last executing test programs: 11.20104111s ago: executing program 0 (id=457): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000300)=""/140, 0x8c}], 0x2, &(0x7f00000003c0)=""/247, 0xf7}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) rt_tgsigqueueinfo(0x0, 0x0, 0x400000a, &(0x7f0000000600)={0x81, 0x3, 0xfffff2bb}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x4, r3, &(0x7f0000000080), 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_SET_STATUS64(r4, 0xc0c0128e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2a9, 0x0, 0x0, 0x10000015, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee41b80000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00000000000000000000000059", [0xc, 0xfffffffffffffffd]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000300)=""/140, 0x8c}], 0x2, &(0x7f00000003c0)=""/247, 0xf7}, 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) rt_tgsigqueueinfo(0x0, 0x0, 0x400000a, &(0x7f0000000600)={0x81, 0x3, 0xfffff2bb}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r3) (async) ptrace$poke(0x4, r3, &(0x7f0000000080), 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20) (async) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) (async) ioctl$LOOP_SET_STATUS64(r4, 0xc0c0128e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2a9, 0x0, 0x0, 0x10000015, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee41b80000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00000000000000000000000059", [0xc, 0xfffffffffffffffd]}) (async) 11.110643407s ago: executing program 0 (id=459): r0 = open(&(0x7f0000000100)='.\x00', 0x5d5481, 0x0) close(0x3) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000080)=[0x1e, 0x4009, 0xf909, 0x899d, 0xd82, 0xfffffffb, 0x47, 0x10, 0xfffffe01, 0x5, 0x4, 0x2, 0x6, 0x8811, 0x0], 0x1, 0x4000007}) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x12}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r4}, 0x20) ioctl$SIOCAX25DELUID(r0, 0x89e2, 0x0) 11.029095291s ago: executing program 0 (id=461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x4008050) 11.02887414s ago: executing program 0 (id=462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x400000f3, 0x0, 0x3}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000540), 0x20008, &(0x7f0000000600)={'trans=xen,', {[{@access_user}], [{@appraise}, {@context={'context', 0x3d, 'staff_u'}}, {@flag='mand'}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, 'cbc-serpent-avx2\x00'}}, {@subj_user={'subj_user', 0x3d, ',$+%)'}}, {@hash}]}}) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)={r3, r4+60000000}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000680)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x226500, 0x100) r6 = openat(r5, &(0x7f0000000300)='./file2\x00', 0x402000, 0x8) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='devpts\x00', 0x3000005, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x40) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_REQBUFS(r6, 0xc0086f3c, &(0x7f0000000340)={0x10000, 0x8001}) r10 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname(r10, &(0x7f0000000180)=@nl, &(0x7f0000000280)=0x80) ioctl$mixer_OSS_GETVERSION(r9, 0x80044d76, &(0x7f0000000080)) mount$9p_rdma(0x0, &(0x7f0000000200)='./file2\x00', &(0x7f0000000240), 0x400000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,rq=0x0000000000000006,timeout=0x00000000000009c8,rq=0x0000000000000008,sq=0x00']) 10.022152995s ago: executing program 0 (id=473): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3e}}}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "a0b773ebca3ea90a7fcf11be"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 9.750579657s ago: executing program 0 (id=477): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x1f, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x175c, 0x0, {{0x7e, 0x0, 0x2100}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 9.71943571s ago: executing program 32 (id=477): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x1f, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x175c, 0x0, {{0x7e, 0x0, 0x2100}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 3.09010133s ago: executing program 4 (id=618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x22000000) 3.085713337s ago: executing program 4 (id=620): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0x88102, 0x0) write$binfmt_script(r3, &(0x7f00000109c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000880), 