last executing test programs: 12.378070477s ago: executing program 2 (id=583): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000000000000008000400", 0x20) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11.513957287s ago: executing program 2 (id=588): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc4202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) creat(0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000e0dec14004231a022918010203010902220001000000000904000001e36ec20009050000000000000007058299"], 0x0) sendfile(r2, r2, 0x0, 0x3) r3 = syz_clone(0x0, &(0x7f0000000a40)="4d69a2e5ea5d83d12760a976ddfdbd4771374e63aa6afa94ed1524d3e81c5e1b13cdf407aa6680e468315b60e56e74b1c2c4cb33f7a3c5967546e00d61f6982b453cd694cd3c6dac11ed5ad45032bb26a87a37152fbcd44432d8294e86bedcd26174955fc1b13eecf7e4ecc553548074446e3fd5e8b6f9f949c83f11e7e3b1f3dbe65d95a434575bb730e2381ea2f3eb45aaa1e9213e4f4464380e82f7c5392774ca8d1ff6d655e57f7f23f1d6e2b54b3c7a1f9eba94143e57", 0xb9, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000b00)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) r5 = socket(0x18, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYRES32=r3, @ANYRES32=r6, @ANYRES32=0x0], 0xd8}}, 0x4040) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x1f, 0x6, 0x460, 0x314, 0x314, 0x0, 0x1b0, 0x314, 0x3cc, 0x3cc, 0x3cc, 0x3cc, 0x3cc, 0x6, &(0x7f0000000300), {[{{@ip={@rand_addr=0x64010102, @local, 0x0, 0x0, 'caif0\x00', 'bond0\x00', {0xff}, {}, 0x5e, 0x0, 0x42}, 0x0, 0xb8, 0xec, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}, @inet=@rpfilter={{0x24}, {0x3}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x2, 0x3, 0x5}, {0xffffffffffffffff, 0x4, 0x2}, {0x4, 0x3, 0x4}, 0x5, 0x2}}}, {{@uncond, 0x0, 0x94, 0xc4, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xa}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0xfffffff7, @remote, 0x4e21}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'vlan0\x00', 'wg0\x00', {}, {}, 0x89, 0x3, 0x36}, 0x0, 0x94, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x1, 0xffffffff, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@rand_addr=0x64010102, @rand_addr=0x64010102, 0xff000000, 0xffffff00, 'dvmrp0\x00', 'macsec0\x00', {0xff}, {0xff}, 0x21, 0x1, 0x16}, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x10}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4bc) socket$inet6(0xa, 0x2, 0x0) 9.176050349s ago: executing program 2 (id=593): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0c", 0x44, 0x20000000, 0x0, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r3, @ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) r6 = socket$kcm(0x10, 0x0, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r7, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') 8.400210099s ago: executing program 2 (id=596): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000000000000008000400", 0x20) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.423621604s ago: executing program 2 (id=597): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000040)) 6.28540218s ago: executing program 2 (id=599): r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) r1 = creat(&(0x7f0000003dc0)='./file0\x00', 0x27) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x12) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffc71) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{}, 0xfffffffc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) sendmsg$tipc(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0)=[0x7fffffff, 0x53e56ed2], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x120) mount(&(0x7f0000000500)=@loop={'/dev/loop', 0x0}, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='romfs\x00', 0xa00010, 0x0) io_uring_enter(r0, 0x52e, 0x0, 0x0, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) 4.505788313s ago: executing program 1 (id=608): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000000000000000843ae34f16d9e12e5f2c1ce4f2af576c1d486d4f63dce88cd9c10186e79084f74141bd4cf3577fe7652716cfa5e971954177aea1d8ba6026785dd83a3836609ec35cdb0d4a750e566b3cdcedfbfd9b764458caea4d17ab9d4ec276888de2a8b2dbbdb77b69b2eb4221260a0a85ce33928bc98c690529a4e87b28f7d78f6edb2b0ef37b85425e282d4a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100"/28], 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002100), 0x383, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000c0010002000040"]) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x2000003, 0x110, r1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) socket$kcm(0x21, 0x2, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 4.335696726s ago: executing program 0 (id=609): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) 3.722212004s ago: executing program 1 (id=610): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000000000000000843ae34f16d9e12e5f2c1ce4f2af576c1d486d4f63dce88cd9c10186e79084f74141bd4cf3577fe7652716cfa5e971954177aea1d8ba6026785dd83a3836609ec35cdb0d4a750e566b3cdcedfbfd9b764458caea4d17ab9d4ec276888de2a8b2dbbdb77b69b2eb4221260a0a85ce33928bc98c690529a4e87b28f7d78f6edb2b0ef37b85425e282d4a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100"/28], 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002100), 0x383, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000c0010002000040"]) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x2000003, 0x110, r1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) socket$kcm(0x21, 0x2, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000023ef3500010700000000002fa7240d17"], 0x14}}, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 3.553014199s ago: executing program 3 (id=611): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85a1077477c0b7e82880000000000000230000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040b0b00", @ANYRESDEC], 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a}, 0x20) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xb7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.406761755s ago: executing program 0 (id=612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x59, 0x0) r4 = openat$vimc2(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0xc0cc5605, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x34325852}) r5 = dup(r2) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x4000000000882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r7, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x9) socket$kcm(0x29, 0x2, 0x0) fchdir(0xffffffffffffffff) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x5ac}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') pselect6(0x40, &(0x7f0000000600)={0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1}, @ipv4=@icmp={{0x16, 0x4, 0x0, 0x0, 0x74, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0xc, 0x60, 0x3, 0x0, [{@rand_addr=0x64010101, 0x7}]}, @cipso={0x86, 0x35, 0x2, [{0x0, 0x3, '\x00'}, {0x0, 0xe, "beaf356874f7dbbcbfcddfd5"}, {0x6, 0xd, "dc3db04bc543a64b248cd5"}, {0x1, 0xa, "95bdfbf746b69ea9"}, {0x0, 0x7, "dd31b38dda"}]}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @remote}}}}, 0x82) 2.327914099s ago: executing program 3 (id=613): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) setrlimit(0x1, &(0x7f0000000000)) write$FUSE_INIT(r2, 0x0, 0x0) 2.326178516s ago: executing program 0 (id=621): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85a1077477c0b7e82880000000000000230000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040b0b00", @ANYRESDEC], 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a}, 0x20) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.219309974s ago: executing program 1 (id=614): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000300)={{r0}, "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"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0c", 0x44, 0x20000000, 0x0, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r3, @ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) r6 = socket$kcm(0x10, 0x0, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r7, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') 1.890102555s ago: executing program 1 (id=615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket(0x1, 0x803, 0x0) io_uring_setup(0x168a, &(0x7f0000002500)={0x0, 0x9189, 0x0, 0x1, 0x3c0, 0x0, r3}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r5], 0x50}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r8}, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) listen(r6, 0x6) close(r7) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000002440)={'sit0\x00', &(0x7f00000002c0)={@loopback, 0x0, 0x0, 0x20, 0x0, [{@private}, {@loopback}]}}) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000002480)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000040)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r9, 0x7b1, &(0x7f00000024c0)={0x0, 0x6, 0xffffffffffffffa7, 0x1}) fcntl$getflags(r4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) 1.889702287s ago: executing program 1 (id=616): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc4202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) creat(0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000e0dec14004231a022918010203010902220001000000000904000001e36ec20009050000000000000007058299"], 0x0) sendfile(r3, r3, 0x0, 0x3) r4 = syz_clone(0x0, &(0x7f0000000a40)="4d69a2e5ea5d83d12760a976ddfdbd4771374e63aa6afa94ed1524d3e81c5e1b13cdf407aa6680e468315b60e56e74b1c2c4cb33f7a3c5967546e00d61f6982b453cd694cd3c6dac11ed5ad45032bb26a87a37152fbcd44432d8294e86bedcd26174955fc1b13eecf7e4ecc553548074446e3fd5e8b6f9f949c83f11e7e3b1f3dbe65d95a434575bb730e2381ea2f3eb45aaa1e9213e4f4464380e82f7c5392774ca8d1ff6d655e57f7f23f1d6e2b54b3c7a1f9eba94143e57", 0xb9, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000b00)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) r6 = socket(0x18, 0x803, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000200)) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYRES32=r4, @ANYRES32=r7, @ANYRES32=0x0], 0xd8}}, 0x4040) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x1f, 0x6, 0x460, 0x314, 0x314, 0x0, 0x1b0, 0x314, 0x3cc, 0x3cc, 0x3cc, 0x3cc, 0x3cc, 0x6, &(0x7f0000000300), {[{{@ip={@rand_addr=0x64010102, @local, 0x0, 0x0, 'caif0\x00', 'bond0\x00', {0xff}, {}, 0x5e, 0x0, 0x42}, 0x0, 0xb8, 0xec, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}, @inet=@rpfilter={{0x24}, {0x3}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x2, 0x3, 0x5}, {0xffffffffffffffff, 0x4, 0x2}, {0x4, 0x3, 0x4}, 0x5, 0x2}}}, {{@uncond, 0x0, 0x94, 0xc4, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xa}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0xfffffff7, @remote, 0x4e21}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'vlan0\x00', 'wg0\x00', {}, {}, 0x89, 0x3, 0x36}, 0x0, 0x94, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x1, 0xffffffff, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@rand_addr=0x64010102, @rand_addr=0x64010102, 0xff000000, 0xffffff00, 'dvmrp0\x00', 'macsec0\x00', {0xff}, {0xff}, 0x21, 0x1, 0x16}, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x10}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4bc) socket$inet6(0xa, 0x2, 0x0) 1.324496591s ago: executing program 3 (id=617): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[], 0x20) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x140a118}}, 0x50) r4 = io_uring_setup(0x2375, &(0x7f0000000000)={0x0, 0x0, 0x80}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x3781b000) setns(r3, 0x8000000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001940)=[{0x0}, {0x0}], &(0x7f0000000180)=[0x0, 0x1f], 0x2}, 0x20) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) close(0x4) r6 = open(&(0x7f0000000000)='./file0\x00', 0x4102, 0x6) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r7, 0x1) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000080), 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r6, r8, 0x0, 0xf800) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000140)={0x2c, 0x1, 0x0, "1c1bebdaf2f20d55806b26b1d750185fd75a206da058e8fc42466ab1439b1cc2"}) r11 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r11, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) dup2(r9, r11) 1.055107146s ago: executing program 0 (id=618): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85a1077477c0b7e82880000000000000230000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040b0b00", @ANYRESDEC], 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a}, 0x20) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xb7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 860.497315ms ago: executing program 3 (id=619): socket$nl_netfilter(0x10, 0x3, 0xc) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r0, 0x0, 0x0, 0x8000}) pselect6(0x40, &(0x7f0000000340)={0xe0}, 0x0, 0x0, 0x0, 0x0) 640.097845ms ago: executing program 3 (id=620): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000020240)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r2, 0x0) io_submit(r1, 0x4, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe000bb00, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x23, 0x0, 0x14) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 503.875823ms ago: executing program 1 (id=622): syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000000)={0x3, 0x302, 0x4, 0x1, 0x5, 0x8}) io_uring_setup(0x1cb6, &(0x7f0000000300)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000102c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000103c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000006b9a00fe00000000b609080085ffffff7b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000001500000085ffffffbf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}]}, 0x48}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x8e, 0xd6, 0x87, 0x10, 0xc21c, 0x79d3, 0x569d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x0, 0x1c0, 0x0, [{{0x9, 0x4, 0xb3, 0x0, 0x1, 0xe0, 0x1, 0x3, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x40, 0x3, 0x7a, 0x7}}]}}]}}]}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r2, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) 485.170634ms ago: executing program 0 (id=623): socket$nl_netfilter(0x10, 0x3, 0xc) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(0x0, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) pselect6(0x40, &(0x7f0000000340)={0xe0}, 0x0, 0x0, 0x0, 0x0) 290.656356ms ago: executing program 0 (id=624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x59, 0x0) r4 = openat$vimc2(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0xc0cc5605, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x34325852}) r5 = dup(r2) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x4000000000882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r7, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x9) socket$kcm(0x29, 0x2, 0x0) syz_open_procfs(0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x5ac}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') pselect6(0x40, &(0x7f0000000600)={0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 0s ago: executing program 3 (id=625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}}}]}]}], {0x14}}, 0x78}}, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x4000040) kernel console output (not intermixed with test programs): ] netlink: 'syz.0.11': attribute type 1 has an invalid length. [ 49.285036][ T5427] 9pnet_fd: Insufficient options for proto=fd [ 49.382121][ T5429] befs: Unrecognized mount option "ß" or missing value [ 49.384811][ T5429] befs: (nbd0): cannot parse mount options [ 49.455069][ T5433] netlink: 'syz.3.15': attribute type 4 has an invalid length. [ 49.666872][ T5443] netlink: 'syz.0.20': attribute type 1 has an invalid length. [ 49.686912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.691125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.696912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.754949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.786912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.043096][ T5377] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.129626][ T5344] Bluetooth: hci0: command tx timeout [ 50.131464][ T5344] Bluetooth: hci3: command tx timeout [ 50.207301][ T5352] Bluetooth: hci2: command tx timeout [ 50.208918][ T5352] Bluetooth: hci1: command tx timeout [ 50.231309][ T5377] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 50.235329][ T5377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 50.239673][ T5377] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 50.247723][ T5377] usb 5-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 50.250936][ T5377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.253619][ T5377] usb 5-1: Product: syz [ 50.255041][ T5377] usb 5-1: