last executing test programs: 3.063053521s ago: executing program 0 (id=1658): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc54e, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB=' !\n\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.629009234s ago: executing program 1 (id=1665): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x62141) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) 2.592851573s ago: executing program 1 (id=1666): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000, 0x9}}, [@tmpl={0x84, 0x5, [{{@in=@empty, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x2, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xa}, 0x0, 0x4, 0x3, 0x6}]}]}, 0x13c}}, 0x0) 2.460812774s ago: executing program 1 (id=1668): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4a4}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) syz_emit_ethernet(0x52, &(0x7f0000000c40)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1c, 0x3a, 0x0, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x7ff, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x9}}}}}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x1, 0x404c484) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.427933065s ago: executing program 0 (id=1670): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000001"], 0x48) 2.236832657s ago: executing program 0 (id=1672): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/65, 0x41}, 0x5}], 0x1, 0x1832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2.196089607s ago: executing program 4 (id=1674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {}, @broadcast}, 0x0, @random=0x4, 0x30, @void, @val, @void, @void, @val={0x6, 0x2}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x1, 0xaf, 0x4}}, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2.144931917s ago: executing program 2 (id=1675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203010100000000050700000000001008"], 0x1c}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000104"], 0x20}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) 2.068701753s ago: executing program 4 (id=1677): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x40) close(r0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, r0, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0}, 0x94) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x20008050) 2.013024886s ago: executing program 2 (id=1678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x68}}, 0x0) 1.908687521s ago: executing program 2 (id=1680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)={0x50, 0x3, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3dd}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x316}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x80000) 1.893816789s ago: executing program 4 (id=1681): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) 1.877234182s ago: executing program 1 (id=1682): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ed\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.769013562s ago: executing program 2 (id=1683): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) write(r1, &(0x7f0000000100)='^', 0x1) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) write(r3, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0x200, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r5, 0x8949, &(0x7f0000000040)="d7e2d4a43a") ioctl$int_in(r4, 0x5452, &(0x7f0000001640)=0x400) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000740)=[{{&(0x7f0000000400)=@llc={0x1a, 0x236, 0x80, 0x0, 0x37, 0x96, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, 0x80, 0x0}}], 0x1, 0x0) syz_usbip_server_init(0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000000)='nicvf0\x00') timer_create(0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r7, 0x0, 0x0, 0x32, 0x0, 0x0) 1.751040103s ago: executing program 4 (id=1684): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0xc, 0x1, 0x8804}) 1.687138709s ago: executing program 4 (id=1685): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000000007fcb8d4"], 0x28}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) r2 = fsmount(r0, 0x0, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munlockall() r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x328, 0x3a8, 0x3a8, 0x328, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @local, [0xffffff00], [0xffffff00, 0xffffff00, 0xff000000], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0xfd, 0x2, 0x19}, 0x0, 0x228, 0x250, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0x8, 0x103, 0x33, 0x871004, 0x20000a, 0x80001, 0x7fffffff, 0x0, 0x0, 0xe0}}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@private1, @private1, [0x0, 0xffff00, 0x0, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xffffffff], 'dvmrp0\x00', 'pimreg\x00', {}, {0xff}, 0x67, 0xb7, 0x1}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x5, 0x400000, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfff7) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket(0x10, 0x80000000000802, 0x0) sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5300fe01b2a4a280930a60000b00a84302911000ed3900090035000800060000001900150004000000000000dc1338d54400009b84136ef75a0184de4411001600c43ab8220000060cb211d2f994", 0x55}], 0x1}, 0x0) fchdir(r2) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) lseek(r9, 0x103, 0x1) getdents(r9, 0x0, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x94, 0x0, 0x17, 0x80000}, {0x2, 0x23, 0x1, 0x6}]}) setrlimit(0x5, &(0x7f0000000240)={0x8, 0x6}) 1.581330658s ago: executing program 3 (id=1687): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = fsopen(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000002c0)='fscontext', &(0x7f0000000300)='./file0\x00', r3) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}, 0xf}, {{0x0, 0x0, &(0x7f0000001680)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001540)=""/102, 0x66}], 0x4, &(0x7f0000001700)=""/69, 0x45}, 0x1000}], 0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@typedef={0x4, 0x0, 0x0, 0x7}, @union={0xfffffffd, 0x0, 0x0, 0x5, 0x1}]}}, &(0x7f0000000340)=""/142, 0x32, 0x8e, 0x1}, 0x28) r4 = fanotify_init(0x200, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000080)={0x4, 0x3, 0x0, 0xffffffff}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) 1.343693479s ago: executing program 0 (id=1688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.225755821s ago: executing program 1 (id=1689): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000c6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x7, 0x0, 0x80, {0x2, 0xeeee8000}}, "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", "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"}) 960.991793ms ago: executing program 0 (id=1690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x24, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 960.607478ms ago: executing program 3 (id=1691): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000a00)=[{{&(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000f40)="a905000000007464000100000000000000e5c01104b61aa67bf2154694dfa033fe5312e4", 0x24}], 0x1}}], 0x1, 0xc044) 947.676909ms ago: executing program 1 (id=1692): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) r5 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) r6 = socket$inet(0x2, 0x3, 0x6) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x8000, &(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) sendto$inet(r6, &(0x7f0000000000)="9a9c94", 0x3, 0x20000800, &(0x7f0000001080)={0x2, 0x4e24, @multicast1}, 0x10) r7 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x118, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x200000, 0x0, 0x5}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0xffffffff}}}}, {{@ip={@multicast1, @empty, 0xff, 0xff000000, 'gre0\x00', 'macsec0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x40}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0xb8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x6, 0x7, 0xc, 0x0, 0x2], 0x2, 0x6}, {0x1, [0x0, 0x3, 0x0, 0x8, 0x1, 0x5], 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unshare(0x400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000006b010c00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x80) 840.613299ms ago: executing program 3 (id=1693): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x4, "fbd1a3d137b4bf10a3afd5e135501c510948e6da4d263fe65446cd5cb9ae1905"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r1, 0xffffffffffffffff}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)={0x20000000}) dup3(r1, r0, 0x0) 592.900971ms ago: executing program 4 (id=1694): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x0, 0x1619, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x17e, 0x400000000, 0xce6, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 527.728144ms ago: executing program 3 (id=1695): r0 = socket(0x28, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) 414.310874ms ago: executing program 3 (id=1696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000000d000000010700000000000000000000c3ec0000038000000000000000000000000000000000000001"]) 177.254311ms ago: executing program 2 (id=1697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x64, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xd}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xfffffffffffffda7, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) 84.985914ms ago: executing program 3 (id=1698): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x14, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2c09e8dbe10859892787030000000000000020a1c80d83f6d3819e01177d3d458dac000000000000000000000000000000000000fe5f00", "90f2091e2012406c7f000000dd3c00", [0x4, 0x40000000000000]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 3.677563ms ago: executing program 2 (id=1699): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @remote, 0x4}}, {{0xa, 0x220, 0x0, @local}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/216, 0xd8, 0x0, 0x0}, &(0x7f0000000280)=0x40) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x80, 0x20, 0x2f26, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x57, 0x4, 0x0, @empty, @local}}}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=1700): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000003140)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) kernel console output (not intermixed with test programs): 2.760103][ T9493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.931'. [ 332.881356][ T9495] kvm: user requested TSC rate below hardware speed [ 332.890941][ T9497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.924205][ T9497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.947087][ T9497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.166240][ T9497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.615283][ T9513] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 334.676567][ T8390] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 334.897862][ T8390] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 335.016343][ T8390] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 335.094146][ T8390] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 335.134280][ T8390] usb 3-1: config 220 has no interface number 2 [ 335.347959][ T8390] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 335.423168][ T8390] usb 3-1: config 220 interface 0 has no altsetting 0 [ 335.435293][ T8390] usb 3-1: config 220 interface 76 has no altsetting 0 [ 335.455780][ T8390] usb 3-1: config 220 interface 1 has no altsetting 0 [ 335.516607][ T8390] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 335.534719][ T8390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.554339][ T8390] usb 3-1: Product: syz [ 335.567132][ T8390] usb 3-1: Manufacturer: syz [ 335.647351][ T8390] usb 3-1: SerialNumber: syz [ 335.940177][ T5915] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 336.088602][ T9545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.168067][ T5915] usb 5-1: device descriptor read/64, error -71 [ 336.220681][ T9545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.416443][ T5915] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 336.546373][ T5915] usb 5-1: device descriptor read/64, error -71 [ 336.656863][ T5915] usb usb5-port1: attempt power cycle [ 336.976474][ T43] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 336.998447][ T5915] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 337.033679][ T5915] usb 5-1: device descriptor read/8, error -71 [ 337.177270][ T9564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.181924][ T43] usb 2-1: device descriptor read/64, error -71 [ 337.187135][ T9564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.211838][ T8390] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 337.219747][ T8390] uvcvideo 3-1:220.0: No valid video chain found. [ 337.249897][ T8390] usb 3-1: selecting invalid altsetting 0 [ 337.278980][ T8390] usb 3-1: selecting invalid altsetting 0 [ 337.284731][ T8390] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 337.308004][ T5915] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 337.318718][ T8390] usb 3-1: USB disconnect, device number 46 [ 337.349379][ T5915] usb 5-1: device descriptor read/8, error -71 [ 337.446665][ T43] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 337.461919][ T5915] usb usb5-port1: unable to enumerate USB device [ 337.596537][ T43] usb 2-1: device descriptor read/64, error -71 [ 337.706762][ T43] usb usb2-port1: attempt power cycle [ 338.046469][ T43] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 338.180920][ T43] usb 2-1: device descriptor read/8, error -71 [ 338.348993][ T9586] loop9: detected capacity change from 0 to 7 [ 338.359364][ T9586] Dev loop9: unable to read RDB block 7 [ 338.365045][ T9586] loop9: unable to read partition table [ 338.388761][ T9586] loop9: partition table beyond EOD, truncated [ 338.403764][ T9586] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 338.446401][ T43] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 338.507104][ T43] usb 2-1: device descriptor read/8, error -71 [ 338.649876][ T43] usb usb2-port1: unable to enumerate USB device [ 338.773753][ T9595] loop2: detected capacity change from 0 to 7 [ 338.782079][ T9595] Dev loop2: unable to read RDB block 7 [ 338.808067][ T9595] loop2: AHDI p1 p2 p3 [ 338.812475][ T9595] loop2: partition table partially beyond EOD, truncated [ 338.821944][ T9595] loop2: p1 start 1601398130 is beyond EOD, truncated [ 338.829794][ T9595] loop2: p2 start 1702059890 is beyond EOD, truncated [ 338.861447][ T9597] netlink: 348 bytes leftover after parsing attributes in process `syz.0.963'. [ 340.305092][ T9630] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000 [ 340.990200][ T9640] netlink: 348 bytes leftover after parsing attributes in process `syz.0.974'. [ 341.054989][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.073914][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.260862][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.316203][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.355074][ T9642] netlink: 32 bytes leftover after parsing attributes in process `syz.0.975'. [ 341.474073][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.484944][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.500266][ T9642] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 341.897071][ T5915] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 342.087350][ T5915] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 342.095380][ T5915] usb 3-1: config 0 has no interface number 0 [ 342.121413][ T5915] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 