0x8900, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x17, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6f96}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x414}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}, @generic={0x94, 0x0, 0x9, 0x7, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0x39, 0xf9, &(0x7f0000000300)=""/249, 0x83f00, 0x13, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x10, 0x400, 0x2}, 0x10, r4, r5, 0x2, &(0x7f00000008c0)=[r6, r7], &(0x7f0000000900)=[{0x1, 0x8, 0xd, 0xb}, {0x4, 0x3, 0x5, 0xa}], 0x10, 0x7}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r1, r0, 0x4, r0}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000000d80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)={0x298, r9, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x47e8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18000000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x192}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x180000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x722}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x52}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8b6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf71}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3a9}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff45d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1fe00}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa240}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xda2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4890}, 0x48085) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000850) 2.999784771s ago: executing program 4 (id=621): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000400158000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 2.997627738s ago: executing program 4 (id=623): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) ppoll(&(0x7f0000000000)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000001140)={0x80, 0x21, 0x3, 0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0xf48, 0x4, 0xfffffe3f, 0x10000, 0x0, "4d0000000001000000fbd98ec08100", 0x6, 0x800}) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/16, 0x10}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.668332291s ago: executing program 2 (id=632): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000358000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 2.580623331s ago: executing program 2 (id=635): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newae={0x48, 0x1e, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in=@private=0xa010100, 0x4d4, 0xa, 0x32}, @in=@multicast2, 0x3, 0x3503}, [@replay_thresh={0x8, 0xb, 0x10}]}, 0x48}}, 0x20000800) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') 2.510642569s ago: executing program 2 (id=638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') (async) r3 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x82, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xb) setresuid(0x0, 0xee01, 0x0) (async) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0) (async) preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x300, 0x0) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000045c0)={0x0, 0x0, &(0x7f0000004580)={&(0x7f0000004500)=ANY=[@ANYBLOB="18000005", @ANYRES16=r1, @ANYBLOB="330825bd7000fedbdf250800000004000180"], 0x18}}, 0x8000) 2.420123485s ago: executing program 2 (id=641): r0 = syz_open_dev$I2C(&(0x7f0000000ac0), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="8a60b5", 0x3, 0x20000004, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x40025b0c, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r3, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xfffffffffffffff7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8100}, 0x0) recvmmsg(r3, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40010001, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000b40)={0x1, 0x2, 0x2000007, &(0x7f0000000b00)={0x0, "5a54f9e02cb612f2ab8371533b1a289255cf9fdfebfb57089d8a86a476506dd5e4"}}) 2.13033422s ago: executing program 3 (id=648): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) setreuid(0xee01, 0x0) (async) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) (async) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) 2.130185893s ago: executing program 4 (id=649): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000002000000080012"], 0x50}}, 0x0) 2.07062401s ago: executing program 3 (id=650): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x20000000005) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) statx(r0, 