Manufacturer: syz [ 50.257514][ T5377] usb 5-1: SerialNumber: syz [ 50.262134][ T5377] usb 5-1: config 0 descriptor?? [ 50.270464][ T5377] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 50.274154][ T5377] em28xx 5-1:0.0: Video interface 0 found: isoc [ 50.536754][ T39] kauditd_printk_skb: 85 callbacks suppressed [ 50.536771][ T39] audit: type=1400 audit(1727815422.304:200): avc: denied { create } for pid=5453 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 50.549981][ T39] audit: type=1400 audit(1727815422.324:201): avc: denied { read write } for pid=5453 comm="syz.3.24" name="video2" dev="devtmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 50.559863][ T39] audit: type=1400 audit(1727815422.324:202): avc: denied { open } for pid=5453 comm="syz.3.24" path="/dev/video2" dev="devtmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 50.569617][ T39] audit: type=1400 audit(1727815422.324:203): avc: denied { ioctl } for pid=5453 comm="syz.3.24" path="/dev/video2" dev="devtmpfs" ino=876 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 50.586852][ T39] audit: type=1400 audit(1727815422.344:204): avc: denied { map } for pid=5453 comm="syz.3.24" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 50.594929][ T39] audit: type=1400 audit(1727815422.344:205): avc: denied { execute } for pid=5453 comm="syz.3.24" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 50.605441][ T39] audit: type=1400 audit(1727815422.364:206): avc: denied { create } for pid=5453 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.614503][ T39] audit: type=1400 audit(1727815422.364:207): avc: denied { read } for pid=5453 comm="syz.3.24" name="mouse0" dev="devtmpfs" ino=897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 50.620788][ T39] audit: type=1400 audit(1727815422.364:208): avc: denied { open } for pid=5453 comm="syz.3.24" path="/dev/input/mouse0" dev="devtmpfs" ino=897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 50.637840][ T39] audit: type=1400 audit(1727815422.414:209): avc: denied { create } for pid=5457 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 50.642420][ T5458] geneve2: entered promiscuous mode [ 50.648456][ T5458] geneve2: entered allmulticast mode [ 50.651378][ T5459] syz.3.24 uses obsolete (PF_INET,SOCK_PACKET) [ 50.657266][ T5459] syzkaller1: entered promiscuous mode [ 50.659260][ T5459] syzkaller1: entered allmulticast mode [ 51.173331][ T5475] netlink: 'syz.2.32': attribute type 1 has an invalid length. [ 51.247224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #310!!! [ 51.280230][ T5482] geneve2: entered promiscuous mode [ 51.282304][ T5482] geneve2: entered allmulticast mode [ 51.387772][ T5377] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 51.450328][ T5377] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 51.452546][ T5377] em28xx 5-1:0.0: board has no eeprom [ 51.453013][ T5489] fuse: Bad value for 'fd' [ 51.516942][ T5377] em28xx 5-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 51.521715][ T5377] em28xx 5-1:0.0: analog set to isoc mode. [ 51.536441][ T5377] usb 5-1: USB disconnect, device number 2 [ 51.539197][ T5377] em28xx 5-1:0.0: Disconnecting em28xx [ 51.544303][ T55] em28xx 5-1:0.0: Registering V4L2 extension [ 51.562432][ T55] em28xx 5-1:0.0: Config register raw data: 0xffffffed [ 51.565209][ T55] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 51.568025][ T55] em28xx 5-1:0.0: No AC97 audio processor [ 51.571221][ T55] usb 5-1: Decoder not found [ 51.572499][ T55] em28xx 5-1:0.0: failed to create media graph [ 51.574115][ T55] em28xx 5-1:0.0: V4L2 device video71 deregistered [ 51.601363][ T55] em28xx 5-1:0.0: Remote control support is not available for this card. [ 51.604692][ T5377] em28xx 5-1:0.0: Closing input extension [ 51.607157][ T5500] netlink: 'syz.1.42': attribute type 1 has an invalid length. [ 51.610558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.612899][ T5377] em28xx 5-1:0.0: Freeing device [ 51.613716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.636661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 51.814076][ T5518] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 51.820127][ T5518] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 51.879755][ T5520] fuse: Bad value for 'fd' [ 52.151800][ T5529] geneve2: entered promiscuous mode [ 52.153240][ T5529] geneve2: entered allmulticast mode [ 52.218389][ T5344] Bluetooth: hci3: command tx timeout [ 52.219857][ T5344] Bluetooth: hci0: command tx timeout [ 52.228742][ T5535] netlink: 'syz.2.56': attribute type 1 has an invalid length. [ 52.287133][ T5352] Bluetooth: hci1: command tx timeout [ 52.287240][ T5344] Bluetooth: hci2: command tx timeout [ 52.306587][ T5545] 9pnet_fd: Insufficient options for proto=fd [ 52.337197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.375148][ T5542] befs: Unrecognized mount option "ß" or missing value [ 52.377219][ T5542] befs: (nbd2): cannot parse mount options [ 52.382421][ T5550] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 52.407531][ T5554] syzkaller1: entered promiscuous mode [ 52.409684][ T5554] syzkaller1: entered allmulticast mode [ 52.434670][ T5550] kvm: pic: single mode not supported [ 52.442833][ T5550] kvm: pic: single mode not supported [ 52.444556][ T5550] kvm: pic: level sensitive irq not supported [ 52.446823][ T5550] kvm: pic: single mode not supported [ 52.448443][ T5550] kvm: pic: level sensitive irq not supported [ 52.450863][ T5550] kvm: pic: single mode not supported [ 52.453643][ T5550] kvm: pic: single mode not supported [ 52.458340][ T5550] kvm: pic: single mode not supported [ 52.459802][ T5550] kvm: pic: level sensitive irq not supported [ 52.461892][ T5550] kvm: pic: single mode not supported [ 52.463532][ T5550] kvm: pic: level sensitive irq not supported [ 52.465437][ T5550] kvm: pic: single mode not supported [ 52.468375][ T5550] kvm: pic: single mode not supported [ 52.472286][ T5550] kvm: pic: single mode not supported [ 52.473729][ T5550] kvm: pic: level sensitive irq not supported [ 52.475617][ T5550] kvm: pic: level sensitive irq not supported [ 52.480609][ T5550] kvm: pic: level sensitive irq not supported [ 52.482697][ T5550] kvm: pic: level sensitive irq not supported [ 52.487623][ T5550] kvm: pic: level sensitive irq not supported [ 52.489732][ T5550] kvm: pic: level sensitive irq not supported [ 52.883816][ T5568] netlink: 'syz.0.67': attribute type 1 has an invalid length. [ 53.388994][ T5594] netlink: 'syz.2.76': attribute type 1 has an invalid length. [ 53.891717][ T5620] syzkaller1: entered promiscuous mode [ 53.893802][ T5620] syzkaller1: entered allmulticast mode [ 53.929623][ T5624] netlink: 'syz.3.87': attribute type 1 has an invalid length. [ 54.225562][ T5634] Zero length message leads to an empty skb [ 54.286711][ T5344] Bluetooth: hci0: command tx timeout [ 54.288612][ T5344] Bluetooth: hci3: command tx timeout [ 54.290074][ T5342] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.342207][ T5640] siw: device registration error -23 [ 54.366634][ T5352] Bluetooth: hci2: command tx timeout [ 54.376730][ T5352] Bluetooth: hci1: command tx timeout [ 54.459846][ T5342] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 54.462654][ T5342] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 54.465841][ T5342] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 54.471920][ T5342] usb 8-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 54.475045][ T5342] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.477287][ T5342] usb 8-1: Product: syz [ 54.478395][ T5342] usb 8-1: Manufacturer: syz [ 54.479619][ T5342] usb 8-1: SerialNumber: syz [ 54.487717][ T5342] usb 8-1: config 0 descriptor?? [ 54.490631][ T5342] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 54.493040][ T5342] em28xx 8-1:0.0: Video interface 0 found: isoc [ 54.563229][ T5655] netlink: 'syz.2.100': attribute type 1 has an invalid length. [ 55.296786][ T1423] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 55.381020][ T5688] syzkaller1: entered promiscuous mode [ 55.382600][ T5688] syzkaller1: entered allmulticast mode [ 55.419035][ T5690] siw: device registration error -23 [ 55.546705][ T1423] usb 5-1: Using ep0 maxpacket: 16 [ 55.569188][ T1423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.573058][ T1423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.576865][ T1423] usb 5-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 55.581766][ T1423] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.593301][ T1423] usb 5-1: config 0 descriptor?? [ 55.597248][ T5342] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 55.660405][ T5342] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 55.663112][ T5342] em28xx 8-1:0.0: board has no eeprom [ 55.726684][ T5342] em28xx 8-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 55.732753][ T5342] em28xx 8-1:0.0: analog set to isoc mode. [ 55.737624][ T5405] em28xx 8-1:0.0: Registering V4L2 extension [ 55.739759][ T5342] usb 8-1: USB disconnect, device number 2 [ 55.745310][ T5342] em28xx 8-1:0.0: Disconnecting em28xx [ 55.756608][ T5698] kvm: pic: non byte read [ 55.759429][ T5698] kvm: pic: non byte read [ 55.761560][ T5698] kvm: pic: non byte read [ 55.763837][ T5698] kvm: pic: non byte read [ 55.766386][ T5698] kvm: pic: non byte read [ 55.771453][ T5405] em28xx 8-1:0.0: Config register raw data: 0xffffffed [ 55.773343][ T5405] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 55.775267][ T5405] em28xx 8-1:0.0: No AC97 audio processor [ 55.778341][ T5698] kvm: pic: non byte read [ 55.778889][ T5405] usb 8-1: Decoder not found [ 55.780342][ T5698] kvm: pic: non byte read [ 55.780886][ T5405] em28xx 8-1:0.0: failed to create media graph [ 55.782804][ T5698] kvm: pic: non byte read [ 55.783714][ T5405] em28xx 8-1:0.0: V4L2 device video71 deregistered [ 55.785985][ T5698] kvm: pic: non byte read [ 55.789467][ T5405] em28xx 8-1:0.0: Remote control support is not available for this card. [ 55.792113][ T5342] em28xx 8-1:0.0: Closing input extension [ 55.796458][ T5342] em28xx 8-1:0.0: Freeing device [ 55.818043][ T5698] kvm: pic: non byte read [ 56.210440][ T39] kauditd_printk_skb: 27 callbacks suppressed [ 56.210456][ T39] audit: type=1400 audit(1727815427.984:237): avc: denied { name_bind } for pid=5671 comm="syz.0.105" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 56.227620][ T39] audit: type=1400 audit(1727815428.004:238): avc: denied { create } for pid=5671 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 56.234518][ T39] audit: type=1400 audit(1727815428.004:239): avc: denied { write } for pid=5671 comm="syz.0.105" path="socket:[11535]" dev="sockfs" ino=11535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 56.357634][ T35] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.534634][ T35] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 56.538768][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 56.543100][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 56.552108][ T35] usb 6-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 56.558293][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.561816][ T35] usb 6-1: Product: syz [ 56.563495][ T35] usb 6-1: Manufacturer: syz [ 56.565547][ T35] usb 6-1: SerialNumber: syz [ 56.580907][ T35] usb 6-1: config 0 descriptor?? [ 56.603489][ T35] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 56.660320][ T39] audit: type=1400 audit(1727815428.334:240): avc: denied { read } for pid=5715 comm="syz.2.120" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 56.666410][ T39] audit: type=1400 audit(1727815428.334:241): avc: denied { open } for pid=5715 comm="syz.2.120" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 56.673411][ T39] audit: type=1400 audit(1727815428.334:242): avc: denied { ioctl } for pid=5715 comm="syz.2.120" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 56.767035][ T35] em28xx 6-1:0.0: Video interface 0 found: isoc [ 57.448099][ T5732] pic_ioport_write: 226 callbacks suppressed [ 57.448121][ T5732] kvm: pic: level sensitive irq not supported [ 57.450942][ T5732] kvm: pic: level sensitive irq not supported [ 57.455085][ T5732] kvm: pic: level sensitive irq not supported [ 57.459391][ T5732] kvm: pic: level sensitive irq not supported [ 57.463542][ T5732] kvm: pic: level sensitive irq not supported [ 57.467419][ T5732] kvm: pic: level sensitive irq not supported [ 57.474647][ T5732] kvm: pic: level sensitive irq not supported [ 57.478584][ T5732] kvm: pic: level sensitive irq not supported [ 57.482473][ T5732] kvm: pic: level sensitive irq not supported [ 57.486087][ T5732] kvm: pic: level sensitive irq not supported [ 57.619406][ T5742] syzkaller1: entered promiscuous mode [ 57.626648][ T5742] syzkaller1: entered allmulticast mode [ 57.666885][ T35] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 57.743125][ T35] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 57.745676][ T35] em28xx 6-1:0.0: board has no eeprom [ 57.787578][ T1423] usbhid 5-1:0.0: can't add hid device: -71 [ 57.789817][ T1423] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 57.793443][ T1423] usb 5-1: USB disconnect, device number 3 [ 57.808193][ T35] em28xx 6-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 57.814398][ T35] em28xx 6-1:0.0: analog set to isoc mode. [ 57.817161][ T64] em28xx 6-1:0.0: Registering V4L2 extension [ 57.823372][ T35] usb 6-1: USB disconnect, device number 2 [ 57.830038][ T35] em28xx 6-1:0.0: Disconnecting em28xx [ 57.845105][ T64] em28xx 6-1:0.0: Config register raw data: 0xffffffed [ 57.847753][ T64] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 57.850460][ T64] em28xx 6-1:0.0: No AC97 audio processor [ 57.853971][ T64] usb 6-1: Decoder not found [ 57.855783][ T64] em28xx 6-1:0.0: failed to create media graph [ 57.858777][ T64] em28xx 6-1:0.0: V4L2 device video71 deregistered [ 57.858924][ T5752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'. [ 57.862772][ T64] em28xx 6-1:0.0: Remote control support is not available for this card. [ 57.868457][ T35] em28xx 6-1:0.0: Closing input extension [ 57.872512][ T35] em28xx 6-1:0.0: Freeing device [ 57.885235][ T5752] bridge_slave_1: left allmulticast mode [ 57.887847][ T5752] bridge_slave_1: left promiscuous mode [ 57.891040][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.336644][ T1423] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 58.489271][ T1423] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 58.492858][ T1423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 58.496637][ T1423] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 58.502327][ T1423] usb 5-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 58.505315][ T1423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.509694][ T1423] usb 5-1: Product: syz [ 58.511114][ T1423] usb 5-1: Manufacturer: syz [ 58.512704][ T1423] usb 5-1: SerialNumber: syz [ 58.517158][ T1423] usb 5-1: config 0 descriptor?? [ 58.521082][ T1423] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 58.524179][ T1423] em28xx 5-1:0.0: Video interface 0 found: isoc [ 58.801292][ T5780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'. [ 58.804427][ T5780] bridge_slave_1: left allmulticast mode [ 58.806009][ T5780] bridge_slave_1: left promiscuous mode [ 58.808884][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.982198][ T39] audit: type=1400 audit(1727815430.754:243): avc: denied { write } for pid=5781 comm="syz.1.143" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 59.015826][ T5790] syzkaller1: entered promiscuous mode [ 59.018108][ T5790] syzkaller1: entered allmulticast mode [ 59.317060][ T5405] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.406855][ T1423] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 59.466657][ T5405] usb 6-1: Using ep0 maxpacket: 16 [ 59.492042][ T1423] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 59.492425][ T5405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.497981][ T1423] em28xx 5-1:0.0: board has no eeprom [ 59.499818][ T5405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.502717][ T5405] usb 6-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 59.505434][ T5405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.528219][ T5405] usb 6-1: config 0 descriptor?? [ 59.596558][ T1423] em28xx 5-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 59.601161][ T1423] em28xx 5-1:0.0: analog set to isoc mode. [ 59.603481][ T5342] em28xx 5-1:0.0: Registering V4L2 extension [ 59.607353][ T1423] usb 5-1: USB disconnect, device number 4 [ 59.617810][ T1423] em28xx 5-1:0.0: Disconnecting em28xx [ 59.631796][ T5342] em28xx 5-1:0.0: Config register raw data: 0xffffffed [ 59.633733][ T5342] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 59.635620][ T5342] em28xx 5-1:0.0: No AC97 audio processor [ 59.639801][ T5342] usb 5-1: Decoder not found [ 59.641410][ T5342] em28xx 5-1:0.0: failed to create media graph [ 59.643537][ T5342] em28xx 5-1:0.0: V4L2 device video71 deregistered [ 59.648168][ T5342] em28xx 5-1:0.0: Remote control support is not available for this card. [ 59.651840][ T1423] em28xx 5-1:0.0: Closing input extension [ 59.657255][ T1423] em28xx 5-1:0.0: Freeing device [ 60.307649][ T5816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.154'. [ 60.311097][ T5816] bridge_slave_1: left allmulticast mode [ 60.312627][ T5816] bridge_slave_1: left promiscuous mode [ 60.314233][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.496724][ T828] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 60.660240][ T828] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 60.664126][ T828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 60.667503][ T828] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 60.674045][ T828] usb 5-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 60.678542][ T828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.681388][ T828] usb 5-1: Product: syz [ 60.682732][ T828] usb 5-1: Manufacturer: syz [ 60.684121][ T828] usb 5-1: SerialNumber: syz [ 60.691260][ T828] usb 5-1: config 0 descriptor?? [ 60.696156][ T828] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 60.700188][ T828] em28xx 5-1:0.0: Video interface 0 found: isoc [ 60.968037][ T5833] syzkaller1: entered promiscuous mode [ 60.969743][ T5833] syzkaller1: entered allmulticast mode [ 61.508702][ T828] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 61.582843][ T828] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 61.585583][ T828] em28xx 5-1:0.0: board has no eeprom [ 61.656636][ T828] em28xx 5-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 61.662194][ T828] em28xx 5-1:0.0: analog set to isoc mode. [ 61.701514][ T5380] em28xx 5-1:0.0: Registering V4L2 extension [ 61.705703][ T828] usb 5-1: USB disconnect, device number 5 [ 61.707994][ T828] em28xx 5-1:0.0: Disconnecting em28xx [ 61.742136][ T5380] em28xx 5-1:0.0: Config register raw data: 0xffffffed [ 61.744619][ T5380] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 61.747196][ T5380] em28xx 5-1:0.0: No AC97 audio processor [ 61.754402][ T5380] usb 5-1: Decoder not found [ 61.755823][ T5380] em28xx 5-1:0.0: failed to create media graph [ 61.762606][ T5380] em28xx 5-1:0.0: V4L2 device video71 deregistered [ 61.772519][ T5380] em28xx 5-1:0.0: Remote control support is not available for this card. [ 61.775346][ T828] em28xx 5-1:0.0: Closing input extension [ 61.778971][ T5841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.163'. [ 61.779752][ T828] em28xx 5-1:0.0: Freeing device [ 61.883555][ T5405] usbhid 6-1:0.0: can't add hid device: -71 [ 61.886587][ T5405] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 61.901988][ T5405] usb 6-1: USB disconnect, device number 3 [ 62.056291][ T5855] befs: Unrecognized mount option "ß" or missing value [ 62.058563][ T5855] befs: (nbd2): cannot parse mount options [ 62.103307][ T5863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.172'. [ 62.275354][ T5869] syzkaller1: entered promiscuous mode [ 62.277314][ T5869] syzkaller1: entered allmulticast mode [ 62.591255][ T5878] picdev_read: 125 callbacks suppressed [ 62.591266][ T5878] kvm: pic: non byte read [ 62.720656][ T5887] bridge_slave_1: left allmulticast mode [ 62.722727][ T5887] bridge_slave_1: left promiscuous mode [ 62.724868][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.846626][ T828] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 62.901060][ T5891] befs: Unrecognized mount option "ß" or missing value [ 62.904975][ T5891] befs: (nbd0): cannot parse mount options [ 62.996646][ T828] usb 7-1: Using ep0 maxpacket: 16 [ 63.000025][ T828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.003914][ T828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.007867][ T828] usb 7-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 63.011347][ T828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.015922][ T828] usb 7-1: config 0 descriptor?? [ 63.163279][ T5906] geneve2: entered promiscuous mode [ 63.165293][ T5906] geneve2: entered allmulticast mode [ 63.329967][ T39] audit: type=1400 audit(1727815435.104:244): avc: denied { read } for pid=5915 comm="syz.3.194" name="uinput" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.336815][ T39] audit: type=1400 audit(1727815435.104:245): avc: denied { open } for pid=5915 comm="syz.3.194" path="/dev/uinput" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.387522][ T39] audit: type=1400 audit(1727815435.164:246): avc: denied { create } for pid=5915 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.392784][ T39] audit: type=1400 audit(1727815435.164:247): avc: denied { create } for pid=5915 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 63.398784][ T39] audit: type=1400 audit(1727815435.164:248): avc: denied { bind } for pid=5915 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.403786][ T39] audit: type=1400 audit(1727815435.164:249): avc: denied { setopt } for pid=5915 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.549026][ T5923] 9pnet_fd: Insufficient options for proto=fd [ 63.594409][ T5919] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 63.594420][ T39] audit: type=1400 audit(1727815435.364:250): avc: denied { mounton } for pid=5915 comm="syz.3.194" path="/36/file0" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.606016][ T5919] syz.3.194: attempt to access beyond end of device [ 63.606016][ T5919] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 63.766338][ T5927] syzkaller1: entered promiscuous mode [ 63.768790][ T5927] syzkaller1: entered allmulticast mode [ 64.441097][ T5936] befs: Unrecognized mount option "ß" or missing value [ 64.442921][ T5936] befs: (nbd1): cannot parse mount options [ 65.282038][ T5957] syzkaller1: entered promiscuous mode [ 65.286303][ T5957] syzkaller1: entered allmulticast mode [ 65.389054][ T828] usbhid 7-1:0.0: can't add hid device: -71 [ 65.390708][ T828] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 65.408139][ T828] usb 7-1: USB disconnect, device number 2 [ 65.616117][ T5961] 9pnet_fd: Insufficient options for proto=fd [ 65.767277][ T5967] befs: Unrecognized mount option "ß" or missing value [ 65.769264][ T5967] befs: (nbd0): cannot parse mount options [ 66.140416][ T5988] 9pnet_fd: Insufficient options for proto=fd [ 66.639512][ T5555] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 66.806621][ T5555] usb 5-1: Using ep0 maxpacket: 16 [ 66.810596][ T5555] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.815251][ T5555] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.819885][ T5555] usb 5-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 66.831985][ T5555] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.852185][ T5555] usb 5-1: config 0 descriptor?? [ 66.893522][ T6002] befs: Unrecognized mount option "ß" or missing value [ 66.895659][ T6002] befs: (nbd1): cannot parse mount options [ 67.277462][ T6017] syzkaller1: entered promiscuous mode [ 67.279383][ T6017] syzkaller1: entered allmulticast mode [ 67.297208][ T6016] 9pnet_fd: Insufficient options for proto=fd [ 67.487528][ T39] audit: type=1400 audit(1727815439.254:251): avc: denied { nlmsg_read } for pid=5981 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 68.181315][ T6030] netlink: 'syz.1.237': attribute type 4 has an invalid length. [ 68.234929][ T39] audit: type=1400 audit(1727815440.004:252): avc: denied { setopt } for pid=6031 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.260448][ T39] audit: type=1400 audit(1727815440.034:253): avc: denied { mount } for pid=6033 comm="syz.1.239" name="/" dev="ramfs" ino=13452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 68.265626][ T6034] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 68.591266][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 68.591277][ T39] audit: type=1400 audit(1727815440.364:257): avc: denied { setopt } for pid=6039 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.917699][ T39] audit: type=1400 audit(1727815440.694:258): avc: denied { map } for pid=6044 comm="syz.2.243" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 68.930156][ T39] audit: type=1804 audit(1727815440.704:259): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.243" name="/newroot/88/file0" dev="fuse" ino=1 res=1 errno=0 [ 68.935924][ T39] audit: type=1800 audit(1727815440.704:260): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.243" name="/" dev="fuse" ino=1 res=0 errno=0 [ 68.944980][ T39] audit: type=1804 audit(1727815440.714:261): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.243" name="/newroot/88/file0" dev="fuse" ino=1 res=1 errno=0 [ 69.003041][ T6048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.244'. [ 69.110276][ T5555] usbhid 5-1:0.0: can't add hid device: -71 [ 69.111967][ T5555] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 69.114860][ T5555] usb 5-1: USB disconnect, device number 6 [ 69.378370][ T6067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.253'. [ 69.434040][ T6069] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 70.092683][ T6088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.263'. [ 70.466651][ T6043] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 70.620891][ T6043] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 70.624620][ T6043] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.628490][ T6043] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 70.634448][ T6043] usb 5-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 70.637747][ T6043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.640346][ T6043] usb 5-1: Product: syz [ 70.641695][ T6043] usb 5-1: Manufacturer: syz [ 70.643188][ T6043] usb 5-1: SerialNumber: syz [ 70.647982][ T6043] usb 5-1: config 0 descriptor?? [ 70.652081][ T6043] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 70.655085][ T6043] em28xx 5-1:0.0: Video interface 0 found: isoc [ 71.319851][ T6100] kvm: pic: non byte read [ 71.410076][ T1372] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.411936][ T1372] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.536873][ T6043] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 71.576664][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 71.599280][ T6043] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 71.601677][ T6043] em28xx 5-1:0.0: board has no eeprom [ 71.675644][ T6043] em28xx 5-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 71.681391][ T6043] em28xx 5-1:0.0: analog set to isoc mode. [ 71.683405][ T5555] em28xx 5-1:0.0: Registering V4L2 extension [ 71.699285][ T6043] usb 5-1: USB disconnect, device number 7 [ 71.701851][ T6043] em28xx 5-1:0.0: Disconnecting em28xx [ 71.735701][ T5555] em28xx 5-1:0.0: Config register raw data: 0xffffffed [ 71.737796][ T5555] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 71.740223][ T5555] em28xx 5-1:0.0: No AC97 audio processor [ 71.746575][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 71.749195][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.750209][ T5555] usb 5-1: Decoder not found [ 71.751946][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.756024][ T25] usb 7-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 71.756569][ T5555] em28xx 5-1:0.0: failed to create media graph [ 71.761535][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.763042][ T5555] em28xx 5-1:0.0: V4L2 device video71 deregistered [ 71.785819][ T5555] em28xx 5-1:0.0: Remote control support is not available for this card. [ 71.786080][ T25] usb 7-1: config 0 descriptor?? [ 71.788892][ T6043] em28xx 5-1:0.0: Closing input extension [ 71.795481][ T6043] em28xx 5-1:0.0: Freeing device [ 72.098881][ T6118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.272'. [ 72.169388][ T39] audit: type=1400 audit(1727815443.944:262): avc: denied { write } for pid=6105 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.449740][ T5344] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.454878][ T5344] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.457964][ T5344] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.461418][ T5344] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.465079][ T5344] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.467562][ T5344] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.481178][ T39] audit: type=1400 audit(1727815445.264:263): avc: denied { mounton } for pid=6135 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 73.636720][ T828] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 73.790644][ T828] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 73.794580][ T828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 73.798836][ T828] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 73.807748][ T6135] chnl_net:caif_netlink_parms(): no params data found [ 73.814349][ T828] usb 6-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 73.817884][ T828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.820885][ T828] usb 6-1: Product: syz [ 73.822469][ T828] usb 6-1: Manufacturer: syz [ 73.824359][ T828] usb 6-1: SerialNumber: syz [ 73.828168][ T828] usb 6-1: config 0 descriptor?? [ 73.834067][ T828] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 73.837732][ T828] em28xx 6-1:0.0: Video interface 0 found: isoc [ 73.927433][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.929492][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.931450][ T6135] bridge_slave_0: entered allmulticast mode [ 73.933486][ T6135] bridge_slave_0: entered promiscuous mode [ 73.936286][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.938827][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.941173][ T6135] bridge_slave_1: entered allmulticast mode [ 73.945655][ T6135] bridge_slave_1: entered promiscuous mode [ 73.989871][ T6135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.996270][ T6135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.031906][ T6135] team0: Port device team_slave_0 added [ 74.038558][ T6135] team0: Port device team_slave_1 added [ 74.073508][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.075456][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.082812][ T6135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.088987][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.091265][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.100959][ T6135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.138983][ T6135] hsr_slave_0: entered promiscuous mode [ 74.141055][ T6135] hsr_slave_1: entered promiscuous mode [ 74.143021][ T6135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.145652][ T6135] Cannot create hsr debugfs directory [ 74.229567][ T6135] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.261154][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 74.262819][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 74.272022][ T25] usb 7-1: USB disconnect, device number 3 [ 74.298468][ T6135] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.416956][ T6135] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.491626][ T6135] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.572002][ T6148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.281'. [ 74.575125][ T6135] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.594113][ T6135] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.599743][ T6135] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.614830][ T6135] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.629889][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.631789][ T6135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.633768][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.635620][ T6135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.640390][ T828] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 74.669708][ T6135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.683802][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.691275][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.700775][ T828] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 74.706617][ T828] em28xx 6-1:0.0: board has no eeprom [ 74.718593][ T6135] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.731368][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.733262][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.748411][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.750413][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.777728][ T828] em28xx 6-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 74.781919][ T828] em28xx 6-1:0.0: analog set to isoc mode. [ 74.784218][ T5897] em28xx 6-1:0.0: Registering V4L2 extension [ 74.800883][ T5897] em28xx 6-1:0.0: reading from i2c device at 0x4a failed (error=-5) [ 74.804068][ T5897] em28xx 6-1:0.0: reading from i2c device at 0x48 failed (error=-5) [ 74.807640][ T5897] em28xx 6-1:0.0: reading from i2c device at 0x42 failed (error=-5) [ 74.811932][ T5897] em28xx 6-1:0.0: reading from i2c device at 0x40 failed (error=-5) [ 74.815441][ T5897] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 74.819055][ T828] usb 6-1: USB disconnect, device number 4 [ 74.821352][ T828] em28xx 6-1:0.0: Disconnecting em28xx [ 74.828162][ T5897] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 74.830027][ T5897] em28xx 6-1:0.0: No AC97 audio processor [ 74.840593][ T5897] usb 6-1: Decoder not found [ 74.841860][ T5897] em28xx 6-1:0.0: failed to create media graph [ 74.843481][ T5897] em28xx 6-1:0.0: V4L2 device video71 deregistered [ 74.847971][ T5897] em28xx 6-1:0.0: Remote control support is not available for this card. [ 74.860526][ T828] em28xx 6-1:0.0: Closing input extension [ 74.870070][ T39] audit: type=1400 audit(1727815446.644:264): avc: denied { sys_module } for pid=6135 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.870215][ T828] em28xx 6-1:0.0: Freeing device [ 74.973681][ T6135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.060810][ T6135] veth0_vlan: entered promiscuous mode [ 75.084316][ T6135] veth1_vlan: entered promiscuous mode [ 75.139552][ T6135] veth0_macvtap: entered promiscuous mode [ 75.151180][ T6135] veth1_macvtap: entered promiscuous mode [ 75.173771][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.177544][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.187051][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.190674][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.196609][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.200618][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.204011][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.216736][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.221560][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.228333][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.231196][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.233779][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.238992][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.241593][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.244334][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.249625][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.252746][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.256167][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.260349][ T6135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.262736][ T6135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.265126][ T6135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.267530][ T6135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.295373][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.298168][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.310598][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.313044][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.320088][ T39] audit: type=1400 audit(1727815447.094:265): avc: denied { mount } for pid=6135 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.436739][ T829] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 75.486653][ T5352] Bluetooth: hci4: command tx timeout [ 75.598213][ T829] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 75.606585][ T829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.609426][ T829] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.625783][ T829] usb 6-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 75.634344][ T829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.636671][ T829] usb 6-1: Product: syz [ 75.637782][ T829] usb 6-1: Manufacturer: syz [ 75.639029][ T829] usb 6-1: SerialNumber: syz [ 75.642094][ T829] usb 6-1: config 0 descriptor?? [ 75.645209][ T829] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 75.648858][ T829] em28xx 6-1:0.0: Video interface 0 found: isoc [ 75.702349][ T6178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.291'. [ 76.509132][ T6195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.296'. [ 76.748007][ T829] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 76.758502][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 76.810046][ T829] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 76.812852][ T829] em28xx 6-1:0.0: board has no eeprom [ 76.882536][ T829] em28xx 6-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 77.233524][ T829] em28xx 6-1:0.0: analog set to isoc mode. [ 77.236323][ T25] em28xx 6-1:0.0: Registering V4L2 extension [ 77.240012][ T829] usb 6-1: USB disconnect, device number 5 [ 77.242973][ T829] em28xx 6-1:0.0: Disconnecting em28xx [ 77.265313][ T25] em28xx 6-1:0.0: Config register raw data: 0xffffffed [ 77.267687][ T25] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 77.269899][ T25] em28xx 6-1:0.0: No AC97 audio processor [ 77.272165][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.306'. [ 77.272215][ T25] usb 6-1: Decoder not found [ 77.275893][ T25] em28xx 6-1:0.0: failed to create media graph [ 77.278113][ T25] em28xx 6-1:0.0: V4L2 device video71 deregistered [ 77.280851][ T25] em28xx 6-1:0.0: Remote control support is not available for this card. [ 77.283206][ T829] em28xx 6-1:0.0: Closing input extension [ 77.287151][ T829] em28xx 6-1:0.0: Freeing device [ 77.546620][ T6043] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 77.576625][ T5352] Bluetooth: hci4: command tx timeout [ 77.591497][ T39] audit: type=1804 audit(1727815449.364:266): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.308" name="/newroot/68/file0" dev="fuse" ino=1 res=1 errno=0 [ 77.603446][ T39] audit: type=1800 audit(1727815449.364:267): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.308" name="/" dev="fuse" ino=1 res=0 errno=0 [ 77.613156][ T39] audit: type=1804 audit(1727815449.364:268): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.308" name="/newroot/68/file0" dev="fuse" ino=1 res=1 errno=0 [ 77.698528][ T6043] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 77.702421][ T6043] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.706466][ T6043] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.714049][ T6043] usb 7-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 77.717550][ T6043] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.720629][ T6043] usb 7-1: Product: syz [ 77.722255][ T6043] usb 7-1: Manufacturer: syz [ 77.724039][ T6043] usb 7-1: SerialNumber: syz [ 77.727938][ T6043] usb 7-1: config 0 descriptor?? [ 77.734185][ T6043] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 77.736922][ T6043] em28xx 7-1:0.0: Video interface 0 found: isoc [ 78.606823][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 78.829110][ T6247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.318'. [ 78.832615][ T39] audit: type=1804 audit(1727815450.604:269): pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.317" name="/newroot/126/file0" dev="fuse" ino=1 res=1 errno=0 [ 78.843868][ T39] audit: type=1800 audit(1727815450.604:270): pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.317" name="/" dev="fuse" ino=1 res=0 errno=0 [ 78.846843][ T6043] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 78.851936][ T39] audit: type=1804 audit(1727815450.604:271): pid=6245 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.317" name="/newroot/126/file0" dev="fuse" ino=1 res=1 errno=0 [ 78.909234][ T6043] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 78.911858][ T6043] em28xx 7-1:0.0: board has no eeprom [ 78.968352][ T6043] em28xx 7-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 78.986611][ T6043] em28xx 7-1:0.0: analog set to isoc mode. [ 78.989398][ T6043] em28xx 7-1:0.0: Registering V4L2 extension [ 79.039887][ T4760] usb 7-1: USB disconnect, device number 4 [ 79.043678][ T4760] em28xx 7-1:0.0: Disconnecting em28xx [ 79.106230][ T6043] em28xx 7-1:0.0: Config register raw data: 0xffffffed [ 79.108123][ T6043] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 79.109818][ T6043] em28xx 7-1:0.0: No AC97 audio processor [ 79.112047][ T6043] usb 7-1: Decoder not found [ 79.113266][ T6043] em28xx 7-1:0.0: failed to create media graph [ 79.114850][ T6043] em28xx 7-1:0.0: V4L2 device video71 deregistered [ 79.117653][ T6043] em28xx 7-1:0.0: Remote control support is not available for this card. [ 79.120050][ T4760] em28xx 7-1:0.0: Closing input extension [ 79.123962][ T4760] em28xx 7-1:0.0: Freeing device [ 79.156582][ T35] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 79.263386][ T6260] No control pipe specified [ 79.330688][ T35] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 79.333877][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.337507][ T35] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.343882][ T35] usb 8-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 79.346451][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.353693][ T35] usb 8-1: Product: syz [ 79.355065][ T35] usb 8-1: Manufacturer: syz [ 79.357490][ T35] usb 8-1: SerialNumber: syz [ 79.361429][ T35] usb 8-1: config 0 descriptor?? [ 79.365300][ T35] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 79.367933][ T35] em28xx 8-1:0.0: Video interface 0 found: isoc [ 79.643522][ T39] audit: type=1400 audit(1727815451.414:272): avc: denied { read } for pid=6261 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.656869][ T5352] Bluetooth: hci4: command tx timeout [ 79.800988][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 80.213254][ T6276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.328'. [ 80.376803][ T35] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 80.416099][ T39] audit: type=1804 audit(1727815452.184:273): pid=6281 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.329" name="/newroot/4/file0" dev="fuse" ino=1 res=1 errno=0 [ 80.426684][ T39] audit: type=1800 audit(1727815452.184:274): pid=6281 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.329" name="/" dev="fuse" ino=1 res=0 errno=0 [ 80.439324][ T35] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 80.441392][ T35] em28xx 8-1:0.0: board has no eeprom [ 80.445095][ T39] audit: type=1804 audit(1727815452.214:275): pid=6278 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.329" name="/newroot/4/file0" dev="fuse" ino=1 res=1 errno=0 [ 80.497294][ T35] em28xx 8-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 80.501508][ T35] em28xx 8-1:0.0: analog set to isoc mode. [ 80.530445][ T35] usb 8-1: USB disconnect, device number 3 [ 80.534950][ T4760] em28xx 8-1:0.0: Registering V4L2 extension [ 80.558155][ T6291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.334'. [ 80.561167][ T6291] bridge_slave_1: left allmulticast mode [ 80.562968][ T6291] bridge_slave_1: left promiscuous mode [ 80.564698][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.620676][ T6291] batman_adv: batadv0: Adding interface: bridge_slave_1 [ 80.622780][ T6291] batman_adv: batadv0: The MTU of interface bridge_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.634155][ T6291] batman_adv: batadv0: Interface activated: bridge_slave_1 [ 80.883604][ T4760] em28xx 8-1:0.0: reading from i2c device at 0x4a failed (error=-19) [ 80.886310][ T4760] em28xx 8-1:0.0: reading from i2c device at 0x48 failed (error=-19) [ 80.889383][ T35] em28xx 8-1:0.0: Disconnecting em28xx [ 80.891433][ T4760] em28xx 8-1:0.0: Config register raw data: 0xffffffed [ 80.893529][ T4760] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 80.895676][ T4760] em28xx 8-1:0.0: No AC97 audio processor [ 80.905440][ T4760] usb 8-1: Decoder not found [ 80.907518][ T4760] em28xx 8-1:0.0: failed to create media graph [ 80.909608][ T4760] em28xx 8-1:0.0: V4L2 device video71 deregistered [ 80.917146][ T4760] em28xx 8-1:0.0: Remote control support is not available for this card. [ 80.920331][ T35] em28xx 8-1:0.0: Closing input extension [ 80.930195][ T35] em28xx 8-1:0.0: Freeing device [ 81.236717][ T35] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 81.341799][ T6302] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.389988][ T35] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 81.393800][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.398091][ T35] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.405053][ T35] usb 8-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 81.408529][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.411373][ T35] usb 8-1: Product: syz [ 81.413593][ T35] usb 8-1: Manufacturer: syz [ 81.415703][ T35] usb 8-1: SerialNumber: syz [ 81.421574][ T35] usb 8-1: config 0 descriptor?? [ 81.429147][ T35] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 81.432505][ T35] em28xx 8-1:0.0: Video interface 0 found: isoc [ 81.649155][ T30] cfg80211: failed to load regulatory.db [ 81.736636][ T5352] Bluetooth: hci4: command tx timeout [ 82.226807][ T35] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 82.288853][ T35] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 82.291867][ T35] em28xx 8-1:0.0: board has no eeprom [ 82.353694][ T39] audit: type=1804 audit(1727815454.124:276): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.342" name="/newroot/86/file0" dev="fuse" ino=1 res=1 errno=0 [ 82.359794][ T35] em28xx 8-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 82.364226][ T35] em28xx 8-1:0.0: analog set to isoc mode. [ 82.368009][ T4760] em28xx 8-1:0.0: Registering V4L2 extension [ 82.412238][ T39] audit: type=1804 audit(1727815454.184:277): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.342" name="/newroot/86/file0" dev="fuse" ino=1 res=1 errno=0 [ 82.421586][ T6318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.343'. [ 82.425440][ T6318] batman_adv: batadv0: Interface deactivated: bridge_slave_1 [ 82.429648][ T6318] batman_adv: batadv0: Removing interface: bridge_slave_1 [ 82.437187][ T35] usb 8-1: USB disconnect, device number 4 [ 82.439607][ T35] em28xx 8-1:0.0: Disconnecting em28xx [ 82.443465][ T4760] em28xx 8-1:0.0: Config register raw data: 0xffffffed [ 82.446670][ T4760] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 82.448858][ T4760] em28xx 8-1:0.0: No AC97 audio processor [ 82.453108][ T4760] usb 8-1: Decoder not found [ 82.455053][ T4760] em28xx 8-1:0.0: failed to create media graph [ 82.459286][ T4760] em28xx 8-1:0.0: V4L2 device video71 deregistered [ 82.468123][ T4760] em28xx 8-1:0.0: Remote control support is not available for this card. [ 82.474142][ T35] em28xx 8-1:0.0: Closing input extension [ 82.477671][ T35] em28xx 8-1:0.0: Freeing device [ 82.943879][ T6328] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 83.266669][ T5897] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 83.418118][ T5897] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 83.421962][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.425754][ T5897] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.433281][ T5897] usb 7-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 83.435739][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.438033][ T5897] usb 7-1: Product: syz [ 83.439173][ T5897] usb 7-1: Manufacturer: syz [ 83.440523][ T5897] usb 7-1: SerialNumber: syz [ 83.442772][ T5897] usb 7-1: config 0 descriptor?? [ 83.447721][ T5897] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 83.450267][ T5897] em28xx 7-1:0.0: Video interface 0 found: isoc [ 83.543902][ T6339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'. [ 83.733174][ T6347] syzkaller1: entered promiscuous mode [ 83.734855][ T6347] syzkaller1: entered allmulticast mode [ 83.818746][ T6350] netlink: 28 bytes leftover after parsing attributes in process `syz.3.356'. [ 84.088602][ T39] audit: type=1804 audit(1727815455.864:278): pid=6357 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.358" name="/newroot/20/file0" dev="fuse" ino=1 res=1 errno=0 [ 84.177446][ T39] audit: type=1804 audit(1727815455.954:279): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.358" name="/newroot/20/file0" dev="fuse" ino=1 res=1 errno=0 [ 84.556876][ T5897] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 84.622804][ T5897] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 84.629294][ T5897] em28xx 7-1:0.0: board has no eeprom [ 84.637038][ T39] audit: type=1400 audit(1727815456.414:280): avc: denied { rename } for pid=4813 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.644206][ T39] audit: type=1400 audit(1727815456.414:281): avc: denied { unlink } for pid=4813 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.694203][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'. [ 84.696750][ T39] audit: type=1400 audit(1727815456.414:282): avc: denied { create } for pid=4813 