342.155828][ T5915] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 342.161218][ T9656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.196470][ T5915] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 342.198337][ T9656] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.235901][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.245178][ T9656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.270780][ T9660] loop6: detected capacity change from 0 to 7 [ 342.279863][ T9660] Dev loop6: unable to read RDB block 7 [ 342.282157][ T5915] usb 3-1: config 0 descriptor?? [ 342.285487][ T9660] loop6: unable to read partition table [ 342.304567][ T9660] loop6: partition table beyond EOD, truncated [ 342.311370][ T9650] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 342.333627][ T9660] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 342.362046][ T5915] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 342.546150][ T5916] usb 3-1: USB disconnect, device number 47 [ 342.552177][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 342.747730][ T9676] netlink: 348 bytes leftover after parsing attributes in process `syz.0.985'. [ 342.953805][ T9687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.954153][ T9687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.431634][ T9697] loop9: detected capacity change from 0 to 7 [ 343.473135][ T7958] buffer_io_error: 28 callbacks suppressed [ 343.473147][ T7958] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.498516][ T7958] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.707717][ T7958] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.780341][ T7958] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.797242][ T7958] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.805327][ T7958] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.813376][ T7958] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.866528][ T7958] ldm_validate_partition_table(): Disk read failed. [ 343.875777][ T7958] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.910478][ T7958] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.926545][ T7958] Buffer I/O error on dev loop9, logical block 0, async page read [ 344.008909][ T9701] pim6reg: entered allmulticast mode [ 344.018423][ T9701] qrtr: Invalid version 32 [ 344.046707][ T7958] Dev loop9: unable to read RDB block 0 [ 344.052745][ T7958] loop9: unable to read partition table [ 344.058728][ T7958] loop9: partition table beyond EOD, truncated [ 344.080143][ T9697] ldm_validate_partition_table(): Disk read failed. [ 344.099183][ T9697] Dev loop9: unable to read RDB block 0 [ 344.179139][ T9697] loop9: unable to read partition table [ 344.186528][ T9697] loop9: partition table beyond EOD, truncated [ 344.196359][ T9697] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 344.196359][ T9697] ) failed (rc=-5) [ 344.373973][ T9703] netlink: 'syz.1.992': attribute type 1 has an invalid length. [ 344.415724][ T9703] bond1: (slave veth3): Enslaving as an active interface with a down link [ 344.432984][ T9703] bond1 (unregistering): (slave veth3): Releasing active interface [ 344.450944][ T9703] bond1 (unregistering): Released all slaves [ 344.756229][ T9710] loop6: detected capacity change from 0 to 7 [ 344.805073][ T9698] pim6reg: left allmulticast mode [ 344.816424][ T8390] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 344.836142][ T7958] Dev loop6: unable to read RDB block 7 [ 344.850640][ T7958] loop6: unable to read partition table [ 344.918209][ T7958] loop6: partition table beyond EOD, truncated [ 344.951640][ T9712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.967187][ T9710] Dev loop6: unable to read RDB block 7 [ 344.976362][ T8390] usb 2-1: device descriptor read/64, error -71 [ 344.987111][ T9712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.995639][ T9710] loop6: unable to read partition table [ 345.002653][ T9710] loop6: partition table beyond EOD, truncated [ 345.038573][ T9710] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 345.110453][ T9712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.163625][ T9712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.252048][ T9712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.253850][ T8390] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 345.287921][ T9712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.496602][ T8390] usb 2-1: device descriptor read/64, error -71 [ 345.606774][ T8390] usb usb2-port1: attempt power cycle [ 345.736706][ T5915] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 345.823607][ T9734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.834043][ T9734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.898406][ T5915] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 345.907882][ T5915] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 345.918727][ T5915] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 345.928004][ T5915] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.944508][ T5915] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 345.953839][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 345.956423][ T8390] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 345.962245][ T5915] usb 5-1: Product: syz [ 345.973845][ T5915] usb 5-1: Manufacturer: syz [ 345.983953][ T5915] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 345.987081][ T8390] usb 2-1: device descriptor read/8, error -71 [ 346.186648][ T5915] usb 5-1: USB disconnect, device number 69 [ 346.246713][ T8390] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 346.303109][ T9741] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:2 [ 346.311063][ T8390] usb 2-1: device descriptor read/8, error -71 [ 346.426717][ T8390] usb usb2-port1: unable to enumerate USB device [ 347.269714][ T9756] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1007'. [ 347.633887][ T9759] loop6: detected capacity change from 0 to 7 [ 347.641183][ T9759] Dev loop6: unable to read RDB block 7 [ 347.646995][ T9759] loop6: unable to read partition table [ 347.653069][ T9759] loop6: partition table beyond EOD, truncated [ 347.662300][ T9759] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 348.597916][ T8390] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 348.617153][ T8391] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 348.780815][ T9784] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 348.803918][ T8390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 348.826864][ T8391] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 348.849498][ T8390] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 348.866756][ T8391] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.881545][ T8390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.896499][ T8391] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 348.905723][ T8390] usb 3-1: Product: syz [ 348.910875][ T8390] usb 3-1: Manufacturer: syz [ 348.916634][ T8391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.924726][ T8390] usb 3-1: SerialNumber: syz [ 348.945977][ T8390] usb 3-1: config 0 descriptor?? [ 348.998728][ T9791] loop6: detected capacity change from 0 to 7 [ 349.008510][ T7958] Dev loop6: unable to read RDB block 7 [ 349.014138][ T7958] loop6: unable to read partition table [ 349.026414][ T5916] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 349.032089][ T9793] loop2: detected capacity change from 0 to 7 [ 349.036246][ T7958] loop6: partition table beyond EOD, [ 349.045213][ T9793] Dev loop2: unable to read RDB block 7 [ 349.058115][ T7958] truncated [ 349.058966][ T9793] loop2: AHDI p2 [ 349.070156][ T9791] Dev loop6: unable to read RDB block 7 [ 349.075891][ T9793] loop2: partition table partially beyond EOD, truncated [ 349.076255][ T9791] loop6: unable to read partition table [ 349.089622][ T9791] loop6: partition table beyond EOD, truncated [ 349.095948][ T9791] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 349.173922][ T8391] usb 5-1: GET_CAPABILITIES returned 0 [ 349.198750][ T8391] usbtmc 5-1:16.0: can't read capabilities [ 349.219706][ T5916] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 349.244880][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.262362][ T5916] usb 2-1: Product: syz [ 349.267424][ T5916] usb 2-1: Manufacturer: syz [ 349.275393][ T5916] usb 2-1: SerialNumber: syz [ 349.307641][ T5916] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 349.365391][ T8390] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 349.383857][ T5888] usb 5-1: USB disconnect, device number 70 [ 349.475348][ T9802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.495556][ T9802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.614673][ T5916] usb 3-1: USB disconnect, device number 48 [ 349.714065][ T9802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.726987][ T9802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.132391][ T9816] netlink: 'syz.2.1029': attribute type 2 has an invalid length. [ 350.173152][ T9816] netlink: 'syz.2.1029': attribute type 4 has an invalid length. [ 350.194870][ T9816] netlink: 'syz.2.1029': attribute type 8 has an invalid length. [ 350.215914][ T9816] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1029'. [ 350.448576][ T9821] loop4: detected capacity change from 0 to 7 [ 350.466463][ T8390] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 350.477561][ T9821] Dev loop4: unable to read RDB block 7 [ 350.489782][ T9821] loop4: unable to read partition table [ 350.489974][ T8390] ath9k_htc: Failed to initialize the device [ 350.515100][ T9821] loop4: partition table beyond EOD, truncated [ 350.572386][ T8390] usb 2-1: ath9k_htc: USB layer deinitialized [ 350.578700][ T9821] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 350.632533][ T9827] loop6: detected capacity change from 0 to 7 [ 350.652160][ T7958] Dev loop6: unable to read RDB block 7 [ 350.667673][ T7958] loop6: AHDI p3 p4 [ 350.673329][ T7958] loop6: partition table partially beyond EOD, truncated [ 350.684968][ T7958] loop6: p3 start 1886353253 is beyond EOD, truncated [ 350.703123][ T9827] Dev loop6: unable to read RDB block 7 [ 350.723695][ T9827] loop6: AHDI p3 p4 [ 350.730439][ T9827] loop6: partition table partially beyond EOD, truncated [ 350.738613][ T9829] loop2: detected capacity change from 0 to 7 [ 350.749736][ T9827] loop6: p3 start 1886353253 is beyond EOD, truncated [ 350.758137][ T9829] Dev loop2: unable to read RDB block 7 [ 350.772203][ T9829] loop2: unable to read partition table [ 350.783654][ T9829] loop2: partition table beyond EOD, truncated [ 350.796512][ T9829] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 350.851459][ T7958] udevd[7958]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 350.896496][ T5915] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 350.946255][ T7958] udevd[7958]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 350.982190][ T9831] loop2: detected capacity change from 0 to 7 [ 351.002998][ T7958] Dev loop2: unable to read RDB block 7 [ 351.010008][ T7958] loop2: AHDI p2 [ 351.013703][ T7958] loop2: partition table partially beyond EOD, truncated [ 351.023531][ T9831] Dev loop2: unable to read RDB block 7 [ 351.032268][ T9831] loop2: AHDI p2 [ 351.035971][ T9831] loop2: partition table partially beyond EOD, truncated [ 351.095483][ T5915] usb 3-1: not running at top speed; connect to a high speed hub [ 351.107427][ T5915] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 351.337777][ T5915] usb 3-1: config 95 has no interface number 0 [ 351.376200][ T5915] usb 3-1: config 95 interface 1 has no altsetting 0 [ 351.387948][ T9836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.432864][ T5915] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 351.509333][ T9836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.519323][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.529606][ T5915] usb 3-1: Product: syz [ 351.537585][ T5915] usb 3-1: Manufacturer: syz [ 351.553444][ T5915] usb 3-1: SerialNumber: syz [ 351.688488][ T9836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.903794][ T43] usb 2-1: USB disconnect, device number 75 [ 352.067733][ T9836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.077030][ T9836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.396419][ T5915] usb 3-1: USB disconnect, device number 49 [ 352.734672][ T7958] udevd[7958]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.486956][ T43] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 353.650297][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 353.656805][ T43] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.668528][ T43] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.697506][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 353.715364][ T43] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 353.740575][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.779034][ T43] usb 5-1: config 0 descriptor?? [ 353.830719][ T9877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.877996][ T9877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.890013][ T30] audit: type=1326 audit(1760013665.010:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9881 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 353.961542][ T30] audit: type=1326 audit(1760013665.010:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9881 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 354.027105][ T30] audit: type=1326 audit(1760013665.040:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9881 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 354.108288][ T30] audit: type=1326 audit(1760013665.040:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9881 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 354.183971][ T30] audit: type=1326 audit(1760013665.040:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9881 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 354.225104][ T43] nzxt-smart2 0003:1E71:2009.0016: unknown main item tag 0x0 [ 354.245656][ T43] nzxt-smart2 0003:1E71:2009.0016: unknown main item tag 0x0 [ 354.259063][ T30] audit: type=1326 audit(1760013665.040:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9881 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 354.262335][ T43] nzxt-smart2 0003:1E71:2009.0016: unknown main item tag 0x0 [ 354.281310][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.292887][ T9894] loop2: detected capacity change from 0 to 7 [ 354.317974][ T9894] Dev loop2: unable to read RDB block 7 [ 354.332255][ T30] audit: type=1326 audit(1760013665.040:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9881 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 354.338132][ T43] nzxt-smart2 0003:1E71:2009.0016: unknown main item tag 0x0 [ 354.366810][ T9894] loop2: AHDI p2 [ 354.370503][ T9894] loop2: partition table partially beyond EOD, truncated [ 354.383301][ T43] nzxt-smart2 0003:1E71:2009.0016: unknown main item tag 0x0 [ 354.408014][ T30] audit: type=1326 audit(1760013665.040:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9881 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 354.432870][ T30] audit: type=1326 audit(1760013665.040:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9881 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 354.433198][ T43] nzxt-smart2 0003:1E71:2009.0016: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 354.455926][ T30] audit: type=1326 audit(1760013665.040:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9881 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 354.589730][ T9903] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1048'. [ 354.616452][ T8391] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 