last executing test programs: 6.215444064s ago: executing program 3 (id=1578): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="16"]}]}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05040500d3fc09000000478803", 0xd, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) 5.560132707s ago: executing program 3 (id=1585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) fstatfs(0xffffffffffffffff, 0x0) 5.302484283s ago: executing program 3 (id=1588): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3) 5.215703685s ago: executing program 1 (id=1590): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8, 0x2}}}, 0x7) r2 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "3377f877c734c4f928875ab8db00", "000100", "0200", "be4d22a4", ["c38600008000080000e6fc00", "51f3541a910080ffffcb3a10", "2ce50f8a285d9500c522afe1"]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x14, 0x1, 0x5, 0x401}, 0x14}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c90012000e0000000700ffff67640700b90f56a9d333b60c487bcdde0cf8d0735995315fe01c0f2327c74535e3886c660212078f4a7b00c1c3d055b845ac5cef765bff1e1f9674d2b7b08cd0f8ac082a8dc156bc573c09007e4cc96e88345b44913400b840fda4f5c54558944f47afb58c5cd9ac5dbe43bc80b0fab30f7e740085c941eed673a98556f1ac2c4b572aa89bdfcf78f97f8b8286508ad75a3651cf7c47845c82b4e870b2d660fe00000000000000"], 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x80000108) inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x16000281) syz_emit_vhci(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) 4.996223827s ago: executing program 3 (id=1593): getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) 4.142159752s ago: executing program 2 (id=1596): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$inet6(0x10, 0x80002, 0x4) sendto$inet6(r1, &(0x7f0000000140)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 3.831729814s ago: executing program 2 (id=1598): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000afc60fe300b1a45c925acb9", @ANYRES16=r0, @ANYBLOB="200029bd7000fbdbdf25690000000c00990007000000010000000500d2000e000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x2080) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x19, 0x16, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200)={[0x2]}, 0x8) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000040)={0x0, 0xff, 0x0, 0x4}, 0xc) listen(r5, 0x0) getrlimit(0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x7, 0x0) r6 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r7 = shmat(r6, &(0x7f0000ff7000/0x3000)=nil, 0x400c) shmat(0x0, &(0x7f0000fee000/0x4000)=nil, 0x6000) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1e, 0x0, 0x7fe2, 0x0, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r8, 0x1, 0x2}, 0x48) 2.849104785s ago: executing program 2 (id=1600): syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8, 0x0, 0x3, 0x1, 0x4, 0x2}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 2.763774903s ago: executing program 0 (id=1601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) 2.571251006s ago: executing program 1 (id=1603): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000180)=0x4) 2.467695146s ago: executing program 0 (id=1604): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x3, 0x27, 0x54, 0x67, 0x0, 0xf8, 0x2f, 0x0, @multicast1, @rand_addr=0x64010100, {[@rr={0x7, 0x3, 0xd4}, @cipso={0x86, 0x19, 0x3, [{0x5, 0x9, "418f2045febddb"}, {0x6, 0x4, "78d5"}, {0x0, 0x6, "658e2aba"}]}, @rr={0x7, 0x7, 0x8, [@empty]}, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0x7, 0x3d, [@rand_addr=0x64010102]}, @noop, @cipso={0x86, 0xe, 0x1, [{0x0, 0x8, "dd034797f831"}]}]}}}}}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2.346598722s ago: executing program 0 (id=1606): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xfff2}}}, 0x24}}, 0x0) 2.057472738s ago: executing program 0 (id=1609): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x65, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r2, 0x1000000}}, 0x20) 1.986888636s ago: executing program 0 (id=1610): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x50}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x43, 0x0, 0x0, 0x20}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x4c, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x50) 1.860618711s ago: executing program 0 (id=1613): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8, 0x2}}}, 0x7) r2 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "3377f877c734c4f928875ab8db00", "000100", "0200", "be4d22a4", ["c38600008000080000e6fc00", "51f3541a910080ffffcb3a10", "2ce50f8a285d9500c522afe1"]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x14, 0x1, 0x5, 0x401}, 0x14}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x36}, "7058abce57033f29eb6dc1f8b128a7537a3409329d374c37fd2f23cfa5a5495ffc36ac891ea6f898ba2a0784b3781c59e6bd91a231a6"}, 0x3a) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r4, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c90012000e0000000700ffff67640700b90f56a9d333b60c487bcdde0cf8d0735995315fe01c0f2327c74535e3886c660212078f4a7b00c1c3d055b845ac5cef765bff1e1f9674d2b7b08cd0f8ac082a8dc156bc573c09007e4cc96e88345b44913400b840fda4f5c54558944f47afb58c5cd9ac5dbe43bc80b0fab30f7e740085c941eed673a98556f1ac2c4b572aa89bdfcf78f97f8b8286508ad75a3651cf7c47845c82b4e870b2d660fe00000000000000"], 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x80000108) inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x16000281) syz_emit_vhci(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) 1.546615572s ago: executing program 1 (id=1615): write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)={'#! ', './file1'}, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.545365115s ago: executing program 3 (id=1616): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) 1.366835239s ago: executing program 4 (id=1617): syz_socket_connect_nvme_tcp() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0) 1.301351782s ago: executing program 3 (id=1618): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8, 0x2}}}, 0x7) r2 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "3377f877c734c4f928875ab8db00", "000100", "0200", "be4d22a4", ["c38600008000080000e6fc00", "51f3541a910080ffffcb3a10", "2ce50f8a285d9500c522afe1"]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x14, 0x1, 0x5, 0x401}, 0x14}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c90012000e0000000700ffff67640700b90f56a9d333b60c487bcdde0cf8d0735995315fe01c0f2327c74535e3886c660212078f4a7b00c1c3d055b845ac5cef765bff1e1f9674d2b7b08cd0f8ac082a8dc156bc573c09007e4cc96e88345b44913400b840fda4f5c54558944f47afb58c5cd9ac5dbe43bc80b0fab30f7e740085c941eed673a98556f1ac2c4b572aa89bdfcf78f97f8b8286508ad75a3651cf7c47845c82b4e870b2d660fe00000000000000"], 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x80000108) inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x16000281) syz_emit_vhci(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) 1.050995212s ago: executing program 4 (id=1619): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 995.414416ms ago: executing program 1 (id=1620): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) io_setup(0x800, &(0x7f0000000500)=0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 866.963812ms ago: executing program 4 (id=1621): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_setup(0x24f8, &(0x7f0000000240), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) 731.764843ms ago: executing program 4 (id=1622): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f00000006c0), 0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000002c0), 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 690.892977ms ago: executing program 2 (id=1623): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100ffffffff"}) 530.351854ms ago: executing program 1 (id=1624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) close_range(r0, 0xffffffffffffffff, 0x0) 446.6663ms ago: executing program 4 (id=1625): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) listen(r0, 0x0) close(r0) 303.984889ms ago: executing program 2 (id=1626): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x8, 0x2}) 213.178234ms ago: executing program 1 (id=1627): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0d}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000880)={'netdevsim0\x00', @ifru_ivalue=0x180}) 133.908836ms ago: executing program 4 (id=1628): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000003c0), 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000019c0), 0x4) 0s ago: executing program 2 (id=1629): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x7ff}, 0xe) shutdown(r1, 0x1) kernel console output (not intermixed with test programs): 7665] wg2: left promiscuous mode [ 302.680740][ T7665] wg2: left allmulticast mode [ 302.741762][ T7665] wg2: entered promiscuous mode [ 302.752745][ T7665] wg2: entered allmulticast mode [ 302.775896][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 302.924525][ T5277] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 302.945688][ T5353] usb 2-1: USB disconnect, device number 10 [ 303.113938][ T7673] No buffer was provided with the request [ 303.146451][ T5277] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 303.168103][ T5277] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 303.212814][ T5277] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 303.322797][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.361919][ T7664] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 303.393632][ T5277] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 303.921628][ T7686] netlink: 5296 bytes leftover after parsing attributes in process `syz.0.778'. [ 303.933318][ T5233] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 304.008467][ T29] audit: type=1400 audit(1723903875.588:459): avc: denied { write } for pid=7687 comm="syz.1.776" name="sg0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 304.259904][ T1127] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 305.829448][ T5304] usb 4-1: USB disconnect, device number 12 [ 306.546443][ T7707] syz.3.784: attempt to access beyond end of device [ 306.546443][ T7707] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 306.609118][ T7707] FAT-fs (loop3): unable to read boot sector [ 306.814824][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 307.052313][ T7715] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 307.211313][ T7723] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 307.355121][ T5304] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 307.491457][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 307.522417][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 307.540253][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 307.559173][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 307.574981][ T5304] usb 5-1: Using ep0 maxpacket: 8 [ 307.585175][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 307.629574][ T8] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 307.640377][ T5304] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.651925][ T5304] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 307.663845][ T5304] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 307.673607][ T5304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.713787][ T5304] usb 5-1: config 0 descriptor?? [ 307.804382][ T5353] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 307.851808][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 307.881104][ T25] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 307.905014][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.919694][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 307.950739][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.982401][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.016245][ T5230] usb 5-1: USB disconnect, device number 10 [ 308.036008][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.051879][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.091533][ T5353] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 308.107827][ T5233] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 308.129166][ T5353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.143195][ T5353] usb 1-1: Product: syz [ 308.148974][ T5353] usb 1-1: Manufacturer: syz [ 308.157431][ T5353] usb 1-1: SerialNumber: syz [ 308.183347][ T5353] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 308.260997][ T5304] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 308.407432][ T25] usb 2-1: usb_control_msg returned -32 [ 308.419535][ T25] usbtmc 2-1:16.0: can't read capabilities [ 308.946049][ T25] usb 1-1: USB disconnect, device number 13 [ 309.317204][ T5304] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 309.345567][ T5304] ath9k_htc: Failed to initialize the device [ 309.373038][ T25] usb 1-1: ath9k_htc: USB layer deinitialized [ 309.379986][ T5957] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 309.554440][ T5277] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 309.752127][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.801634][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.822840][ T5277] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 309.853449][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.858903][ T7756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.801'. [ 309.893786][ T5277] usb 5-1: config 0 descriptor?? [ 310.381461][ T25] usb 2-1: USB disconnect, device number 11 [ 310.505357][ T5277] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 310.541656][ T5277] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 310.559962][ T5277] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 310.583744][ T5277] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 310.604705][ T5277] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 310.638395][ T5277] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 310.644444][ T5233] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 310.688477][ T5277] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 310.777711][ T5233] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 310.789724][ T5277] arvo 0003:1E7D:30D4.