0x0, 0x1000, 0x800, &(0x7f0000000500)) sendto$inet(r5, &(0x7f0000000440)="331ce1719513f0e2b74deb4adf0eda015315602fb27e23f8260508efd6e9cbc60a7bb8e776f0ce8cf9b8e194554788d507f613f7708bf353bb59a2bad9b77709bfd1b493451f44d7c3ed225ae4a1fcfd9fcd2873e1da0f8dff36749eecc16cb3a4968c4290ac6c02c65b2212afd34eb64bf2893516e27a7fff48e8d101d394b2f5e996b4126a35f56b85f7f0", 0x8c, 0x20000081, &(0x7f0000000280)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="880000000314010029bd700002dcdf250900020073797a310000000008004100736977001400330067724d746170300000000000000000000900020073797a300000000008004100727865001400330070696d726567300000000000000000000900020073797a31000000000800410072786500140033006970766c616e3000000000000000000044a0ae2c4e1584a070844e5595dfef0d2d1149292b1f94af296ae8730cbbfd621609d946a0b6268112892736bb478239257410bf0afa7a3b78531de3193da0cd9d76ae3f1ceeb69418ad952d54a2413686f4"], 0x88}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000002c0)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x880, &(0x7f00000001c0)={0x11, 0x1a, r2, 0x1, 0xd8, 0x6, @random="beb40c6fc44c"}, 0xffffffffffffffa8) sendto$packet(r8, &(0x7f0000000380)="c1858aec1d0a06756f6608f23687", 0xe, 0x24080000, &(0x7f0000000240)={0x11, 0xd, r2, 0x1, 0x85, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x84880) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, 0x0, 0x0, 0x4004000}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2}, 0x0) 2.070358653s ago: executing program 4 (id=651): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000ac0)={0x1, 0x9, 0x0, 0x0}) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000009c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1dc7f39000080d00600000003a9f4f600000000400080", "129c9707", "ec3fff9afd96e6c0"}, 0x38) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) close_range(r3, r0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000280)={&(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="ec52e368c94000f69e5c04c64fe4cf0323b9ca7e3aa7853f15f96e7b814e5d1676864a50ffbc73e467cde4eccd7390aebcb7570bfe38dd36b5884186f286497393e549ea2f2518f2bf0cedee85219304c28cdffbc76c48b78598d25719509dc6a315d768c2014b9bfde7ec392335f2a2b6bd605fe843a641f5cd399ec3a0b5e25cfc5a642c068cd72b2c26", 0x8b}, {&(0x7f0000000500)="e1e8f8a9f4b747d0dc6f647a3897afcd761829af4027c4625f9d9d19b017e524971a20b61b3013de368e0ec8603fb2b358458b6da554103916955ecceb4963127ba1", 0x42}, {&(0x7f0000000580)="5ae501a74c9e2750191592d68750190b34cd64e349b8a7d08b6501ff5d2fb3051ff949ddfc262791113d3c1cac52c7f3602bebb9f0a506c711021b57e1163eb62b68c2a890ded9671033ebe30e19c9367617274e00729d395e6c1e662272abe34084cd0e8d4788fee5049e71cb5da19caaddf738d66554645f624788ad0e42", 0x7f}, {&(0x7f00000006c0)="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", 0xfb}, {&(0x7f00000007c0)="df731fd8b23a84a51ee8efd37500f2aac313fc82646536d5d8f14a899c7dac429c6ad99cdc3688693df995f09a2ef68315e95d1d65b86bd4e1309eb3e24ee7da0e161aceb73a2a950bbd909f6060b942df10f78d52f060071db8bfdb262e9af281f1588da5465a94fccf3ab1c21b4845dbbc534492ae3debc07e2fdf932179a271514e97d25c378c65125025702c48f2e4e469bb823e798658181a7835f872693964", 0xa2}], 0x5}, 0x800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x80, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f0000000000)={0xc, r4}) keyctl$join(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) 1.151122279s ago: executing program 3 (id=658): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2000000}}) 780.917681ms ago: executing program 3 (id=665): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000280), 0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = fanotify_init(0x200, 0x40000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r2, 0x101, 0x8000011, r3, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0xb, 0x1}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000fc000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000600000000004400050064010102000000000000000000000000000000003c00000002000000ac1414bb0000000000000000000000000600000004030000000000000200000000000000"], 0xfc}}, 0x0) fsopen(0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="e4", 0x1, 0x10, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 712.423125ms ago: executing program 3 (id=666): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x55af) (async) syz_open_dev$dri(&(0x7f0000000180), 0x101, 