354.651271][ T43] usb 5-1: USB disconnect, device number 71 [ 354.729844][ T9901] fido_id[9901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 354.791171][ T8391] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 354.800770][ T8391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.809527][ T8391] usb 2-1: Product: syz [ 354.822765][ T8391] usb 2-1: Manufacturer: syz [ 354.844400][ T8391] usb 2-1: SerialNumber: syz [ 354.881667][ T8391] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 354.911401][ T8390] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 354.982229][ T9918] loop6: detected capacity change from 0 to 7 [ 355.006688][ T9918] Dev loop6: unable to read RDB block 7 [ 355.017394][ T9918] loop6: unable to read partition table [ 355.023403][ T9918] loop6: partition table beyond EOD, truncated [ 355.054796][ T9918] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 355.201752][ T9924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1052'. [ 355.222993][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1052'. [ 355.240469][ T9924] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1052'. [ 355.250800][ T9924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1052'. [ 355.450603][ T9935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.477114][ T9935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.777145][ T8391] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 355.987177][ T8390] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 356.003207][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'. [ 356.012253][ T9947] netlink: 'syz.2.1055': attribute type 30 has an invalid length. [ 356.043473][ T9947] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.1055'. [ 356.056158][ T9947] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 356.107300][ T1151] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.116959][ T1151] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.128486][ T1151] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.141495][ T8390] ath9k_htc: Failed to initialize the device [ 356.168639][ T1151] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.178958][ T8390] usb 2-1: ath9k_htc: USB layer deinitialized [ 356.559116][ T8391] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 356.572603][ T8391] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 356.620003][ T8391] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 356.870968][ T8391] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 356.955899][ T8391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.137542][ T8391] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 357.266755][ T8391] usb 5-1: invalid MIDI out EP 0 [ 357.461880][ T5915] usb 2-1: USB disconnect, device number 76 [ 357.636873][ T9968] loop2: detected capacity change from 0 to 7 [ 357.654629][ T8391] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 357.668451][ T9968] Dev loop2: unable to read RDB block 7 [ 357.674233][ T9968] loop2: AHDI p2 [ 357.679857][ T9968] loop2: partition table partially beyond EOD, truncated [ 357.846738][ T8391] usb 5-1: USB disconnect, device number 72 [ 358.277273][ T9980] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1060'. [ 358.431754][ T9976] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1059'. [ 358.449121][ T8391] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 358.696344][ T8391] usb 5-1: Using ep0 maxpacket: 32 [ 358.710562][ T8391] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 358.731347][ T8391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.745485][ T9994] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 358.757620][ T8391] usb 5-1: Product: syz [ 358.762620][ T8391] usb 5-1: Manufacturer: syz [ 358.773655][ T8391] usb 5-1: SerialNumber: syz [ 359.038987][ T8391] usb 5-1: can't set config #1, error -71 [ 359.084931][ T8391] usb 5-1: USB disconnect, device number 73 [ 359.386979][T10002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.397489][T10002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.606355][ T8391] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 359.756592][ T8391] usb 5-1: Using ep0 maxpacket: 32 [ 359.766116][ T8391] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 359.794841][ T8391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.942162][ T8391] usb 5-1: config 0 descriptor?? [ 360.021995][ T8391] as10x_usb: device has been detected [ 360.051146][ T8391] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 360.296592][ T5888] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 360.318759][T10016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.327794][T10016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.358102][ T8391] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 360.468030][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 360.487504][ T8391] as10x_usb: error during firmware upload part1 [ 360.513923][ T8391] Registered device nBox DVB-T Dongle [ 360.530416][ T5888] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.555245][ T5888] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.659000][ T5888] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 360.682283][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.908287][ T5888] usb 3-1: usb_control_msg returned -32 [ 360.914015][ T5888] usbtmc 3-1:16.0: can't read capabilities [ 361.653275][T10038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.676828][T10038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.709279][T10038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.779039][T10038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.791824][T10042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1068'. [ 362.473412][T10050] netlink: 'syz.0.1070': attribute type 30 has an invalid length. [ 362.488916][T10050] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1070'. [ 362.489394][T10051] netlink: 'syz.0.1070': attribute type 30 has an invalid length. [ 362.686426][T10051] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1070'. [ 362.878334][T10058] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1072'. [ 362.949945][ T43] usb 3-1: USB disconnect, device number 50 [ 362.966454][ T8391] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 363.044466][T10062] batadv_slave_1: entered promiscuous mode [ 363.051208][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'. [ 363.060454][T10062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.156801][ T8391] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.167133][ T8391] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 363.185329][ T8391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 363.202660][ T8391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 363.222066][ T8391] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 363.252430][T10062] batadv_slave_1 (unregistering): left promiscuous mode [ 363.262440][ T8391] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 363.271892][ T8391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 363.280335][T10062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.287998][ T8391] usb 2-1: Product: syz [ 363.292812][ T8391] usb 2-1: Manufacturer: syz [ 363.452546][ T43] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 363.474311][ T8391] usb 2-1: SerialNumber: syz [ 363.508422][ T5888] usb 5-1: USB disconnect, device number 74 [ 363.532771][ T8391] usb 2-1: config 0 descriptor?? [ 363.591295][ T5888] Unregistered device nBox DVB-T Dongle [ 363.606979][ T5888] as10x_usb: device has been disconnected [ 363.625634][ T43] usb 3-1: No LPM exit latency info found, disabling LPM. [ 363.637317][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.653726][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.789270][ T8391] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 363.796075][ T8391] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 363.990339][ T8391] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 364.013732][ T8391] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 364.038725][ T8391] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 364.200479][ T8391] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 364.672359][ T8391] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 364.683611][ T8391] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 364.724478][ T8391] usb 2-1: USB disconnect, device number 77 [ 365.336817][ T5916] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 365.488176][ T5916] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.506458][ T5916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 365.527849][ T5916] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 365.545220][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 365.556075][ T5916] usb 5-1: SerialNumber: syz [ 365.572495][ T5916] usb 5-1: 0:2 : does not exist [ 365.580462][ T5916] usb 5-1: unit 3 not found! [ 365.774877][T10088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.787750][T10088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.807426][ T5916] usb 5-1: USB disconnect, device number 75 [ 366.012797][T10096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.023111][T10096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.075607][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.085046][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.121346][ T43] usb 3-1: can't set config #1, error -71 [ 366.140286][ T43] usb 3-1: USB disconnect, device number 51 [ 366.806425][ T5916] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 366.956625][ T8390] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 366.968334][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 366.981534][ T5916] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 366.990274][ T5916] usb 5-1: config 0 has no interface number 0 [ 366.996818][ T5916] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 367.008125][ T5916] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 367.029148][ T5916] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 367.040904][ T5916] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 367.054801][ T5916] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 367.064263][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.079692][ T5916] usb 5-1: config 0 descriptor?? [ 367.123491][ T5916] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 367.134007][ T8390] usb 3-1: Using ep0 maxpacket: 16 [ 367.142057][ T8390] usb 3-1: unable to get BOS descriptor or descriptor too short [ 367.179345][ T8390] usb 3-1: config 3 has an invalid interface number: 106 but max is 0 [ 367.187988][ T8390] usb 3-1: config 3 has no interface number 0 [ 367.194119][ T8390] usb 3-1: config 3 interface 106 has no altsetting 0 [ 367.205610][ T8390] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 367.216069][ T8390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.224627][ T8390] usb 3-1: Product: syz [ 367.229600][ T8390] usb 3-1: Manufacturer: syz [ 367.234312][ T8390] usb 3-1: SerialNumber: syz [ 367.465854][T10115] nfs: Unknown parameter '' [ 367.493560][ T8390] kobil_sct 3-1:3.106: KOBIL USB smart card terminal converter detected [ 367.525762][ T8390] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 367.624309][ T8390] usb 3-1: USB disconnect, device number 52 [ 367.730305][ T8390] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 367.780043][ T8390] kobil_sct 3-1:3.106: device disconnected [ 368.059136][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 368.065576][ T5916] usb 5-1: USB disconnect, device number 76 [ 368.074009][ T5916] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 368.388978][T10125] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 368.608900][T10125] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 368.615417][T10125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 368.806479][ T5916] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 368.812564][T10125] vhci_hcd vhci_hcd.0: Device attached [ 368.862326][T10134] vcan0: entered promiscuous mode [ 368.897546][T10134] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 369.046345][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 369.102783][ T5916] usb 3-1: config 0 has no interfaces? [ 369.103082][ T43] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 369.129287][ T5916] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 369.166363][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.187490][ T5916] usb 3-1: config 0 descriptor?? [ 369.397881][T10152] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1095'. [ 369.579283][T10127] usb 37-1: recv xbuf, 0 [ 369.650096][ T7359] vhci_hcd: stop threads [ 369.692610][ T7359] vhci_hcd: release socket [ 369.806844][ T43] usb 37-1: device descriptor read/64, error -71 [ 369.848343][ T7359] vhci_hcd: disconnect device [ 369.998145][ T43] vhci_hcd: vhci_device speed not set [ 371.913542][T10178] loop6: detected capacity change from 0 to 7 [ 371.924409][T10178] Dev loop6: unable to read RDB block 7 [ 371.960677][T10178] loop6: AHDI p3 p4 [ 371.980905][T10178] loop6: partition table partially beyond EOD, truncated [ 372.274809][T10178] loop6: p3 start 1886353253 is beyond EOD, truncated [ 372.346492][ T5888] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 372.429736][ T7958] udevd[7958]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 372.526380][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 372.595770][ T5888] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 372.624210][ T5888] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 372.634041][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 372.650303][ T5888] usb 5-1: Product: syz [ 372.661722][ T5888] usb 5-1: Manufacturer: syz [ 372.672241][ T5888] usb 5-1: SerialNumber: syz [ 372.722823][ T5888] usb 5-1: config 0 descriptor?? [ 372.881658][T10195] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.912682][T10195] syzkaller0: entered promiscuous mode [ 373.003709][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1104'. [ 374.025772][T10202] IPVS: set_ctl: invalid protocol: 60 172.30.0.4:20000 [ 374.318329][T10125] syz.2.1092: vmalloc error: size 3567616, failed to allocated page array size 6968, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 374.365944][T10209] loop4: detected capacity change from 0 to 7 [ 374.398577][ T7958] Dev loop4: unable to read RDB block 7 [ 374.400258][T10125] CPU: 0 UID: 0 PID: 10125 Comm: syz.2.1092 Not tainted syzkaller #0 PREEMPT(full) [ 374.400283][T10125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 374.400295][T10125] Call Trace: [ 374.400302][T10125] [ 374.400311][T10125] dump_stack_lvl+0x189/0x250 [ 374.400341][T10125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.400362][T10125] ? __pfx__printk+0x10/0x10 [ 374.400382][T10125] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 374.400409][T10125] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 374.400437][T10125] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 374.400466][T10125] warn_alloc+0x214/0x310 [ 374.400501][T10125] ? __pfx_warn_alloc+0x10/0x10 [ 374.400537][T10125] ? __get_vm_area_node+0x28f/0x300 [ 374.400564][T10125] ? ip_set_sockfn_get+0x13a/0xc30 [ 374.400595][T10125] __vmalloc_node_range_noprof+0x690/0x12d0 [ 374.400624][T10125] ? alloc_vmap_area+0xda0/0x14c0 [ 374.400671][T10125] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 374.400698][T10125] ? ip_set_sockfn_get+0x13a/0xc30 [ 374.400726][T10125] ? __get_vm_area_node+0x28f/0x300 [ 374.400752][T10125] ? ip_set_sockfn_get+0x13a/0xc30 [ 374.400780][T10125] __vmalloc_node_range_noprof+0x578/0x12d0 [ 374.400808][T10125] ? ip_set_sockfn_get+0x13a/0xc30 [ 374.400860][T10125] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 