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 310.845309][ T7775] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 311.035057][ T5233] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 311.266997][ T5353] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 311.405868][ T5304] usb 5-1: USB disconnect, device number 11 [ 311.509716][ T5353] usb 3-1: Using ep0 maxpacket: 8 [ 311.526515][ T5353] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 311.587802][ T5353] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 311.638899][ T5353] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 311.653905][ T5353] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 311.694590][ T5353] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.714403][ T5353] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 311.727557][ T5353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.030953][ T7788] ======================================================= [ 312.030953][ T7788] WARNING: The mand mount option has been deprecated and [ 312.030953][ T7788] and is ignored by this kernel. Remove the mand [ 312.030953][ T7788] option from the mount to silence this warning. [ 312.030953][ T7788] ======================================================= [ 312.067047][ T29] audit: type=1400 audit(1723903883.608:460): avc: denied { remount } for pid=7787 comm="syz.1.811" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 312.122558][ T5353] usb 3-1: usb_control_msg returned -32 [ 312.161715][ T5353] usbtmc 3-1:16.0: can't read capabilities [ 312.308767][ T7792] /dev/sg0: Can't lookup blockdev [ 312.578603][ T2545] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 312.665145][ T5233] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 312.895057][ T5233] Bluetooth: hci0: command 0x0406 tx timeout [ 312.984719][ T5274] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 313.234244][ T7822] wg2: left promiscuous mode [ 313.281436][ T5274] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.333923][ T7822] wg2: left allmulticast mode [ 313.339414][ T5274] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.377024][ T5274] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 313.427167][ T1127] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 313.438088][ T7823] wg2: entered promiscuous mode [ 313.450041][ T5274] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.486525][ T7823] wg2: entered allmulticast mode [ 313.541495][ T5274] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.562937][ T5274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.584605][ T5274] usb 5-1: Product: syz [ 313.597751][ T5274] usb 5-1: Manufacturer: syz [ 313.615898][ T5274] usb 5-1: SerialNumber: syz [ 313.886578][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 313.960309][ T7812] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 314.029813][ T25] usb 3-1: USB disconnect, device number 10 [ 314.127815][ T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 314.159400][ T8] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 314.186072][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 314.199603][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.249102][ T7826] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 314.278723][ T8] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 314.635680][ T7812] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 314.882737][ T5274] cdc_ncm 5-1:1.0: bind() failure [ 314.924226][ T5274] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 314.965324][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 314.974715][ T5233] Bluetooth: hci0: command 0x0406 tx timeout [ 314.979363][ T5274] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 315.024476][ T5274] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 315.073138][ T5274] usb 5-1: USB disconnect, device number 12 [ 315.194692][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.224791][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.277483][ T25] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 315.313299][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.336960][ T25] usb 4-1: config 0 descriptor?? [ 315.418376][ T5304] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 315.628526][ T5304] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 315.648151][ T5304] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 315.659240][ T5304] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 315.668544][ T5304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.685197][ T8] usb 1-1: USB disconnect, device number 14 [ 315.703628][ T7835] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.767905][ T5304] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 315.816952][ T25] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 315.836151][ T25] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 315.843000][ T25] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 315.851662][ T7844] /dev/sg0: Can't lookup blockdev [ 315.880458][ T25] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 315.903641][ T25] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 315.914210][ T25] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 315.922696][ T25] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 315.933171][ T25] arvo 0003:1E7D:30D4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 316.957932][ T25] usb 4-1: USB disconnect, device number 13 [ 317.556299][ T7860] wg2: left promiscuous mode [ 317.572989][ T7860] wg2: left allmulticast mode [ 317.709700][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.716163][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.727956][ T5353] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 317.827601][ T7862] wg2: entered promiscuous mode [ 317.832623][ T7862] wg2: entered allmulticast mode [ 318.362464][ T1127] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 318.976131][ T5957] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 319.309480][ T29] audit: type=1400 audit(1723903890.888:461): avc: denied { nlmsg_read } for pid=7872 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 319.385475][ T29] audit: type=1400 audit(1723903890.928:462): avc: denied { read } for pid=7872 comm="syz.1.840" path="socket:[17873]" dev="sockfs" ino=17873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 319.514808][ T5353] usb 3-1: USB disconnect, device number 11 [ 321.876721][ T7916] wg2: left promiscuous mode [ 321.890347][ T7916] wg2: left allmulticast mode [ 321.974972][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 322.047487][ T7916] wg2: entered promiscuous mode [ 322.057423][ T7916] wg2: entered allmulticast mode [ 322.237581][ T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 322.264720][ T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 322.282918][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 322.293599][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.307381][ T7912] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 322.317406][ T8] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.546198][ T5304] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 322.787309][ T5304] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 322.821473][ T5304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.856813][ T5304] usb 1-1: config 0 descriptor?? [ 322.873295][ T5304] cp210x 1-1:0.0: cp210x converter detected [ 323.220208][ T7937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.862'. [ 323.337551][ T5304] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 323.357986][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.393408][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.430806][ T7945] netlink: 'syz.4.865': attribute type 19 has an invalid length. [ 323.485833][ T5304] usb 1-1: cp210x converter now attached to ttyUSB0 [ 323.515105][ T25] usb 2-1: USB disconnect, device number 12 [ 323.972798][ T5304] usb 1-1: USB disconnect, device number 15 [ 324.165306][ T1127] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 324.741523][ T7963] input: syz0 as /devices/virtual/input/input13 [ 324.745732][ T5304] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 324.777835][ T5304] cp210x 1-1:0.0: device disconnected [ 325.125577][ T7976] 9pnet: p9_errstr2errno: server reported unknown error [ 325.377276][ T7978] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 326.290815][ T7995] usb usb8: usbfs: process 7995 (syz.0.885) did not claim interface 0 before use [ 327.435206][ T8012] nbd: device at index 2 is going down [ 328.424710][ T5233] Bluetooth: hci2: command 0x0406 tx timeout [ 329.145340][ T5233] Bluetooth: hci0: command 0x0406 tx timeout [ 329.415619][ T29] audit: type=1400 audit(1723903900.998:463): avc: denied { write } for pid=8013 comm="syz.4.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 329.597623][ T8036] input: syz0 as /devices/virtual/input/input14 [ 329.664397][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 329.869141][ T1127] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 329.878911][ T8] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 329.923509][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.950607][ T8] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 329.983929][ T8] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 329.984033][ T5274] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 330.004981][ T8] usb 2-1: Manufacturer: syz [ 330.056603][ T8] usb 2-1: config 0 descriptor?? [ 330.227295][ T5277] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 330.234421][ T8] rc_core: IR keymap rc-hauppauge not found [ 330.240798][ T8] Registered IR keymap rc-empty [ 330.246753][ T5274] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 330.260971][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 330.268158][ T5274] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 330.301922][ T5274] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 330.308633][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 330.335695][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.372796][ T5233] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 330.375363][ T8035] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 330.444368][ T5277] usb 4-1: Using ep0 maxpacket: 8 [ 330.465213][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.488470][ T5274] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 330.514437][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.568604][ T5277] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 330.627769][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.675463][ T5277] usb 4-1: config 0 descriptor?? [ 330.854532][ T5230] usb 2-1: USB disconnect, device number 13 [ 331.275450][ T5277] hid-picolcd 0003:04D8:F002.000A: item fetching failed at offset 5/7 [ 331.314859][ T5277] hid-picolcd 0003:04D8:F002.000A: device report parse failed [ 331.343011][ T8054] wg2: left promiscuous mode [ 331.352853][ T8054] wg2: left allmulticast mode [ 331.358155][ T5277] hid-picolcd 0003:04D8:F002.000A: probe with driver hid-picolcd failed with error -22 [ 331.421963][ T8054] wg2: entered promiscuous mode [ 331.444721][ T8054] wg2: entered allmulticast mode [ 331.732087][ T25] usb 4-1: USB disconnect, device number 14 [ 332.199972][ T5274] usb 3-1: USB disconnect, device number 12 [ 332.395464][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 332.585494][ T5277] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 332.600579][ T25] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 332.610579][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.619243][ T25] usb 5-1: Product: syz [ 332.623485][ T25] usb 5-1: Manufacturer: syz [ 332.628955][ T25] usb 5-1: SerialNumber: syz [ 332.633974][ T8074] syz.1.914 (8074) used greatest stack depth: 19904 bytes left [ 332.643634][ T25] usb 5-1: config 0 descriptor?? [ 332.796258][ T5277] usb 1-1: Using ep0 maxpacket: 8 [ 332.818263][ T5277] usb 1-1: config 0 has no interfaces? [ 332.823834][ T5277] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 332.849546][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.885825][ T5233] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 332.916506][ T5277] usb 1-1: config 0 descriptor?? [ 332.948826][ T8082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.916'. [ 333.128226][ T25] usb 5-1: Firmware: major: 0, minor: 102, hardware type: UNKNOWN (102) [ 333.314409][ T29] audit: type=1400 audit(1723903904.868:464): avc: denied { setopt } for pid=8083 comm="syz.2.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 333.350321][ T5233] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 333.350963][ T25] usb 5-1: failed to fetch extended address, random address set [ 333.381643][ T25] usb 5-1: atusb_probe: initialization failed, error = -524 [ 333.404977][ T25] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 333.443926][ T25] usb 5-1: USB disconnect, device number 13 [ 333.448603][ T8067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.531076][ T8067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.648287][ T8] usb 1-1: USB disconnect, device number 16 [ 334.129332][ T8094] wg2: left promiscuous mode [ 334.134079][ T8094] wg2: left allmulticast mode [ 334.347942][ T8094] wg2: entered promiscuous mode [ 334.387538][ T8094] wg2: entered allmulticast mode [ 335.489931][ T1127] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 335.530430][ T5233] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 336.020195][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 336.961816][ T29] audit: type=1400 audit(1723903908.538:465): avc: denied { read } for pid=8135 comm="syz.3.937" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 337.085763][ T8136] 9pnet_fd: Insufficient options for proto=fd [ 337.730523][ T8146] input: syz1 as /devices/virtual/input/input16 [ 338.006735][ T29] audit: type=1400 audit(1723903909.588:466): avc: denied { create } for pid=8157 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 338.146918][ T29] audit: type=1400 audit(1723903909.718:467): avc: denied { read } for pid=8157 comm="syz.0.944" path="socket:[19167]" dev="sockfs" ino=19167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 338.297160][ T8164] netlink: 4272 bytes leftover after parsing attributes in process `syz.4.946'. [ 339.441825][ T8163] wg2: left promiscuous mode [ 339.469979][ T8163] wg2: left allmulticast mode [ 339.616447][ T8169] wg2: entered promiscuous mode [ 339.638223][ T5233] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 339.678040][ T8169] wg2: entered allmulticast mode [ 341.121710][ T8200] syzkaller1: entered promiscuous mode [ 341.137525][ T8200] syzkaller1: entered allmulticast mode [ 341.375270][ T2999] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 341.411730][ T5230] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 341.443482][ T8212] sctp: [Deprecated]: syz.0.961 (pid 8212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.443482][ T8212] Use struct sctp_sack_info instead [ 341.628470][ T5230] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.674684][ T5230] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 341.706635][ T5230] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 341.729311][ T5230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.764059][ T8203] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 341.804688][ T5230] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 342.223370][ T8229] syzkaller1: entered promiscuous mode [ 342.229515][ T8233] tmpfs: Bad value for 'huge' [ 342.308142][ T8229] syzkaller1: entered allmulticast mode [ 342.574878][ T5274] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 342.768172][ T5233] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 343.028338][ T5274] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 343.048908][ T5274] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 343.059609][ T5274] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 343.069200][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.818946][ T5274] usb 2-1: can't set config #27, error -71 [ 345.999636][ T5274] usb 2-1: USB disconnect, device number 14 [ 346.004019][ T8] usb 3-1: USB disconnect, device number 13 [ 346.364006][ T29] audit: type=1400 audit(1723903917.938:468): avc: denied { map } for pid=8254 comm="syz.0.976" path="/dev/dri/card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 346.704502][ T5274] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 346.709946][ T8] kernel write not supported for file /uinput (pid: 