0x901) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x66, &(0x7f0000000080), &(0x7f000009de80)=0x8) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f00000000001fafd046211c", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x6, &(0x7f0000000200)=""/59, &(0x7f0000000000)=0x3b) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x14a, 0x0) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) (rerun: 32) 711.621259ms ago: executing program 3 (id=668): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, 0x0}, 0x20) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b8920000000109029009"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 270.828619ms ago: executing program 1 (id=673): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xd, 0xf000000}}) 270.725974ms ago: executing program 1 (id=674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x3f, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x4008050) 220.712943ms ago: executing program 1 (id=675): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b80), r1) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf251d00000008001d000600000008001e009006000086001f0008de58725e70371e4b82ec16a7930074d78f3a4012f570ad74a415ec6a89a169d88a22b99871ce2f13d25ab3697d11e250436d961dd0ff03000036a07a875cd9f6c7d09ff9ab5cf73834292e22a94122d0e05caf0ba199195570fc5131e145bd0851d62bb6baff3999ef776587cbea8e5bf6b9f9b87b058718f9a9f5e16e02caed40000008001e0000000000080001"], 0xcc}, 0x1, 0x0, 0x0, 0x2400c000}, 0x200048c0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000280)=0xffffffffffffffff) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)=@multiplanar_fd={0xa00, 0x2, 0x4, 0x400, 0x2, {r4, r5/1000+60000}, {0x6, 0xc, 0x9, 0x1, 0xb4, 0x4, "03ab3242"}, 0x401, 0x4, {&(0x7f0000000200)=[{0x5, 0x2, {r3}, 0xfffffffa}, {0x4, 0x7fffffff, {}, 0xb}]}, 0x5, 0x0, r6}) 108.423256ms ago: executing program 2 (id=676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x2, 0x0, &(0x7f0000001a00)=""/4096, &(0x7f0000000440), &(0x7f0000002a00)=""/4096, 0x2000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0xf8}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @llc={@snap={0x155, 0x155, 'm', '\x00', 0x88ca}}}, 0x16) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0xe4) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x800) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000100), 0x4) (async) r9 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x44080) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) (async) r12 = socket$packet(0x11, 0x2, 0x300) bind$packet(r12, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x98, r7, 0x2a3, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xaf) 108.117878ms ago: executing program 1 (id=677): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000024c7bf6240bf5b4a395c3b75a0f5b9980000000000040000e10000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd0c, 0x10, &(0x7f0000000000), 0x76}, 0x48) 58.542327ms ago: executing program 1 (id=678): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000658000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 313.041µs ago: executing program 1 (id=679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, &(0x7f0000000500)={0x3, &(0x7f0000000880)=[{0x8000000, 0x14b1, &(0x7f0000002840)=[0x8, 0x2, 0x6, 0x2, 0x9, 0x10001, 0xff, 0x7, 0xc, 0x6, 0xffffffff, 0x7, 0x9, 0x4, 0x4a5, 0xfffffffc, 0x1, 0xd, 0x109f409f, 0x73, 0x100, 0x8, 0x0, 0xfff, 0x81, 0x9, 0x2, 0x2, 0x3, 0xb, 0x6, 0x3, 0x2, 0x9, 0x9, 0x5, 0x2, 0x8, 0x1000, 0x3ff, 0x80000001, 0x6, 0x85, 0x9, 0x0, 0x5, 0x1, 0x8000, 0x6, 0x95f3, 0xda8d, 0x2f, 0x3, 0x4, 0xa8b8, 0x0, 0x10, 0xa2e, 0x2, 0xf35, 0xd1b2, 0x300, 0x5, 0x3, 0x0, 0x400, 0x6, 0x8ba8, 0x614, 0x2, 0x41c, 0x80000001, 0x0, 0x0, 0x1, 0x4, 0x0, 0xff, 0x401, 0x800, 0xb, 0x7, 0x2606, 0x1, 0x0, 0x3, 0x40, 0x2, 0x80000000, 0x3, 0x9, 0xffff, 0x1, 0xc5, 0x0, 0xffff3622, 0x7, 0x8, 0xa1f, 0x2, 0x9ac4, 0x452, 0x39, 0x8c, 0x3ff, 0x80000000, 0x8001, 0x9, 0x8000, 0x6, 0x5, 0x0, 0x3ff, 0xffffffff, 0xd, 0xea, 0x5, 0x8, 0x9, 0x8, 0x1, 0x8, 0x1000, 0xfffffffa, 0x0, 0x5d, 0x5, 0x1, 0x5, 0x0, 0x9da2, 0x7, 0x4, 0x400, 0xfffffffc, 0x5, 0x4, 0x9, 0x101, 0x9, 0x401, 0x5, 0x101, 0xe0a9, 0x6, 0x9, 0x0, 0x1, 0x6, 0x83, 0x1, 0x3, 0x4, 0xe, 0x2, 0x6, 0x6, 0x1, 0xfffffff5, 0x81, 0x0, 0x81, 0xc99, 0x0, 0x0, 0x9, 0x6f, 0x1, 0x8af, 0x2, 0x8, 0x72, 0x6, 0x9, 0xaa2f, 0x3, 0x1, 0x4, 0x1, 0x8, 0xfffffffb, 0x3, 0x0, 0x9, 0xb92, 0x3, 0x7, 0x785b, 0xfffffffa, 0x2, 0x0, 0x7, 0x7, 0x6, 0xa1b4, 0xfffffffe, 0x6, 0x0, 0x8000000, 0x4, 0x3, 0xfff, 0x2, 0x9a50, 0x2, 0x22, 0x7, 0xf, 0x54a9, 0x8, 0xb6c0, 0x9, 0x3, 0x0, 0x7, 0xe1, 0x80, 