1498.235003][T23244] netlink: zone id is out of range [ 1498.240231][T23244] netlink: zone id is out of range [ 1498.247666][T23244] netlink: zone id is out of range [ 1498.308590][T23244] netlink: zone id is out of range [ 1498.314245][T23244] netlink: zone id is out of range [ 1498.319359][T23244] netlink: zone id is out of range [ 1499.527578][ T30] audit: type=1400 audit(1499.506:918): avc: denied { listen } for pid=23256 comm="syz.2.4463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1500.634008][T23273] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1500.645093][T23273] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1501.277665][T23281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1502.706985][T23295] qnx6: unable to read the first superblock [ 1503.083779][T23300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23300 comm=syz.3.4473 [ 1505.702108][T18431] Bluetooth: hci4: command 0x0405 tx timeout [ 1505.844635][T23342] UBIFS error (pid: 23342): cannot open "c:::", error -22 [ 1506.408286][T23348] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1507.536646][T23362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4492'. [ 1508.359862][T23377] usb usb8: usbfs: process 23377 (syz.3.4493) did not claim interface 0 before use [ 1509.003856][T23374] tipc: Can't bind to reserved service type 0 [ 1509.852861][ T30] audit: type=1400 audit(1765.824:919): avc: denied { append } for pid=23387 comm="syz.4.4503" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1510.002519][T23401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4508'. [ 1510.027554][T23404] random: crng reseeded on system resumption [ 1511.242941][T23421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4515'. [ 1513.190734][T23461] new mount options do not match the existing superblock, will be ignored [ 1513.226430][T23461] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 1513.723586][ T30] audit: type=1400 audit(1769.194:920): avc: denied { remount } for pid=23453 comm="syz.3.4529" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1514.011224][T23464] tmpfs: Unknown parameter 'mpol [ 1514.011224][T23464] ' [ 1515.243838][ T30] audit: type=1400 audit(1771.194:921): avc: denied { create } for pid=23467 comm="syz.3.4532" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=chr_file permissive=1 [ 1515.815346][T23464] IPv6: NLM_F_CREATE should be specified when creating new route [ 1515.823506][T23464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1515.831075][T23464] IPv6: NLM_F_CREATE should be set when creating new route [ 1516.058243][T23490] smc: net device bond0 applied user defined pnetid SYZ0 [ 1516.587938][T23490] smc: net device bond0 erased user defined pnetid SYZ0 [ 1519.064536][T23534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4551'. [ 1519.260147][T23537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4549'. [ 1519.690162][T22435] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1519.830757][ T30] audit: type=1400 audit(1775.804:922): avc: denied { setattr } for pid=23542 comm="syz.1.4555" name="i2c-0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1519.853346][T22435] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1519.853384][T22435] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1519.853417][T22435] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1519.853437][T22435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.859415][T23531] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1519.994693][T22435] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1521.233912][T11076] usb 4-1: USB disconnect, device number 75 [ 1521.657274][ T30] audit: type=1400 audit(2033.633:923): avc: denied { write } for pid=23570 comm="syz.4.4566" path="socket:[85371]" dev="sockfs" ino=85371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1521.952390][T14848] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1522.151319][ T30] audit: type=1400 audit(2034.113:924): avc: denied { append } for pid=23572 comm="syz.2.4565" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1523.062128][T14848] usb 2-1: Using ep0 maxpacket: 32 [ 1523.156758][T14848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1523.188055][T14848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1523.206691][T23590] smc: net device bond0 applied user defined pnetid SYZ0 [ 1523.214090][T14848] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1523.235923][T23590] smc: net device bond0 erased user defined pnetid SYZ0 [ 1523.259912][T14848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.283383][T14848] usb 2-1: config 0 descriptor?? [ 1523.290670][T14848] hub 2-1:0.0: USB hub found [ 1523.413491][T23594] netlink: 'syz.2.4572': attribute type 1 has an invalid length. [ 1523.551142][T14848] hub 2-1:0.0: 1 port detected [ 1523.830022][ T30] audit: type=1400 audit(2035.693:925): avc: denied { mount } for pid=23595 comm="syz.0.4575" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1524.075082][ T30] audit: type=1400 audit(2035.693:926): avc: denied { search } for pid=23595 comm="syz.0.4575" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1524.111783][ T30] audit: type=1400 audit(2035.693:927): avc: denied { search } for pid=23595 comm="syz.0.4575" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1524.114732][T23607] block device autoloading is deprecated and will be removed. [ 1524.151497][ T30] audit: type=1400 audit(2035.703:928): avc: denied { read open } for pid=23595 comm="syz.0.4575" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1524.225064][T23594] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1524.303438][ T9] hub 2-1:0.0: activate --> -90 [ 1524.545017][ T9] usb 2-1-port1: config error [ 1524.998723][T11076] usb 2-1: USB disconnect, device number 69 [ 1524.998987][ T9] usb 2-1: Failed to suspend device, error -19 [ 1527.249928][T23630] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1529.372019][T11076] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1529.524568][T11076] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1529.656361][T11076] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1529.681948][ T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1529.690306][T11076] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1529.700213][T11076] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.712633][T23651] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1529.729946][T14848] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1529.752515][T11076] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1529.912398][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1529.941584][T11076] usb 2-1: USB disconnect, device number 70 [ 1529.993790][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1530.007275][T14848] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1530.032651][T14848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.045880][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1530.063510][T14848] usb 4-1: Product: syz [ 1530.071146][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.086086][T14848] usb 4-1: Manufacturer: syz [ 1530.093040][T14848] usb 4-1: SerialNumber: syz [ 1530.102334][ T9] usb 3-1: config 0 descriptor?? [ 1530.107994][T14848] usb 4-1: config 0 descriptor?? [ 1530.393283][T14848] usb 4-1: USB disconnect, device number 76 [ 1530.595975][ T9] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 1530.660760][ T9] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 1530.698065][ T9] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 1530.723199][ T9] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 1530.753687][ T9] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 1530.787694][ T9] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1530.906277][ C0] usb 3-1: input irq status -75 received [ 1531.087668][ T9] usb 3-1: USB disconnect, device number 68 [ 1531.252102][T14848] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1531.433865][T14848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.447233][T14848] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1531.459524][T14848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.472398][T14848] usb 2-1: config 0 descriptor?? [ 1531.490869][T14848] pwc: Askey VC010 type 2 USB webcam detected. [ 1531.492027][T23684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4604'. [ 1531.506986][T23684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1531.515078][T23684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1531.527292][T23684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1531.537678][T23684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1531.548057][T23684] batman_adv: batadv0: Removing interface: team0 [ 1531.965434][T14848] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1532.077004][T14848] pwc: recv_control_msg error -32 req 02 val 2700 [ 1532.115209][T14848] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1532.135335][T14848] pwc: recv_control_msg error -32 req 04 val 1000 [ 1532.149241][T14848] pwc: recv_control_msg error -32 req 04 val 1300 [ 1532.156492][T14848] pwc: recv_control_msg error -32 req 04 val 1400 [ 1532.168867][T14848] pwc: recv_control_msg error -32 req 02 val 2000 [ 1532.187038][T14848] pwc: recv_control_msg error -32 req 02 val 2100 [ 1532.954491][T14848] pwc: recv_control_msg error -71 req 02 val 2500 [ 1533.144025][T23704] befs: (nbd3): No write support. Marking filesystem read-only [ 1533.155915][T23704] block nbd3: Attempted send on invalid socket [ 1533.162933][T23704] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1533.173437][T23704] befs: (nbd3): unable to read superblock [ 1533.234305][ T30] audit: type=1400 audit(2045.163:929): avc: denied { read } for pid=23695 comm="syz.3.4608" path="socket:[85543]" dev="sockfs" ino=85543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1533.485773][T23706] fuse: Bad value for 'fd' [ 1533.525016][ T30] audit: type=1400 audit(2045.343:930): avc: denied { module_load } for pid=23695 comm="syz.3.4608" path="/sys/power/wakeup_count" dev="sysfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1534.484172][T14848] pwc: recv_control_msg error -71 req 02 val 2400 [ 1534.491682][T14848] pwc: recv_control_msg error -71 req 02 val 2600 [ 1534.498503][T14848] pwc: recv_control_msg error -71 req 02 val 2900 [ 1534.505523][T14848] pwc: recv_control_msg error -71 req 02 val 2800 [ 1534.513853][T14848] pwc: recv_control_msg error -71 req 04 val 1100 [ 1534.520643][T14848] pwc: recv_control_msg error -71 req 04 val 1200 [ 1534.532805][T14848] pwc: Registered as video103. [ 1534.539160][T14848] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input64 [ 1534.809171][T14848] usb 2-1: USB disconnect, device number 71 [ 1536.116926][ T30] audit: type=1400 audit(2048.093:931): avc: denied { connect } for pid=23754 comm="syz.3.4631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1536.347310][T23763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4630'. [ 1536.357555][T23763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4630'. [ 1537.412054][T23770] dlm: Unknown command passed to DLM device : 0 [ 