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.700795][ T5897] em28xx 7-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 84.710598][ T5897] em28xx 7-1:0.0: analog set to isoc mode. [ 84.727193][ T5380] em28xx 7-1:0.0: Registering V4L2 extension [ 84.771820][ T6368] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 84.796866][ T5897] usb 7-1: USB disconnect, device number 5 [ 84.801403][ T5897] em28xx 7-1:0.0: Disconnecting em28xx [ 84.807037][ T5380] em28xx 7-1:0.0: reading from i2c device at 0x4a failed (error=-5) [ 84.809937][ T5380] em28xx 7-1:0.0: Config register raw data: 0xffffffed [ 84.812315][ T5380] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 84.815821][ T5380] em28xx 7-1:0.0: No AC97 audio processor [ 84.819237][ T5380] usb 7-1: Decoder not found [ 84.820875][ T5380] em28xx 7-1:0.0: failed to create media graph [ 84.823667][ T5380] em28xx 7-1:0.0: V4L2 device video71 deregistered [ 84.826583][ T5380] em28xx 7-1:0.0: Remote control support is not available for this card. [ 84.829466][ T5897] em28xx 7-1:0.0: Closing input extension [ 84.840592][ T5897] em28xx 7-1:0.0: Freeing device [ 85.118683][ T6389] syzkaller1: entered promiscuous mode [ 85.121018][ T6389] syzkaller1: entered allmulticast mode [ 85.141765][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.370'. [ 85.246761][ T5380] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 85.290674][ T6391] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 85.400411][ T5380] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 85.403371][ T5380] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.407512][ T5380] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.413807][ T5380] usb 6-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 85.418785][ T5380] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.422028][ T5380] usb 6-1: Product: syz [ 85.424403][ T5380] usb 6-1: Manufacturer: syz [ 85.426099][ T5380] usb 6-1: SerialNumber: syz [ 85.432228][ T5380] usb 6-1: config 0 descriptor?? [ 85.438159][ T5380] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 85.441910][ T5380] em28xx 6-1:0.0: Video interface 0 found: isoc [ 86.036359][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 86.036377][ T39] audit: type=1804 audit(1727815457.804:284): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.373" name="/newroot/23/file0" dev="fuse" ino=1 res=1 errno=0 [ 86.090641][ T39] audit: type=1804 audit(1727815457.864:285): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.373" name="/newroot/23/file0" dev="fuse" ino=1 res=1 errno=0 [ 86.337111][ T5380] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 86.401812][ T5380] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 86.407050][ T5380] em28xx 6-1:0.0: board has no eeprom [ 86.466625][ T5380] em28xx 6-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 86.471477][ T5380] em28xx 6-1:0.0: analog set to isoc mode. [ 86.484175][ T5380] usb 6-1: USB disconnect, device number 6 [ 86.487430][ T5380] em28xx 6-1:0.0: Disconnecting em28xx [ 86.489113][ T5897] em28xx 6-1:0.0: Registering V4L2 extension [ 86.513518][ T5897] em28xx 6-1:0.0: Config register raw data: 0xffffffed [ 86.518070][ T5897] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 86.522650][ T5897] em28xx 6-1:0.0: No AC97 audio processor [ 86.528302][ T5897] usb 6-1: Decoder not found [ 86.532217][ T5897] em28xx 6-1:0.0: failed to create media graph [ 86.536330][ T5897] em28xx 6-1:0.0: V4L2 device video71 deregistered [ 86.540177][ T5897] em28xx 6-1:0.0: Remote control support is not available for this card. [ 86.545855][ T5380] em28xx 6-1:0.0: Closing input extension [ 86.550332][ T5380] em28xx 6-1:0.0: Freeing device [ 86.627702][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 86.818758][ T39] audit: type=1800 audit(1727815458.584:286): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.373" name="/" dev="fuse" ino=1 res=0 errno=0 [ 86.917625][ T6423] syzkaller1: entered promiscuous mode [ 86.919105][ T6423] syzkaller1: entered allmulticast mode [ 87.187920][ T6427] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 87.206626][ T30] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 87.369523][ T30] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 87.378121][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.385436][ T30] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.400077][ T30] usb 8-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 87.407367][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.413702][ T30] usb 8-1: Product: syz [ 87.416452][ T30] usb 8-1: Manufacturer: syz [ 87.420890][ T30] usb 8-1: SerialNumber: syz [ 87.427807][ T30] usb 8-1: config 0 descriptor?? [ 87.434935][ T30] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 87.438335][ T30] em28xx 8-1:0.0: Video interface 0 found: isoc [ 87.573766][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'. [ 87.858406][ T6447] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 87.866104][ T6447] syz.2.390: attempt to access beyond end of device [ 87.866104][ T6447] loop2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 88.657161][ T30] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 88.836845][ T30] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 88.839953][ T30] em28xx 8-1:0.0: board has no eeprom [ 88.897398][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.398'. [ 88.897431][ T30] em28xx 8-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 88.912673][ T30] em28xx 8-1:0.0: analog set to isoc mode. [ 88.916674][ T5405] em28xx 8-1:0.0: Registering V4L2 extension [ 88.928802][ T30] usb 8-1: USB disconnect, device number 5 [ 88.932761][ T5405] em28xx 8-1:0.0: reading from i2c device at 0x4a failed (error=-19) [ 88.935813][ T5405] em28xx 8-1:0.0: reading from i2c device at 0x48 failed (error=-19) [ 88.939055][ T5405] em28xx 8-1:0.0: reading from i2c device at 0x42 failed (error=-19) [ 88.941998][ T5405] em28xx 8-1:0.0: reading from i2c device at 0x40 failed (error=-19) [ 88.944887][ T5405] em28xx 8-1:0.0: Config register raw data: 0xffffffed [ 88.948808][ T30] em28xx 8-1:0.0: Disconnecting em28xx [ 88.951437][ T5405] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 88.963287][ T5405] em28xx 8-1:0.0: No AC97 audio processor [ 88.973083][ T5405] usb 8-1: Decoder not found [ 88.974996][ T5405] em28xx 8-1:0.0: failed to create media graph [ 88.980258][ T5405] em28xx 8-1:0.0: V4L2 device video71 deregistered [ 88.987255][ T5405] em28xx 8-1:0.0: Remote control support is not available for this card. [ 88.994366][ T30] em28xx 8-1:0.0: Closing input extension [ 89.029984][ T6476] syzkaller1: entered promiscuous mode [ 89.034253][ T6476] syzkaller1: entered allmulticast mode [ 89.062957][ T30] em28xx 8-1:0.0: Freeing device [ 91.066850][ T35] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 91.136483][ T6497] overlayfs: failed to resolve './file0': -2 [ 91.256802][ T35] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.260710][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.264390][ T35] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.274700][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.409'. [ 91.338722][ T35] usb 8-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 91.346648][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.350012][ T35] usb 8-1: Product: syz [ 91.351515][ T35] usb 8-1: Manufacturer: syz [ 91.363508][ T35] usb 8-1: SerialNumber: syz [ 91.367520][ T35] usb 8-1: config 0 descriptor?? [ 91.375220][ T35] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 91.383823][ T35] em28xx 8-1:0.0: Video interface 0 found: isoc [ 91.507855][ T6505] syzkaller1: entered promiscuous mode [ 91.509792][ T6505] syzkaller1: entered allmulticast mode [ 92.499631][ T6522] overlayfs: failed to resolve './file0': -2 [ 92.518856][ T35] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 92.589393][ T35] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 92.596744][ T35] em28xx 8-1:0.0: board has no eeprom [ 92.645629][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.418'. [ 92.666599][ T35] em28xx 8-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 92.686635][ T35] em28xx 8-1:0.0: analog set to isoc mode. [ 92.689465][ T6043] em28xx 8-1:0.0: Registering V4L2 extension [ 92.716254][ T6043] em28xx 8-1:0.0: reading from i2c device at 0x4a failed (error=-5) [ 92.719437][ T6043] em28xx 8-1:0.0: reading from i2c device at 0x48 failed (error=-5) [ 92.721888][ T6043] em28xx 8-1:0.0: reading from i2c device at 0x42 failed (error=-5) [ 92.724833][ T6043] em28xx 8-1:0.0: reading from i2c device at 0x40 failed (error=-5) [ 92.734864][ T6043] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 92.746591][ T6043] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 92.754319][ T6043] em28xx 8-1:0.0: No AC97 audio processor [ 92.770773][ T6043] usb 8-1: Decoder not found [ 92.773696][ T6043] em28xx 8-1:0.0: failed to create media graph [ 92.778788][ T6043] em28xx 8-1:0.0: V4L2 device video71 deregistered [ 92.787123][ T6043] em28xx 8-1:0.0: Remote control support is not available for this card. [ 93.196972][ T5380] usb 8-1: USB disconnect, device number 6 [ 93.259277][ T5380] em28xx 8-1:0.0: Disconnecting em28xx [ 93.261285][ T5380] em28xx 8-1:0.0: Closing input extension [ 93.322040][ T5380] em28xx 8-1:0.0: Freeing device [ 93.611080][ T6546] No control pipe specified [ 93.844520][ T6550] syzkaller1: entered promiscuous mode [ 93.846225][ T6550] syzkaller1: entered allmulticast mode [ 94.081870][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'. [ 94.701668][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.436'. [ 95.994211][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 96.000310][ T6612] syzkaller1: entered promiscuous mode [ 96.001892][ T6612] syzkaller1: entered allmulticast mode [ 96.216677][ T5405] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 96.386698][ T5405] usb 6-1: Using ep0 maxpacket: 16 [ 96.398266][ T5405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.407303][ T5405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.422966][ T5405] usb 6-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 96.427272][ T5405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.443655][ T5405] usb 6-1: config 0 descriptor?? [ 97.145123][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.456'. [ 97.390107][ T6644] syzkaller1: entered promiscuous mode [ 97.392097][ T6644] syzkaller1: entered allmulticast mode [ 97.806647][ T5344] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.809922][ T5344] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.817682][ T5344] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.821819][ T5344] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.824629][ T5344] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 97.827010][ T5344] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.015823][ T6650] chnl_net:caif_netlink_parms(): no params data found [ 98.023603][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.465'. [ 98.099986][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 98.104079][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.106313][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.109120][ T6650] bridge_slave_0: entered allmulticast mode [ 98.111652][ T6650] bridge_slave_0: entered promiscuous mode [ 98.112262][ T39] audit: type=1400 audit(1727815469.894:287): avc: denied { listen } for pid=6661 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 98.120394][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.122478][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.125100][ T6650] bridge_slave_1: entered allmulticast mode [ 98.128670][ T6650] bridge_slave_1: entered promiscuous mode [ 98.170370][ T6650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.175526][ T6650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.217515][ T6650] team0: Port device team_slave_0 added [ 98.220842][ T6650] team0: Port device team_slave_1 added [ 98.302462][ T6650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.304974][ T6650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.313096][ T6650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.318021][ T6650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.320055][ T6650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.327691][ T6650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.383140][ T6650] hsr_slave_0: entered promiscuous mode [ 98.385083][ T6650] hsr_slave_1: entered promiscuous mode [ 98.387251][ T6650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.389230][ T6650] Cannot create hsr debugfs directory [ 98.455818][ T6650] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.525246][ T6650] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.566657][ T30] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 98.608513][ T6650] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.658552][ T6650] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.696598][ T5405] usbhid 6-1:0.0: can't add hid device: -71 [ 98.698280][ T5405] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 98.705596][ T5405] usb 6-1: USB disconnect, device number 7 [ 98.740971][ T30] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 98.743844][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.746970][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.752861][ T30] usb 5-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 98.755558][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.758471][ T30] usb 5-1: Product: syz [ 98.759724][ T30] usb 5-1: Manufacturer: syz [ 98.761547][ T30] usb 5-1: SerialNumber: syz [ 98.765217][ T6650] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.765439][ T30] usb 5-1: config 0 descriptor?? [ 98.770777][ T30] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 98.770843][ T6650] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.773243][ T30] em28xx 5-1:0.0: Video interface 0 found: isoc [ 98.788070][ T6650] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.792290][ T6650] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.809359][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.812033][ T6650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.814768][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.817460][ T6650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.869525][ T6650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.889166][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.895070][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.944114][ T6650] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.972993][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.975020][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.015811][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.018451][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.049383][ T6678] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 99.055653][ T6678] syz.1.472: attempt to access beyond end of device [ 99.055653][ T6678] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 99.582386][ T6650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.646365][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'. [ 99.731881][ T6650] veth0_vlan: entered promiscuous mode [ 99.766534][ T6650] veth1_vlan: entered promiscuous mode [ 99.839761][ T6650] veth0_macvtap: entered promiscuous mode [ 99.843024][ T6650] veth1_macvtap: entered promiscuous mode [ 99.892495][ T30] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 99.896708][ T5344] Bluetooth: hci5: command tx timeout [ 99.910186][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.912888][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.915495][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.928156][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.933332][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.948454][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.958826][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.971937][ T30] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 99.974056][ T30] em28xx 5-1:0.0: board has no eeprom [ 99.977392][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.986633][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.990409][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.011323][ T6650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.026738][ T30] em28xx 5-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 100.028148][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 100.031502][ T30] em28xx 5-1:0.0: analog set to isoc mode. [ 100.036461][ T1423] em28xx 5-1:0.0: Registering V4L2 extension [ 100.097487][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.100493][ T1423] em28xx 5-1:0.0: reading from i2c device at 0x4a