0x6, 0x7, 0x3, 0x81, 0xfffffffa, 0xcc1, 0x447, 0x1, 0x9, 0x4fa, 0x375, 0x8, 0x0, 0x3, 0x1, 0x9, 0x0, 0x3ff, 0xfffffbff, 0x6, 0x92b, 0x2, 0x0, 0xd, 0x4, 0x1000, 0x2, 0x6f97, 0x9, 0xb0, 0xfff, 0x20, 0x4, 0x798, 0x7, 0xffffffff, 0x8, 0x2ae, 0x1, 0x8, 0x8d, 0x7ff, 0x5, 0x2, 0x9, 0x72, 0x2, 0x5, 0xf9, 0x0, 0x5, 0xffff0001, 0x1, 0x9, 0x1000, 0x1ff, 0x8, 0xb, 0x0, 0x81, 0x2, 0x7, 0x9, 0xe7500, 0x1, 0x1000, 0x8, 0x9, 0xffffffff, 0x2, 0x4, 0x8, 0xfffffbe7, 0x0, 0x669, 0x5, 0x2, 0x7, 0x620, 0xd7d, 0x0, 0x6, 0xb, 0x9, 0x5, 0xa, 0x5, 0x3, 0x8, 0x1, 0x4, 0x2, 0xfffffff8, 0x1, 0x2, 0xffff, 0x0, 0xff, 0x1, 0x9, 0x9, 0x6, 0x4, 0x173d, 0xa, 0x7f, 0x4, 0xa9, 0x2, 0x3, 0x7a3, 0x0, 0x7f, 0x6, 0x6, 0x8, 0x5, 0x5, 0xa0e, 0x6, 0xa2a, 0x7ff, 0x0, 0x0, 0x0, 0x2c32ede0, 0x1, 0x1, 0xb9de, 0x13fe, 0x7, 0xcf, 0x0, 0x0, 0x59, 0x3, 0x1, 0x1e9d0f6d, 0xdc03465, 0x6, 0x648, 0x5, 0x4, 0xfffffffa, 0x301d, 0x101, 0x0, 0xf66, 0xfffff001, 0x3, 0x56f3, 0x80000001, 0x7, 0xba3, 0x8, 0x5, 0x3, 0x0, 0x0, 0x2, 0x2, 0x3, 0x0, 0x991, 0x1d18, 0x401, 0x800, 0x1, 0x8229, 0xeab, 0x8, 0x6, 0x1, 0x2e43f993, 0x8, 0x0, 0x9, 0x9, 0x6, 0x8000, 0x8001, 0x8, 0xc, 0x7fffffff, 0x4f, 0x0, 0x7, 0x9, 0xff, 0x81, 0x8, 0x7, 0x7, 0x401, 0x0, 0x0, 0x100, 0x0, 0xa1d, 0x8, 0x3, 0x7, 0x0, 0x3, 0x3, 0x7, 0x6, 0x6, 0x9, 0x4, 0x7d95, 0x7fff, 0x6, 0x4, 0x3, 0x8, 0x8, 0x567, 0x1, 0x3, 0x2, 0xa, 0x0, 0x9, 0x3fb, 0x7, 0xe16, 0x7, 0x8, 0x5, 0x2, 0x8, 0x4, 0xa42, 0x4, 0x10001, 0x3, 0x5, 0x93, 0x5, 0x9, 0xfffffe00, 0xe81, 0xfffffff7, 0x7, 0x1, 0xfffffffc, 0x9, 0x5, 0x4, 0x28e3, 0x200, 0x1ff, 0xfffffffe, 0x10001, 0xd4b7, 0x800, 0x852d, 0x10001, 0x7, 0x7fffffff, 0x9, 0x9, 0x7, 0x1bd8, 0x4, 0x8, 0x0, 0x4, 0x0, 0xffffa0f9, 0x38a3c475, 0x5, 0xa5d, 0x23, 0x4, 0xfffffff7, 0xffffffff, 0xefaf, 0x5, 0x101, 0x4, 0x0, 0x7, 0x6, 0xffffffff, 0x985d, 0x0, 0x2, 0x0, 0x14, 0xb, 0x1800000, 0x59, 0x3, 0x90000000, 0xf090, 0x8, 0xc794, 0x7, 0x3, 0x2, 0x1, 0x2, 0x5, 0xe, 0x5, 0xf, 0x9, 0x2, 0x0, 0xf, 0x8f41, 0x0, 0x5, 0x2, 0x40, 0x3, 0xe1, 0x9, 0xfffffffe, 0x9, 0x7, 0x7, 0x3, 0x80, 0x8, 0x3, 0x7, 0x80, 0x101, 0x0, 0x3, 0xfffff333, 0x964d, 0x40, 0x7, 0x7, 0x200, 0x7fff, 0x100, 0x1ff, 0x9, 0x7fbe2acb, 0x4, 0x7, 0xe8d7, 0x7, 0x6, 0x9, 0xc62, 0x1, 0xe, 0x1, 0x2, 0x8, 0xfffffffa, 0xf, 0x5, 0xff, 0x4, 0x9, 0x1, 0x45d4, 0x1, 0x6, 0x8b, 0x2, 0xf0, 0x5, 0x80000000, 0x0, 0x2, 0x0, 0x8001, 0x6, 0x0, 0xfffffff8, 0x6, 0x4, 0x2, 0x1, 0x4, 0x0, 0x5, 0x7, 0x7, 0x10000, 0xfffffffa, 0x5, 0x7287839b, 0x0, 0x6, 0x5, 0x61dadb18, 0xbc, 0x1, 0x0, 0x7, 0xba, 0x4, 0x7, 0x7fff, 0x7, 0x5, 0xfff, 0x5, 0x10, 0xe5, 0x401, 0x7, 0x2, 0x6, 0x9, 0xaa, 0x1, 0x8, 0x8000, 0x0, 0x0, 0x8, 0x2, 0x5, 0x80000000, 0x2, 0x7fff, 0x4, 0x8, 0x6, 0x7, 0xbb, 0x1, 0x0, 0x6, 0x8, 0x8, 0x2, 0x8, 0x0, 0x1, 0xc, 0x0, 0x9, 0x7ff, 0x1, 0x1, 0x20000, 0x1, 0x8, 0x8, 0x53ff7b0d, 0x364de37c, 0x6, 0x2, 0x4, 0x1, 0xe9, 0x5, 0x7, 0xfe, 0x4, 0x0, 0x8001, 0x7, 0x2, 0x8, 0x0, 0x8200, 0x6, 0x40, 0xa8, 0x401a, 0x0, 0x80000001, 0x5, 0x0, 0x1, 0x84, 0x5, 0x7, 0xd, 0x1, 0x9, 0x101, 0x6, 0x401, 0x200, 0x0, 0x0, 0x4, 0x37, 0x9, 0x4, 0x176, 0x81, 0x6, 0x2, 0x7, 0x4, 0x8001, 0x8, 0x5, 0x6777d17a, 0x5, 0x1, 0x52a6e285, 0x7, 0x2, 0x4, 0x3, 0x0, 0x14000000, 0x2, 0x100000, 0x4, 0xa533, 0x8d, 0x1, 0x8, 0x8000, 0x8, 0x0, 0x401, 0x8, 0x10, 0xea, 0xff, 0x8, 0x4, 0x2, 0x9, 0x9, 0x13, 0x2, 0x2, 0x0, 0x4b8d, 0x4, 0x0, 0xd, 0x7, 0xf, 0x9, 0x7, 0x1, 0x7, 0x4, 0xc54, 0x10, 0x81, 0x73, 0x1, 0x3, 0x0, 0x8, 0xfffffff8, 0x5, 0x5, 0x10000, 0x27, 0x4, 0x8, 0x1, 0x6, 0x6, 0x0, 0x1, 0x8, 0x3, 0x2, 0x1ff, 0xd31, 0x8001, 0xa, 0x5, 0x9, 0x9, 0x7, 0x401, 0x3, 0xe86, 0xfffffff9, 0x0, 0x0, 0x8, 0x1, 0x9, 0x3, 0xb, 0x62cc7c6f, 0x5, 0x1, 0x4, 0x800, 0xffffffff, 0x9, 0x4977c2ae, 0x7fff, 0x2, 0x40, 0x1ff, 0xffff, 0x4, 0x3, 0x0, 0x7ff, 0xfe, 0x7, 0xfffffffc, 0x0, 0x9, 0x5, 0x10, 0x8, 0xa13, 0xb, 0x56d, 0x1, 0x5, 0x9, 0x9, 0xfffffffc, 0x9, 0x6, 0x9, 0x5, 0xa, 0xb, 0x7, 0x3, 0x7, 0x6, 0xffffffff, 0x2, 0x0, 0x5, 0xcf4, 0x0, 0x0, 0x3, 0x7, 0xfa85, 0x6, 0x6, 0x6, 0x7, 0x1, 0x4, 0x0, 0xc0, 0x9, 0x400, 0x7, 0x0, 0x0, 0x7, 0x0, 0x9, 0x1, 0x6, 0x9, 0x8, 0x3, 0x5, 0x4d, 0x5, 0x2, 0x1, 0x8, 0x800, 0x9, 0xf, 0x0, 0x4, 0x10000, 0xb, 0x2, 0x5, 0x9, 0x22, 0x1, 0xffff, 0xd0b7, 0x4, 0x80000001, 0x7, 0x5, 0x5, 0x8, 0x3, 0x2, 0x3, 0x5, 0x6, 0x81, 0x4, 0x0, 0x0, 0x7, 0x4, 0x92, 0x4905, 0x9c41, 0x3, 0x9, 0xa, 0x1, 0x3, 0x5, 0xb, 0x291d, 0x5, 0xb, 0x5, 0x4, 0x8, 0x0, 0x9, 0x8, 0x3, 0x10, 0xb, 0x1, 0x8, 0x5, 0x2, 0x6, 0xfff, 0x7, 0x7, 0x2, 0x8, 0x1e, 0x8, 0x0, 0xce5a, 0xd, 0x7ff, 0x1, 0x7, 0x9, 0x97, 0x2, 0x1, 0xc554, 0x1ff, 0x912, 0x7, 0x9, 0x5, 0x9, 0xfffffffa, 