1537.412054][T23770] [ 1538.679135][ T30] audit: type=1400 audit(2050.653:932): avc: denied { write } for pid=23788 comm="syz.4.4640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1538.801798][T23794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4643'. [ 1539.521488][ T30] audit: type=1400 audit(2051.393:933): avc: denied { connect } for pid=23802 comm="syz.3.4647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1539.580630][T23809] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 1539.588394][T23809] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1539.595399][T23809] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1539.602402][T23809] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1539.610410][T23809] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1539.617765][T23809] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1539.624399][T23809] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1539.631576][T23809] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1539.638235][T23809] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1539.644872][T23809] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1539.651738][T23809] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1539.658426][T23809] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1539.665071][T23809] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1539.672287][T23809] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1539.680413][T23809] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1541.017646][ T30] audit: type=1400 audit(2052.993:934): avc: denied { lock } for pid=23825 comm="syz.4.4654" path="socket:[85729]" dev="sockfs" ino=85729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1541.241923][T14848] usb 4-1: new low-speed USB device number 77 using dummy_hcd [ 1541.573527][T14848] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1541.784442][T14848] usb 4-1: config 179 has no interface number 0 [ 1541.849569][T14848] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1541.861027][T14848] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1541.872336][T14848] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1541.883575][T14848] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1541.894780][T14848] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1541.908031][T14848] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1541.918084][T14848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.935002][T23824] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1541.960146][T23824] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1542.266190][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1542.274493][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1542.302053][T14848] usb 4-1: USB disconnect, device number 77 [ 1542.888560][T23845] net_ratelimit: 2 callbacks suppressed [ 1542.888630][T23845] openvswitch: netlink: IP tunnel dst address not specified [ 1543.142164][T11076] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1543.882234][T11076] usb 5-1: Using ep0 maxpacket: 8 [ 1544.057406][T11076] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1544.069126][T11076] usb 5-1: config 0 has no interface number 0 [ 1544.075786][T11076] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1544.087111][T11076] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1544.246243][T11076] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1544.268909][T11076] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1544.292850][T11076] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1544.318824][T11076] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.346899][T11076] usb 5-1: config 0 descriptor?? [ 1544.719558][T11076] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1545.483791][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.501947][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.950702][T22435] usb 5-1: USB disconnect, device number 85 [ 1545.958144][T22435] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1547.396591][T23903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4677'. [ 1548.016456][ T10] IPVS: starting estimator thread 0... [ 1548.157324][T23911] IPVS: using max 77 ests per chain, 184800 per kthread [ 1550.413665][T23949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4693'. [ 1550.432105][T23941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4689'. [ 1552.047252][T23961] loop6: detected capacity change from 0 to 2560 [ 1552.055619][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1552.108971][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1552.130043][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1552.138124][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1552.146155][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1552.155974][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1552.281050][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1552.312256][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1552.340765][ T7636] ldm_validate_partition_table(): Disk read failed. [ 1552.449742][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1552.637665][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1552.673346][ T7636] Dev loop6: unable to read RDB block 0 [ 1553.495157][T23976] input: syz1 as /devices/virtual/input/input65 [ 1553.699192][ T7636] loop6: unable to read partition table [ 1554.741400][ T30] audit: type=1400 audit(2066.713:935): avc: denied { append } for pid=23982 comm="syz.2.4701" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1555.385461][ T30] audit: type=1400 audit(2066.753:936): avc: denied { open } for pid=23982 comm="syz.2.4701" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1555.607542][T23999] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4704'. [ 1555.619747][T23999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4704'. [ 1555.642099][T24000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4703'. [ 1557.902108][ T30] audit: type=1400 audit(2067.823:937): avc: denied { setopt } for pid=24001 comm="syz.2.4706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1559.315380][T14848] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1559.615083][T24026] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4712'. [ 1559.985524][T14848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.019290][T14848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.076093][T14848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.111602][T24040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4718'. [ 1560.139141][T14848] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1560.214338][T14848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.250673][ T30] audit: type=1400 audit(2072.223:938): avc: denied { link } for pid=24034 comm="syz.4.4717" name="file1" dev="overlay" ino=1789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1560.428191][T14848] usb 2-1: config 0 descriptor?? [ 1561.533282][T14848] wacom 0003:056A:0010.0016: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 1561.588011][T14848] wacom 0003:056A:0010.0016: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.1-1/input0 [ 1561.608678][T14848] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0010.0016/input/input66 [ 1561.698319][T14848] usb 2-1: USB disconnect, device number 72 [ 1561.845482][T24054] fido_id[24054]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1562.587279][T24071] sg_write: data in/out 91/14 bytes for SCSI command 0x7-- guessing data in; [ 1562.587279][T24071] program syz.4.4726 not setting count and/or reply_len properly [ 1562.913543][T24079] loop6: detected capacity change from 0 to 63 [ 1562.934738][ T7636] buffer_io_error: 11 callbacks suppressed [ 1562.934751][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1562.949153][ T30] audit: type=1400 audit(2074.933:939): avc: denied { map } for pid=24078 comm="syz.3.4732" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1562.980185][T24079] Buffer I/O error on dev loop6, logical block 0, async page read [ 1562.990226][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1563.009835][ T30] audit: type=1400 audit(2074.953:940): avc: denied { execute } for pid=24078 comm="syz.3.4732" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1563.035961][T24079] Buffer I/O error on dev loop6, logical block 0, async page read [ 1563.047297][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1563.067032][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1563.076896][T24079] Buffer I/O error on dev loop6, logical block 0, async page read [ 1563.087214][T24079] Buffer I/O error on dev loop6, logical block 0, async page read [ 1563.095869][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 1563.106723][T24079] Buffer I/O error on dev loop6, logical block 0, async page read [ 1564.173085][ T30] audit: type=1326 audit(2076.033:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24088 comm="syz.4.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb380d85b67 code=0x7ffc0000 [ 1564.203364][ T30] audit: type=1326 audit(2076.033:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24088 comm="syz.4.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb380d2ada9 code=0x7ffc0000 [ 1564.712236][ T30] audit: type=1326 audit(2076.033:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24088 comm="syz.4.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb380d85b67 code=0x7ffc0000 [ 1565.011983][ T30] audit: type=1326 audit(2076.033:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24088 comm="syz.4.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb380d2ada9 code=0x7ffc0000 [ 1565.036304][ T30] audit: type=1326 audit(2076.033:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24088 comm="syz.4.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb380d8eba9 code=0x7ffc0000 [ 1565.103738][ T30] audit: type=1326 audit(2076.143:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24088 comm="syz.4.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb380d8eba9 code=0x7ffc0000 [ 1565.127672][ T30] audit: type=1326 audit(2076.153:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24088 comm="syz.4.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb380d8eba9 code=0x7ffc0000 [ 1565.470210][T24122] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1566.536456][T24133] sg_write: data in/out 852092/1 bytes for SCSI command 0x1c-- guessing data in; [ 1566.536456][T24133] program syz.2.4744 not setting count and/or reply_len properly [ 1567.542132][T18431] Bluetooth: hci0: command tx timeout [ 1568.087251][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1568.087267][ T30] audit: type=1400 audit(2079.653:957): avc: denied { view } for pid=24138 comm="syz.4.4749" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1569.193271][T24167] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4756'. [ 1569.534541][T24177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4757'. [ 1569.547011][T24177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4757'. [ 1570.338715][T24186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4762'. [ 