8 comm: kworker/0:0) [ 346.885833][ T8265] mkiss: ax0: crc mode is auto. [ 346.928324][ T5274] usb 5-1: New USB device found, idVendor=08dd, idProduct=90ff, bcdDevice=5d.5a [ 346.953386][ T5274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.970057][ T5274] usb 5-1: Product: syz [ 346.975894][ T5274] usb 5-1: Manufacturer: syz [ 346.980666][ T5274] usb 5-1: SerialNumber: syz [ 347.016242][ T5274] usb 5-1: config 0 descriptor?? [ 347.137333][ T134] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 347.273988][ T8273] pimreg: entered allmulticast mode [ 347.654385][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 347.716440][ T5277] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 347.910352][ T8] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 347.925268][ T5277] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 347.957700][ T5277] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 347.979250][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.002276][ T8] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 348.013586][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 348.023480][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.112246][ T8277] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 348.143613][ T5274] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 348.166968][ T5274] asix 5-1:0.0: probe with driver asix failed with error -71 [ 348.182167][ T8] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 348.229122][ T5274] usb 5-1: USB disconnect, device number 14 [ 348.588271][ T5277] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 348.608168][ T5277] usb 2-1: No valid video chain found. [ 349.045890][ T5230] usb 2-1: USB disconnect, device number 15 [ 349.303409][ T8307] /dev/sg0: Can't lookup blockdev [ 350.041089][ T5277] usb 3-1: USB disconnect, device number 14 [ 350.545922][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'. [ 350.624213][ T8318] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1002'. [ 350.890678][ T8326] tmpfs: Bad value for 'huge' [ 351.109938][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'. [ 351.215216][ T5230] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 351.436449][ T5230] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 351.464368][ T5230] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 351.492384][ T5230] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 351.511686][ T5230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.673449][ T8326] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 351.702938][ T5230] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.819576][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'. [ 351.899854][ T8357] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1016'. [ 352.449085][ T47] kernel write not supported for file /audio (pid: 47 comm: kworker/1:1) [ 352.896305][ T134] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 353.226953][ T47] usb 2-1: USB disconnect, device number 16 [ 355.301882][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 356.255693][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 356.270508][ T8] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 356.297959][ T8] usb 2-1: config 150 has no interface number 0 [ 356.323781][ T8] usb 2-1: config 150 interface 204 has no altsetting 0 [ 356.364840][ T8] usb 2-1: config 150 interface 1 has no altsetting 0 [ 356.406468][ T8] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 356.410618][ T8429] tmpfs: Bad value for 'huge' [ 356.416198][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.416231][ T8] usb 2-1: Product: syz [ 356.416252][ T8] usb 2-1: Manufacturer: syz [ 356.416272][ T8] usb 2-1: SerialNumber: syz [ 356.478875][ T8431] vivid-000: disconnect [ 356.508099][ T8430] vivid-000: reconnect [ 356.551332][ T8434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1045'. [ 356.699599][ T8] xr_serial 2-1:150.204: xr_serial converter detected [ 356.718436][ T29] audit: type=1400 audit(1723903928.298:469): avc: denied { setopt } for pid=8438 comm="syz.0.1047" laddr=ff01::1 lport=52129 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 356.825275][ T5230] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 357.030269][ T5230] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 357.060079][ T5230] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 357.100165][ T5230] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 357.178293][ T5230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.920022][ T8460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 357.928131][ T8460] IPv6: NLM_F_CREATE should be set when creating new route [ 357.935412][ T8460] IPv6: NLM_F_CREATE should be set when creating new route [ 357.958222][ T8460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.005961][ T8] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 358.012420][ T8] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 358.042528][ T8] usb 2-1: USB disconnect, device number 17 [ 358.051322][ T8429] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 358.060546][ T8] xr_serial 2-1:150.204: device disconnected [ 358.074127][ T5230] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 358.141498][ T29] audit: type=1326 audit(1723903929.718:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8461 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a77979e79 code=0x7ffc0000 [ 358.214492][ T29] audit: type=1326 audit(1723903929.718:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8461 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a77979e79 code=0x7ffc0000 [ 358.271459][ T29] audit: type=1326 audit(1723903929.728:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8461 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a77979e79 code=0x7ffc0000 [ 358.441110][ T29] audit: type=1326 audit(1723903930.008:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8461 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a77979e79 code=0x7ffc0000 [ 358.479321][ T29] audit: type=1326 audit(1723903930.008:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8461 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a77979e79 code=0x7ffc0000 [ 358.658581][ T2999] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 358.858126][ T8485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1062'. [ 358.952657][ T8488] netlink: 'syz.4.1063': attribute type 5 has an invalid length. [ 359.026742][ T29] audit: type=1400 audit(1723903930.608:475): avc: denied { mounton } for pid=8489 comm="syz.2.1064" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 359.104382][ T29] audit: type=1400 audit(1723903930.678:476): avc: denied { unmount } for pid=5457 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 359.366569][ T5273] usb 4-1: USB disconnect, device number 15 [ 360.721751][ T5275] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 361.796583][ T5275] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 361.831465][ T5275] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 362.394623][ T5233] Bluetooth: hci4: command 0x0406 tx timeout [ 362.674359][ T5275] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 362.686457][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.710753][ T8511] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 362.758496][ T5275] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 363.132875][ T5275] usb 3-1: USB disconnect, device number 15 [ 363.257764][ T8559] loop2: detected capacity change from 0 to 53 [ 363.346981][ T8560] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1090'. [ 364.440715][ T5233] Bluetooth: hci4: command 0x0406 tx timeout [ 364.458490][ T5957] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 364.590247][ T29] audit: type=1400 audit(1723903936.168:477): avc: denied { create } for pid=8581 comm="syz.1.1100" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 365.643079][ T29] audit: type=1400 audit(1723903937.218:478): avc: denied { accept } for pid=8597 comm="syz.4.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 365.703609][ T8600] bond0: entered promiscuous mode [ 365.783373][ T8600] bond_slave_0: entered promiscuous mode [ 365.809399][ T8600] bond_slave_1: entered promiscuous mode [ 365.831748][ T8608] tmpfs: Bad value for 'huge' [ 366.074846][ T5277] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 366.190492][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 366.415709][ T5277] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.435449][ T5277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.445037][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.690624][ T8] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 366.702331][ T8] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 366.712562][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 366.722382][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.457600][ T5277] usb 2-1: Product: syz [ 368.462208][ T5277] usb 2-1: Manufacturer: syz [ 368.467467][ T5277] usb 2-1: SerialNumber: syz [ 368.509743][ T8608] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 368.528951][ T5277] cdc_ncm 2-1:1.0: skipping garbage [ 368.560457][ T8] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 369.064858][ T5277] cdc_ncm 2-1:1.0: bind() failure [ 369.074123][ T5277] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 369.122869][ T5277] cdc_ncm 2-1:1.1: bind() failure [ 369.177309][ T5277] usb 2-1: USB disconnect, device number 18 [ 370.196663][ T5957] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 370.245275][ T5233] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 370.335255][ T5304] usb 3-1: USB disconnect, device number 16 [ 370.753015][ T5233] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 370.800859][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1120'. [ 370.899260][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 373.557442][ T8653] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1124'. [ 373.941550][ T29] audit: type=1400 audit(1723903945.518:479): avc: denied { bind } for pid=8664 comm="syz.2.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 374.246729][ T29] audit: type=1400 audit(1723903945.818:480): avc: denied { setopt } for pid=8671 comm="syz.2.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 375.305444][ T3019] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 375.772083][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 376.011001][ T8701] input: syz1 as /devices/virtual/input/input17 [ 376.531365][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'. [ 376.744433][ T5277] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 376.754959][ T8722] netlink: 'syz.0.1151': attribute type 1 has an invalid length. [ 376.834167][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 376.867768][ T8725] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1152'. [ 376.968731][ T5277] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 377.001999][ T8731] netlink: 'syz.4.1155': attribute type 4 has an invalid length. [ 377.004341][ T5277] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 377.070514][ T5277] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 377.088511][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.126956][ T8715] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 377.175858][ T5277] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 377.212786][ T8736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1158'. [ 377.407626][ T8736] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1158'. [ 377.426122][ T8736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1158'. [ 377.448153][ T8736] vlan0: entered allmulticast mode [ 377.459489][ T8736] veth0_vlan: entered allmulticast mode [ 378.465218][ T5277] usb 4-1: USB disconnect, device number 16 [ 378.575526][ T5233] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 379.155141][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.303023][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.644405][ T5274] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 380.856055][ T5274] usb 5-1: Using ep0 maxpacket: 16 [ 380.915467][ T5274] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 380.929414][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.940398][ T5274] usb 5-1: config 0 descriptor?? [ 380.959260][ T5274] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 381.084627][ T2999] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 381.445104][ T8783] tmpfs: Bad value for 'huge' [ 381.626586][ T8788] tmpfs: Bad value for 'huge' [ 381.785239][ T5277] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 381.856587][ T5273] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 381.984367][ T5304] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 381.997336][ T5277] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.022232][ T5277] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 382.040718][ T5277] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 382.056715][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.081827][ T5274] gspca_sonixj: reg_w1 err -71 [ 382.099460][ T5273] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc [ 382.112966][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.127194][ T8783] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 382.136115][ T5274] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 382.151064][ T5277] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 382.161072][ T5273] usb 2-1: Product: syz [ 382.174027][ T5274] usb 5-1: USB disconnect, device number 15 [ 382.180402][ T5273] usb 2-1: Manufacturer: syz [ 382.189724][ T5273] usb 2-1: SerialNumber: syz [ 382.214075][ T5304] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.227682][ T5304] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 382.238796][ T5273] usb 2-1: config 0 descriptor?? [ 382.255385][ T5273] cypress_m8 2-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 382.298535][ T5273] nokiaca42v2 ttyUSB0: required endpoint is missing [ 382.314358][ T5304] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 382.355189][ T5304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.398090][ T8788] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 382.424176][ T5304] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 382.799630][ T5274] usb 2-1: USB disconnect, device number 19 [ 382.827363][ T5274] cypress_m8 2-1:0.0: device disconnected [ 383.317297][ T5233] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 383.626066][ T5304] usb 1-1: USB disconnect, device number 17 [ 384.041423][ T5274] usb 3-1: USB disconnect, device number 17 [ 384.253758][ T5233] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 384.526185][ T5233] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 385.054775][ T5304] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 385.376905][ T5304] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 385.401100][ T5304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.419672][ T5304] usb 1-1: Product: syz [ 385.429220][ T5304] usb 1-1: Manufacturer: syz [ 385.439825][ T5304] usb 1-1: SerialNumber: syz [ 385.479235][ T5304] usb 1-1: config 0 descriptor?? [ 385.500985][ T5304] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 018 [ 385.564514][ T5273] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 385.764526][ T5273] usb 2-1: Using ep0 maxpacket: 16 [ 385.778487][ T5233] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 385.787138][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.859380][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.908874][ T5273] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 385.994198][ T5273] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 386.055227][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.120385][ T5273] usb 2-1: config 0 descriptor?? [ 386.181473][ T5304] i2c i2c-1: failure reading functionality [ 386.240997][ T5304] i2c i2c-1: connected i2c-tiny-usb device [ 386.292886][ T5304] usb 1-1: USB disconnect, device number 18 [ 386.335838][ T5233] Bluetooth: hci0: command 0x0406 tx timeout [ 386.793960][ T5273] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000B/input/input18 [ 386.821053][ T5957] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 386.855318][ T5273] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 387.323996][ T5304] usb 2-1: USB disconnect, device number 20 [ 387.564512][ T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 387.787202][ T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 387.849059][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.891767][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.914558][ T5273] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 387.914561][ T29] audit: type=1400 audit(1723903959.488:481): avc: denied { getopt } for pid=8839 comm="syz.3.