0x200, 0x0, 0x409, 0x2, 0x2, 0x8, 0x5, 0x6, 0x2, 0x8, 0x2719f9b2, 0x7, 0x3, 0x234, 0x3, 0x2, 0x5, 0x8, 0x8, 0x8, 0x80000000, 0x3, 0x6, 0x3, 0x10000, 0xffff, 0x1000, 0x2, 0xfffffff8, 0x2, 0x151d, 0x9706, 0x9, 0x10001, 0xffff, 0x4, 0x800, 0x5, 0x0, 0x6fd3, 0x8, 0x8, 0x7, 0x0, 0xf, 0x1, 0x2, 0x2814, 0x8, 0x0, 0x3ff, 0x62, 0x0, 0x5, 0x4, 0x3, 0x2, 0x3d, 0x7, 0x9, 0xfffffffd, 0x10001, 0x7, 0x140000, 0x8, 0x40, 0x52, 0x6, 0xfff, 0x101, 0x80000000, 0x4, 0x200, 0x2413, 0x4, 0x22, 0x10001, 0x8000, 0x4, 0xb124, 0x328f, 0xfffff553, 0xe000000, 0x269, 0x3, 0x0, 0x7, 0x0, 0x3ff, 0x8, 0x1, 0x7500, 0xffff8757, 0x8, 0x5, 0x1, 0x6, 0x4, 0xfe2, 0xffff8000, 0x0, 0x7, 0x1, 0x4800000, 0x7632, 0x3, 0x1ff, 0xfffffffc, 0xfffffff7, 0x9508, 0xc, 0x5, 0x7, 0x8, 0x4, 0x10, 0x6, 0x2, 0xdda, 0x80000000, 0x80, 0xff, 0x4, 0x18e9, 0xc1, 0x80000001, 0x7ff, 0x7, 0x4, 0x2, 0x7, 0x1000, 0x5, 0x6, 0x6, 0x2, 0x0, 0x3, 0x9, 0x2, 0xffffff42, 0xcc, 0xe9b3, 0x5, 0x8, 0x7, 0x41, 0x7, 0x8, 0xb0b, 0x2, 0x27, 0x8, 0x5, 0x5, 0x4, 0x6d, 0xe, 0x8, 0x8, 0x6, 0x0, 0x6, 0x2, 0x8, 0x1, 0x5, 0x7, 0x7, 0xfffffffd, 0x8, 0x9, 0x6, 0x6, 0x6, 0x0, 0x8, 0x5, 0x7, 0x9, 0xfffffff8, 0x7, 0x80, 0x8, 0x9, 0x7, 0x7, 0x5, 0x1, 0x0, 0xc93, 0x5, 0x0, 0xffff, 0x11a7, 0x1, 0x9, 0x1, 0x9, 0x1, 0x7, 0x7f5, 0x3eae5208, 0x6, 0x247, 0xfffffff9, 0x7, 0xe629, 0x1, 0x6, 0x5, 0x6c, 0x4, 0xfff, 0x3a, 0x5, 0xffff, 0x9, 0x5, 0x1, 0x1, 0x4, 0x2, 0x3, 0x9, 0x7, 0x78a, 0xc, 0xab, 0xbc, 0x3, 0x3, 0xff, 0x7, 0x400, 0xbc2f, 0xe53, 0x0, 0x86d, 0x2, 0x5, 0x1000, 0x2, 0x4, 0x80, 0xda, 0x159, 0x0, 0x5, 0x2, 0x1ff, 0x80000001, 0x646, 0x0, 0x10000, 0x8, 0x120000, 0x10001, 0x8, 0x5, 0xc, 0x60000, 0x81, 0x9, 0x8, 0x6, 0xde04, 0x9188, 0x9, 0x3, 0x8, 0x10000, 0xc, 0x0, 0x9, 0x80000000, 0x4f, 0x4, 0x0, 0x2, 0x5, 0x2, 0x9, 0x7, 0x6, 0x2, 0x0, 0x8, 0x0, 0xa0, 0x8, 0x0, 0xfffffff9, 0x2, 0x2, 0x9, 0x1, 0x1, 0x5, 0x5, 0x7, 0x6, 0x4, 0xffffffff, 0x4, 0x8, 0x8, 0xc, 0x3ff, 0x4, 0x33, 0x8000, 0x2, 0x9, 0x1, 0x7, 0x7, 0x10, 0xffffffc0, 0x4, 0x80, 0x40, 0xf, 0x9, 0xfff, 0x9, 0x8b61, 0x1, 0x7, 0x6, 0xd, 0x7, 0x3ff, 0xa738, 0x4, 0x4, 0x8, 0x5, 0x7, 0x4, 0x5, 0x2, 0x6, 0x200, 0x100, 0xa, 0x3, 0x200, 0x6, 0x3, 0x0, 0x3, 0xfffffff3, 0x2f90, 0xff, 0x2, 0x1, 0x2, 0x8c8, 0x7, 0x100, 0x248a, 0x9, 0x6, 0x1, 0x0, 0x2, 0x9, 0x80000001, 0x4, 0x4, 0x40, 0x6, 0x2, 0x2, 0x4, 0x0, 0x9, 0x1ff, 0xb, 0x0, 0x2, 0x8e48c0a2, 0x3, 0x5, 0x7, 0x0, 0x8, 0x4, 0x9, 0x0, 0x1, 0x81, 0x401, 0x7, 0x6, 0x2000000, 0x8, 0x3, 0x6, 0x1, 0xa, 0x0, 0x8f, 0x40, 0x9, 0x0, 0x4, 0x8000, 0x7d5, 0x1, 0x6, 0x1, 0x32d, 0x400, 0x400, 0x35, 0x5, 0x9, 0x2, 0x0, 0x1000, 0x6, 0x0, 0x0, 0xb507, 0xe0000000, 0x7fff, 0x7, 0x8, 0xff9, 0x3, 0xa, 0x401, 0x72, 0x40, 0xf, 0x5, 0x2, 0x10000, 0x9, 0xfffffffc, 0xc9, 0x8, 0x40, 0x58dc, 0x200, 0x9, 0x800, 0x0, 0x4166, 0x1000, 0xf, 0x7f, 0xffffff13, 0xa000, 0xd0a, 0x85f, 0xfffffffc, 0x1, 0x9, 0x7, 0xfffffffa, 0x2, 0xfffffffd, 0x8, 0xfff, 0x200, 0x10001, 0x31, 0x0, 0x5, 0x7f, 0x2, 0x0, 0x7ff, 0x40, 0x81, 0x200, 0xffffffff, 0x10000, 0x0, 0x6f, 0x10, 0xac98, 0x8, 0x4, 0x35, 0x6, 0x8, 0x0, 0x7ff, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x0, 0x9, 0x4, 0xd30, 0x101, 0x1, 0xff, 0x0, 0x1, 0x3, 0xfb, 0x9, 0x7, 0x10000, 0x8, 0x9, 0x81, 0x15, 0xa, 0x2, 0x9, 0x27af, 0x482d, 0x8000, 0x9, 0x5d34, 0x80000001, 0x4, 0x3, 0x1375, 0xffff, 0x6, 0xffffffff, 0x5, 0x614, 0x969a, 0x8, 0x43b6, 0x80, 0x4, 0x1, 0x6, 0x898a, 0x8, 0x8, 0x7ff, 0x2, 0x457, 0x2, 0x1f2, 0x8, 0x1, 0x3, 0x9f, 0x0, 0xf05, 0x4, 0x3, 0x7, 0x90, 0x204, 0x101, 0x70c, 0x3, 0x80, 0x0, 0x8000, 0x3, 0x7, 0xfffffff8, 0xfff, 0x401, 0xfffffff9, 0x10001, 0x800, 0x3, 0x7, 0x1, 0x4, 0x10, 0xad, 0x80000001, 0x1, 0x8, 0x9, 0x7ff, 0x4, 0x7, 0x10, 0x7fffffff, 0x9, 0x7, 0xa29, 0x2, 0x9f35, 0x5, 0x8001, 0x3, 0x80000000, 0x4, 0x280000, 0x9, 0xcd9f, 0x1ce1, 0x1, 0x60c5, 0x3, 0xb, 0x2, 0x1ff, 0x5, 0x8, 0x7ff, 0x8, 0x4, 0x1, 0xa34, 0x1f5, 0xf, 0x7fffffff, 0xf, 0xdab, 0x8000, 0x10, 0x9ba2, 0x80000001, 0x7fff, 0x8, 0xfff, 0xb2f, 0xffff, 0x82e, 0x3, 0x40, 0x2, 0x4, 0x7, 0x81, 0x6d9, 0x3, 0x9, 0x4, 0x3, 0x0, 0x3, 0x4, 0x401, 0x1, 0x0, 0x6, 0x2, 0x3, 0x7, 0x9, 0x5, 0xfffff084, 0x7, 0x1, 0xc9b, 0xe714, 0x5b6, 0x0, 0x7fffffff, 0x8000, 0x0, 0x1000, 0x2b, 0x80, 0xc, 0x7, 0x1, 0x8000, 0xfffffffb, 0x5, 0x8, 0x0, 0xfc, 0x1, 0x3, 0x8001, 0x4, 0x3, 0x9, 0x6, 0xc67, 0x7, 0x6aec, 0xf, 0x9320, 0x6, 0x2, 0x1a, 0x6, 0x3ff, 0x7, 0x1, 0x3, 0x5, 0x7, 0x7a7756dc, 0xf89, 0xfffffd30, 0xffff7fff, 0xffff589a, 0x8, 0x99, 0xd7, 0x9, 0x5, 0x4, 0x9705, 0xdf, 0xfffffff9, 0xfff, 0x3, 0x3, 0x1, 0x40, 0x40, 0x7f, 0xd, 0xffffffff, 0x7, 0x4, 0x7fffffff, 0x0, 0x1, 