374.400894][T10125] ? ip_set_sockfn_get+0x13a/0xc30 [ 374.400922][T10125] vmalloc_noprof+0xb2/0xf0 [ 374.400947][T10125] ? ip_set_sockfn_get+0x13a/0xc30 [ 374.400976][T10125] ip_set_sockfn_get+0x13a/0xc30 [ 374.401010][T10125] nf_getsockopt+0x26e/0x290 [ 374.401041][T10125] ip_getsockopt+0x1c4/0x220 [ 374.401067][T10125] ? __pfx_ip_getsockopt+0x10/0x10 [ 374.401096][T10125] ? sock_common_getsockopt+0x2d/0xb0 [ 374.401124][T10125] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 374.401155][T10125] do_sock_getsockopt+0x372/0x450 [ 374.401180][T10125] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 374.401201][T10125] ? do_syscall_64+0xa0/0xfa0 [ 374.401223][T10125] ? __fget_files+0x2a/0x420 [ 374.401240][T10125] ? __fget_files+0x3a0/0x420 [ 374.401255][T10125] ? __fget_files+0x2a/0x420 [ 374.401279][T10125] __x64_sys_getsockopt+0x1a5/0x250 [ 374.401300][T10125] ? do_syscall_64+0xa0/0xfa0 [ 374.401324][T10125] ? do_syscall_64+0xa0/0xfa0 [ 374.401350][T10125] do_syscall_64+0xfa/0xfa0 [ 374.401371][T10125] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.401394][T10125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.401413][T10125] ? clear_bhb_loop+0x60/0xb0 [ 374.401435][T10125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.401454][T10125] RIP: 0033:0x7fe44338eec9 [ 374.401471][T10125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.401488][T10125] RSP: 002b:00007fe444220038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 374.401508][T10125] RAX: ffffffffffffffda RBX: 00007fe4435e5fa0 RCX: 00007fe44338eec9 [ 374.401523][T10125] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 000000000000000a [ 374.401535][T10125] RBP: 00007fe443411f91 R08: 0000200000000040 R09: 0000000000000000 [ 374.401547][T10125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.401559][T10125] R13: 00007fe4435e6038 R14: 00007fe4435e5fa0 R15: 00007fe44370fa28 [ 374.401591][T10125] [ 374.401607][T10125] Mem-Info: [ 374.404352][ T7958] loop4: unable to read partition table [ 374.753071][ T7958] loop4: partition table beyond EOD, truncated [ 374.763579][T10125] active_anon:23753 inactive_anon:0 isolated_anon:0 [ 374.763579][T10125] active_file:20815 inactive_file:40073 isolated_file:0 [ 374.763579][T10125] unevictable:768 dirty:152 writeback:0 [ 374.763579][T10125] slab_reclaimable:10953 slab_unreclaimable:98058 [ 374.763579][T10125] mapped:32612 shmem:17178 pagetables:1667 [ 374.763579][T10125] sec_pagetables:0 bounce:0 [ 374.763579][T10125] kernel_misc_reclaimable:0 [ 374.763579][T10125] free:1219071 free_pcp:20962 free_cma:0 [ 374.809184][T10209] Dev loop4: unable to read RDB block 7 [ 374.809231][T10209] loop4: unable to read partition table [ 374.809417][T10209] loop4: partition table beyond EOD, [ 374.815959][T10125] Node 0 active_anon:95020kB inactive_anon:0kB active_file:83260kB inactive_file:160092kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130412kB dirty:616kB writeback:0kB shmem:67180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13116kB pagetables:6608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 374.876933][T10125] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 374.936480][T10209] truncated [ 374.945389][T10209] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 374.966701][ T43] usb 5-1: USB disconnect, device number 77 [ 375.028565][T10125] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 375.196635][T10125] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 375.205760][T10125] Node 0 DMA32 free:970628kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:97536kB inactive_anon:0kB active_file:83260kB inactive_file:160092kB unevictable:1536kB writepending:684kB zspages:0kB present:3129332kB managed:2561664kB mlocked:0kB bounce:0kB free_pcp:57608kB local_pcp:17980kB free_cma:0kB [ 375.316827][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'. [ 375.335903][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1114'. [ 375.755983][T10125] lowmem_reserve[]: 0 0 1 1 1 [ 375.761105][T10125] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 375.790679][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.844180][T10125] lowmem_reserve[]: 0 0 0 0 0 [ 375.857070][T10125] Node 1 Normal free:3890552kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24004kB local_pcp:16640kB free_cma:0kB [ 375.867752][T10221] loop2: detected capacity change from 0 to 7 [ 375.889419][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.927356][T10125] lowmem_reserve[]: 0 0 0 0 0 [ 375.932262][T10125] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 375.945744][T10125] Node 0 DMA32: 999*4kB (UME) 685*8kB (ME) 409*16kB (ME) 254*32kB (ME) 76*64kB (UME) 20*128kB (UME) 9*256kB (M) 9*512kB (ME) 10*1024kB (ME) 2*2048kB (UE) 224*4096kB (M) = 970324kB [ 376.018343][T10125] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 376.037751][T10125] Node 1 Normal: 206*4kB (U) 46*8kB (UM) 47*16kB (UME) 99*32kB (UME) 34*64kB (UME) 6*128kB (UME) 2*256kB (M) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3890552kB [ 376.056865][T10125] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.071770][T10125] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.086428][T10125] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.098358][T10125] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.116197][T10125] 78533 total pagecache pages [ 376.121887][T10125] 0 pages in swap cache [ 376.128857][ T7958] Dev loop2: unable to read RDB block 7 [ 376.134533][ T7958] loop2: AHDI p1 p2 p3 [ 376.138787][ T7958] loop2: partition table partially beyond EOD, truncated [ 376.147202][ T7958] loop2: p1 start 1601398130 is beyond EOD, truncated [ 376.156112][T10125] Free swap = 124996kB [ 376.162716][ T7958] loop2: p2 start 1702059890 is beyond EOD, truncated [ 376.170042][T10125] Total swap = 124996kB [ 376.206856][T10125] 2097051 pages RAM [ 376.216746][T10221] Dev loop2: unable to read RDB block 7 [ 376.230752][T10125] 0 pages HighMem/MovableOnly [ 376.248212][T10125] 424545 pages reserved [ 376.248898][T10221] loop2: AHDI p1 p2 p3 [ 376.263533][T10125] 0 pages cma reserved [ 376.306597][T10221] loop2: partition table partially beyond EOD, truncated [ 376.356865][T10221] loop2: p1 start 1601398130 is beyond EOD, truncated [ 376.403085][T10221] loop2: p2 start 1702059890 is beyond EOD, truncated [ 377.427223][T10251] loop4: detected capacity change from 0 to 7 [ 377.444041][T10252] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1122'. [ 377.481620][T10251] Dev loop4: unable to read RDB block 7 [ 377.525468][T10251] loop4: unable to read partition table [ 377.550819][T10251] loop4: partition table beyond EOD, truncated [ 377.576544][T10251] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 377.794504][T10256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.848271][T10256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.329260][ T8391] usb 3-1: USB disconnect, device number 53 [ 378.436410][ T5888] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 378.551848][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.558212][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.589127][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 378.612199][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.634252][ T5888] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 378.656953][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.683486][ T5888] usb 2-1: config 0 descriptor?? [ 378.723188][T10266] loop2: detected capacity change from 0 to 7 [ 378.734301][T10266] Dev loop2: unable to read RDB block 7 [ 378.752431][T10266] loop2: AHDI p1 p2 p3 [ 378.764526][T10266] loop2: partition table partially beyond EOD, truncated [ 378.801338][T10266] loop2: p1 start 1601398130 is beyond EOD, truncated [ 378.812530][T10268] loop6: detected capacity change from 0 to 7 [ 378.826022][T10266] loop2: p2 start 1702059890 is beyond EOD, truncated [ 378.841653][ T7238] Dev loop6: unable to read RDB block 7 [ 378.847368][ T8391] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 378.857444][ T7238] loop6: AHDI p3 p4 [ 378.880065][ T7238] loop6: partition table partially beyond EOD, truncated [ 378.911573][ T7238] loop6: p3 start 1886353253 is beyond EOD, truncated [ 378.975005][T10268] Dev loop6: unable to read RDB block 7 [ 378.997094][ T8391] usb 3-1: device descriptor read/64, error -71 [ 379.003567][T10268] loop6: AHDI p3 p4 [ 379.037828][T10268] loop6: partition table partially beyond EOD, truncated [ 379.069946][T10268] loop6: p3 start 1886353253 is beyond EOD, truncated [ 379.132045][ T5888] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 379.159360][ T5888] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 379.182352][ T5888] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 379.222444][ T5888] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 379.249450][ T7958] udevd[7958]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 379.272364][ T5888] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 379.286926][ T8391] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 379.301047][ T5888] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 379.429669][ T8391] usb 3-1: device descriptor read/64, error -71 [ 379.467338][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.489971][ T7958] udevd[7958]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 379.546721][ T8391] usb usb3-port1: attempt power cycle [ 379.559476][ T5888] usb 2-1: USB disconnect, device number 78 [ 379.588792][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.906469][ T8391] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 379.906943][ T43] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 379.948002][ T8391] usb 3-1: device descriptor read/8, error -71 [ 380.076535][ T43] usb 5-1: device descriptor read/64, error -71 [ 380.216388][ T8391] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 380.249145][ T8391] usb 3-1: device descriptor read/8, error -71 [ 380.313881][T10284] loop4: detected capacity change from 0 to 7 [ 380.332532][ T7958] Dev loop4: unable to read RDB block 7 [ 380.347071][ T7958] loop4: unable to read partition table [ 380.356864][ T8391] usb usb3-port1: unable to enumerate USB device [ 380.360774][ T7958] loop4: partition table beyond EOD, truncated [ 380.383843][T10284] Dev loop4: unable to read RDB block 7 [ 380.405951][T10284] loop4: unable to read partition table [ 380.418463][ T43] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 380.443943][T10284] loop4: partition table beyond EOD, truncated [ 380.461306][T10284] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 380.597171][ T43] usb 5-1: device descriptor read/64, error -71 [ 380.741203][ T43] usb usb5-port1: attempt power cycle [ 380.816382][ T8391] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 381.086635][ T43] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 381.100785][ T8391] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.109903][ T43] usb 5-1: device descriptor read/8, error -71 [ 381.119617][ T8391] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=67.3e [ 381.128932][ T8391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.139269][ T8391] usb 2-1: Product: syz [ 381.606456][ T43] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 381.632068][ T8391] usb 2-1: Manufacturer: syz [ 381.642454][ T8391] usb 2-1: SerialNumber: syz [ 381.646458][ T43] usb 5-1: device descriptor read/8, error -71 [ 381.668198][ T8391] usb 2-1: config 0 descriptor?? [ 381.676971][ T8391] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 381.872779][ T43] usb usb5-port1: unable to enumerate USB device [ 381.883896][T10286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.893074][T10286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.917124][ T5916] usb 2-1: USB disconnect, device number 79 [ 382.088503][T10302] loop2: detected capacity change from 0 to 7 [ 382.096532][T10302] Dev loop2: unable to read RDB block 7 [ 382.102347][T10302] loop2: unable to read partition table [ 382.116739][T10302] loop2: partition table beyond EOD, truncated [ 382.135367][T10302] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 382.260676][T10309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.270746][T10309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.401242][T10312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.410274][T10312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.428986][T10312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.441401][T10312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.635884][T10316] usb 1-1: USB disconnect, device number 63 [ 382.961087][T10323] syzkaller0: entered promiscuous mode [ 382.967267][T10323] syzkaller0: entered allmulticast mode [ 383.225087][T10330] SET target dimension over the limit! [ 383.235354][T10330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1151'. [ 384.147575][T10344] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1156'. [ 384.485982][T10345] kvm: user requested TSC rate below hardware speed [ 384.726750][ T5915] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 384.893683][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 384.902500][ T5915] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 384.912873][ T5915] usb 5-1: config 0 has no interface number 0 [ 384.960996][ T5915] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 385.011548][ T5915] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 385.130386][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.183332][ T5915] usb 5-1: config 0 descriptor?? [ 385.249086][ T5915] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 385.504495][ T5915] usb 5-1: USB disconnect, device number 82 [ 385.792106][T10357] netlink: 'syz.0.1159': attribute type 2 has an invalid length. [ 385.832908][T10357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.843729][T10357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.082923][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 386.082941][ T30] audit: type=1326 audit(1760013697.210:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2ef8eec9 code=0x7ffc0000 [ 386.116064][ T30] audit: type=1326 audit(1760013697.210:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2ef8eec9 code=0x7ffc0000 [ 386.138531][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.145144][ T30] audit: type=1326 audit(1760013697.220:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa2ef8eec9 code=0x7ffc0000 [ 386.167806][ T5888] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 386.176647][ T30] audit: type=1326 audit(1760013697.220:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2ef8eec9 code=0x7ffc0000 [ 386.199922][ T30] audit: type=1326 audit(1760013697.220:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2ef8eec9 code=0x7ffc0000 [ 386.222334][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.301826][T10372] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1162'. [ 386.339147][ T30] audit: type=1326 audit(1760013697.240:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7faa2ef8eec9 code=0x7ffc0000 [ 386.369444][ T30] audit: type=1326 audit(1760013697.240:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2ef8eec9 code=0x7ffc0000 [ 386.403775][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 386.416738][ T5888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 386.446672][ T5888] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 386.514452][ T5915] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 386.613489][ T5888] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 386.624751][ T30] audit: type=1326 audit(1760013697.240:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2ef8eec9 code=0x7ffc0000 [ 386.666344][ T5888] usb 3-1: string descriptor 0 read error: -71 [ 386.672679][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 386.696915][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.705172][ T30] audit: type=1326 audit(1760013697.240:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7faa2ef8eec9 code=0x7ffc0000 [ 386.730727][ T5888] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 386.752366][ T5888] usb 3-1: no configuration chosen from 1 choice [ 386.763976][ T30] audit: type=1326 audit(1760013697.240:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2ef8eec9 code=0x7ffc0000 [ 386.786532][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.812234][ T5888] usb 3-1: USB disconnect, device number 58 [ 386.822368][ T5915] usb 5-1: unable to get BOS descriptor or descriptor too short [ 386.874107][ T5915] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 386.951044][ T5915] usb 5-1: config 1 has an invalid descriptor of length 6, skipping remainder of the config [ 387.056485][ T5916] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 387.088113][ T5915] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 387.113315][ T5915] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 387.123973][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.139019][ T5915] usb 5-1: Product: syz [ 387.146152][ T5915] usb 5-1: Manufacturer: syz [ 387.155387][ T5915] usb 5-1: SerialNumber: syz [ 387.244084][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 387.252808][ T5916] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 387.279216][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1165'. [ 387.290230][ T5916] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 387.300582][T10376] netlink: 'syz.2.1165': attribute type 12 has an invalid length. [ 387.332574][ T5916] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 387.368191][ T5916] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 387.442518][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.450775][ T5916] usb 2-1: Product: syz [ 387.466365][ T5916] usb 2-1: Manufacturer: syz [ 387.478400][ T5916] usb 2-1: SerialNumber: syz [ 387.946521][ T5916] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 388.766045][T10393] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1168'. [ 389.853526][ T5915] usb 5-1: 0:2 : does not exist [ 389.888172][ T5916] usb 2-1: USB disconnect, device number 80 [ 389.916835][ T5915] usb 5-1: USB disconnect, device number 83 [ 390.064106][ T7958] udevd[7958]: setting owner of /dev/bus/usb/005/083 to uid=0, gid=0 failed: No such file or directory [ 390.226854][T10400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.233812][ T7958] udevd[7958]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 390.235660][T10400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.439214][T10402] loop9: detected capacity change from 0 to 7 [ 390.445950][T10402] Dev loop9: unable to read RDB block 7 [ 390.452518][T10402] loop9: unable to read partition table [ 390.484766][T10402] loop9: partition table beyond EOD, truncated [ 390.506968][ T5915] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 390.536377][T10402] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 390.667963][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.714943][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.815875][ T5915] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 390.854230][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.907776][ T5915] usb 5-1: config 0 descriptor?? [ 390.977488][T10419] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1174'. [ 391.006768][T10421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.046424][T10421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.147843][ T5915] usbhid 5-1:0.0: can't add hid device: -71 [ 391.167133][ T5915] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 391.201041][ T5915] usb 5-1: USB disconnect, device number 84 [ 392.272951][T10448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1183'. [ 392.436734][T10453] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1184'. [ 392.825889][T10464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.848356][T10464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.874882][T10494] geneve2: entered promiscuous mode [ 394.880322][T10494] geneve2: entered allmulticast mode [ 395.087148][ T10] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 395.378364][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.393766][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 395.405091][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 395.415699][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 395.432975][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 395.445579][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 395.453822][ T10] usb 2-1: Manufacturer: syz [ 395.509573][ T10] usb 2-1: config 0 descriptor?? [ 395.869706][T10508] geneve4: entered promiscuous mode [ 395.875060][T10508] geneve4: entered allmulticast mode [ 396.096471][ T10] rc_core: IR keymap rc-hauppauge not found [ 396.110377][ T10] Registered IR keymap rc-empty [ 396.115798][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 396.164687][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 396.207081][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 396.234709][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29 [ 396.274598][T10516] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1197'. [ 396.369025][T10519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.380881][T10519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.395851][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 396.422581][T10516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.431280][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 396.448288][T10516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.457193][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 396.479882][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 396.517024][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 396.547038][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 396.614281][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 396.625413][T10525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.661163][T10525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.680528][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 396.717460][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 396.747008][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 396.822677][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 396.881860][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 396.984804][ T10] usb 2-1: USB disconnect, device number 81 [ 397.408871][T10538] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1203'. [ 397.729949][T10547] loop4: detected capacity change from 0 to 7 [ 397.762680][T10547] Dev loop4: unable to read RDB block 7 [ 397.775728][T10547] loop4: unable to read partition table [ 397.793524][T10547] loop4: partition table beyond EOD, truncated [ 397.883241][T10547] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 397.943464][ T5197] Dev loop4: unable to read RDB block 7 [ 397.950017][ T5197] loop4: unable to read partition table [ 397.970175][T10550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.997310][T10550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.037940][ T5197] loop4: partition table beyond EOD, truncated [ 398.176416][ T5915] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 398.420750][ T5915] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 398.429999][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.451128][ T5915] usb 5-1: Product: syz [ 398.474528][ T5915] usb 5-1: Manufacturer: syz [ 398.480957][ T5915] usb 5-1: SerialNumber: syz [ 398.671170][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'. [ 400.057644][T10574] loop9: detected capacity change from 0 to 7 [ 400.068150][T10574] loop9: [POWERTEC] p1 [ 400.073071][T10574] loop9: p1 start 1986342512 is beyond EOD, truncated [ 400.310197][T10576] loop2: detected capacity change from 0 to 7 [ 400.338364][T10576] Dev loop2: unable to read RDB block 7 [ 400.355032][T10576] loop2: AHDI p1 p2 p3 [ 400.359264][T10578] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1215'. [ 400.376591][T10576] loop2: partition table partially beyond EOD, truncated [ 400.402858][T10576] loop2: p1 start 1601398130 is beyond EOD, truncated [ 400.476409][T10576] loop2: p2 start 1702059890 is beyond EOD, truncated [ 400.535453][ T5915] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 400.796392][ T43] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 400.886406][ T5888] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 400.946751][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 400.954758][ T43] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 400.963409][ T43] usb 2-1: config 0 has no interface number 0 [ 400.972092][ T43] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 400.981321][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.989418][ T43] usb 2-1: Product: syz [ 400.993619][ T43] usb 2-1: Manufacturer: syz [ 400.998329][ T43] usb 2-1: SerialNumber: syz [ 401.005994][ T43] usb 2-1: config 0 descriptor?? [ 401.013232][ T43] smsc95xx v2.0.0 [ 401.026604][ T5888] usb 3-1: device descriptor read/64, error -71 [ 401.170121][T10589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.180687][T10589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.268258][ T5888] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 401.406435][ T5888] usb 3-1: device descriptor read/64, error -71 [ 401.416202][ T43] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 401.440606][ T43] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 401.452256][ T43] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 401.471298][ T43] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 401.491688][ T43] usb 2-1: USB disconnect, device number 82 [ 401.516722][ T5888] usb usb3-port1: attempt power cycle [ 401.560587][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 401.560604][ T30] audit: type=1326 audit(1760013712.690:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf7d8eec9 code=0x7ffc0000 [ 401.603227][ T30] audit: type=1326 audit(1760013712.690:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf7d8eec9 code=0x7ffc0000 [ 401.626017][ T30] audit: type=1326 audit(1760013712.720:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fabf7d8eec9 code=0x7ffc0000 [ 401.648843][ T30] audit: type=1326 audit(1760013712.720:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf7d8eec9 code=0x7ffc0000 [ 401.682078][ T30] audit: type=1326 audit(1760013712.720:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf7d8eec9 code=0x7ffc0000 [ 401.706153][ T30] audit: type=1326 audit(1760013712.720:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fabf7d8eec9 code=0x7ffc0000 [ 401.733705][ T30] audit: type=1326 audit(1760013712.720:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf7d8eec9 code=0x7ffc0000 [ 401.756201][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.763695][ T5915] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -EPROTO [ 401.778009][ T30] audit: type=1326 audit(1760013712.720:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf7d8eec9 code=0x7ffc0000 [ 401.800976][ T5915] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 401.814095][ T5915] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 401.828818][ T5915] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 401.838552][ T30] audit: type=1326 audit(1760013712.720:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fabf7d8eec9 code=0x7ffc0000 [ 401.860967][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.867166][ T5888] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 401.878227][ T5915] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 401.887312][ T5888] usb 3-1: device descriptor read/8, error -71 [ 401.900588][ T30] audit: type=1326 audit(1760013712.720:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fabf7d8eec9 code=0x7ffc0000 [ 401.900834][ T5915] usb 5-1: USB disconnect, device number 85 [ 401.922997][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.988460][T10609] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1226'. [ 402.105280][T10613] loop2: detected capacity change from 0 to 7 [ 402.121810][T10613] Dev loop2: unable to read RDB block 7 [ 402.126452][ T5888] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 402.148180][T10613] loop2: AHDI p1 p2 p3 [ 402.152443][T10613] loop2: partition table partially beyond EOD, truncated [ 402.160685][ T5888] usb 3-1: device descriptor read/8, error -71 [ 402.168245][T10613] loop2: p1 start 1601398130 is beyond EOD, truncated [ 402.175104][T10613] loop2: p2 start 1702059890 is beyond EOD, truncated [ 402.279644][ T5888] usb usb3-port1: unable to enumerate USB device [ 402.324501][T10619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.336263][T10619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.380777][T10622] tc_dump_action: action bad kind [ 402.417913][T10623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'. [ 402.766348][ T10] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 402.876516][ T5915] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 402.949048][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 402.956654][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 402.979930][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.007492][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 403.026419][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 403.038615][ T5915] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 403.049405][ T5915] usb 5-1: config 0 has no interface number 0 [ 403.055818][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 403.060576][ T5915] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 403.079739][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.089848][ T5915] usb 5-1: Product: syz [ 403.094749][ T5915] usb 5-1: Manufacturer: syz [ 403.100361][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 403.100467][ T5915] usb 5-1: SerialNumber: syz [ 403.108250][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 403.125774][ T5915] usb 5-1: config 0 descriptor?? [ 403.137030][ T5915] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 403.148299][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.163324][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 403.174837][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 403.191313][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 403.199449][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 403.210592][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.223039][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 403.234699][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 403.290312][ T10] usb 2-1: string descriptor 0 read error: -22 [ 403.298754][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 403.309315][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.339051][ T5915] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 403.352071][ T10] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 403.373001][ T5915] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 403.691286][T10629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.700740][T10629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.774924][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 403.783682][ T5915] usb 5-1: USB disconnect, device number 86 [ 403.794768][ T5915] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 403.839594][ T5915] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 403.869542][ T5915] quatech2 5-1:0.51: device disconnected [ 404.049156][T10636] netlink: 'syz.2.1236': attribute type 10 has an invalid length. [ 404.062552][T10636] team0: Port device netdevsim0 added [ 404.070733][T10636] netlink: 'syz.2.1236': attribute type 10 has an invalid length. [ 404.083306][T10636] team0: Port device netdevsim0 removed [ 404.093114][T10636] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 404.327297][ T8390] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 404.447484][T10643] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1237'. [ 404.509668][ T8390] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.519985][ T8390] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 404.530279][ T8390] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.556601][ T8390] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 404.565953][ T8390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.577748][T10646] loop2: detected capacity change from 0 to 7 [ 404.587579][T10646] Dev loop2: unable to read RDB block 7 [ 404.593289][ T8390] usb 3-1: Product: syz [ 404.600185][ T8390] usb 3-1: Manufacturer: syz [ 404.604862][T10646] loop2: AHDI p1 p2 p3 [ 404.609438][T10646] loop2: partition table partially beyond EOD, truncated [ 404.617700][ T8390] usb 3-1: SerialNumber: syz [ 404.627281][T10646] loop2: p1 start 1601398130 is beyond EOD, truncated [ 404.635538][T10646] loop2: p2 start 1702059890 is beyond EOD, truncated [ 404.640407][ T8390] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 404.649850][ T8390] cdc_ncm 3-1:1.0: bind() failure [ 404.842665][ T8390] usb 3-1: USB disconnect, device number 64 [ 405.180728][T10651] loop2: detected capacity change from 0 to 7 [ 405.202565][T10651] Dev loop2: unable to read RDB block 7 [ 405.252560][T10651] loop2: unable to read partition table [ 405.274273][T10651] loop2: partition table beyond EOD, truncated [ 405.315853][T10651] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 405.424864][ T8390] usb 2-1: USB disconnect, device number 83 [ 405.470078][ T5197] Dev loop2: unable to read RDB block 7 [ 405.502102][ T5197] loop2: unable to read partition table [ 405.628650][T10617] delete_channel: no stack [ 405.710975][ T5197] loop2: partition table beyond EOD, truncated [ 406.367175][T10663] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 407.160220][T10673] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 407.446384][ T5915] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 407.639321][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 407.651662][ T5915] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 407.667245][ T5915] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 407.677549][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.702375][ T5915] usb 2-1: Product: syz [ 407.708436][ T5915] usb 2-1: Manufacturer: syz [ 407.713400][ T5915] usb 2-1: SerialNumber: syz [ 408.343154][T10673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.394352][ T5197] Dev loop2: unable to read RDB block 7 [ 408.394590][T10673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.408571][ T5197] loop2: unable to read partition table [ 408.424752][ T5197] loop2: partition table beyond EOD, truncated [ 408.499886][T10673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.556717][T10673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.689520][T10696] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 408.814079][T10698] xt_hashlimit: size too large, truncated to 1048576 [ 408.830263][T10698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.840367][T10698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.861086][T10698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.872836][T10698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.080292][T10701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.089096][T10701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.495291][ T5915] usb 2-1: USB disconnect, device number 84 [ 409.597610][T10710] loop6: detected capacity change from 0 to 7 [ 409.727295][T10710] Dev loop6: unable to read RDB block 7 [ 409.739743][T10710] loop6: unable to read partition table [ 409.745519][T10710] loop6: partition table beyond EOD, truncated [ 410.144004][T10713] loop2: detected capacity change from 0 to 7 [ 410.157647][ T7958] Dev loop2: unable to read RDB block 7 [ 410.163275][ T7958] loop2: unable to read partition table [ 410.172575][ T7958] loop2: partition table beyond EOD, truncated [ 410.196418][T10710] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 410.341055][T10713] Dev loop2: unable to read RDB block 7 [ 410.346942][T10713] loop2: unable to read partition table [ 410.402676][T10713] loop2: partition table beyond EOD, truncated [ 410.476382][T10713] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 411.936451][ T5915] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 412.096547][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 412.103344][ T5915] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 412.135832][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.218371][ T5915] usb 5-1: config 0 descriptor?? [ 412.257427][ T5915] as10x_usb: device has been detected [ 412.292797][ T5915] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 412.396726][ T5915] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 412.441479][ T5915] as10x_usb: error during firmware upload part1 [ 412.475619][ T5915] Registered device nBox DVB-T Dongle [ 412.644276][T10747] macvtap1: entered allmulticast mode [ 412.657781][T10747] veth0_macvtap: entered allmulticast mode [ 413.070592][T10755] loop6: detected capacity change from 0 to 7 [ 413.077856][T10755] Dev loop6: unable to read RDB block 7 [ 413.083459][T10755] loop6: unable to read partition table [ 413.089401][T10755] loop6: partition table beyond EOD, truncated [ 413.095572][T10755] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 413.616350][ T5916] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 413.798222][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short [ 413.833127][ T5916] usb 3-1: config 255 has an invalid descriptor of length 16, skipping remainder of the config [ 413.878171][ T5916] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 413.943401][ T5916] usb 3-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=f1.0d [ 413.984119][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.994718][ T5916] usb 3-1: Product: syz [ 414.000692][ T5916] usb 3-1: Manufacturer: syz [ 414.005343][ T5916] usb 3-1: SerialNumber: syz [ 414.162992][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1274'. [ 414.229128][T10776] vlan2: entered promiscuous mode [ 414.279485][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1269'. [ 414.307447][T10776] erspan0: entered promiscuous mode [ 414.402353][T10778] fuse: Unknown parameter 'smackfsfloor' [ 414.518229][ T8390] usb 5-1: USB disconnect, device number 87 [ 414.560476][ T8390] Unregistered device nBox DVB-T Dongle [ 414.566794][ T8390] as10x_usb: device has been disconnected [ 415.405667][T10800] loop6: detected capacity change from 0 to 7 [ 415.425574][T10800] Dev loop6: unable to read RDB block 7 [ 415.492251][T10800] loop6: unable to read partition table [ 415.536645][T10800] loop6: partition table beyond EOD, truncated [ 415.542931][T10800] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 415.685051][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 415.685073][ T30] audit: type=1400 audit(1760013726.810:1266): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10789 comm="syz.0.1277" [ 415.713401][T10790] usb usb8: usbfs: process 10790 (syz.0.1277) did not claim interface 0 before use [ 416.106495][ T5915] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 416.187973][ T30] audit: type=1326 audit(1760013727.310:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5f78eec9 code=0x7ffc0000 [ 416.256504][ T30] audit: type=1326 audit(1760013727.310:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f3c5f78eec9 code=0x7ffc0000 [ 416.307483][ T5915] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 416.319346][ T30] audit: type=1326 audit(1760013727.310:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5f78eec9 code=0x7ffc0000 [ 416.342415][ T5915] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 416.357827][ T5915] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.371298][ T30] audit: type=1326 audit(1760013727.320:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c5f78eec9 code=0x7ffc0000 [ 416.406161][T10825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.415642][ T5915] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 416.428613][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.449371][T10825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.459403][ T30] audit: type=1326 audit(1760013727.320:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5f78eec9 code=0x7ffc0000 [ 416.492571][ T5915] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 416.505322][ T5915] usb 2-1: invalid MIDI out EP 0 [ 416.555685][ T30] audit: type=1326 audit(1760013727.320:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c5f78eacb code=0x7ffc0000 [ 416.671995][ T30] audit: type=1326 audit(1760013727.320:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c5f78eacb code=0x7ffc0000 [ 416.672045][ T30] audit: type=1326 audit(1760013727.320:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c5f78eacb code=0x7ffc0000 [ 416.672088][ T30] audit: type=1326 audit(1760013727.320:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.0.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c5f78eacb code=0x7ffc0000 [ 416.742986][ T5915] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 416.764112][ T5915] usb 2-1: USB disconnect, device number 85 [ 417.044691][T10836] tipc: Enabled bearer , priority 0 [ 417.047301][T10832] syzkaller0: entered promiscuous mode [ 417.047323][T10832] syzkaller0: entered allmulticast mode [ 417.105501][T10832] tipc: Resetting bearer [ 417.108934][T10831] tipc: Resetting bearer [ 417.190527][T10831] tipc: Disabling bearer [ 417.398153][T10838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.497325][T10838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.021707][T10851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.047145][T10851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.652151][T10869] random: crng reseeded on system resumption [ 418.685487][T10867] batadv1: entered allmulticast mode [ 418.694383][T10867] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 418.702335][T10867] bridge0: port 3(batadv1) entered blocking state [ 418.711713][T10867] bridge0: port 3(batadv1) entered disabled state [ 418.721339][T10867] batadv1: entered promiscuous mode [ 418.749115][T10867] bridge0: port 3(batadv1) entered blocking state [ 418.755956][T10867] bridge0: port 3(batadv1) entered forwarding state [ 419.166452][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 419.176022][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 419.245560][ T5831] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 419.377554][T10888] tipc: Enabling of bearer rejected, failed to enable media [ 419.409633][T10888] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 419.438299][T10888] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 419.458486][T10891] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 419.483139][T10891] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 419.616863][ T5916] usb 3-1: USB disconnect, device number 65 [ 419.746521][ T5915] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 419.921119][ T5915] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 419.953306][ T5915] usb 5-1: config 0 has no interface number 0 [ 419.985270][ T5915] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 420.019364][ T5915] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 420.071403][ T5915] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 420.145667][ T5915] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 420.200575][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.229216][ T5915] usb 5-1: config 0 descriptor?? [ 420.262420][ T5915] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input31 [ 420.446160][ T5831] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 420.530481][ T5915] usb 5-1: USB disconnect, device number 88 [ 420.654128][T10912] block device autoloading is deprecated and will be removed. [ 421.235428][ T5831] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 422.766420][ T5895] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 422.986029][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 423.046671][ T5895] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 423.091191][ T5895] usb 2-1: config 0 has no interface number 0 [ 423.096909][T10970] vivid-000: ================= START STATUS ================= [ 423.121823][ T5895] usb 2-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 423.131241][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.139781][ T5895] usb 2-1: Product: syz [ 423.144175][ T5895] usb 2-1: Manufacturer: syz [ 423.151520][ T5895] usb 2-1: SerialNumber: syz [ 423.164786][T10970] vivid-000: Test Pattern: 75% Colorbar [ 423.172536][ T5895] usb 2-1: config 0 descriptor?? [ 423.197062][T10970] vivid-000: Fill Percentage of Frame: 100 [ 423.209297][T10970] vivid-000: Horizontal Movement: No Movement [ 423.215552][T10970] vivid-000: Vertical Movement: No Movement [ 423.222905][T10970] vivid-000: OSD Text Mode: All [ 423.231883][T10970] vivid-000: Show Border: false [ 423.238573][T10970] vivid-000: Show Square: false [ 423.244794][T10970] vivid-000: Sensor Flipped Horizontally: true [ 423.252074][T10970] vivid-000: Sensor Flipped Vertically: false [ 423.262181][T10970] vivid-000: Insert SAV Code in Image: false [ 423.269382][T10970] vivid-000: Insert EAV Code in Image: false [ 423.278837][T10970] vivid-000: Insert Video Guard Band: false [ 423.286631][T10970] vivid-000: Reduced Framerate: false [ 423.292300][T10970] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 423.336513][T10970] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 423.364853][T10970] vivid-000: Enable Capture Cropping: true grabbed [ 423.390745][T10964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.409015][T10970] vivid-000: Enable Capture Composing: true grabbed [ 423.425925][T10970] vivid-000: Enable Capture Scaler: true grabbed [ 423.596942][T10970] vivid-000: Timestamp Source: End of Frame [ 423.624841][T10970] vivid-000: Colorspace: sRGB [ 423.743942][ T5895] uvcvideo 2-1:0.17: Found UVC 0.00 device syz (0408:4034) [ 423.767137][T10970] vivid-000: Transfer Function: Default [ 423.789387][T10970] vivid-000: Y'CbCr Encoding: Default [ 423.796547][T10970] vivid-000: HSV Encoding: Hue 0-179 [ 423.802298][T10970] vivid-000: Quantization: Default [ 423.805198][ T5895] uvcvideo 2-1:0.17: No valid video chain found. [ 423.814532][T10970] vivid-000: Apply Alpha To Red Only: false [ 423.857359][T10970] vivid-000: Standard Aspect Ratio: 4x3 [ 423.874696][T10970] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 423.886436][ T5895] usb 2-1: USB disconnect, device number 86 [ 423.894291][T10970] vivid-000: DV Timings: 640x480p59 inactive [ 423.941779][T10970] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 423.981600][T10970] vivid-000: Maximum EDID Blocks: 2 [ 424.022135][T10970] vivid-000: Limited RGB Range (16-235): false [ 424.036757][T10970] vivid-000: Rx RGB Quantization Range: Automatic [ 424.046737][T10970] vivid-000: Power Present: 0x00000001 [ 424.069351][T10970] tpg source WxH: 320x240 (R'G'B) [ 424.094899][T10970] tpg field: 1 [ 424.102430][T10970] tpg crop: (0,0)/320x240 [ 424.121028][T10970] tpg compose: (0,0)/320x240 [ 424.125618][T10970] tpg colorspace: 8 [ 424.153765][T10970] tpg transfer function: 0/2 [ 424.177096][T10970] tpg quantization: 0/1 [ 424.185738][T10970] tpg RGB range: 0/2 [ 424.200550][T10970] vivid-000: ================== END STATUS ================== [ 425.302969][T11011] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 426.302315][T11040] netlink: zone id is out of range [ 426.333449][T11040] netlink: zone id is out of range [ 426.465132][T11040] netlink: zone id is out of range [ 426.485393][T11040] netlink: del zone limit has 4 unknown bytes [ 427.148818][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 427.148831][ T30] audit: type=1326 audit(1760013738.250:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.2.