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 387.924368][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 388.062259][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 388.092368][ T8] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 388.113177][ T8] usb 1-1: Manufacturer: syz [ 388.150858][ T8] usb 1-1: config 0 descriptor?? [ 388.184763][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 388.254138][ T5273] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 388.306726][ T5273] usb 5-1: config 179 has no interface number 0 [ 388.332823][ T5273] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 388.373775][ T5273] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 388.436436][ T5273] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 388.457794][ T5273] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 388.476914][ T5273] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 388.516090][ T5273] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 388.536077][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.556415][ T8838] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 388.598278][ T8] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 388.627265][ T8] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 388.698044][ T5233] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 388.713039][ T8] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 388.815296][ T5233] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 388.948837][ T8] usb 1-1: USB disconnect, device number 19 [ 389.080841][ T5304] usb 5-1: USB disconnect, device number 16 [ 389.081033][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 389.095076][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 389.964687][ T8] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 390.198465][ T8] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 390.265416][ T8] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 390.319347][ T8] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 390.416374][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.799686][ T8] usb 2-1: string descriptor 0 read error: -71 [ 390.827167][ T8] hub 2-1:32.0: USB hub found [ 390.847850][ T8] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 390.970688][ T8] usb 2-1: USB disconnect, device number 21 [ 391.215655][ T8880] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 391.224961][ T8880] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 391.310378][ T8885] tmpfs: Bad value for 'huge' [ 391.595239][ T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 391.716746][ T8891] usb usb8: usbfs: process 8891 (syz.1.1216) did not claim interface 0 before use [ 391.810703][ T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 391.824141][ T8] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 391.843274][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 391.891281][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.942639][ T5233] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 391.950838][ T8885] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 392.098941][ T8] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 392.487357][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1220'. [ 392.585080][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 392.648307][ T8905] usb usb8: usbfs: process 8905 (syz.2.1221) did not claim interface 0 before use [ 393.271266][ T8902] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1220'. [ 393.700683][ T29] audit: type=1400 audit(1723903965.278:482): avc: denied { create } for pid=8906 comm="syz.2.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 394.382621][ T8] usb 1-1: USB disconnect, device number 20 [ 394.489155][ T8926] netlink: 'syz.3.1230': attribute type 1 has an invalid length. [ 394.502899][ T8926] netlink: 9344 bytes leftover after parsing attributes in process `syz.3.1230'. [ 394.512171][ T8926] netlink: 'syz.3.1230': attribute type 1 has an invalid length. [ 394.594430][ T47] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 394.752510][ T29] audit: type=1400 audit(1723903966.328:483): avc: denied { watch } for pid=8933 comm="syz.2.1234" path="/219" dev="tmpfs" ino=1201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 394.775942][ T29] audit: type=1400 audit(1723903966.328:484): avc: denied { watch_sb } for pid=8933 comm="syz.2.1234" path="/219" dev="tmpfs" ino=1201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 394.848731][ T47] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 394.858544][ T47] usb 5-1: config 0 has no interface number 0 [ 394.864820][ T47] usb 5-1: config 0 interface 255 has no altsetting 0 [ 394.878132][ T47] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 394.884683][ T5230] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 394.887577][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.907393][ T47] usb 5-1: config 0 descriptor?? [ 394.925595][ T47] cp210x 5-1:0.255: cp210x converter detected [ 395.084381][ T5230] usb 4-1: Using ep0 maxpacket: 32 [ 395.093284][ T5230] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 395.107650][ T5230] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 395.117007][ T5230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.129021][ T5230] usb 4-1: Product: syz [ 395.133233][ T5230] usb 4-1: Manufacturer: syz [ 395.141766][ T5230] usb 4-1: SerialNumber: syz [ 395.150740][ T5230] usb 4-1: config 0 descriptor?? [ 395.155849][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 395.166011][ T8929] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 395.174994][ T5230] hub 4-1:0.0: bad descriptor, ignoring hub [ 395.180933][ T5230] hub 4-1:0.0: probe with driver hub failed with error -5 [ 395.193735][ T5230] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 395.316820][ T5275] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 395.355482][ T47] cp210x 5-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 395.358225][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.377879][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 395.387334][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.417275][ T8] usb 3-1: config 0 descriptor?? [ 395.471034][ T8] usb 3-1: interface 1 not found [ 395.514566][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 395.519825][ T29] audit: type=1400 audit(1723903967.098:485): avc: denied { bind } for pid=8941 comm="syz.1.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 395.570230][ T47] cp210x 5-1:0.255: GPIO initialisation failed: -19 [ 395.578346][ T5275] usb 1-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice= c.b2 [ 395.593778][ T47] usb 5-1: cp210x converter now attached to ttyUSB0 [ 395.595361][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.610949][ T5275] usb 1-1: Product: syz [ 395.627591][ T5274] usb 4-1: USB disconnect, device number 17 [ 395.627638][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 395.646808][ T5275] usb 1-1: Manufacturer: syz [ 395.653981][ T5275] usb 1-1: SerialNumber: syz [ 395.663540][ T5275] usb 1-1: config 0 descriptor?? [ 395.673646][ T5275] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 395.859094][ T47] usb 3-1: USB disconnect, device number 18 [ 395.969570][ T5274] usb 5-1: USB disconnect, device number 17 [ 396.013945][ T5274] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 396.053859][ T5274] cp210x 5-1:0.255: device disconnected [ 396.169059][ T5275] gspca_zc3xx: reg_r err -71 [ 396.176736][ T5275] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 396.213439][ T5275] usb 1-1: USB disconnect, device number 21 [ 396.681549][ T8954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1241'. [ 396.720467][ T8954] netlink: 'syz.3.1241': attribute type 7 has an invalid length. [ 396.761529][ T8954] netlink: 'syz.3.1241': attribute type 8 has an invalid length. [ 396.792298][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'. [ 396.839024][ T8954] gretap0: entered promiscuous mode [ 396.859449][ T8954] batadv_slave_1: entered promiscuous mode [ 396.909330][ T29] audit: type=1400 audit(1723903968.488:486): avc: denied { name_bind } for pid=8961 comm="syz.2.1244" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 396.930444][ T8954] gretap0: left promiscuous mode [ 396.950958][ T8954] batadv_slave_1: left promiscuous mode [ 396.986538][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1245'. [ 397.000761][ T8967] tmpfs: Bad value for 'huge' [ 397.051326][ T8965] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1245'. [ 397.073165][ T29] audit: type=1400 audit(1723903968.648:487): avc: denied { bind } for pid=8969 comm="syz.2.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 397.119193][ T29] audit: type=1400 audit(1723903968.648:488): avc: denied { name_bind } for pid=8969 comm="syz.2.1247" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 397.161785][ T29] audit: type=1400 audit(1723903968.648:489): avc: denied { node_bind } for pid=8969 comm="syz.2.1247" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 397.211462][ T8974] usb usb8: usbfs: process 8974 (syz.1.1250) did not claim interface 0 before use [ 397.296258][ T5275] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 397.516638][ T5275] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 397.549931][ T5275] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 397.561512][ T5275] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 397.572979][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.592934][ T8967] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 397.617619][ T5275] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 398.563056][ T9007] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1260'. [ 398.728168][ T8] kernel read not supported for file /dsp (pid: 8 comm: kworker/0:0) [ 398.976163][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 399.149969][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1262'. [ 399.186698][ T9015] usb usb8: usbfs: process 9015 (syz.1.1263) did not claim interface 0 before use [ 399.216086][ T5274] usb 1-1: USB disconnect, device number 22 [ 399.230194][ T9013] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1262'. [ 399.801746][ T5233] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 399.834731][ T9024] netlink: 198180 bytes leftover after parsing attributes in process `syz.3.1266'. [ 401.315869][ T8] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 401.385145][ T5233] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 401.579079][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 401.702186][ T9052] usb usb8: usbfs: process 9052 (syz.2.1275) did not claim interface 0 before use [ 401.744925][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 401.788792][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 401.872369][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 401.991264][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 402.069426][ T29] audit: type=1400 audit(1723903973.628:490): avc: denied { set_context_mgr } for pid=9057 comm="syz.2.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 402.106220][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 402.144669][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 402.224436][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 402.284036][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 402.335247][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 402.390937][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 402.399868][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 402.444319][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 402.474482][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 402.542240][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 402.583179][ T8] usb 4-1: string descriptor 0 read error: -22 [ 402.598561][ T8] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 402.625236][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.696392][ T8] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 403.239286][ T5230] usb 4-1: USB disconnect, device number 18 [ 403.507939][ T9073] overlayfs: failed to clone upperpath [ 404.409036][ T9086] usb usb8: usbfs: process 9086 (syz.3.1287) did not claim interface 0 before use [ 404.736945][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 405.093670][ T29] audit: type=1400 audit(1723903976.668:491): avc: denied { write } for pid=9097 comm="syz.1.1293" name="mouse0" dev="devtmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 405.235135][ T29] audit: type=1400 audit(1723903976.728:492): avc: denied { append } for pid=9097 comm="syz.1.1293" name="event3" dev="devtmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 406.567757][ T9118] usb usb8: usbfs: process 9118 (syz.3.1300) did not claim interface 0 before use [ 406.729235][ T29] audit: type=1400 audit(1723903978.308:493): avc: denied { mount } for pid=9121 comm="syz.1.1302" name="/" dev="pstore" ino=2855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 406.938249][ T29] audit: type=1400 audit(1723903978.518:494): avc: denied { unmount } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 407.154571][ T29] audit: type=1400 audit(1723903978.728:495): avc: denied { read } for pid=9131 comm="syz.1.