1570.351217][T24186] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4762'. [ 1570.361658][T24186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4762'. [ 1570.377653][T24186] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4762'. [ 1570.395405][T24186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4762'. [ 1571.675093][T24205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4769'. [ 1572.683838][T24236] sg_write: data in/out 852092/1 bytes for SCSI command 0x1c-- guessing data in; [ 1572.683838][T24236] program syz.1.4780 not setting count and/or reply_len properly [ 1572.817720][T24249] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 1572.822123][ T5895] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1572.828757][T24249] macvtap1: entered allmulticast mode [ 1572.845403][T24249] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 1572.857405][T24249] mac80211_hwsim hwsim17 wlan0: left allmulticast mode [ 1572.865757][T24249] mac80211_hwsim hwsim17 wlan0: left promiscuous mode [ 1573.092011][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 1573.099455][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.113034][ T5895] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1573.124960][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.170948][ T5895] usb 5-1: config 0 descriptor?? [ 1574.473615][ T30] audit: type=1400 audit(2086.393:958): avc: denied { accept } for pid=24263 comm="syz.1.4792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1574.736554][ T5895] usbhid 5-1:0.0: can't add hid device: -71 [ 1574.745249][ T5895] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1574.758779][ T5895] usb 5-1: USB disconnect, device number 86 [ 1574.911587][T24278] smc: net device bond0 applied user defined pnetid SYZ0 [ 1575.677543][ T5849] non-paged memory [ 1575.682405][ T5849] list_del corruption, ffff8880317f0e00->next is LIST_POISON1 (dead000000000100) [ 1575.692179][ T5849] ------------[ cut here ]------------ [ 1575.697662][ T5849] kernel BUG at lib/list_debug.c:56! [ 1575.776926][ T5849] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1575.783362][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 1575.792807][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1575.802851][ T5849] Workqueue: hci4 hci_conn_timeout [ 1575.807965][ T5849] RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 [ 1575.814986][ T5849] Code: 48 c7 c7 c0 30 16 8c e8 cd 38 af fc 90 0f 0b 4c 89 e7 e8 82 78 13 fd 4c 89 e2 48 89 de 48 c7 c7 20 31 16 8c e8 b0 38 af fc 90 <0f> 0b 48 89 ef e8 65 78 13 fd 48 89 ea 48 89 de 48 c7 c7 80 31 16 [ 1575.834582][ T5849] RSP: 0018:ffffc90003727b78 EFLAGS: 00010282 [ 1575.840633][ T5849] RAX: 000000000000004e RBX: ffff8880317f0e00 RCX: ffffffff819a4e09 [ 1575.848593][ T5849] RDX: 0000000000000000 RSI: ffffffff819acca6 RDI: 0000000000000005 [ 1575.856551][ T5849] RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 [ 1575.864508][ T5849] R10: 0000000080000000 R11: fffffffffffe2bd0 R12: dead000000000100 [ 1575.872465][ T5849] R13: dffffc0000000000 R14: ffff88807a6f8658 R15: ffff8880317f0e00 [ 1575.880424][ T5849] FS: 0000000000000000(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 1575.889343][ T5849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1575.895914][ T5849] CR2: 0000200000293030 CR3: 0000000065c38000 CR4: 00000000003526f0 [ 1575.903873][ T5849] Call Trace: [ 1575.907137][ T5849] [ 1575.910060][ T5849] _hci_cmd_sync_cancel_entry.constprop.0+0x80/0x1d0 [ 1575.916736][ T5849] hci_cancel_connect_sync+0xfa/0x2b0 [ 1575.922104][ T5849] hci_abort_conn+0x15a/0x340 [ 1575.926777][ T5849] hci_conn_timeout+0x1a2/0x210 [ 1575.931623][ T5849] process_one_work+0x9cc/0x1b70 [ 1575.936557][ T5849] ? __pfx_process_one_work+0x10/0x10 [ 1575.941919][ T5849] ? assign_work+0x1a0/0x250 [ 1575.946498][ T5849] worker_thread+0x6c8/0xf10 [ 1575.951088][ T5849] ? __pfx_worker_thread+0x10/0x10 [ 1575.956187][ T5849] kthread+0x3c2/0x780 [ 1575.960247][ T5849] ? __pfx_kthread+0x10/0x10 [ 1575.964827][ T5849] ? rcu_is_watching+0x12/0xc0 [ 1575.969582][ T5849] ? __pfx_kthread+0x10/0x10 [ 1575.974159][ T5849] ret_from_fork+0x5d4/0x6f0 [ 1575.978736][ T5849] ? __pfx_kthread+0x10/0x10 [ 1575.983317][ T5849] ret_from_fork_asm+0x1a/0x30 [ 1575.988076][ T5849] [ 1575.991080][ T5849] Modules linked in: [ 1576.018169][ T5849] ---[ end trace 0000000000000000 ]--- [ 1576.048558][ T5849] RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 [ 1576.056779][ T5849] Code: 48 c7 c7 c0 30 16 8c e8 cd 38 af fc 90 0f 0b 4c 89 e7 e8 82 78 13 fd 4c 89 e2 48 89 de 48 c7 c7 20 31 16 8c e8 b0 38 af fc 90 <0f> 0b 48 89 ef e8 65 78 13 fd 48 89 ea 48 89 de 48 c7 c7 80 31 16 [ 1576.077310][ T5849] RSP: 0018:ffffc90003727b78 EFLAGS: 00010282 [ 1576.084094][ T5849] RAX: 000000000000004e RBX: ffff8880317f0e00 RCX: ffffffff819a4e09 [ 1576.092479][ T5849] RDX: 0000000000000000 RSI: ffffffff819acca6 RDI: 0000000000000005 [ 1576.107956][ T5849] RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 [ 1576.116614][ T5849] R10: 0000000080000000 R11: fffffffffffe2bd0 R12: dead000000000100 [ 1576.128549][ T5849] R13: dffffc0000000000 R14: ffff88807a6f8658 R15: ffff8880317f0e00 [ 1576.136878][ T5849] FS: 0000000000000000(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 1576.149659][ T5849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1576.156617][ T5849] CR2: 0000200000293030 CR3: 000000006963e000 CR4: 00000000003526f0 [ 1576.164958][ T5849] Kernel panic - not syncing: Fatal exception [ 1576.171190][ T5849] Kernel Offset: disabled [ 1576.175486][ T5849] Rebooting in 86400 seconds..