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 427.188970][ T30] audit: type=1326 audit(1760013738.250:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.2.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 427.211430][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.341985][ T30] audit: type=1326 audit(1760013738.250:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.2.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 427.364407][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.492207][ T30] audit: type=1326 audit(1760013738.250:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.2.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 427.516251][ T30] audit: type=1326 audit(1760013738.250:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.2.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 427.544047][ T30] audit: type=1326 audit(1760013738.250:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.2.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 427.567230][ T30] audit: type=1326 audit(1760013738.260:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.2.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 427.754732][ T30] audit: type=1326 audit(1760013738.260:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.2.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 427.783794][ T30] audit: type=1326 audit(1760013738.260:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.2.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 427.872593][ T30] audit: type=1326 audit(1760013738.260:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.2.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44338eec9 code=0x7ffc0000 [ 428.212592][T11066] kvm: kvm [11065]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x10 [ 428.692082][T11086] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 429.007540][T11084] bridge0: port 3(batadv1) entered disabled state [ 429.014112][T11084] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.021436][T11084] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.573936][T11084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.625892][T11084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.793783][T11084] xfrm1: left promiscuous mode [ 429.799816][T11084] xfrm1: left allmulticast mode [ 429.976856][T11084] veth0_macvtap: left allmulticast mode [ 430.034609][T11084] macvtap1: left allmulticast mode [ 430.045340][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.064454][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.089635][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.107223][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.290956][T11114] syzkaller0: entered promiscuous mode [ 430.315509][T11114] syzkaller0: entered allmulticast mode [ 431.051908][T11139] netlink: 'syz.3.1386': attribute type 10 has an invalid length. [ 431.060151][T11139] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 431.165873][T11139] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 431.221501][T11142] lo: entered promiscuous mode [ 431.235216][T11142] lo: entered allmulticast mode [ 431.243835][T11142] tunl0: entered promiscuous mode [ 431.249477][T11142] tunl0: entered allmulticast mode [ 431.258706][T11142] gre0: entered promiscuous mode [ 431.263708][T11142] gre0: entered allmulticast mode [ 431.280066][T11142] gretap0: entered promiscuous mode [ 431.291251][T11142] erspan0: entered promiscuous mode [ 431.306520][T11142] erspan0: entered allmulticast mode [ 431.327838][T11142] ip_vti0: entered promiscuous mode [ 431.333179][T11142] ip_vti0: entered allmulticast mode [ 431.343432][T11142] ip6_vti0: entered promiscuous mode [ 431.353550][T11142] ip6_vti0: entered allmulticast mode [ 431.361372][T11142] sit0: entered promiscuous mode [ 431.375236][T11142] sit0: entered allmulticast mode [ 431.417712][T11142] ip6tnl0: entered promiscuous mode [ 431.423226][T11142] ip6tnl0: entered allmulticast mode [ 431.435420][T11142] ip6gre0: entered promiscuous mode [ 431.440991][T11142] ip6gre0: entered allmulticast mode [ 431.449554][T11142] syz_tun: entered promiscuous mode [ 431.454877][T11142] syz_tun: entered allmulticast mode [ 431.462944][T11142] ip6gretap0: entered promiscuous mode [ 431.468932][T11142] ip6gretap0: entered allmulticast mode [ 431.476850][T11142] vcan0: entered promiscuous mode [ 431.482074][T11142] vcan0: entered allmulticast mode [ 431.495213][T11142] bond0: entered promiscuous mode [ 431.502913][T11142] bond_slave_0: entered promiscuous mode [ 431.540073][T11142] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 431.562456][T11142] bond0: entered allmulticast mode [ 431.571473][T11142] bond_slave_0: entered allmulticast mode [ 431.578573][T11142] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 431.595123][T11142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.603391][T11142] team0: entered promiscuous mode [ 431.610339][T11142] team_slave_0: entered promiscuous mode [ 431.616616][T11142] team_slave_1: entered promiscuous mode [ 431.622600][T11142] team0: entered allmulticast mode [ 431.629700][T11142] team_slave_0: entered allmulticast mode [ 431.635589][T11142] team_slave_1: entered allmulticast mode [ 431.672839][T11142] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.680708][T11142] dummy0: entered promiscuous mode [ 431.686142][T11142] dummy0: entered allmulticast mode [ 431.694177][T11142] nlmon0: entered promiscuous mode [ 431.717363][T11142] nlmon0: entered allmulticast mode [ 431.786241][T11142] caif0: entered promiscuous mode [ 431.792296][T11142] caif0: entered allmulticast mode [ 431.807985][T11142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 431.960889][T11155] trusted_key: syz.0.1393 sent an empty control message without MSG_MORE. [ 432.049513][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1395'. [ 432.148974][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1395'. [ 433.109899][T11169] batman_adv: batadv0: Adding interface: dummy0 [ 433.132113][T11169] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.181254][T11169] batman_adv: batadv0: Interface activated: dummy0 [ 433.247921][ T5888] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 433.252740][T11169] batadv0: mtu less than device minimum [ 433.263267][T11169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 433.275428][T11169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 433.287401][T11169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 433.299291][T11169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 433.311171][T11169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 433.323113][T11169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 433.335048][T11169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 433.346945][T11169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 433.406531][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 433.415504][ T5888] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 433.424320][ T5888] usb 5-1: config 0 has no interface number 0 [ 433.440413][T11179] program syz.2.1403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.444053][ T5888] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 433.485124][ T5888] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 433.499265][ T5888] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 433.512441][ T5888] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 433.528203][ T5888] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 433.537585][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.556640][ T5888] usb 5-1: config 0 descriptor?? [ 433.576227][ T5888] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 433.626521][T11187] netlink: 1272 bytes leftover after parsing attributes in process `syz.0.1407'. [ 433.771424][ T5888] usb 5-1: USB disconnect, device number 89 [ 433.800311][ T5888] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 434.083864][T11193] syz.0.1409 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 434.136655][T11190] random: crng reseeded on system resumption [ 434.408900][T11198] vlan1: entered promiscuous mode [ 434.414333][T11198] vlan1: entered allmulticast mode [ 434.421908][T11198] veth0_vlan: entered allmulticast mode [ 435.176385][ T5888] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 435.331084][ T5888] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 435.386438][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.611063][ T5888] usb 5-1: Product: syz [ 435.628643][ T5888] usb 5-1: Manufacturer: syz [ 435.643627][ T5888] usb 5-1: SerialNumber: syz [ 435.686699][ T5888] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 435.718203][ T5915] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 435.934596][T11210] random: crng reseeded on system resumption [ 436.020152][ T5916] usb 5-1: USB disconnect, device number 90 [ 436.852840][T11249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.866458][ T5915] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 436.873533][ T5915] ath9k_htc: Failed to initialize the device [ 436.890689][T11249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.960514][ T5916] usb 5-1: ath9k_htc: USB layer deinitialized [ 438.241166][ T5831] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 438.617238][ T5888] IPVS: starting estimator thread 0... [ 438.706488][T11271] IPVS: using max 30 ests per chain, 72000 per kthread [ 439.809172][T11295] tipc: Enabled bearer , priority 0 [ 439.855128][T11295] syzkaller0: entered promiscuous mode [ 439.990454][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.996922][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.063296][T11295] syzkaller0: entered allmulticast mode [ 440.176477][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1451'. [ 440.280513][T11301] tipc: Resetting bearer [ 440.429539][T11309] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 440.436088][T11309] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 440.545606][T11293] tipc: Resetting bearer [ 440.638947][T11309] vhci_hcd vhci_hcd.0: Device attached [ 440.659393][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 440.659411][ T30] audit: type=1326 audit(1760013751.760:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11290 comm="syz.3.1447" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabf7d8eec9 code=0x0 [ 440.688729][T11309] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 440.773004][T11293] tipc: Disabling bearer [ 440.912416][T11310] vhci_hcd: connection closed [ 440.912731][ T1151] vhci_hcd: stop threads [ 440.935211][ T1151] vhci_hcd: release socket [ 440.945934][ T1151] vhci_hcd: disconnect device [ 441.447432][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'. [ 441.470352][T11328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'. [ 441.492574][T11328] netlink: 'syz.2.1460': attribute type 14 has an invalid length. [ 441.919838][T11338] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 441.919838][T11338] program syz.1.1453 not setting count and/or reply_len properly [ 442.008930][T11337] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 442.015478][T11337] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 442.147215][T11337] vhci_hcd vhci_hcd.0: Device attached [ 442.274660][T11341] vhci_hcd: connection closed [ 442.275003][ T1151] vhci_hcd: stop threads [ 442.286321][ T1151] vhci_hcd: release socket [ 442.306442][ T1151] vhci_hcd: disconnect device [ 442.507769][T11347] tipc: Enabled bearer , priority 0 [ 442.607711][T11347] net_ratelimit: 12 callbacks suppressed [ 442.607723][T11347] syzkaller0: mtu less than device minimum [ 443.544415][T11364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.566887][T11364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.676745][T11366] fuse: root generation should be zero [ 443.751936][T11376] tipc: Enabling of bearer rejected, failed to enable media [ 445.309875][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'. [ 445.977085][T11431] netlink: 'syz.2.1493': attribute type 10 has an invalid length. [ 446.816361][ T5916] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 447.136775][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 447.144434][ T5916] usb 5-1: config 0 has no interfaces? [ 447.207006][ T5916] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 447.277203][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.349004][ T5916] usb 5-1: config 0 descriptor?? [ 447.421310][T11460] binder_alloc: 11459: binder_alloc_buf, no vma [ 447.645012][ T5916] usb 5-1: USB disconnect, device number 91 [ 447.896381][T11471] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 448.068465][T11476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.648040][T11497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.679876][T11497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.049429][T11500] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 450.055959][T11500] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 450.122823][T11500] vhci_hcd vhci_hcd.0: Device attached [ 450.428985][ T43] usb 36-1: SetAddress Request (2) to port 0 [ 450.435344][ T43] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 450.486409][T11512] vhci_hcd: connection closed [ 450.496942][ T12] vhci_hcd: stop threads [ 450.516129][ T12] vhci_hcd: release socket [ 450.523691][ T12] vhci_hcd: disconnect device [ 450.556545][ T5916] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 450.556801][ T43] usb 36-1: enqueue for inactive port 0 [ 450.726478][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 450.740833][ T5916] usb 5-1: config 0 has no interfaces? [ 450.759956][ T5916] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 450.770335][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 450.786429][ T5916] usb 5-1: SerialNumber: syz [ 450.801996][ T5916] usb 5-1: config 0 descriptor?? [ 451.042837][ T5916] usb 5-1: USB disconnect, device number 92 [ 451.077099][ T43] usb usb36-port1: attempt power cycle [ 451.658485][ T43] usb usb36-port1: unable to enumerate USB device [ 451.726761][T11533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.801891][T11533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.822059][T11537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 453.116641][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 453.128448][T11578] kvm: kvm [11577]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 453.146539][T11578] kvm: kvm [11577]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 453.268379][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.291958][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.327289][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 453.358929][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 453.376396][ T10] usb 3-1: SerialNumber: syz [ 453.604739][ T10] usb 3-1: 0:2 : does not exist [ 453.613292][ T10] usb 3-1: unit 5 not found! [ 453.642037][ T10] usb 3-1: USB disconnect, device number 66 [ 453.685378][ T7958] udevd[7958]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.386572][ T5916] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 455.569633][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 455.576746][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.596816][ T5916] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 455.609552][ T5916] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 455.619221][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.628531][ T5916] usb 5-1: Product: syz [ 455.633060][ T5916] usb 5-1: Manufacturer: syz [ 455.638730][ T5916] usb 5-1: SerialNumber: syz [ 455.647892][ T5916] usb 5-1: config 0 descriptor?? [ 455.829981][ T5888] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 456.031886][T11672] bridge0: port 3(wlan1) entered blocking state [ 456.038778][T11672] bridge0: port 3(wlan1) entered disabled state [ 456.045337][T11672] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 456.057458][T11672] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 456.282353][ T5916] usb 5-1: USB disconnect, device number 93 [ 456.531320][ T5888] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 456.535976][T11680] dummy0: left promiscuous mode [ 456.553452][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 456.553484][T11680] dummy0: left allmulticast mode [ 456.562602][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 456.562627][ T5888] usb 3-1: SerialNumber: syz [ 457.260357][ T5888] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 457.643573][ T5888] usb 3-1: USB disconnect, device number 67 [ 457.652512][ T5888] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 459.167622][T11761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.262943][T11761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.673713][T11780] input: syz1 as /devices/virtual/input/input33 [ 459.750177][T11782] kvm: pic: non byte read [ 459.758752][T11782] kvm: pic: non byte read [ 459.763343][T11782] kvm: pic: non byte read [ 459.768399][T11782] kvm: pic: non byte read [ 459.773448][T11782] kvm: pic: non byte read [ 459.778284][T11782] kvm: pic: non byte read [ 459.788801][T11782] kvm: pic: non byte read [ 459.798943][T11782] kvm: pic: non byte write [ 459.803618][T11782] kvm: pic: non byte write [ 459.823578][T11782] kvm: pic: non byte write [ 459.832391][T11782] kvm: pic: non byte write [ 459.841785][T11782] kvm: pic: non byte write [ 459.846253][T11782] kvm: pic: non byte write [ 459.853968][T11782] kvm: pic: non byte write [ 459.858821][T11782] kvm: pic: non byte write [ 459.863413][T11782] kvm: pic: non byte write [ 459.868393][T11782] kvm: pic: non byte write [ 460.096441][ T5916] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 460.218879][T11801] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 460.225425][T11801] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 460.255584][T11801] vhci_hcd vhci_hcd.0: Device attached [ 460.276297][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 460.289494][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short [ 460.319513][T11809] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 460.328496][ T5916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.356010][T11803] vhci_hcd: connection closed [ 460.356234][ T5916] usb 3-1: config 0 has no interfaces? [ 460.357613][ T1151] vhci_hcd: stop threads [ 460.368544][ T5916] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 460.390127][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.390192][ T1151] vhci_hcd: release socket [ 460.421610][ T5916] usb 3-1: Product: syz [ 460.442789][ T5916] usb 3-1: Manufacturer: syz [ 460.443060][ T1151] vhci_hcd: disconnect device [ 460.471680][ T5916] usb 3-1: SerialNumber: syz [ 460.502959][ T5916] usb 3-1: config 0 descriptor?? [ 460.729201][ T5916] usb 3-1: USB disconnect, device number 68 [ 461.530374][T11845] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 461.614796][T11849] tipc: Enabled bearer , priority 0 [ 461.626253][T11851] raw_sendmsg: syz.2.1647 forgot to set AF_INET. Fix it! [ 461.643460][T11849] syzkaller0: entered promiscuous mode [ 461.739132][T11849] syzkaller0: entered allmulticast mode [ 461.816793][T11848] tipc: Resetting bearer [ 461.878362][T11857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.905580][T11857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.919180][T11848] tipc: Disabling bearer [ 462.350043][T11882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.360251][T11882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.543957][T11891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.578032][T11891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.738558][T11899] tipc: Enabled bearer , priority 0 [ 462.747174][T11899] syzkaller0: entered promiscuous mode [ 462.753588][T11899] syzkaller0: entered allmulticast mode [ 462.797647][T11899] tipc: Resetting bearer [ 462.835181][T11898] tipc: Resetting bearer [ 462.889739][T11898] tipc: Disabling bearer [ 463.259556][T11925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1675'. [ 463.643851][T11943] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 463.650410][T11943] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 463.674348][T11943] vhci_hcd vhci_hcd.0: Device attached [ 463.936379][ T10] usb 38-1: SetAddress Request (2) to port 0 [ 463.942912][ T10] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 463.990635][T11956] xt_hashlimit: size too large, truncated to 1048576 [ 464.017321][T11956] xt_hashlimit: max too large, truncated to 1048576 [ 464.436875][T11965] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 464.462033][T11944] vhci_hcd: connection reset by peer [ 464.470010][ T13] vhci_hcd: stop threads [ 464.474277][ T13] vhci_hcd: release socket [ 464.486869][ T13] vhci_hcd: disconnect device [ 465.280263][T11981] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1697'. [ 465.309006][T11973] kvm: pic: single mode not supported [ 465.309180][T11973] kvm: pic: level sensitive irq not supported [ 465.315010][T11973] kvm: pic: non byte read [ 465.367810][T11984] loop9: detected capacity change from 0 to 7 [ 465.417020][T11984] [ 465.419375][T11984] ====================================================== [ 465.426392][T11984] WARNING: possible circular locking dependency detected [ 465.433411][T11984] syzkaller #0 Not tainted [ 465.437820][T11984] ------------------------------------------------------ [ 465.444835][T11984] syz.3.1698/11984 is trying to acquire lock: [ 465.450892][T11984] ffff88801ae88220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 465.461176][T11984] [ 465.461176][T11984] but task is already holding lock: [ 465.468535][T11984] ffff888024cb6c98 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: lo_ioctl+0x16cc/0x1c10 [ 465.478309][T11984] [ 465.478309][T11984] which lock already depends on the new lock. [ 465.478309][T11984] [ 465.488712][T11984] [ 465.488712][T11984] the existing dependency chain (in reverse order) is: [ 465.497728][T11984] [ 465.497728][T11984] -> #2 (&q->q_usage_counter(io)#26){++++}-{0:0}: [ 465.506337][T11984] lock_acquire+0x120/0x360 [ 465.511355][T11984] blk_alloc_queue+0x538/0x620 [ 465.516632][T11984] __blk_mq_alloc_disk+0x15c/0x340 [ 465.522264][T11984] loop_add+0x411/0xad0 [ 465.526933][T11984] loop_init+0xd9/0x170 [ 465.531599][T11984] do_one_initcall+0x233/0x820 [ 465.536876][T11984] do_initcall_level+0x104/0x190 [ 465.542330][T11984] do_initcalls+0x59/0xa0 [ 465.547171][T11984] kernel_init_freeable+0x334/0x4b0 [ 465.552881][T11984] kernel_init+0x1d/0x1d0 [ 465.557728][T11984] ret_from_fork+0x4bc/0x870 [ 465.562824][T11984] ret_from_fork_asm+0x1a/0x30 [ 465.568099][T11984] [ 465.568099][T11984] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 465.575303][T11984] lock_acquire+0x120/0x360 [ 465.580313][T11984] fs_reclaim_acquire+0x72/0x100 [ 465.585765][T11984] kmem_cache_alloc_noprof+0x45/0x6e0 [ 465.591646][T11984] __kernfs_iattrs+0xd9/0x320 [ 465.596836][T11984] kernfs_iop_setattr+0xea/0x3f0 [ 465.602285][T11984] notify_change+0xc1a/0xf40 [ 465.607392][T11984] do_truncate+0x1a4/0x220 [ 465.612682][T11984] path_openat+0x306c/0x3830 [ 465.617825][T11984] do_filp_open+0x1fa/0x410 [ 465.622845][T11984] do_sys_openat2+0x121/0x1c0 [ 465.628037][T11984] __x64_sys_openat+0x138/0x170 [ 465.633409][T11984] do_syscall_64+0xfa/0xfa0 [ 465.638432][T11984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.644838][T11984] [ 465.644838][T11984] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 465.653348][T11984] validate_chain+0xb9b/0x2140 [ 465.658627][T11984] __lock_acquire+0xab9/0xd20 [ 465.663811][T11984] lock_acquire+0x120/0x360 [ 465.668822][T11984] down_read+0x46/0x2e0 [ 465.673491][T11984] kernfs_iop_getattr+0x9e/0x450 [ 465.678943][T11984] vfs_getattr_nosec+0x2e1/0x430 [ 465.684386][T11984] loop_assign_backing_file+0x222/0x400 [ 465.690444][T11984] lo_ioctl+0x1738/0x1c10 [ 465.695284][T11984] blkdev_ioctl+0x5ac/0x6d0 [ 465.700303][T11984] __se_sys_ioctl+0xf9/0x170 [ 465.705404][T11984] do_syscall_64+0xfa/0xfa0 [ 465.710421][T11984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.716841][T11984] [ 465.716841][T11984] other info that might help us debug this: [ 465.716841][T11984] [ 465.727064][T11984] Chain exists of: [ 465.727064][T11984] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#26 [ 465.727064][T11984] [ 465.741497][T11984] Possible unsafe locking scenario: [ 465.741497][T11984] [ 465.748936][T11984] CPU0 CPU1 [ 465.754289][T11984] ---- ---- [ 465.759635][T11984] lock(&q->q_usage_counter(io)#26); [ 465.765004][T11984] lock(fs_reclaim); [ 465.771492][T11984] lock(&q->q_usage_counter(io)#26); [ 465.779377][T11984] rlock(&root->kernfs_iattr_rwsem); [ 465.784734][T11984] [ 465.784734][T11984] *** DEADLOCK *** [ 465.784734][T11984] [ 465.792858][T11984] 3 locks held by syz.3.1698/11984: [ 465.798040][T11984] #0: ffff888024df6440 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x11c1/0x1c10 [ 465.807089][T11984] #1: ffff888024cb6c98 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: lo_ioctl+0x16cc/0x1c10 [ 465.817267][T11984] #2: ffff888024cb6cd0 (&q->q_usage_counter(queue)#10){+.+.}-{0:0}, at: lo_ioctl+0x16cc/0x1c10 [ 465.827708][T11984] [ 465.827708][T11984] stack backtrace: [ 465.833585][T11984] CPU: 0 UID: 0 PID: 11984 Comm: syz.3.1698 Not tainted syzkaller #0 PREEMPT(full) [ 465.833605][T11984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 465.833618][T11984] Call Trace: [ 465.833627][T11984] [ 465.833635][T11984] dump_stack_lvl+0x189/0x250 [ 465.833656][T11984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.833673][T11984] ? __pfx__printk+0x10/0x10 [ 465.833693][T11984] print_circular_bug+0x2ee/0x310 [ 465.833715][T11984] check_noncircular+0x134/0x160 [ 465.833736][T11984] validate_chain+0xb9b/0x2140 [ 465.833756][T11984] ? tomoyo_path_perm+0x1e3/0x4b0 [ 465.833781][T11984] __lock_acquire+0xab9/0xd20 [ 465.833800][T11984] ? kernfs_iop_getattr+0x9e/0x450 [ 465.833818][T11984] lock_acquire+0x120/0x360 [ 465.833832][T11984] ? kernfs_iop_getattr+0x9e/0x450 [ 465.833855][T11984] down_read+0x46/0x2e0 [ 465.833877][T11984] ? kernfs_iop_getattr+0x9e/0x450 [ 465.833896][T11984] kernfs_iop_getattr+0x9e/0x450 [ 465.833917][T11984] vfs_getattr_nosec+0x2e1/0x430 [ 465.833935][T11984] loop_assign_backing_file+0x222/0x400 [ 465.833961][T11984] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 465.833979][T11984] ? schedule+0x91/0x360 [ 465.834002][T11984] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 465.834029][T11984] lo_ioctl+0x1738/0x1c10 [ 465.834049][T11984] ? __pfx_lo_ioctl+0x10/0x10 [ 465.834066][T11984] ? __lock_acquire+0xab9/0xd20 [ 465.834085][T11984] ? __lock_acquire+0xab9/0xd20 [ 465.834106][T11984] ? __lock_acquire+0xab9/0xd20 [ 465.834122][T11984] ? __lock_acquire+0xab9/0xd20 [ 465.834142][T11984] ? __lock_acquire+0xab9/0xd20 [ 465.834161][T11984] ? __lock_acquire+0xab9/0xd20 [ 465.834182][T11984] ? is_bpf_text_address+0x26/0x2b0 [ 465.834202][T11984] ? is_bpf_text_address+0x292/0x2b0 [ 465.834218][T11984] ? is_bpf_text_address+0x26/0x2b0 [ 465.834236][T11984] ? kernel_text_address+0xa5/0xe0 [ 465.834260][T11984] ? __kernel_text_address+0xd/0x40 [ 465.834283][T11984] ? unwind_get_return_address+0x4d/0x90 [ 465.834302][T11984] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 465.834325][T11984] ? arch_stack_walk+0xfc/0x150 [ 465.834348][T11984] ? stack_trace_save+0x9c/0xe0 [ 465.834369][T11984] ? __pfx_stack_trace_save+0x10/0x10 [ 465.834390][T11984] ? stack_depot_save_flags+0x40/0x860 [ 465.834413][T11984] ? kasan_save_track+0x4f/0x80 [ 465.834434][T11984] ? kasan_save_track+0x3e/0x80 [ 465.834455][T11984] ? __kasan_save_free_info+0x46/0x50 [ 465.834473][T11984] ? __kasan_slab_free+0x5c/0x80 [ 465.834496][T11984] ? kfree+0x19a/0x6d0 [ 465.834514][T11984] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 465.834531][T11984] ? security_file_ioctl+0xcb/0x2d0 [ 465.834547][T11984] ? __se_sys_ioctl+0x47/0x170 [ 465.834567][T11984] ? do_syscall_64+0xfa/0xfa0 [ 465.834585][T11984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.834610][T11984] ? __asan_memset+0x22/0x50 [ 465.834629][T11984] ? blk_get_meta_cap+0x18c/0x750 [ 465.834653][T11984] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 465.834676][T11984] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.834696][T11984] ? blkdev_common_ioctl+0xff7/0x2550 [ 465.834722][T11984] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 465.834741][T11984] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 465.834765][T11984] ? do_vfs_ioctl+0xbe8/0x1430 [ 465.834784][T11984] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 465.834803][T11984] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 465.834834][T11984] ? __pfx_lo_ioctl+0x10/0x10 [ 465.834850][T11984] blkdev_ioctl+0x5ac/0x6d0 [ 465.834874][T11984] ? __pfx_blkdev_ioctl+0x10/0x10 [ 465.834896][T11984] ? __fget_files+0x3a0/0x420 [ 465.834909][T11984] ? __fget_files+0x2a/0x420 [ 465.834924][T11984] ? bpf_lsm_file_ioctl+0x9/0x20 [ 465.834941][T11984] ? __pfx_blkdev_ioctl+0x10/0x10 [ 465.834969][T11984] __se_sys_ioctl+0xf9/0x170 [ 465.834990][T11984] do_syscall_64+0xfa/0xfa0 [ 465.835008][T11984] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.835027][T11984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.835043][T11984] ? clear_bhb_loop+0x60/0xb0 [ 465.835061][T11984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.835080][T11984] RIP: 0033:0x7fabf7d8eec9 [ 465.835096][T11984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.835112][T11984] RSP: 002b:00007fabf8ba2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.835129][T11984] RAX: ffffffffffffffda RBX: 00007fabf7fe5fa0 RCX: 00007fabf7d8eec9 [ 465.835142][T11984] RDX: 0000000000000003 RSI: 0000000000004c06 RDI: 0000000000000004 [ 465.835152][T11984] RBP: 00007fabf7e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 465.835163][T11984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.835173][T11984] R13: 00007fabf7fe6038 R14: 00007fabf7fe5fa0 R15: 00007fabf810fa28 [ 465.835192][T11984] [ 466.304067][ T7958] buffer_io_error: 23 callbacks suppressed [ 466.304085][ T7958] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.328962][ T7958] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.349656][ T7958] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.359158][ T7958] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.385810][ T7958] Buffer I/O error on dev loop9, logical block 0, async page read [ 469.026408][ T10] usb 38-1: device descriptor read/8, error -110 [ 469.436612][ T10] usb usb38-port1: attempt power cycle [ 470.027097][ T10] usb usb38-port1: unable to enumerate USB device