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 407.284852][ T5304] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 407.570020][ T5304] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.637543][ T9136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 407.644840][ T9136] IPv6: NLM_F_CREATE should be set when creating new route [ 407.659551][ T5304] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.711902][ T5304] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 407.808789][ T5304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 407.855135][ T5304] usb 4-1: SerialNumber: syz [ 408.111444][ T5304] usb 4-1: 0:2 : does not exist [ 408.157055][ T9148] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 408.179677][ T9148] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 408.186322][ T5304] usb 4-1: USB disconnect, device number 19 [ 408.324796][ T29] audit: type=1326 audit(1723903979.908:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9152 comm="syz.0.1313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a77979e79 code=0x0 [ 409.119546][ T5233] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 409.361082][ T5233] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 409.384358][ T5230] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 409.635871][ T5230] usb 5-1: Using ep0 maxpacket: 32 [ 409.656817][ T5230] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 409.675170][ T5230] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 409.686684][ T5230] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 409.695668][ T5230] usb 5-1: Product: syz [ 409.701304][ T5230] usb 5-1: Manufacturer: syz [ 409.718923][ T5230] usb 5-1: SerialNumber: syz [ 409.765681][ T5230] usb 5-1: config 0 descriptor?? [ 409.781567][ T9170] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 410.233038][ T5230] usb 5-1: USB disconnect, device number 18 [ 410.345738][ T47] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 410.501779][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 410.616015][ T47] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.633602][ T47] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 410.725751][ T47] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 410.766368][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 410.814364][ T47] usb 1-1: SerialNumber: syz [ 410.982520][ T29] audit: type=1400 audit(1723903982.558:497): avc: denied { mount } for pid=9202 comm="syz.1.1332" name="/" dev="ramfs" ino=24190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 411.118686][ T47] usb 1-1: 0:2 : does not exist [ 411.152533][ T9204] Process accounting resumed [ 411.162354][ T29] audit: type=1400 audit(1723903982.728:498): avc: denied { unmount } for pid=9202 comm="syz.1.1332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 411.207432][ T47] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 411.313558][ T47] usb 1-1: USB disconnect, device number 23 [ 411.335740][ T9210] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 411.546053][ T9212] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 412.624652][ T29] audit: type=1400 audit(1723903984.178:499): avc: denied { module_request } for pid=9224 comm="syz.4.1342" kmod="ppp-compress-204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 412.646743][ C0] vkms_vblank_simulate: vblank timer overrun [ 413.015062][ T5233] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 413.724836][ T5233] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 415.174120][ T5233] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 416.260370][ T2999] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 416.534381][ T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 416.572567][ T9271] netlink: 'syz.4.1355': attribute type 8 has an invalid length. [ 416.583952][ T9270] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 416.734435][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 416.749436][ T8] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 416.769345][ T8] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 416.796072][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 416.828118][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 416.857473][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 416.931591][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 416.955994][ T9277] overlayfs: failed to create directory ./file1/work (errno: 1); mounting read-only [ 416.992801][ T8] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 416.993337][ T9277] overlayfs: conflicting lowerdir path [ 417.046463][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.096027][ T8] usb 2-1: config 0 descriptor?? [ 417.375396][ T47] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 417.411311][ T8] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 417.585936][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 417.593310][ T47] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 417.613705][ T5233] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 417.652386][ T47] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 417.670822][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 417.681874][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 417.699218][ T47] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.735020][ T47] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 417.781630][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.839568][ T29] audit: type=1326 audit(1723903989.418:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9293 comm="syz.3.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db3f79e79 code=0x7ffc0000 [ 417.942926][ T8] usb 2-1: USB disconnect, device number 22 [ 417.947225][ T29] audit: type=1326 audit(1723903989.468:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9293 comm="syz.3.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db3f79e79 code=0x7ffc0000 [ 417.984873][ T29] audit: type=1326 audit(1723903989.508:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9293 comm="syz.3.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5db3f79e79 code=0x7ffc0000 [ 418.019058][ T8] usblp0: removed [ 418.079234][ T47] usb 5-1: usb_control_msg returned -32 [ 418.081651][ T29] audit: type=1326 audit(1723903989.618:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5db3fabf65 code=0x7ffc0000 [ 418.093519][ T47] usbtmc 5-1:16.0: can't read capabilities [ 418.202392][ T29] audit: type=1326 audit(1723903989.608:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9293 comm="syz.3.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db3f79e79 code=0x7ffc0000 [ 418.243400][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1369'. [ 418.369598][ T29] audit: type=1326 audit(1723903989.618:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9293 comm="syz.3.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db3f79e79 code=0x7ffc0000 [ 418.586665][ T29] audit: type=1326 audit(1723903989.848:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f5db3f79e79 code=0x7ffc0000 [ 419.393153][ T5233] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 421.217680][ T8] usb 5-1: USB disconnect, device number 19 [ 421.304629][ T5957] bridge_slave_1: left allmulticast mode [ 421.326303][ T5957] bridge_slave_1: left promiscuous mode [ 421.332265][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.462448][ T5957] bridge_slave_0: left allmulticast mode [ 421.506144][ T5957] bridge_slave_0: left promiscuous mode [ 421.532411][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.019304][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 422.327008][ T5234] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 422.565223][ T8] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 422.614387][ T5274] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 422.796934][ T5274] usb 3-1: config 0 has an invalid interface number: 47 but max is 0 [ 422.809540][ T5274] usb 3-1: config 0 has no interface number 0 [ 422.836092][ T5274] usb 3-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 422.853939][ T5274] usb 3-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=15.97 [ 422.873110][ T8] usb 5-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba [ 422.882603][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.901578][ T5274] usb 3-1: Product: syz [ 422.905296][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.933204][ T8] usb 5-1: Product: syz [ 422.933437][ T5274] usb 3-1: Manufacturer: syz [ 422.952492][ T8] usb 5-1: Manufacturer: syz [ 422.956625][ T5274] usb 3-1: SerialNumber: syz [ 422.961857][ T8] usb 5-1: SerialNumber: syz [ 422.992475][ T8] usb 5-1: config 0 descriptor?? [ 422.999987][ T5274] usb 3-1: config 0 descriptor?? [ 423.031776][ T5274] cdc_ncm 3-1:0.47: CDC Union missing and no IAD found [ 423.047161][ T5274] cdc_ncm 3-1:0.47: bind() failure [ 423.249565][ T5957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.255336][ T8] kaweth 5-1:0.0: Firmware present in device. [ 423.367699][ T5957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.412442][ T5957] bond0 (unregistering): Released all slaves [ 423.431756][ T8] kaweth 5-1:0.0: Statistics collection: 0 [ 423.471930][ T47] usb 3-1: USB disconnect, device number 19 [ 423.489728][ T8] kaweth 5-1:0.0: Multicast filter limit: 0 [ 423.511642][ T8] kaweth 5-1:0.0: MTU: 0 [ 423.534162][ T8] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 423.551040][ T9363] netlink: 'syz.0.1391': attribute type 1 has an invalid length. [ 424.210694][ T8] kaweth 5-1:0.0: kaweth interface created at eth1 [ 424.227027][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1395'. [ 424.239737][ T5233] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 424.293825][ T9382] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1395'. [ 424.328605][ T47] usb 5-1: USB disconnect, device number 20 [ 424.343979][ T5957] hsr_slave_0: left promiscuous mode [ 424.367996][ T5957] hsr_slave_1: left promiscuous mode [ 424.377036][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.392132][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.400823][ T5233] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.431567][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.440968][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.535012][ T5957] veth1_macvtap: left promiscuous mode [ 424.540893][ T5957] veth0_macvtap: left promiscuous mode [ 424.547072][ T5957] veth1_vlan: left promiscuous mode [ 424.552837][ T5957] veth0_vlan: left promiscuous mode [ 425.101846][ T5230] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 425.263849][ T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 425.328711][ T5230] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 425.348373][ T5230] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 425.433750][ T9399] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1404'. [ 425.465998][ T5230] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 425.481253][ T8] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 425.501773][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.514919][ T5230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.526172][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.540410][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 425.548177][ T9392] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 425.573051][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.584361][ T5230] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 425.593312][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.620939][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 425.640439][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.671438][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.703528][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 425.725084][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.734853][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.752076][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 425.762423][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.790423][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.833963][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 425.851912][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.878917][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.893386][ T5275] usb 3-1: USB disconnect, device number 20 [ 425.921773][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 425.942687][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.962269][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.995898][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 426.021111][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 426.031041][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 426.057285][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 426.075851][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 426.084985][ T8] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 426.096476][ T8] usb 2-1: Product: syz [ 426.100674][ T8] usb 2-1: Manufacturer: syz [ 426.151977][ T8] usb 2-1: SerialNumber: syz [ 426.160390][ T8] usb 2-1: config 0 descriptor?? [ 426.179911][ T8] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 426.445953][ T5277] usb 2-1: USB disconnect, device number 23 [ 426.473503][ T5277] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 426.516632][ T5957] team0 (unregistering): Port device team_slave_1 removed [ 426.602917][ T5957] team0 (unregistering): Port device team_slave_0 removed [ 426.845360][ T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 427.075551][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 427.083068][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 427.102665][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 427.115674][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 427.135959][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.149043][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 427.158442][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.387273][ T8] usb 3-1: usb_control_msg returned -32 [ 427.395424][ T8] usbtmc 3-1:16.0: can't read capabilities [ 427.777355][ T3019] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 428.127870][ T29] audit: type=1400 audit(1723903999.698:507): avc: denied { mounton } for pid=9432 comm="syz.1.1416" path="/proc/653/cgroup" dev="proc" ino=24693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 429.743615][ T29] audit: type=1400 audit(1723903999.708:508): avc: denied { remount } for pid=9432 comm="syz.1.1416" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 429.917049][ T5274] usb 3-1: USB disconnect, device number 21 [ 430.000614][ T9439] ipvlan0: entered promiscuous mode [ 430.031551][ T9439] ipvlan0: left promiscuous mode [ 430.037198][ T9444] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 430.186407][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1422'. [ 430.200362][ T9449] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1422'. [ 430.404365][ T5275] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 430.595533][ T8] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 430.643593][ T5275] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 430.654775][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.685169][ T5275] usb 4-1: config 0 descriptor?? [ 430.719213][ T5275] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 430.848021][ T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 430.868215][ T8] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 430.924708][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 430.953328][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.026728][ T9456] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 431.049079][ T8] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 431.196013][ T5275] gspca_stv06xx: I2C: Read error writing address: -71 [ 431.238719][ T5275] usb 4-1: USB disconnect, device number 20 [ 431.326354][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1432'. [ 431.722433][ T9473] hsr_slave_0: left promiscuous mode [ 431.725206][ T5275] usb 1-1: USB disconnect, device number 24 [ 431.752288][ T9473] hsr_slave_1: left promiscuous mode [ 432.176942][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 432.375340][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 432.408418][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 432.438426][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.452663][ T5233] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 432.452669][ T8] usb 3-1: Product: syz [ 432.452694][ T8] usb 3-1: Manufacturer: syz [ 432.475730][ T8] usb 3-1: SerialNumber: syz [ 432.519334][ T8] usb 3-1: config 0 descriptor?? [ 432.561949][ T8] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 432.898864][ T63] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 433.243925][ T5304] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 433.295782][ T29] audit: type=1400 audit(1723904004.878:509): avc: denied { listen } for pid=9491 comm="syz.3.1440" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 433.378746][ T29] audit: type=1400 audit(1723904004.948:510): avc: denied { write } for pid=9491 comm="syz.3.1440" laddr=127.0.0.1 lport=58676 faddr=127.0.0.