0x0, 0x10000, 0x5, 0x1b37f5d1, 0x1, 0x7, 0x1ff, 0x0, 0x6, 0xc6, 0xfffffffd, 0x5, 0xa9, 0x0, 0x1, 0x5, 0x4, 0x7, 0xb, 0x4, 0xfffffffc, 0x2, 0x3, 0x5, 0x2, 0x3, 0x200, 0x48, 0x40, 0x7, 0x1, 0xfffffff9, 0x7, 0x6, 0x1, 0x9, 0xff, 0x1, 0x6, 0xff, 0x82de, 0x7, 0x2, 0xc, 0x0, 0x21280fb4, 0xfffffe01, 0xffff8001, 0x7, 0x3, 0x7, 0x8, 0x8001, 0x80000000, 0x9, 0x8, 0x10000, 0x6, 0x134, 0x80000001, 0xfffffff8, 0x3ff, 0x0, 0x88000000, 0xb28c, 0x7, 0x4, 0x400, 0x3, 0x0, 0x9, 0x6, 0x2, 0x9, 0xffffff81, 0xea75, 0x8, 0x3ff, 0x8, 0x4, 0x2, 0x7, 0x9, 0xffffffff, 0x2, 0x5, 0xfffffffe, 0xb, 0x3, 0xfffffffd, 0x2a, 0x6, 0x9, 0x5, 0xd2, 0x1, 0x3ff, 0x3, 0x1, 0x8, 0x6, 0x8c, 0xffffff2e, 0xd, 0x80000000, 0x8000, 0x0, 0x3, 0x1569, 0x99ce6ab, 0x7ff, 0x3, 0x8, 0x2, 0x0, 0xff, 0x2, 0x0, 0x9, 0x1, 0x4, 0xffff1584, 0xdb, 0x8, 0x6e000000, 0x1, 0x1f86, 0x7, 0x81, 0x800, 0x2, 0x3, 0x5, 0x498bc5a0, 0xfeae, 0x6, 0x5, 0x6, 0xfffffff9, 0x6877294b, 0x957b, 0x9625589a, 0x80000000, 0x83, 0x7, 0x9, 0x5, 0x0, 0x5, 0xfff, 0xa, 0x0, 0xfffffffa, 0x4, 0x264c, 0x7, 0xc000000, 0x4, 0x9278d1c2, 0x0, 0x6, 0x4, 0xb5dd, 0x6, 0x4000, 0x100, 0x7bb9, 0x990d, 0x0, 0xb5, 0x4, 0x3, 0x5, 0x9536, 0x56509d96, 0xc, 0xbb37, 0x4, 0xd1, 0xe2b, 0x6, 0x5, 0x40000, 0x4, 0x3, 0x3f7900, 0x6, 0x80000000, 0xaa, 0xff, 0xd, 0x2, 0x7, 0x1, 0xa, 0x8, 0xa, 0x2, 0x3, 0x4, 0x10001, 0xfc, 0x9, 0x3, 0xe, 0xc1d2, 0x6, 0x8, 0xffffffff, 0x4, 0x7f, 0xfffff2be, 0x5, 0xde, 0xd, 0x1000, 0x81fc, 0x5, 0xffffffff, 0x8, 0x10, 0x8, 0x800, 0x4, 0x3, 0x2, 0x2, 0x0, 0xa, 0x40000, 0x2, 0x10000, 0x2, 0x40000000, 0xfffffffb, 0x3, 0x1, 0x8000, 0xff, 0x0, 0xfffffffb, 0x2, 0x2, 0x3, 0x5364, 0xfffffffc, 0x8, 0x40, 0x6, 0xfffffffe, 0x2, 0x0, 0x2, 0x5, 0x8, 0x0, 0x6, 0x80000001, 0x800, 0x9, 0x3, 0x3, 0x7, 0x9, 0x2, 0xfffffffd, 0xffff, 0x81, 0x8000, 0xfffffffa, 0x0, 0x6, 0xe56d, 0x0, 0x10, 0x3, 0xe, 0x101, 0x6, 0xfff, 0xa64, 0x9, 0x0, 0x6, 0x1, 0x10, 0x9, 0x7ff, 0x8000, 0x6, 0x6, 0xff, 0x5, 0x80, 0x7f, 0x1, 0x6, 0x5, 0xc2a, 0x1, 0x0, 0x81, 0x4, 0x77c, 0x4, 0x7fff, 0xfbe, 0xc, 0x1, 0x1, 0xffffffff, 0x1, 0x8, 0xc, 0x4, 0x9, 0x5, 0xa7e2, 0xb511, 0x0, 0x6, 0xfff, 0x5, 0xffffc3a9, 0x781, 0x3, 0x7, 0x7, 0x0, 0x1, 0x6, 0x2, 0x9, 0xb, 0xffff, 0x1, 0x5, 0x4, 0x2, 0x0, 0x3, 0x6, 0x2, 0x8, 0x3, 0x6, 0x5, 0x6, 0x1, 0x7, 0x2, 0x1, 0xa7, 0x100, 0xfffffffd, 0x7fff, 0x8, 0x1, 0x9, 0x6, 0x5, 0xfffffff9, 0x6, 0x7fffffff, 0x7, 0x3, 0x2, 0xffff, 0xffff0000, 0x9, 0xe, 0x1, 0x8, 0x6, 0x8, 0x5, 0xf9, 0x100, 0x0, 0x8, 0x10, 0xe6, 0x3, 0xfffffffc, 0x4, 0x9, 0xff, 0x3, 0xaab2, 0x7f, 0x7, 0xe, 0x5a99, 0x1, 0xfffffff9, 0x8, 0x2, 0x3, 0x0, 0xfffffff9, 0x6, 0x3ff, 0x5ba, 0x5, 0x0, 0x2, 0x5a8, 0x7, 0x2, 0x7, 0x0, 0xfffffff9, 0x4, 0x3, 0x5, 0x0, 0x4d21, 0x882e, 0x7, 0x2, 0x10000, 0x5, 0x1, 0x80000001, 0x0, 0x8, 0xffffff5f, 0x8, 0x8000, 0x5a18, 0x7, 0x7f, 0xa, 0x8b3, 0x401, 0x7, 0x2, 0x2, 0x9, 0x7, 0x1, 0x5, 0x2, 0x8001, 0x8, 0xffff, 0x0, 0x8000, 0x2, 0x1, 0x6ac3ac55, 0x1, 0x6, 0x0, 0x3, 0x9, 0xffffffff, 0xe83, 0x7, 0x10000, 0x1800, 0x3, 0x9, 0x7, 0xffffffff, 0x4a, 0x1, 0x8000, 0x4, 0x5, 0x0, 0x0, 0x5, 0x0, 0x1, 0x101, 0x6, 0x2, 0x0, 0xfffffff1, 0x26f3, 0x2ac, 0x80000000, 0x0, 0x9, 0xff, 0x5, 0x2, 0x6, 0x100, 0x3, 0xd, 0x80, 0x9, 0x1, 0x2, 0x6, 0x10001, 0x916, 0x905, 0xfffffff4, 0xeb49, 0x1ff, 0x368, 0x7, 0x1, 0x5, 0xe4bd, 0x1, 0xffff, 0x10001, 0x9, 0xab, 0x7, 0x5, 0x4, 0x9, 0x100, 0x1, 0xfffffffb, 0x4d1f, 0x1, 0x80000001, 0x3, 0x340, 0x5, 0x9, 0x7fffffff, 0xc, 0x6, 0x1, 0x2, 0xfffffff8, 0x9, 0x6, 0x3, 0x1, 0xc8, 0x4, 0x3ff, 0x3, 0x5, 0x10000, 0x5, 0x9, 0x2e, 0x40, 0xf, 0x3dcf, 0x3, 0x1000, 0x3ff, 0xfffffff8, 0x7, 0xa, 0x4, 0x3, 0x4, 0x6, 0xd19, 0xfffffff8, 0x1000, 0xffff, 0x2, 0xc0, 0x4, 0x51, 0x4, 0x7fff, 0xdd, 0xc, 0x3, 0x3, 0x3, 0x40, 0x1, 0x6, 0x3, 0xd2, 0x1, 0x2, 0x3, 0xf, 0x66b6, 0x8, 0xe, 0x9, 0xb0a, 0xd, 0x5, 0x3, 0x9, 0x741, 0x4, 0xfffffffd, 0x6, 0x1, 0x59b0, 0xe2, 0x2, 0x401, 0x1, 0x2, 0x6, 0x9, 0x1, 0x10001, 0xfff, 0x8, 0x10, 0xfffffff7, 0x9, 0xfffffffd, 0x5, 0x1b7e, 0x3, 0x1, 0xffff, 0x5, 0x4, 0x5, 0xa2a, 0xfffffffc, 0x9, 0xff, 0x5, 0xfff, 0x96f, 0x7, 0x0, 0x7f, 0x6a93, 0xe, 0x1000, 0xa, 0x7, 0x40, 0x9, 0xfffffffe, 0x9, 0x0, 0xdd, 0x3, 0x5, 0x2, 0x18be, 0x1, 0x6, 0x6, 0x8, 0x1, 0x2, 0x9, 0x717, 0x4, 0x1ff, 0x9, 0x1000, 0xffffffff, 0x6, 0x8, 0x9, 0x66, 0x4, 0x8000, 0x7, 0x81, 0x3, 0x1, 0xf8, 0x4, 0x1, 0x1000, 0xfd7, 0x7, 0x2, 0x6, 0x59e, 0x10001, 0xb, 0x8000, 0x1, 0x4, 0x1, 0x80000001, 0x3, 0x0, 0x7, 0x1000, 0x4, 0x80000001, 0x0, 0xffffffff, 0x2, 0xfffffff7, 0x3, 0x6b6, 0x120000, 0x5, 0x3, 0x2c5, 0x1, 0x7, 0x9, 0x4, 0x5, 0x9, 0x4302, 0x6, 0x9, 0xfffffffe, 0x7, 0x2, 