failed (error=-5) [ 100.102007][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.103866][ T1423] em28xx 5-1:0.0: reading from i2c device at 0x48 failed (error=-5) [ 100.128041][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.131562][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.133034][ T1423] em28xx 5-1:0.0: reading from i2c device at 0x42 failed (error=-5) [ 100.134784][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.151284][ T1423] em28xx 5-1:0.0: reading from i2c device at 0x40 failed (error=-5) [ 100.153636][ T1423] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 100.155674][ T1423] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 100.157559][ T1423] em28xx 5-1:0.0: No AC97 audio processor [ 100.176744][ T1423] usb 5-1: Decoder not found [ 100.178188][ T1423] em28xx 5-1:0.0: failed to create media graph [ 100.180224][ T1423] em28xx 5-1:0.0: V4L2 device video71 deregistered [ 100.186886][ T1423] em28xx 5-1:0.0: Remote control support is not available for this card. [ 100.191057][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.194551][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.211282][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.214690][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.236598][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.287994][ T6650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.293801][ T6650] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.317774][ T6650] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.320780][ T6650] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.336586][ T6650] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.492366][ T6702] syzkaller1: entered promiscuous mode [ 100.493943][ T6702] syzkaller1: entered allmulticast mode [ 100.531560][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.533932][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.586948][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.589560][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.959170][ T6712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.096891][ T6712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.787625][ T6043] usb 5-1: USB disconnect, device number 8 [ 101.790270][ T6043] em28xx 5-1:0.0: Disconnecting em28xx [ 101.792537][ T6043] em28xx 5-1:0.0: Closing input extension [ 101.811513][ T6043] em28xx 5-1:0.0: Freeing device [ 101.817883][ T35] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 101.976633][ T5344] Bluetooth: hci5: command tx timeout [ 101.991196][ T35] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 102.009312][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.017321][ T35] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.025496][ T35] usb 8-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 102.028923][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.031836][ T35] usb 8-1: Product: syz [ 102.034643][ T35] usb 8-1: Manufacturer: syz [ 102.036602][ T35] usb 8-1: SerialNumber: syz [ 102.039621][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'. [ 102.047067][ T35] usb 8-1: config 0 descriptor?? [ 102.052421][ T35] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 102.061026][ T35] em28xx 8-1:0.0: Video interface 0 found: isoc [ 102.521697][ T6725] siw: device registration error -23 [ 103.098634][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 103.158320][ T35] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 103.238595][ T35] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 103.245318][ T35] em28xx 8-1:0.0: board has no eeprom [ 103.306603][ T35] em28xx 8-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 103.324364][ T35] em28xx 8-1:0.0: analog set to isoc mode. [ 103.334448][ T35] em28xx 8-1:0.0: Registering V4L2 extension [ 103.375772][ T35] em28xx 8-1:0.0: reading from i2c device at 0x4a failed (error=-5) [ 103.378376][ T35] em28xx 8-1:0.0: reading from i2c device at 0x48 failed (error=-5) [ 103.381019][ T35] em28xx 8-1:0.0: reading from i2c device at 0x42 failed (error=-5) [ 103.383368][ T35] em28xx 8-1:0.0: reading from i2c device at 0x40 failed (error=-5) [ 103.385812][ T35] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 103.387989][ T35] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 103.389856][ T35] em28xx 8-1:0.0: No AC97 audio processor [ 103.399288][ T35] usb 8-1: Decoder not found [ 103.400677][ T35] em28xx 8-1:0.0: failed to create media graph [ 103.402383][ T35] em28xx 8-1:0.0: V4L2 device video71 deregistered [ 103.404650][ T35] em28xx 8-1:0.0: Remote control support is not available for this card. [ 103.564958][ T6740] syzkaller1: entered promiscuous mode [ 103.571751][ T6740] syzkaller1: entered allmulticast mode [ 103.798716][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 103.899022][ T6746] overlayfs: failed to resolve './file0': -2 [ 103.944426][ T35] usb 8-1: USB disconnect, device number 7 [ 103.947054][ T35] em28xx 8-1:0.0: Disconnecting em28xx [ 103.948973][ T35] em28xx 8-1:0.0: Closing input extension [ 103.952699][ T35] em28xx 8-1:0.0: Freeing device [ 104.094390][ T5344] Bluetooth: hci5: command tx timeout [ 104.307598][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 104.429582][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 104.468240][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.471055][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.473979][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.537415][ T25] usb 5-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 104.541393][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.544267][ T25] usb 5-1: Product: syz [ 104.545782][ T25] usb 5-1: Manufacturer: syz [ 104.556639][ T25] usb 5-1: SerialNumber: syz [ 104.562781][ T25] usb 5-1: config 0 descriptor?? [ 104.610810][ T25] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 104.613270][ T25] em28xx 5-1:0.0: Video interface 0 found: isoc [ 104.852686][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.500'. [ 105.083694][ T6768] overlayfs: failed to resolve './file0': -2 [ 105.209338][ T6771] siw: device registration error -23 [ 105.709217][ T25] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 105.774134][ T25] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 105.777118][ T25] em28xx 5-1:0.0: board has no eeprom [ 105.836625][ T25] em28xx 5-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 105.842488][ T25] em28xx 5-1:0.0: analog set to isoc mode. [ 105.846764][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 105.877053][ T25] em28xx 5-1:0.0: Registering V4L2 extension [ 105.934485][ T25] em28xx 5-1:0.0: reading from i2c device at 0x4a failed (error=-5) [ 105.939019][ T25] em28xx 5-1:0.0: reading from i2c device at 0x48 failed (error=-5) [ 105.952487][ T25] em28xx 5-1:0.0: reading from i2c device at 0x42 failed (error=-5) [ 105.959190][ T25] em28xx 5-1:0.0: reading from i2c device at 0x40 failed (error=-5) [ 105.975836][ T25] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 105.982253][ T25] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 105.986649][ T25] em28xx 5-1:0.0: No AC97 audio processor [ 106.014375][ T25] usb 5-1: Decoder not found [ 106.022732][ T25] em28xx 5-1:0.0: failed to create media graph [ 106.024953][ T25] em28xx 5-1:0.0: V4L2 device video71 deregistered [ 106.039368][ T25] em28xx 5-1:0.0: Remote control support is not available for this card. [ 106.126628][ T5344] Bluetooth: hci5: command tx timeout [ 106.486851][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'. [ 106.520707][ T1423] usb 5-1: USB disconnect, device number 9 [ 106.522618][ T1423] em28xx 5-1:0.0: Disconnecting em28xx [ 106.524082][ T1423] em28xx 5-1:0.0: Closing input extension [ 106.527000][ T1423] em28xx 5-1:0.0: Freeing device [ 106.795317][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 106.829822][ T6802] netlink: 'syz.3.516': attribute type 4 has an invalid length. [ 106.956586][ T829] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 107.102086][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'. [ 107.108146][ T829] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 107.111881][ T829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.116070][ T829] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.126151][ T829] usb 7-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 107.128681][ T829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.131108][ T829] usb 7-1: Product: syz [ 107.132247][ T829] usb 7-1: Manufacturer: syz [ 107.133887][ T829] usb 7-1: SerialNumber: syz [ 107.137489][ T829] usb 7-1: config 0 descriptor?? [ 107.140862][ T829] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 107.149883][ T829] em28xx 7-1:0.0: Video interface 0 found: isoc [ 108.189447][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 108.296977][ T829] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 108.342368][ T6834] netlink: 'syz.0.530': attribute type 4 has an invalid length. [ 108.358960][ T829] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 108.361707][ T829] em28xx 7-1:0.0: board has no eeprom [ 108.446668][ T829] em28xx 7-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 108.452339][ T829] em28xx 7-1:0.0: analog set to isoc mode. [ 108.454509][ T5377] em28xx 7-1:0.0: Registering V4L2 extension [ 108.596707][ T5377] em28xx 7-1:0.0: reading from i2c device at 0x4a failed (error=-5) [ 108.599605][ T5377] em28xx 7-1:0.0: reading from i2c device at 0x48 failed (error=-5) [ 108.602417][ T5377] em28xx 7-1:0.0: reading from i2c device at 0x42 failed (error=-5) [ 108.605062][ T5377] em28xx 7-1:0.0: reading from i2c device at 0x40 failed (error=-5) [ 108.607796][ T5377] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 108.610372][ T5377] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 108.612679][ T5377] em28xx 7-1:0.0: No AC97 audio processor [ 108.624160][ T5377] usb 7-1: Decoder not found [ 108.625740][ T5377] em28xx 7-1:0.0: failed to create media graph [ 108.627546][ T5377] em28xx 7-1:0.0: V4L2 device video71 deregistered [ 108.633410][ T5377] em28xx 7-1:0.0: Remote control support is not available for this card. [ 108.957300][ T6849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.962818][ T6849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.027022][ T4760] usb 7-1: USB disconnect, device number 6 [ 109.029055][ T4760] em28xx 7-1:0.0: Disconnecting em28xx [ 109.030837][ T4760] em28xx 7-1:0.0: Closing input extension [ 109.034473][ T4760] em28xx 7-1:0.0: Freeing device [ 109.464213][ T5352] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 109.468593][ T5352] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 109.471760][ T5352] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 109.474750][ T5352] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 109.478169][ T5352] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 109.480937][ T5352] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 109.688314][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 109.805431][ T6857] chnl_net:caif_netlink_parms(): no params data found [ 109.828486][ T6874] overlayfs: failed to resolve './file1': -2 [ 109.997068][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.999087][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.001154][ T6857] bridge_slave_0: entered allmulticast mode [ 110.016089][ T6857] bridge_slave_0: entered promiscuous mode [ 110.044112][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.046102][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.095261][ T6888] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 110.098732][ T6888] syz.3.543: attempt to access beyond end of device [ 110.098732][ T6888] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 110.187199][ T6857] bridge_slave_1: entered allmulticast mode [ 110.191047][ T6857] bridge_slave_1: entered promiscuous mode [ 110.253409][ T6857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.263158][ T6857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.327656][ T6857] team0: Port device team_slave_0 added [ 110.332399][ T6857] team0: Port device team_slave_1 added [ 110.384718][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.393462][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.404686][ T6857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.456411][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.482492][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.518353][ T6857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.720114][ T6857] hsr_slave_0: entered promiscuous mode [ 110.727815][ T6857] hsr_slave_1: entered promiscuous mode [ 110.735652][ T6857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.743065][ T6857] Cannot create hsr debugfs directory [ 111.069011][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.548'. [ 111.122427][ T6857] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.185963][ T6901] syzkaller1: entered promiscuous mode [ 111.194961][ T6901] syzkaller1: entered allmulticast mode [ 111.228494][ T6857] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.361877][ T6857] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.486113][ T6857] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.586611][ T5352] Bluetooth: hci6: command tx timeout [ 111.721663][ T6857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.724997][ T6857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.734256][ T6857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.741298][ T6857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 111.791913][ T6857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.810208][ T6857] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.858508][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.860553][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.863519][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.865463][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.999869][ T6857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.025774][ T6857] veth0_vlan: entered promiscuous mode [ 112.033639][ T6857] veth1_vlan: entered promiscuous mode [ 112.064807][ T6857] veth0_macvtap: entered promiscuous mode [ 112.069420][ T6857] veth1_macvtap: entered promiscuous mode [ 112.078533][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.082158][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.085363][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.090133][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.093536][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.098875][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.102146][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.105634][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.109173][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.112684][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.115970][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.119834][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.126214][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.133257][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.136868][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.141177][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.144668][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.148124][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.151658][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.154953][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.158646][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.161926][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.165373][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.168768][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.172228][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.176735][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.181367][ T6857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.184350][ T6857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.187603][ T6857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.190559][ T6857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.223280][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.226180][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.244895][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.259903][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.727530][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'. [ 112.757150][ T6928] bridge_slave_1: left allmulticast mode [ 112.759241][ T6928] bridge_slave_1: left promiscuous mode [ 112.761454][ T6928] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.216742][ T6935] netlink: 'syz.2.559': attribute type 4 has an invalid length. [ 113.270047][ T6940] syzkaller1: entered promiscuous mode [ 113.272123][ T6940] syzkaller1: entered allmulticast mode [ 113.657501][ T5352] Bluetooth: hci6: command tx timeout [ 114.119499][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 114.142749][ T6952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.565'. [ 114.182690][ T6957] overlayfs: failed to resolve './file1': -2 [ 114.364373][ T6967] netlink: 'syz.1.570': attribute type 4 has an invalid length. [ 115.117765][ T6979] syzkaller1: entered promiscuous mode [ 115.121814][ T6979] syzkaller1: entered allmulticast mode [ 115.241848][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'. [ 115.269211][ T6981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.575'. [ 115.726793][ T5352] Bluetooth: hci6: command tx timeout [ 116.662876][ T6996] netlink: 'syz.2.580': attribute type 4 has an invalid length. [ 117.467714][ T7013] syzkaller1: entered promiscuous mode [ 117.469265][ T7013] syzkaller1: entered allmulticast mode [ 117.775477][ T7015] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 117.806815][ T5352] Bluetooth: hci6: command tx timeout [ 118.116684][ T5380] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 119.158180][ T5380] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.161227][ T5380] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.164103][ T5380] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.169655][ T5380] usb 7-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 119.172359][ T5380] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.174548][ T5380] usb 7-1: Product: syz [ 119.175673][ T5380] usb 7-1: Manufacturer: syz [ 119.177420][ T5380] usb 7-1: SerialNumber: syz [ 119.182592][ T5380] usb 7-1: config 0 descriptor?? [ 119.185991][ T5380] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 119.189072][ T5380] em28xx 7-1:0.0: Video interface 0 found: isoc [ 119.215314][ T7023] kvm: pic: non byte read [ 119.516982][ T35] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 119.826655][ T35] usb 5-1: Using ep0 maxpacket: 16 [ 119.829620][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.832834][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.835816][ T35] usb 5-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 119.838603][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.842075][ T35] usb 5-1: config 0 descriptor?? [ 120.218931][ T7038] netlink: 'syz.1.592': attribute type 4 has an invalid length. [ 120.323393][ T7043] fuse: Bad value for 'group_id' [ 120.324772][ T7043] fuse: Bad value for 'group_id' [ 120.366991][ T5380] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 120.547549][ T5344] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 120.552543][ T5344] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 120.556635][ T5344] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 120.563286][ T5344] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 120.566406][ T5344] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 120.569237][ T5344] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 120.734795][ T5380] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 120.737787][ T5380] em28xx 7-1:0.0: board has no eeprom [ 120.798206][ T7044] chnl_net:caif_netlink_parms(): no params data found [ 120.807940][ T5380] em28xx 7-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 120.812954][ T5380] em28xx 7-1:0.0: analog set to isoc mode. [ 120.822820][ T828] em28xx 7-1:0.0: Registering V4L2 extension [ 120.846275][ T828] em28xx 7-1:0.0: reading from i2c device at 0x4a failed (error=-5) [ 120.849628][ T828] em28xx 7-1:0.0: reading from i2c device at 0x48 failed (error=-5) [ 120.859713][ T828] em28xx 7-1:0.0: reading from i2c device at 0x42 failed (error=-5) [ 120.862644][ T828] em28xx 7-1:0.0: reading from i2c device at 0x40 failed (error=-5) [ 120.873668][ T828] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 120.876483][ T828] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 120.878997][ T828] em28xx 7-1:0.0: No AC97 audio processor [ 120.894582][ T828] usb 7-1: Decoder not found [ 120.896303][ T828] em28xx 7-1:0.0: failed to create media graph [ 120.904717][ T828] em28xx 7-1:0.0: V4L2 device video71 deregistered [ 120.908120][ T828] em28xx 7-1:0.0: Remote control support is not available for this card. [ 120.971755][ T828] usb 7-1: USB disconnect, device number 7 [ 120.975294][ T7044] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.978210][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.980669][ T828] em28xx 7-1:0.0: Disconnecting em28xx [ 120.980808][ T7044] bridge_slave_0: entered allmulticast mode [ 120.982621][ T828] em28xx 7-1:0.0: Closing input extension [ 120.984883][ T7044] bridge_slave_0: entered promiscuous mode [ 120.989213][ T7044] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.991244][ T7044] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.993189][ T828] em28xx 7-1:0.0: Freeing device [ 120.993244][ T7044] bridge_slave_1: entered allmulticast mode [ 120.997057][ T7044] bridge_slave_1: entered promiscuous mode [ 121.051286][ T7044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.055440][ T7044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.077105][ T7044] team0: Port device team_slave_0 added [ 121.081362][ T7044] team0: Port device team_slave_1 added [ 121.102837][ T7044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.105004][ T7044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.112343][ T7044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.117408][ T7044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.119318][ T7044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.126446][ T7044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.153477][ T7044] hsr_slave_0: entered promiscuous mode [ 121.155812][ T7044] hsr_slave_1: entered promiscuous mode [ 121.158361][ T7044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.160489][ T7044] Cannot create hsr debugfs directory [ 121.353099][ T7044] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.466818][ T7044] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.531261][ T7044] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.645445][ T7044] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.872965][ T7044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 121.939628][ T7044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 121.953015][ T7044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 121.964757][ T7044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 122.061568][ T39] audit: type=1400 audit(1727815493.834:288): avc: denied { ioctl } for pid=7060 comm="syz.2.597" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18775 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 122.106632][ T7044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.128377][ T7044] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.147608][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.149549][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.154150][ T35] usbhid 5-1:0.0: can't add hid device: -71 [ 122.155820][ T35] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 122.165643][ T35] usb 5-1: USB disconnect, device number 10 [ 122.171441][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.173393][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.512574][ T7044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.622116][ T7044] veth0_vlan: entered promiscuous mode [ 122.633091][ T7044] veth1_vlan: entered promiscuous mode [ 122.647296][ T7044] veth0_macvtap: entered promiscuous mode [ 122.650645][ T7044] veth1_macvtap: entered promiscuous mode [ 122.658581][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.662195][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.665477][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.668723][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.671301][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.674112][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.677341][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.680324][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.683075][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.685884][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.688693][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.691753][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.694586][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.696854][ T5352] Bluetooth: hci7: command tx timeout [ 122.697562][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.702623][ T7044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.725757][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.812078][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.814792][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.819411][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.822347][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.857624][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.860296][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.863058][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.865696][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.868833][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.871579][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.874422][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.877491][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.880557][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.884060][ T7044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.888648][ T7044] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.891087][ T7044] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.893444][ T7044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.895809][ T7044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.118954][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.121841][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.189588][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.192686][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.329260][ T7075] siw: device registration error -23 [ 123.404476][ T7079] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 123.406897][ T7079] syz.2.599: attempt to access beyond end of device [ 123.406897][ T7079] loop2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 123.617074][ T4760] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 123.788717][ T4760] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.793738][ T4760] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.798059][ T4760] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.814438][ T4760] usb 8-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 123.826281][ T4760] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.829565][ T4760] usb 8-1: Product: syz [ 123.831254][ T4760] usb 8-1: Manufacturer: syz [ 123.833754][ T4760] usb 8-1: SerialNumber: syz [ 123.846905][ T4760] usb 8-1: config 0 descriptor?? [ 123.858542][ T4760] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 123.871956][ T4760] em28xx 8-1:0.0: Video interface 0 found: isoc [ 124.763519][ T39] audit: type=1400 audit(1727815496.534:289): avc: denied { name_bind } for pid=7097 comm="syz.1.604" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 124.770161][ T39] audit: type=1400 audit(1727815496.534:290): avc: denied { node_bind } for pid=7097 comm="syz.1.604" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 124.777664][ T5352] Bluetooth: hci7: command tx timeout [ 124.869849][ T39] audit: type=1400 audit(1727815496.644:291): avc: denied { create } for pid=7101 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 124.879728][ T39] audit: type=1400 audit(1727815496.644:292): avc: denied { write } for pid=7101 comm="syz.1.608" name="001" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 124.986983][ T4760] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 125.061788][ T4760] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 125.064522][ T4760] em28xx 8-1:0.0: board has no eeprom [ 125.137385][ T4760] em28xx 8-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 125.141757][ T4760] em28xx 8-1:0.0: analog set to isoc mode. [ 125.158196][ T4760] usb 8-1: USB disconnect, device number 8 [ 125.161492][ T4760] em28xx 8-1:0.0: Disconnecting em28xx [ 125.163617][ T6043] em28xx 8-1:0.0: Registering V4L2 extension [ 125.270086][ T6043] em28xx 8-1:0.0: Config register raw data: 0xffffffed [ 125.272000][ T6043] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 125.274456][ T6043] em28xx 8-1:0.0: No AC97 audio processor [ 125.277855][ T6043] usb 8-1: Decoder not found [ 125.279143][ T6043] em28xx 8-1:0.0: failed to create media graph [ 125.280822][ T6043] em28xx 8-1:0.0: V4L2 device video71 deregistered [ 125.283448][ T6043] em28xx 8-1:0.0: Remote control support is not available for this card. [ 125.287296][ T4760] em28xx 8-1:0.0: Closing input extension [ 125.295606][ T4760] em28xx 8-1:0.0: Freeing device [ 126.556934][ T7127] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 126.846780][ T5352] Bluetooth: hci7: command tx timeout [ 127.177196][ T7136] pic_ioport_write: 211 callbacks suppressed [ 127.177209][ T7136] kvm: pic: single mode not supported [ 127.203845][ T7136] kvm: pic: single mode not supported [ 127.205428][ T7136] pic_ioport_write: 7 callbacks suppressed [ 127.205441][ T7136] kvm: pic: level sensitive irq not supported [ 127.224835][ T7136] kvm: pic: single mode not supported [ 127.227191][ T7136] kvm: pic: level sensitive irq not supported [ 127.275026][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 127.357690][ T7136] kvm: pic: single mode not supported [ 127.358216][ T7136] kvm: pic: single mode not supported [ 127.365163][ T7136] kvm: pic: single mode not supported [ 127.366860][ T7136] kvm: pic: level sensitive irq not supported [ 127.373081][ T7136] kvm: pic: single mode not supported [ 127.374960][ T7136] kvm: pic: level sensitive irq not supported [ 127.380510][ T7136] kvm: pic: single mode not supported [ 127.387386][ T7136] kvm: pic: single mode not supported [ 127.395841][ T7136] kvm: pic: single mode not supported [ 127.397574][ T7136] kvm: pic: level sensitive irq not supported [ 127.399679][ T7136] kvm: pic: level sensitive irq not supported [ 127.408329][ T7136] kvm: pic: level sensitive irq not supported [ 127.410704][ T7136] kvm: pic: level sensitive irq not supported [ 127.420494][ T7136] kvm: pic: level sensitive irq not supported [ 127.422971][ T7136] kvm: pic: level sensitive irq not supported [ 127.616720][ T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 127.809454][ T25] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 127.818570][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.825847][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.846204][ T25] usb 6-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 127.866664][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.869008][ T25] usb 6-1: Product: syz [ 127.870371][ T25] usb 6-1: Manufacturer: syz [ 127.871653][ T25] usb 6-1: SerialNumber: syz [ 127.884089][ T25] usb 6-1: config 0 descriptor?? [ 127.896981][ T25] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 127.900219][ T25] em28xx 6-1:0.0: Video interface 0 found: isoc [ 128.926713][ T5352] Bluetooth: hci7: command tx timeout [ 128.957094][ T7162] netlink: 'syz.3.620': attribute type 4 has an invalid length. [ 129.007970][ T25] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 129.067749][ T25] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 129.069943][ T25] em28xx 6-1:0.0: board has no eeprom [ 129.147729][ T25] em28xx 6-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 129.156548][ T25] em28xx 6-1:0.0: analog set to isoc mode. [ 129.158715][ T5377] em28xx 6-1:0.0: Registering V4L2 extension [ 129.259712][ T5377] em28xx 6-1:0.0: reading from i2c device at 0x4a failed (error=-5) [ 129.260298][ T7168] geneve2: entered promiscuous mode [ 129.264421][ T7168] geneve2: entered allmulticast mode [ 129.267051][ T5377] em28xx 6-1:0.0: reading from i2c device at 0x48 failed (error=-5) [ 129.270227][ T7171] syzkaller1: entered promiscuous mode [ 129.271823][ T7171] syzkaller1: entered allmulticast mode [ 129.272799][ T5377] em28xx 6-1:0.0: reading from i2c device at 0x42 failed (error=-5) [ 129.302818][ T5377] em28xx 6-1:0.0: reading from i2c device at 0x40 failed (error=-5) [ 129.320052][ T5377] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 129.347041][ T5377] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 129.349821][ T5377] em28xx 6-1:0.0: No AC97 audio processor [ 129.366099][ T7168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.415263][ T5377] usb 6-1: Decoder not found [ 129.423564][ T5377] em28xx 6-1:0.0: failed to create media graph [ 129.425291][ T5377] em28xx 6-1:0.0: V4L2 