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 433.474083][ T29] audit: type=1400 audit(1723904005.028:511): avc: denied { map } for pid=9494 comm="syz.4.1441" path="/dev/sg0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 433.533142][ T5304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.568730][ T5304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.595095][ T5304] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 433.607384][ T5304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.640916][ T5304] usb 1-1: config 0 descriptor?? [ 433.857872][ T47] usb 3-1: USB disconnect, device number 22 [ 434.194665][ T5304] hid-steam 0003:28DE:1142.000D: unknown main item tag 0x0 [ 434.228633][ T5304] hid-steam 0003:28DE:1142.000D: unknown main item tag 0x0 [ 434.277827][ T5304] hid-steam 0003:28DE:1142.000D: unknown main item tag 0x0 [ 434.322160][ T5304] hid-steam 0003:28DE:1142.000D: unknown main item tag 0x0 [ 434.347145][ T5304] hid-steam 0003:28DE:1142.000D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 434.422476][ T5304] usb 1-1: USB disconnect, device number 25 [ 434.583200][ T29] audit: type=1400 audit(1723904006.158:512): avc: denied { map } for pid=9511 comm="syz.3.1447" path="/dev/usbmon0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 434.654414][ T29] audit: type=1400 audit(1723904006.228:513): avc: denied { ioctl } for pid=9511 comm="syz.3.1447" path="/dev/usbmon0" dev="devtmpfs" ino=703 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 434.859532][ T9516] hub 9-0:1.0: USB hub found [ 434.866651][ T9516] hub 9-0:1.0: 8 ports detected [ 436.752932][ T5233] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 437.145589][ T5304] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 437.299438][ T3019] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.448894][ T5304] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 437.532954][ T5304] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 437.573996][ T3019] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.629147][ T5304] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 437.707958][ T5304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.790731][ T9542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 437.806593][ T3019] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.872061][ T5304] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 438.109036][ T3019] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.292596][ T5274] usb 2-1: USB disconnect, device number 24 [ 438.455894][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 438.470935][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 438.480170][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 438.488227][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 438.497044][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 438.506732][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 438.663632][ T5957] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 438.780297][ T3019] bridge_slave_1: left allmulticast mode [ 438.794448][ T3019] bridge_slave_1: left promiscuous mode [ 438.808304][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.849573][ T3019] bridge_slave_0: left allmulticast mode [ 438.862527][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.320572][ T29] audit: type=1326 audit(1723904010.898:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.1.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fad79e79 code=0x7ffc0000 [ 439.389390][ T29] audit: type=1326 audit(1723904010.928:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.1.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fad79e79 code=0x7ffc0000 [ 439.423221][ T29] audit: type=1326 audit(1723904010.938:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.1.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fb1fad79e79 code=0x7ffc0000 [ 439.491173][ T29] audit: type=1326 audit(1723904010.938:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.1.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fad79e79 code=0x7ffc0000 [ 439.533821][ T29] audit: type=1326 audit(1723904010.938:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.1.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fad79e79 code=0x7ffc0000 [ 439.823529][ T3019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.838554][ T5304] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 439.856762][ T3019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.877817][ T3019] bond0 (unregistering): Released all slaves [ 440.048616][ T5304] usb 2-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 440.073939][ T5304] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.102178][ T5304] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 440.113997][ T5304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 440.124880][ T5304] usb 2-1: SerialNumber: syz [ 440.184362][ T5234] Bluetooth: hci2: command 0x0406 tx timeout [ 440.557446][ T5304] usb 2-1: 0:2 : does not exist [ 440.582339][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.582816][ T5234] Bluetooth: hci1: command tx timeout [ 440.588911][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.669545][ T5304] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 440.727644][ T5304] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 440.795229][ T5304] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 440.834419][ T5274] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 440.862326][ T5304] usb 2-1: USB disconnect, device number 25 [ 440.928255][ T3019] hsr_slave_0: left promiscuous mode [ 440.950095][ T3019] hsr_slave_1: left promiscuous mode [ 440.990408][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.004615][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.025514][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.032967][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.047328][ T5274] usb 4-1: Using ep0 maxpacket: 32 [ 441.069893][ T5274] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.097709][ T5274] usb 4-1: config 0 has no interfaces? [ 441.114354][ T5274] usb 4-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 441.123459][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.133570][ T3019] veth1_macvtap: left promiscuous mode [ 441.139879][ T5274] usb 4-1: config 0 descriptor?? [ 441.140629][ T3019] veth0_macvtap: left promiscuous mode [ 441.151662][ T3019] veth1_vlan: left promiscuous mode [ 441.157603][ T3019] veth0_vlan: left allmulticast mode [ 441.163436][ T3019] veth0_vlan: left promiscuous mode [ 441.170528][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'. [ 441.239586][ T9587] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1475'. [ 441.470351][ T5234] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 442.643170][ T3019] team0 (unregistering): Port device team_slave_1 removed [ 442.654398][ T5234] Bluetooth: hci1: command tx timeout [ 442.735015][ T5353] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 442.830474][ T3019] team0 (unregistering): Port device team_slave_0 removed [ 442.960050][ T5353] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 442.980172][ T5353] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 442.997096][ T5353] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 443.012505][ T5353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.025575][ T9595] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 443.044956][ T5353] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 443.276928][ T5273] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 443.333820][ T5353] usb 1-1: USB disconnect, device number 26 [ 443.466690][ T5273] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.467355][ T9556] chnl_net:caif_netlink_parms(): no params data found [ 443.490343][ T5273] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.513714][ T5273] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 443.540446][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 443.550279][ T5273] usb 2-1: SerialNumber: syz [ 443.609973][ T5353] usb 4-1: USB disconnect, device number 21 [ 443.788672][ T5273] usb 2-1: 0:2 : does not exist [ 443.803553][ T5273] usb 2-1: unit 32 not found! [ 443.813505][ T9556] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.829009][ T9556] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.843076][ T5273] usb 2-1: USB disconnect, device number 26 [ 443.845594][ T9556] bridge_slave_0: entered allmulticast mode [ 443.894384][ T9556] bridge_slave_0: entered promiscuous mode [ 443.918901][ T9556] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.956743][ T9556] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.964043][ T9556] bridge_slave_1: entered allmulticast mode [ 443.998605][ T9556] bridge_slave_1: entered promiscuous mode [ 444.193813][ T9556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.245809][ T29] audit: type=1400 audit(1723904015.808:519): avc: denied { mount } for pid=9618 comm="syz.0.1487" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 444.273871][ T9556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.497811][ T9556] team0: Port device team_slave_0 added [ 444.593101][ T9556] team0: Port device team_slave_1 added [ 444.730226][ T9556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.738012][ T5234] Bluetooth: hci1: command tx timeout [ 444.744132][ T9556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.779650][ T5234] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 444.782760][ T9556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.944391][ T9556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.008072][ T5353] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 445.021629][ T9556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.088440][ T9556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.266778][ T5353] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.277689][ T5353] usb 3-1: config 0 has no interfaces? [ 445.317269][ T5353] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 445.372808][ T9556] hsr_slave_0: entered promiscuous mode [ 445.404198][ T5353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.423537][ T9556] hsr_slave_1: entered promiscuous mode [ 445.489424][ T5353] usb 3-1: config 0 descriptor?? [ 445.751163][ T29] audit: type=1400 audit(1723904017.328:520): avc: denied { unmount } for pid=5221 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 445.868065][ T5273] usb 3-1: USB disconnect, device number 23 [ 446.249677][ T29] audit: type=1400 audit(1723904017.828:521): avc: denied { getopt } for pid=9636 comm="syz.0.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 446.641585][ T9556] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 446.668246][ T9556] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 446.682434][ T9556] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 446.689528][ T5273] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 446.703707][ T9556] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 446.815061][ T5234] Bluetooth: hci1: command tx timeout [ 446.867109][ T9556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.876764][ T5273] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.887786][ T5273] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.906850][ T5273] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 446.920687][ T9556] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.924494][ T47] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 446.935271][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 446.943287][ T5273] usb 1-1: SerialNumber: syz [ 446.943364][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.955128][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.992128][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 447.007163][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.014475][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.124396][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 447.141353][ T47] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 447.154186][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 447.202506][ T47] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 447.217837][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 447.219578][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.245378][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 447.245461][ T47] usb 3-1: Product: syz [ 447.268018][ T47] usb 3-1: Manufacturer: syz [ 447.279551][ T5273] usb 1-1: 0:2 : does not exist [ 447.283119][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 447.288671][ T47] usb 3-1: SerialNumber: syz [ 447.309289][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.311519][ T5273] usb 1-1: unit 5 not found! [ 447.326590][ T5304] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 447.332132][ T47] usb 3-1: config 0 descriptor?? [ 447.357346][ T9650] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 447.363470][ T47] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 447.380333][ T8] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 447.385119][ T5273] usb 1-1: USB disconnect, device number 27 [ 447.402155][ T47] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 447.471576][ T9556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.532597][ T5304] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 209 [ 447.555095][ T5304] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 447.564182][ T5304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.638904][ T5304] usb 2-1: config 0 descriptor?? [ 447.645898][ T9655] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 447.706910][ T8] usb 4-1: USB disconnect, device number 22 [ 447.921143][ T9556] veth0_vlan: entered promiscuous mode [ 447.965235][ T9556] veth1_vlan: entered promiscuous mode [ 447.979527][ T47] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 447.992009][ T47] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 448.062307][ T9556] veth0_macvtap: entered promiscuous mode [ 448.088727][ T9556] veth1_macvtap: entered promiscuous mode [ 448.120158][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.140106][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.154457][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.177759][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.189556][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.203699][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.214974][ T47] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 448.221941][ T47] em28xx 3-1:0.0: No AC97 audio processor [ 448.232734][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.252040][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.263408][ T1127] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 448.266359][ T5304] ath6kl: Failed to submit usb control message: -71 [ 448.282794][ T47] usb 3-1: USB disconnect, device number 24 [ 448.290986][ T9556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.298249][ T5304] ath6kl: unable to send the bmi data to the device: -71 [ 448.298274][ T5304] ath6kl: Unable to send get target info: -71 [ 448.319839][ T5304] ath6kl: Failed to init ath6kl core: -71 [ 448.342828][ T47] em28xx 3-1:0.0: Disconnecting em28xx [ 448.343488][ T5304] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 448.360079][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.396291][ T47] em28xx 3-1:0.0: Freeing device [ 448.401556][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.423235][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.436021][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.459545][ T5304] usb 2-1: USB disconnect, device number 27 [ 448.473931][ T5234] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 448.483542][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.514179][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.535811][ T9556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.570395][ T9556] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.627927][ T9556] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.668380][ T9556] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.705090][ T9556] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.010047][ T5234] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 449.033437][ T3019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.036978][ T5234] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 449.085238][ T3019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.155566][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.196031][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.938638][ T9691] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 449.951854][ T9691] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 450.476656][ T5234] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 451.292224][ T29] audit: type=1400 audit(1723904022.868:522): avc: denied { getopt } for pid=9706 comm="syz.3.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 451.550608][ T9712] macvlan0: entered allmulticast mode [ 451.587633][ T9712] veth1_vlan: entered allmulticast mode [ 451.651938][ T9713] pim6reg: entered allmulticast mode [ 451.690845][ T9714] pim6reg: left allmulticast mode [ 451.718327][ T5304] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 451.784535][ T9714] macvlan0: left allmulticast mode [ 451.844961][ T9714] veth1_vlan: left allmulticast mode [ 451.944862][ T5304] usb 5-1: Using ep0 maxpacket: 16 [ 451.964125][ T5304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.029723][ T5304] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 452.124268][ T5304] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 452.162789][ T5304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.320783][ T5304] usb 5-1: config 0 descriptor?? [ 452.963105][ T5304] HID 045e:07da: Invalid code 65791 type 1 [ 453.019164][ T5304] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000E/input/input20 [ 453.053413][ T5304] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 453.349587][ T5234] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 453.378758][ T3019] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 453.547591][ T29] audit: type=1400 audit(1723904025.108:523): avc: denied { bind } for pid=9727 comm="syz.2.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 453.572826][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 454.099190][ T5304] usb 5-1: USB disconnect, device number 21 [ 454.376982][ T29] audit: type=1400 audit(1723904025.948:524): avc: denied { connect } for pid=9734 comm="syz.0.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 454.554465][ T29] audit: type=1400 audit(1723904026.008:525): avc: denied { read } for pid=9734 comm="syz.0.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 454.948937][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 455.351264][ T9751] loop8: detected capacity change from 0 to 7 [ 455.395882][ T9751] Dev loop8: unable to read RDB block 7 [ 455.421985][ T9751] loop8: unable to read partition table [ 455.451546][ T9751] loop8: partition table beyond EOD, truncated [ 455.474554][ T9751] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 455.474554][ T9751] ) failed (rc=-5) [ 455.488541][ T9755] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1533'. [ 456.966628][ T29] audit: type=1400 audit(1723904028.528:526): avc: denied { ioctl } for pid=9770 comm="syz.3.1539" path="socket:[26983]" dev="sockfs" ino=26983 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 457.426701][ T9781] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 457.505608][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'. [ 457.685140][ T47] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 457.780643][ T9787] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 457.815291][ T29] audit: type=1400 audit(1723904029.388:527): avc: denied { write } for pid=9791 comm="syz.4.1547" path="socket:[26144]" dev="sockfs" ino=26144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 457.838613][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.845882][ T9793] lo: entered promiscuous mode [ 457.890690][ T9793] tunl0: entered promiscuous mode [ 457.904454][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 457.924723][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 457.953046][ T47] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 457.968972][ T9793] gre0: entered promiscuous mode [ 457.994290][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.020000][ T9793] gretap0: entered promiscuous mode [ 458.031187][ T47] usb 4-1: config 0 descriptor?? [ 458.108937][ T9793] erspan0: entered promiscuous mode [ 458.136846][ T9793] ip_vti0: entered promiscuous mode [ 458.159361][ T9793] ip6_vti0: entered promiscuous mode [ 458.184770][ T9793] sit0: entered promiscuous mode [ 458.222953][ T9793] ip6tnl0: entered promiscuous mode [ 458.244671][ T5273] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 458.264806][ T9793] ip6gre0: entered promiscuous mode [ 458.309862][ T47] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 458.324393][ T8] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 458.342862][ T9793] syz_tun: entered promiscuous mode [ 458.374919][ T5304] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 458.414888][ T9793] ip6gretap0: entered promiscuous mode [ 458.438066][ T5273] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 458.454851][ T9793] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.463250][ T9793] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.480638][ T9793] bridge0: entered promiscuous mode [ 458.488158][ T5273] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.498300][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 458.504333][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.524825][ T9793] vcan0: entered promiscuous mode [ 458.530509][ T5273] usb 3-1: Product: syz [ 458.536824][ T5273] usb 3-1: Manufacturer: syz [ 458.541570][ T5273] usb 3-1: SerialNumber: syz [ 458.552570][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 458.557785][ T9793] team0: entered promiscuous mode [ 458.573205][ T9793] team_slave_0: entered promiscuous mode [ 458.580839][ T9793] team_slave_1: entered promiscuous mode [ 458.587811][ T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 458.598667][ T5304] usb 2-1: Using ep0 maxpacket: 16 [ 458.615753][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 458.615943][ T5304] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 458.641262][ T9793] dummy0: entered promiscuous mode [ 458.646418][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.662992][ T5304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 458.675580][ T9799] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 458.683589][ T9793] nlmon0: entered promiscuous mode [ 458.687237][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 458.704877][ T5304] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 458.709547][ T9793] caif0: entered promiscuous mode [ 458.715850][ T5304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.730495][ T9793] batadv0: entered promiscuous mode [ 458.755753][ T5304] usb 2-1: Product: syz [ 458.756323][ T9793] vxcan0: entered promiscuous mode [ 458.762239][ T5304] usb 2-1: Manufacturer: syz [ 458.775694][ T9793] vxcan1: entered promiscuous mode [ 458.786690][ T5304] usb 2-1: SerialNumber: syz [ 458.803681][ T9795] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 458.804428][ T5304] usb 2-1: config 0 descriptor?? [ 458.811390][ T9793] veth0: entered promiscuous mode [ 458.826106][ T5304] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 458.844763][ T5304] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 458.853708][ T9793] veth1: entered promiscuous mode [ 458.876145][ T9793] wg0: entered promiscuous mode [ 458.913699][ T9793] wg1: entered promiscuous mode [ 458.933921][ T9793] wg2: left allmulticast mode [ 458.950320][ T9793] veth0_to_bridge: entered promiscuous mode [ 458.997382][ T9653] usb 5-1: USB disconnect, device number 22 [ 459.012350][ T9793] veth1_to_bridge: entered promiscuous mode [ 459.089725][ T9793] veth0_to_bond: entered promiscuous mode [ 459.143318][ T9793] veth1_to_bond: entered promiscuous mode [ 459.168589][ T9793] veth0_to_team: entered promiscuous mode [ 459.202786][ T9793] veth1_to_team: entered promiscuous mode [ 459.253555][ T9793] veth0_to_batadv: entered promiscuous mode [ 459.268250][ T9793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.282562][ T9793] batadv_slave_0: entered promiscuous mode [ 459.301310][ T9793] veth1_to_batadv: entered promiscuous mode [ 459.317534][ T9793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.335848][ T9793] batadv_slave_1: entered promiscuous mode [ 459.375523][ T9793] xfrm0: entered promiscuous mode [ 459.405478][ T9793] veth0_to_hsr: entered promiscuous mode [ 459.428369][ T9795] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 459.452171][ T9793] veth1_to_hsr: entered promiscuous mode [ 459.492568][ T5304] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 459.499759][ T9793] hsr0: entered promiscuous mode [ 459.510241][ T5304] em28xx 2-1:0.0: Config register raw data: 0x56 [ 459.520912][ T9793] veth1_virt_wifi: entered promiscuous mode [ 459.532982][ T9793] veth0_virt_wifi: entered promiscuous mode [ 459.571706][ T9793] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 459.640411][ T5273] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 459.657236][ T5273] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 459.680829][ T5273] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 459.717443][ T9793] vlan1: entered promiscuous mode [ 459.737578][ T9793] macvlan0: entered promiscuous mode [ 459.760632][ T9793] macvlan1: entered promiscuous mode [ 459.799311][ T9793] ipvlan0: entered promiscuous mode [ 459.814621][ T9793] ipvlan1: entered promiscuous mode [ 459.850982][ T5273] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 459.862394][ T9793] macvtap0: entered promiscuous mode [ 459.913724][ T5304] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 459.935535][ T5304] em28xx 2-1:0.0: No AC97 audio processor [ 459.957910][ T9793] macsec0: entered promiscuous mode [ 459.991085][ T5304] usb 2-1: USB disconnect, device number 28 [ 460.008293][ T9793] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.020717][ T5304] em28xx 2-1:0.0: Disconnecting em28xx [ 460.040579][ T9793] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.063063][ T9793] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.072315][ T9793] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.082023][ T9793] geneve0: entered promiscuous mode [ 460.082538][ T5304] em28xx 2-1:0.0: Freeing device [ 460.125771][ T9793] geneve1: entered promiscuous mode [ 460.266857][ T9793] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 460.318706][ T9793] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 460.348226][ T47] usb 4-1: USB disconnect, device number 23 [ 460.379197][ T47] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 460.410201][ T9793] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 460.468947][ T9793] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 460.579101][ T9793] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 460.658040][ T9793] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 460.698163][ T9793] vxlan0: entered promiscuous mode [ 460.721407][ T9793] xfrm1: entered promiscuous mode [ 460.786987][ T5273] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 460.830455][ T5273] usb 3-1: USB disconnect, device number 25 [ 460.852502][ T5273] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 461.139847][ T29] audit: type=1400 audit(1723904032.718:528): avc: denied { write } for pid=9819 comm="syz.1.1558" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 461.384453][ T5273] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 461.561512][ T29] audit: type=1400 audit(1723904033.138:529): avc: denied { append } for pid=9826 comm="syz.4.1561" name="rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 461.616771][ T5273] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 461.628281][ T5273] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 461.661562][ T5273] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 461.671930][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.703831][ T9812] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 461.726472][ T5273] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 461.763657][ T9831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.893730][ T9835] netlink: 'syz.0.1565': attribute type 3 has an invalid length. [ 461.903977][ T9835] netlink: 'syz.0.1565': attribute type 3 has an invalid length. [ 462.043607][ T5274] usb 3-1: USB disconnect, device number 26 [ 462.210207][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 462.221747][ T9846] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1570'. [ 462.348287][ T5275] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 462.576490][ T5275] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 462.610409][ T5275] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 462.657139][ T5275] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 462.703788][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.754100][ T9842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 462.832792][ T5275] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 462.848272][ T29] audit: type=1400 audit(1723904034.418:530): avc: denied { bind } for pid=9853 comm="syz.3.