device video71 deregistered [ 129.518250][ T7168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.519589][ T5377] em28xx 6-1:0.0: Remote control support is not available for this card. [ 129.522466][ T7172] ================================================================== [ 129.526243][ T7172] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 129.528449][ T7172] Read of size 8 at addr ffff888062d74738 by task v4l_id/7172 [ 129.532675][ T7172] [ 129.533566][ T7172] CPU: 3 UID: 0 PID: 7172 Comm: v4l_id Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 129.537287][ T7172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.541131][ T7172] Call Trace: [ 129.542343][ T7172] [ 129.543454][ T7172] dump_stack_lvl+0x116/0x1f0 [ 129.545179][ T7172] print_report+0xc3/0x620 [ 129.546816][ T7172] ? __virt_addr_valid+0x5e/0x590 [ 129.548655][ T7172] ? __phys_addr+0xc6/0x150 [ 129.550331][ T7172] kasan_report+0xd9/0x110 [ 129.551984][ T7172] ? v4l2_fh_init+0x27d/0x2c0 [ 129.553334][ T7172] ? v4l2_fh_init+0x27d/0x2c0 [ 129.554561][ T7172] v4l2_fh_init+0x27d/0x2c0 [ 129.555832][ T7172] v4l2_fh_open+0x83/0xc0 [ 129.557345][ T7172] em28xx_v4l2_open+0x250/0x7e0 [ 129.559117][ T7172] v4l2_open+0x222/0x490 [ 129.560683][ T7172] ? __pfx_v4l2_open+0x10/0x10 [ 129.562412][ T7172] chrdev_open+0x237/0x6a0 [ 129.563637][ T7172] ? __pfx_chrdev_open+0x10/0x10 [ 129.564937][ T7172] ? security_file_open+0x62a/0x9d0 [ 129.566817][ T7172] do_dentry_open+0x6ca/0x1530 [ 129.568641][ T7172] ? __pfx_chrdev_open+0x10/0x10 [ 129.570498][ T7172] ? inode_permission+0xdd/0x5f0 [ 129.572346][ T7172] vfs_open+0x82/0x3f0 [ 129.573804][ T7172] ? may_open+0x1f2/0x400 [ 129.575390][ T7172] path_openat+0x1e6a/0x2d60 [ 129.577009][ T7172] ? __pfx_path_openat+0x10/0x10 [ 129.578768][ T7172] ? __pfx___lock_acquire+0x10/0x10 [ 129.580678][ T7172] do_filp_open+0x1dc/0x430 [ 129.582322][ T7172] ? __pfx_do_filp_open+0x10/0x10 [ 129.584132][ T7172] ? find_held_lock+0x2d/0x110 [ 129.585922][ T7172] ? _raw_spin_unlock+0x28/0x50 [ 129.587818][ T7172] ? alloc_fd+0x2d7/0x6c0 [ 129.589445][ T7172] do_sys_openat2+0x17a/0x1e0 [ 129.591183][ T7172] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.593032][ T7172] ? do_user_addr_fault+0xe50/0x13f0 [ 129.594902][ T7172] ? __pfx_lock_release+0x10/0x10 [ 129.596622][ T7172] ? trace_lock_acquire+0x14a/0x1d0 [ 129.598573][ T7172] __x64_sys_openat+0x175/0x210 [ 129.599979][ T7172] ? __pfx___x64_sys_openat+0x10/0x10 [ 129.601420][ T7172] ? do_user_addr_fault+0x83d/0x13f0 [ 129.603057][ T7172] do_syscall_64+0xcd/0x250 [ 129.604270][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.605866][ T7172] RIP: 0033:0x7f732b5169a4 [ 129.607070][ T7172] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 129.612070][ T7172] RSP: 002b:00007ffdbac542f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.614342][ T7172] RAX: ffffffffffffffda RBX: 00007ffdbac54508 RCX: 00007f732b5169a4 [ 129.616500][ T7172] RDX: 0000000000000000 RSI: 00007ffdbac55f20 RDI: 00000000ffffff9c [ 129.618546][ T7172] RBP: 00007ffdbac55f20 R08: 0000000000000000 R09: 0000000000000000 [ 129.620579][ T7172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.622762][ T7172] R13: 00007ffdbac54520 R14: 000055f010840670 R15: 00007f732ba14a80 [ 129.625548][ T7172] [ 129.626695][ T7172] [ 129.627540][ T7172] Allocated by task 5377: [ 129.629012][ T7172] kasan_save_stack+0x33/0x60 [ 129.630625][ T7172] kasan_save_track+0x14/0x30 [ 129.632228][ T7172] __kasan_kmalloc+0xaa/0xb0 [ 129.633783][ T7172] em28xx_v4l2_init+0x114/0x4050 [ 129.635302][ T7172] em28xx_init_extension+0x137/0x200 [ 129.636933][ T7172] request_module_async+0x61/0x70 [ 129.638516][ T7172] process_one_work+0x9c5/0x1ba0 [ 129.640281][ T7172] worker_thread+0x6c8/0xf00 [ 129.641687][ T7172] kthread+0x2c1/0x3a0 [ 129.642980][ T7172] ret_from_fork+0x45/0x80 [ 129.644319][ T7172] ret_from_fork_asm+0x1a/0x30 [ 129.645830][ T7172] [ 129.646707][ T7172] Freed by task 5377: [ 129.648167][ T7172] kasan_save_stack+0x33/0x60 [ 129.649735][ T7172] kasan_save_track+0x14/0x30 [ 129.651174][ T7172] kasan_save_free_info+0x3b/0x60 [ 129.652723][ T7172] __kasan_slab_free+0x51/0x70 [ 129.653959][ T7172] kfree+0x14f/0x4b0 [ 129.654976][ T7172] em28xx_v4l2_init+0x22a4/0x4050 [ 129.656299][ T7172] em28xx_init_extension+0x137/0x200 [ 129.657679][ T7172] request_module_async+0x61/0x70 [ 129.659145][ T7172] process_one_work+0x9c5/0x1ba0 [ 129.660449][ T7172] worker_thread+0x6c8/0xf00 [ 129.661645][ T7172] kthread+0x2c1/0x3a0 [ 129.662921][ T7172] ret_from_fork+0x45/0x80 [ 129.664553][ T7172] ret_from_fork_asm+0x1a/0x30 [ 129.666298][ T7172] [ 129.667172][ T7172] The buggy address belongs to the object at ffff888062d74000 [ 129.667172][ T7172] which belongs to the cache kmalloc-8k of size 8192 [ 129.671144][ T7172] The buggy address is located 1848 bytes inside of [ 129.671144][ T7172] freed 8192-byte region [ffff888062d74000, ffff888062d76000) [ 129.674723][ T7172] [ 129.675359][ T7172] The buggy address belongs to the physical page: [ 129.677057][ T7172] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62d70 [ 129.679341][ T7172] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 129.681531][ T7172] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 129.684115][ T7172] page_type: f5(slab) [ 129.685583][ T7172] raw: 00fff00000000040 ffff88801b043180 dead000000000122 0000000000000000 [ 129.688041][ T7172] raw: 0000000000000000 0000000080020002 00000001f5000000 0000000000000000 [ 129.690232][ T7172] head: 00fff00000000040 ffff88801b043180 dead000000000122 0000000000000000 [ 129.692530][ T7172] head: 0000000000000000 0000000080020002 00000001f5000000 0000000000000000 [ 129.694766][ T7172] head: 00fff00000000003 ffffea00018b5c01 ffffffffffffffff 0000000000000000 [ 129.697012][ T7172] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 129.699298][ T7172] page dumped because: kasan: bad access detected [ 129.700999][ T7172] page_owner tracks the page as allocated [ 129.702604][ T7172] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7168, tgid 7167 (syz.1.622), ts 129141362401, free_ts 126833886060 [ 129.708816][ T7172] post_alloc_hook+0x2d1/0x350 [ 129.710407][ T7172] get_page_from_freelist+0x101e/0x3070 [ 129.712261][ T7172] __alloc_pages_noprof+0x223/0x25c0 [ 129.714040][ T7172] alloc_pages_mpol_noprof+0x2c9/0x610 [ 129.715886][ T7172] new_slab+0x2ba/0x3f0 [ 129.717301][ T7172] ___slab_alloc+0xdac/0x1880 [ 129.718890][ T7172] __slab_alloc.constprop.0+0x56/0xb0 [ 129.720724][ T7172] __kmalloc_node_track_caller_noprof+0x355/0x430 [ 129.722934][ T7172] krealloc_noprof+0x5d/0x130 [ 129.724662][ T7172] copy_array+0x87/0x110 [ 129.726211][ T7172] copy_verifier_state+0xa15/0xf20 [ 129.727969][ T7172] push_stack+0x1d9/0x550 [ 129.729385][ T7172] check_cond_jmp_op+0xb7a/0x7c50 [ 129.730868][ T7172] do_check_common+0x7c5e/0xbd20 [ 129.732168][ T7172] bpf_check+0x71b0/0xb310 [ 129.733389][ T7172] bpf_prog_load+0xedb/0x2660 [ 129.734625][ T7172] page last free pid 7121 tgid 7121 stack trace: [ 129.736279][ T7172] free_unref_folios+0x956/0x1310 [ 129.737635][ T7172] folios_put_refs+0x551/0x750 [ 129.738911][ T7172] truncate_inode_pages_range+0x334/0xe80 [ 129.740574][ T7172] blkdev_flush_mapping+0xfb/0x290 [ 129.741948][ T7172] blkdev_put_whole+0xc4/0xf0 [ 129.743199][ T7172] bdev_release+0x47e/0x6d0 [ 129.744457][ T7172] blkdev_release+0x15/0x20 [ 129.745727][ T7172] __fput+0x3f6/0xb60 [ 129.746859][ T7172] task_work_run+0x14e/0x250 [ 129.748130][ T7172] do_exit+0xadd/0x2d70 [ 129.749241][ T7172] do_group_exit+0xd3/0x2a0 [ 129.750516][ T7172] __x64_sys_exit_group+0x3e/0x50 [ 129.751905][ T7172] x64_sys_call+0x14a9/0x16a0 [ 129.753286][ T7172] do_syscall_64+0xcd/0x250 [ 129.754416][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.755924][ T7172] [ 129.756561][ T7172] Memory state around the buggy address: [ 129.758006][ T7172] ffff888062d74600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 129.759999][ T7172] ffff888062d74680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 129.762093][ T7172] >ffff888062d74700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 129.764301][ T7172] ^ [ 129.765831][ T7172] ffff888062d74780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 129.767909][ T7172] ffff888062d74800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 129.770080][ T7172] ================================================================== [ 129.846817][ T7172] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 129.849529][ T7172] CPU: 0 UID: 0 PID: 7172 Comm: v4l_id Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 129.853125][ T7172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.856935][ T7172] Call Trace: [ 129.858287][ T7172] [ 129.859445][ T7172] dump_stack_lvl+0x3d/0x1f0 [ 129.861248][ T7172] panic+0x71d/0x800 [ 129.862742][ T7172] ? __pfx_panic+0x10/0x10 [ 129.864426][ T7172] ? irqentry_exit+0x3b/0x90 [ 129.866100][ T7172] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.867960][ T7172] ? preempt_schedule_thunk+0x1a/0x30 [ 129.869846][ T7172] ? preempt_schedule_common+0x44/0xc0 [ 129.871793][ T7172] ? check_panic_on_warn+0x1f/0xb0 [ 129.873619][ T7172] check_panic_on_warn+0xab/0xb0 [ 129.875428][ T7172] end_report+0x117/0x180 [ 129.876981][ T7172] kasan_report+0xe9/0x110 [ 129.878589][ T7172] ? v4l2_fh_init+0x27d/0x2c0 [ 129.880297][ T7172] ? v4l2_fh_init+0x27d/0x2c0 [ 129.882040][ T7172] v4l2_fh_init+0x27d/0x2c0 [ 129.883730][ T7172] v4l2_fh_open+0x83/0xc0 [ 129.885334][ T7172] em28xx_v4l2_open+0x250/0x7e0 [ 129.887123][ T7172] v4l2_open+0x222/0x490 [ 129.888714][ T7172] ? __pfx_v4l2_open+0x10/0x10 [ 129.890500][ T7172] chrdev_open+0x237/0x6a0 [ 129.892157][ T7172] ? __pfx_chrdev_open+0x10/0x10 [ 129.893964][ T7172] ? security_file_open+0x62a/0x9d0 [ 129.895886][ T7172] do_dentry_open+0x6ca/0x1530 [ 129.897650][ T7172] ? __pfx_chrdev_open+0x10/0x10 [ 129.899464][ T7172] ? inode_permission+0xdd/0x5f0 [ 129.901229][ T7172] vfs_open+0x82/0x3f0 [ 129.902711][ T7172] ? may_open+0x1f2/0x400 [ 129.904299][ T7172] path_openat+0x1e6a/0x2d60 [ 129.906036][ T7172] ? __pfx_path_openat+0x10/0x10 [ 129.907952][ T7172] ? __pfx___lock_acquire+0x10/0x10 [ 129.910033][ T7172] do_filp_open+0x1dc/0x430 [ 129.911890][ T7172] ? __pfx_do_filp_open+0x10/0x10 [ 129.913774][ T7172] ? find_held_lock+0x2d/0x110 [ 129.915746][ T7172] ? _raw_spin_unlock+0x28/0x50 [ 129.917536][ T7172] ? alloc_fd+0x2d7/0x6c0 [ 129.919124][ T7172] do_sys_openat2+0x17a/0x1e0 [ 129.920696][ T7172] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.922391][ T7172] ? do_user_addr_fault+0xe50/0x13f0 [ 129.924309][ T7172] ? __pfx_lock_release+0x10/0x10 [ 129.926159][ T7172] ? trace_lock_acquire+0x14a/0x1d0 [ 129.928190][ T7172] __x64_sys_openat+0x175/0x210 [ 129.929983][ T7172] ? __pfx___x64_sys_openat+0x10/0x10 [ 129.931916][ T7172] ? do_user_addr_fault+0x83d/0x13f0 [ 129.933868][ T7172] do_syscall_64+0xcd/0x250 [ 129.935574][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.937672][ T7172] RIP: 0033:0x7f732b5169a4 [ 129.939252][ T7172] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 129.945986][ T7172] RSP: 002b:00007ffdbac542f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.948935][ T7172] RAX: ffffffffffffffda RBX: 00007ffdbac54508 RCX: 00007f732b5169a4 [ 129.951771][ T7172] RDX: 0000000000000000 RSI: 00007ffdbac55f20 RDI: 00000000ffffff9c [ 129.954667][ T7172] RBP: 00007ffdbac55f20 R08: 0000000000000000 R09: 0000000000000000 [ 129.957708][ T7172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.960640][ T7172] R13: 00007ffdbac54520 R14: 000055f010840670 R15: 00007f732ba14a80 [ 129.963536][ T7172] [ 129.965313][ T7172] Kernel Offset: disabled [ 129.966899][ T7172] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:45:01 Registers: info registers vcpu 0 CPU#0 RAX=00000000002103a3 RBX=0000000000000000 RCX=ffffffff8b21cdd9 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd19d40 RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f2b88 R15=0000000000000000 RIP=ffffffff8b21e1bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b305f3ff8 CR3=000000005e164000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a2a3 ffffffff8100a2a3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a2a3 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dd47f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dd47f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dd47f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dd47f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dd47f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dd47f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9500000000000000 b700000007000000 8500000000000008 5600000000000098 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000086bf 00000000fff09a7b ffffff8500040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000008000002b7 fffffff000000407 000000000000a4bf fffffff800000807 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000281800000008 000002b7fffffff0 0000040700000000 0000a4bffffffff8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080700000000 000086bf00000000 fff09a7bffffff85 000809b600000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe009a6b00000000 000002b700000000 0000009500000000 0001095500000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000009bf00000005 0000008500000000 000003b700000014 000002b700000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffffff9378a040 RCX=0000000000000001 RDX=0000000000000004 RSI=ffffffff8132b9ab RDI=ffffffff9378a040 RBP=1ffff920007ebf38 RSP=ffffc90003f5f948 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=00000000000c43fc R12=ffffffff905f5e98 R13=ffff88806a63fa58 R14=ffff88806a63ee80 R15=ffff88806a63f9b8 RIP=ffffffff8b21b6c1 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00005555884e0500 ffffffff 00c01300 GS =0000 ffff88806a700000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b305edff8 CR3=0000000061b6e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=000000007ffbffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe8794ae80 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabd07f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabd07f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabd07f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabd07f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabd07f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabd07f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000130 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000130 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001d1f5d RBX=0000000000000002 RCX=ffffffff8b21cdd9 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd19d40 RBP=ffffed1003b5b000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dad8000 R14=ffffffff905f2b88 R15=0000000000000000 RIP=ffffffff8b21e1bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000204c0000 CR3=00000000549d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=000000007ffbffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7742abf0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dd47f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dd47f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dd47f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dd47f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dd47f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dd47f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000134 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000134 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850a6d05 RDI=ffffffff9aae1b80 RBP=ffffffff9aae1b40 RSP=ffffc90021fa72d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000000a R14=ffffffff850a6ca0 R15=0000000000000000 RIP=ffffffff850a6d2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f732b8d9e80 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055f010847700 CR3=000000004bf8c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a2a3 ffffffff8100a2a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a2a3 ffffffff8100a2a3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a2a3 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee69f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee69f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee69f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee69f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee69f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee69f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee6b0b488 00007f4ee6b0b480 00007f4ee6b0b478 00007f4ee6b0b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee766d100 00007f4ee6b0b440 00007f4e00040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee6b0b498 00007f4ee6b0b490 00007f4ee6b0b488 00007f4ee6b0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000