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 463.124420][ T5274] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 463.192399][ T5275] usb 2-1: USB disconnect, device number 29 [ 463.339409][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.356623][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.370070][ T5274] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.388632][ T9862] input: syz1 as /devices/virtual/input/input21 [ 463.398605][ T5274] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 463.411614][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.434037][ T5274] usb 5-1: config 0 descriptor?? [ 463.873428][ T5274] microsoft 0003:045E:009D.000F: invalid report_size -93534464 [ 463.885851][ T5274] microsoft 0003:045E:009D.000F: item 0 4 1 7 parsing failed [ 463.895398][ T5274] microsoft 0003:045E:009D.000F: parse failed [ 463.901630][ T5274] microsoft 0003:045E:009D.000F: probe with driver microsoft failed with error -22 [ 463.903016][ T29] audit: type=1400 audit(1723904035.478:531): avc: denied { mount } for pid=9866 comm="syz.1.1579" name="/" dev="autofs" ino=26312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 463.981410][ T29] audit: type=1400 audit(1723904035.548:532): avc: denied { unmount } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 464.109629][ T5275] usb 5-1: USB disconnect, device number 23 [ 464.162129][ T9878] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 464.254724][ T3019] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 464.435319][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 464.697657][ T5234] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 465.244385][ T5274] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 465.517129][ T5274] usb 4-1: Using ep0 maxpacket: 8 [ 465.576825][ T5274] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 465.614163][ T5274] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 465.648784][ T5274] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 465.690957][ T5274] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 465.718576][ T5274] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.733077][ T5274] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 465.745417][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.767246][ T29] audit: type=1400 audit(1723904037.348:533): avc: denied { write } for pid=9904 comm="syz.4.1595" path="socket:[27227]" dev="sockfs" ino=27227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 466.132219][ T5274] usb 4-1: usb_control_msg returned -32 [ 466.138093][ T5274] usbtmc 4-1:16.0: can't read capabilities [ 466.441744][ T29] audit: type=1400 audit(1723904037.868:534): avc: denied { create } for pid=9915 comm="syz.0.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 466.887394][ T29] audit: type=1400 audit(1723904037.898:535): avc: denied { bind } for pid=9915 comm="syz.0.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 466.931645][ T29] audit: type=1400 audit(1723904037.918:536): avc: denied { connect } for pid=9915 comm="syz.0.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 467.287836][ T9929] loop0: detected capacity change from 0 to 7 [ 467.300031][ T9929] Dev loop0: unable to read RDB block 7 [ 467.306008][ T9929] loop0: AHDI p1 p2 p4 [ 467.310578][ T9929] loop0: partition table partially beyond EOD, truncated [ 467.321314][ T9929] loop0: p1 start 256 is beyond EOD, truncated [ 467.326406][ T29] audit: type=1400 audit(1723904038.898:537): avc: denied { listen } for pid=9930 comm="syz.4.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 467.359098][ T29] audit: type=1400 audit(1723904038.938:538): avc: denied { accept } for pid=9930 comm="syz.4.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 467.432390][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1606'. [ 467.443251][ T9935] bridge_slave_1: left allmulticast mode [ 467.450769][ T9935] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.466084][ T9935] bridge_slave_0: left allmulticast mode [ 467.472273][ T9935] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.480576][ T5275] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 467.677482][ T5275] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.707105][ T5275] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 467.728307][ T5275] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 467.752096][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 467.771126][ T5275] usb 3-1: SerialNumber: syz [ 467.896875][ T9947] netlink: 'syz.4.1612': attribute type 1 has an invalid length. [ 467.905085][ T9947] netlink: 'syz.4.1612': attribute type 1 has an invalid length. [ 467.915689][ T9947] netlink: 9328 bytes leftover after parsing attributes in process `syz.4.1612'. [ 467.928999][ T9947] netlink: 'syz.4.1612': attribute type 1 has an invalid length. [ 468.043067][ T5275] usb 3-1: 0:2 : does not exist [ 468.051012][ T5234] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 468.127298][ T5275] usb 3-1: USB disconnect, device number 27 [ 468.178093][ T5274] usb 4-1: USB disconnect, device number 24 [ 469.003968][ T5234] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 469.126985][ T5234] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 469.497722][ T29] audit: type=1400 audit(1723904041.068:539): avc: denied { listen } for pid=9979 comm="syz.4.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 469.741946][ T9987] ================================================================== [ 469.750043][ T9987] BUG: KASAN: slab-use-after-free in filter_chain+0xf6/0x110 [ 469.757434][ T9987] Read of size 8 at addr ffff888023a65530 by task syz.4.1628/9987 [ 469.765224][ T9987] [ 469.767550][ T9987] CPU: 0 UID: 0 PID: 9987 Comm: syz.4.1628 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 469.778219][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 469.788278][ T9987] Call Trace: [ 469.791572][ T9987] [ 469.794492][ T9987] dump_stack_lvl+0x116/0x1f0 [ 469.799172][ T9987] print_report+0xc3/0x620 [ 469.803584][ T9987] ? __virt_addr_valid+0x5e/0x590 [ 469.808597][ T9987] ? __phys_addr+0xc6/0x150 [ 469.813090][ T9987] kasan_report+0xd9/0x110 [ 469.817507][ T9987] ? filter_chain+0xf6/0x110 [ 469.822129][ T9987] ? filter_chain+0xf6/0x110 [ 469.826749][ T9987] filter_chain+0xf6/0x110 [ 469.831192][ T9987] uprobe_mmap+0x46b/0x1240 [ 469.835720][ T9987] ? __pfx_uprobe_mmap+0x10/0x10 [ 469.840686][ T9987] mmap_region+0x1228/0x2760 [ 469.845300][ T9987] ? __pfx_mmap_region+0x10/0x10 [ 469.850351][ T9987] ? security_mmap_addr+0x8e/0xb0 [ 469.855404][ T9987] ? __get_unmapped_area+0x271/0x3a0 [ 469.860718][ T9987] do_mmap+0xbfb/0xfb0 [ 469.864818][ T9987] ? security_mmap_file+0x192/0x1d0 [ 469.870033][ T9987] vm_mmap_pgoff+0x1ba/0x360 [ 469.874648][ T9987] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 469.879783][ T9987] ksys_mmap_pgoff+0x332/0x5d0 [ 469.884571][ T9987] __x64_sys_mmap+0x125/0x190 [ 469.889261][ T9987] do_syscall_64+0xcd/0x250 [ 469.893788][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.899705][ T9987] RIP: 0033:0x7f7714579e79 [ 469.904146][ T9987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.923880][ T9987] RSP: 002b:00007f771535b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 469.932336][ T9987] RAX: ffffffffffffffda RBX: 00007f7714715f80 RCX: 00007f7714579e79 [ 469.940324][ T9987] RDX: 0000000000000001 RSI: 0000000000400000 RDI: 0000000020000000 [ 469.948305][ T9987] RBP: 00007f77145e7916 R08: 0000000000000004 R09: 0000000000000000 [ 469.956287][ T9987] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000000 [ 469.964263][ T9987] R13: 0000000000000000 R14: 00007f7714715f80 R15: 00007fffc982e0c8 [ 469.972245][ T9987] [ 469.975267][ T9987] [ 469.977598][ T9987] Allocated by task 9612: [ 469.982013][ T9987] kasan_save_stack+0x33/0x60 [ 469.986706][ T9987] kasan_save_track+0x14/0x30 [ 469.991395][ T9987] __kasan_kmalloc+0xaa/0xb0 [ 469.996001][ T9987] percpu_ref_init+0xd9/0x400 [ 470.000693][ T9987] ioctx_alloc+0x2d2/0x1fd0 [ 470.005215][ T9987] __x64_sys_io_setup+0xc9/0x210 [ 470.010168][ T9987] do_syscall_64+0xcd/0x250 [ 470.014702][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.020617][ T9987] [ 470.022940][ T9987] Freed by task 5353: [ 470.026917][ T9987] kasan_save_stack+0x33/0x60 [ 470.031600][ T9987] kasan_save_track+0x14/0x30 [ 470.036261][ T9987] kasan_save_free_info+0x3b/0x60 [ 470.041280][ T9987] poison_slab_object+0xf7/0x160 [ 470.046203][ T9987] __kasan_slab_free+0x32/0x50 [ 470.051034][ T9987] kfree+0x12a/0x3b0 [ 470.054912][ T9987] percpu_ref_exit+0xfb/0x150 [ 470.059583][ T9987] free_ioctx+0x56/0xa0 [ 470.063726][ T9987] process_one_work+0x9c5/0x1b40 [ 470.068649][ T9987] worker_thread+0x6c8/0xf20 [ 470.073224][ T9987] kthread+0x2c1/0x3a0 [ 470.077272][ T9987] ret_from_fork+0x45/0x80 [ 470.081762][ T9987] ret_from_fork_asm+0x1a/0x30 [ 470.086511][ T9987] [ 470.088814][ T9987] Last potentially related work creation: [ 470.094507][ T9987] kasan_save_stack+0x33/0x60 [ 470.099168][ T9987] __kasan_record_aux_stack+0xba/0xd0 [ 470.104534][ T9987] __call_rcu_common.constprop.0+0x9a/0x790 [ 470.110409][ T9987] __percpu_ref_switch_mode+0x3b7/0x900 [ 470.115941][ T9987] percpu_ref_kill_and_confirm+0x8c/0x180 [ 470.121646][ T9987] kill_ioctx+0x1d4/0x2a0 [ 470.125958][ T9987] exit_aio+0x1b5/0x360 [ 470.130092][ T9987] __mmput+0x81/0x480 [ 470.134057][ T9987] mmput+0x62/0x70 [ 470.137763][ T9987] do_exit+0x9bf/0x2bb0 [ 470.141900][ T9987] do_group_exit+0xd3/0x2a0 [ 470.146384][ T9987] __x64_sys_exit_group+0x3e/0x50 [ 470.151388][ T9987] x64_sys_call+0x14a9/0x16a0 [ 470.156053][ T9987] do_syscall_64+0xcd/0x250 [ 470.160543][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.166424][ T9987] [ 470.168728][ T9987] The buggy address belongs to the object at ffff888023a65500 [ 470.168728][ T9987] which belongs to the cache kmalloc-64 of size 64 [ 470.182589][ T9987] The buggy address is located 48 bytes inside of [ 470.182589][ T9987] freed 64-byte region [ffff888023a65500, ffff888023a65540) [ 470.196197][ T9987] [ 470.198501][ T9987] The buggy address belongs to the physical page: [ 470.204907][ T9987] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888023a65500 pfn:0x23a65 [ 470.214950][ T9987] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 470.223005][ T9987] page_type: 0xfdffffff(slab) [ 470.227671][ T9987] raw: 00fff00000000200 ffff8880158418c0 ffffea0000b20250 ffffea0000b19990 [ 470.236235][ T9987] raw: ffff888023a65500 0000000000200014 00000001fdffffff 0000000000000000 [ 470.244793][ T9987] page dumped because: kasan: bad access detected [ 470.251190][ T9987] page_owner tracks the page as allocated [ 470.256894][ T9987] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4673, tgid 4673 (udevadm), ts 29626237021, free_ts 29626124965 [ 470.275542][ T9987] post_alloc_hook+0x2d1/0x350 [ 470.280289][ T9987] get_page_from_freelist+0x1351/0x2e50 [ 470.285819][ T9987] __alloc_pages_noprof+0x22b/0x2460 [ 470.291085][ T9987] alloc_slab_page+0x4e/0xf0 [ 470.295661][ T9987] new_slab+0x84/0x260 [ 470.299711][ T9987] ___slab_alloc+0xdac/0x1870 [ 470.304372][ T9987] __slab_alloc.constprop.0+0x56/0xb0 [ 470.309727][ T9987] __kmalloc_noprof+0x367/0x400 [ 470.314555][ T9987] tomoyo_encode2+0x100/0x3e0 [ 470.319212][ T9987] tomoyo_encode+0x29/0x50 [ 470.323603][ T9987] tomoyo_realpath_from_path+0x19d/0x720 [ 470.329214][ T9987] tomoyo_check_open_permission+0x2a7/0x3b0 [ 470.335091][ T9987] tomoyo_file_open+0x71/0x90 [ 470.339744][ T9987] security_file_open+0x78/0x8b0 [ 470.344668][ T9987] do_dentry_open+0x5c7/0x15f0 [ 470.349410][ T9987] vfs_open+0x82/0x3f0 [ 470.353462][ T9987] page last free pid 4673 tgid 4673 stack trace: [ 470.359763][ T9987] free_unref_page+0x64a/0xe40 [ 470.364508][ T9987] inode_doinit_with_dentry+0xac4/0x12c0 [ 470.370129][ T9987] selinux_d_instantiate+0x26/0x30 [ 470.375230][ T9987] security_d_instantiate+0x57/0xf0 [ 470.380408][ T9987] d_splice_alias+0x94/0xdf0 [ 470.385764][ T9987] kernfs_iop_lookup+0x286/0x330 [ 470.390696][ T9987] lookup_open.isra.0+0x928/0x13c0 [ 470.395792][ T9987] path_openat+0xa3b/0x2d20 [ 470.400281][ T9987] do_filp_open+0x1dc/0x430 [ 470.404780][ T9987] do_sys_openat2+0x17a/0x1e0 [ 470.409437][ T9987] __x64_sys_openat+0x175/0x210 [ 470.414278][ T9987] do_syscall_64+0xcd/0x250 [ 470.418787][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.424672][ T9987] [ 470.426972][ T9987] Memory state around the buggy address: [ 470.432858][ T9987] ffff888023a65400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 470.440897][ T9987] ffff888023a65480: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 470.448934][ T9987] >ffff888023a65500: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 470.456972][ T9987] ^ [ 470.462578][ T9987] ffff888023a65580: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 470.470628][ T9987] ffff888023a65600: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 470.478664][ T9987] ================================================================== [ 470.507440][ T5957] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 470.580357][ T9987] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 470.587587][ T9987] CPU: 1 UID: 0 PID: 9987 Comm: syz.4.1628 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 470.598258][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 470.608311][ T9987] Call Trace: [ 470.611585][ T9987] [ 470.614511][ T9987] dump_stack_lvl+0x3d/0x1f0 [ 470.619110][ T9987] panic+0x6f5/0x7a0 [ 470.623022][ T9987] ? __pfx_panic+0x10/0x10 [ 470.627455][ T9987] ? preempt_schedule_thunk+0x1a/0x30 [ 470.632832][ T9987] ? preempt_schedule_common+0x44/0xc0 [ 470.638311][ T9987] check_panic_on_warn+0xab/0xb0 [ 470.643256][ T9987] end_report+0x117/0x180 [ 470.647596][ T9987] kasan_report+0xe9/0x110 [ 470.652018][ T9987] ? filter_chain+0xf6/0x110 [ 470.656617][ T9987] ? filter_chain+0xf6/0x110 [ 470.661212][ T9987] filter_chain+0xf6/0x110 [ 470.665640][ T9987] uprobe_mmap+0x46b/0x1240 [ 470.670149][ T9987] ? __pfx_uprobe_mmap+0x10/0x10 [ 470.675105][ T9987] mmap_region+0x1228/0x2760 [ 470.679702][ T9987] ? __pfx_mmap_region+0x10/0x10 [ 470.684641][ T9987] ? security_mmap_addr+0x8e/0xb0 [ 470.689660][ T9987] ? __get_unmapped_area+0x271/0x3a0 [ 470.694946][ T9987] do_mmap+0xbfb/0xfb0 [ 470.699015][ T9987] ? security_mmap_file+0x192/0x1d0 [ 470.704205][ T9987] vm_mmap_pgoff+0x1ba/0x360 [ 470.708801][ T9987] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 470.713918][ T9987] ksys_mmap_pgoff+0x332/0x5d0 [ 470.718683][ T9987] __x64_sys_mmap+0x125/0x190 [ 470.723353][ T9987] do_syscall_64+0xcd/0x250 [ 470.727868][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.733770][ T9987] RIP: 0033:0x7f7714579e79 [ 470.738176][ T9987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.757777][ T9987] RSP: 002b:00007f771535b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 470.766184][ T9987] RAX: ffffffffffffffda RBX: 00007f7714715f80 RCX: 00007f7714579e79 [ 470.774146][ T9987] RDX: 0000000000000001 RSI: 0000000000400000 RDI: 0000000020000000 [ 470.782123][ T9987] RBP: 00007f77145e7916 R08: 0000000000000004 R09: 0000000000000000 [ 470.790089][ T9987] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000000 [ 470.798055][ T9987] R13: 0000000000000000 R14: 00007f7714715f80 R15: 00007fffc982e0c8 [ 470.806030][ T9987] [ 470.809336][ T9987] Kernel Offset: disabled [ 470.813643][ T9987] Rebooting in 86400 seconds..