0x2, 0x4, 0x9, 0x0, 0x800, 0x0, 0x5, 0x8000, 0x5, 0xff, 0x3, 0x2, 0x80000001, 0xffd, 0x6, 0x2, 0x8, 0x2, 0x9, 0x4, 0xfff, 0x80000001, 0x9, 0xc7, 0x0, 0x80, 0x10001, 0x6, 0xa, 0x122aa0, 0x3, 0x0, 0x9, 0xa, 0x29285d24, 0x2, 0x9, 0x2, 0x8, 0x3e4, 0x328f, 0x6, 0x7, 0x9, 0x8, 0x1, 0x0, 0x0, 0x6, 0xe, 0x7, 0x7fffffff, 0xfffffffd, 0x12f2, 0x401, 0x7, 0x3, 0x8, 0x7, 0x0, 0x8, 0x7, 0xf2a, 0x0, 0xf, 0xfa, 0x9, 0x7f, 0x6, 0xf5df, 0x8, 0x40, 0x9, 0xfffffff9, 0x3, 0xea62, 0x0, 0xd2a, 0xffffff1c, 0xf, 0x0, 0x9, 0xc, 0x9, 0xd, 0x9, 0x2000, 0xfffffff7, 0x0, 0x0, 0x5, 0x5, 0x1, 0x8000, 0x6, 0x7f, 0x1, 0x9, 0x5, 0x0, 0x8, 0x240000, 0x9, 0x6, 0x9, 0xe7, 0x40, 0x7, 0xfffffffe, 0xe, 0x5, 0x40, 0x6, 0x8, 0x7, 0x7fffffff, 0x6, 0x6, 0x6, 0xfffffff9, 0x34, 0x5, 0xb, 0x8, 0x7a, 0x8, 0x7ff, 0x3, 0x8000, 0x1, 0x100, 0x2, 0x8000, 0x5, 0x3f, 0x76, 0x1e0, 0x23, 0xd1, 0x8, 0x2, 0x6ab, 0x8, 0x2, 0x3, 0x4, 0x6, 0x40, 0x7ff, 0x652c, 0x0, 0x9403, 0x641, 0x2, 0x8, 0x1, 0x10cd5068, 0x4, 0x2, 0x8000, 0x1000, 0x8b, 0xe38, 0xffff636c, 0x100, 0x7ff, 0xffffff7f, 0x9, 0xe, 0xb8b2, 0x2, 0xfffff98c, 0x2, 0x40, 0xdc, 0x80000001, 0x7f, 0xb, 0xfffffffd, 0x2, 0x200, 0x80000001, 0x4eb, 0x3, 0x8000, 0x7, 0x2, 0x5, 0x7, 0x7, 0x969, 0xda, 0xdb20, 0x9, 0x200, 0x0, 0x3ff, 0x8, 0x861b, 0x7, 0x0, 0x4, 0xfffffffc, 0x8, 0x3, 0x36, 0x7, 0x84f, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x6421, 0x1, 0x5, 0xfffffff7, 0x1, 0xa2f5, 0x90, 0xffff73b1, 0x8, 0x9, 0x6cfe, 0x8000, 0x8, 0x8, 0x2, 0xc443, 0x7, 0x7, 0xffffff81, 0x9, 0x0, 0x3, 0x6, 0xc7f, 0x400, 0x5, 0x4, 0x3e80, 0x8, 0x3, 0x4, 0x8, 0x7, 0x9, 0x2, 0xe00, 0x5, 0x5, 0x9, 0x7f, 0x2, 0x8000, 0x5d3, 0x0, 0x2, 0x800, 0x0, 0x6, 0x5, 0x8000, 0x0, 0x3ff, 0x0, 0xfffffffa, 0x8, 0x870c, 0x612, 0x8, 0xf5e, 0x8760, 0x5, 0x7f, 0x3a2f6e85, 0x40, 0xb, 0x4, 0x5, 0x4, 0x8000, 0x10, 0x8000, 0x1, 0x9, 0x6, 0x6, 0xf, 0x4, 0x1, 0x5, 0x4, 0x80000000, 0x0, 0xf6, 0x5, 0x80000001, 0x3, 0xfeb, 0xddea, 0x3, 0x11c7, 0x9, 0x0, 0x8, 0x1, 0xffffffff, 0x2, 0x4, 0xfffffff8, 0x5, 0x9, 0x2, 0x7, 0x5, 0xffffff03, 0x200, 0x10, 0x81, 0x7fff, 0x2, 0x6, 0xfffffffa, 0xfffffffe, 0x0, 0x7f, 0x920, 0x9, 0x8, 0x7, 0x8, 0x8, 0x1000000, 0xd1d, 0x9, 0x6, 0x3, 0xfffffffd, 0x3, 0x10000, 0x206b, 0x800, 0xfffff908, 0x8, 0x8, 0x2, 0x7fff, 0x86d4, 0x2, 0x5, 0x2, 0x31d, 0x4, 0x0, 0x72f3, 0xde, 0x6f, 0x85, 0x8001, 0x2, 0x401, 0x5, 0x9, 0x763, 0xfffffffb, 0x1, 0x3, 0xfffff800, 0xd, 0xf07b, 0x0, 0x8, 0xfffffbff, 0x5, 0x54e, 0xffffffff, 0x9f4, 0x2, 0x3, 0x2, 0x8, 0x3, 0x4, 0x71, 0x2, 0x7f, 0x8, 0x8, 0x9, 0x6, 0x9, 0xffffff8e, 0xb, 0x9, 0x7, 0xa3c, 0x8, 0x8, 0xe, 0x5, 0x2, 0x6885, 0x8, 0xdcb, 0x6, 0x977, 0x1ec, 0x6, 0x7, 0x3, 0x3, 0xc6, 0x76f3, 0x0, 0x6, 0x6, 0x43, 0x2, 0x3, 0x200, 0x5, 0x4, 0x80000001, 0x9, 0x4, 0x6, 0x9, 0x3, 0x4, 0x9, 0xffff, 0x2, 0x8, 0x8, 0x214, 0xfffffffe, 0x6, 0x9, 0xffffffcb, 0x6, 0x3de, 0x6, 0xd159, 0xffff, 0x82, 0x49, 0xf9e454d7, 0x3, 0x2, 0x0, 0x7, 0xc, 0xce0, 0xc, 0x58042572, 0x1ff, 0x2, 0x0, 0x3, 0x3, 0x7, 0x401, 0x7ff, 0x1, 0x3, 0x7, 0x4, 0x6, 0x4, 0xbfd2, 0x1, 0xfffffffd, 0x5, 0x3, 0x1, 0x8, 0xfffffff9, 0x9, 0x400, 0x6, 0x8, 0x5, 0x3, 0x4, 0x9, 0x8, 0xee, 0x0, 0x0, 0x8, 0x2, 0x0, 0xd5, 0x0, 0x975, 0xd, 0x9, 0x1, 0x1, 0xf2a, 0x9, 0x0, 0x5, 0xd33e38b, 0x101, 0x5, 0x5, 0x5, 0x143, 0xf678, 0xffff, 0x2, 0x4, 0xffff, 0xfffffffe, 0x7, 0x496, 0x9, 0x7, 0x6, 0x6, 0x3, 0x3, 0x0, 0x5, 0x7fff, 0x5, 0x2, 0x6, 0xb78, 0x2, 0x6, 0x4, 0x2, 0x4, 0x200, 0x19d, 0xda6, 0xffff, 0x2, 0xfff, 0x7fffffff, 0x81, 0x7, 0x2, 0xf19, 0x2, 0x7, 0x0, 0xfb, 0x2, 0x1ff, 0x7, 0x0, 0xd, 0xfc, 0x7, 0x1b48, 0x4, 0x2b02, 0x2, 0xfffffff9, 0x0, 0x7, 0x3, 0x4, 0x10000, 0x7, 0x5, 0xf1, 0x6, 0x10000, 0x5, 0x40, 0x6, 0x9, 0x4, 0x5, 0x3, 0x2, 0x3, 0x4, 0xffff, 0x200, 0x8, 0x9, 0xfffff241, 0x7, 0x5, 0xffff, 0x3, 0x9, 0x7, 0x8001, 0x4, 0xfffffffe, 0x0, 0x0, 0x34, 0x0, 0xf0a0, 0x7, 0xe00, 0x80000000, 0x8, 0x6, 0x8, 0x80, 0x2, 0x2, 0x6, 0x1, 0x6, 0x80, 0x2, 0x1, 0x2, 0x0, 0xffffffff, 0x46c, 0x66c93c63, 0x3, 0xa, 0x400, 0x8, 0xbf, 0x3, 0x0, 0x9, 0x401, 0x4, 0x6, 0x8, 0x7ff, 0x67f6, 0x9, 0x6, 0x10000, 0xffffaaa9, 0x1, 0x81, 0x7ff, 0x0, 0x401, 0x7fffffff, 0x6, 0x7f, 0x10001, 0x7, 0x1000, 0x3, 0xfffffff8, 0x10001, 0x1, 0x401, 0x1, 0x3b, 0x3, 0x40000, 0xa, 0x7ff, 0xfffff286, 0x6, 0x4, 0x57, 0x1, 0x8000, 0x7, 0x6, 0x4, 0x365, 0x7, 0x1000, 0x52, 0x400, 0xe9f8, 0x2, 0xb, 0xb7, 0x8, 0x40000, 0xffffffe0, 0x8000, 0x9000000, 0x10, 0x0, 0x8000, 0x7, 0xc00000, 0x9, 0x4d9, 0x9, 0x9, 0xffff, 0xffff, 0x7931, 0x101, 0x54, 0xffff0001, 0x61, 0x8, 0x1d40, 0x7ff, 0x5, 0x6, 0xd0b, 0x3, 0xc, 0x78000000, 0x2, 0xefa, 0xb819, 0x1, 0x5, 0x8, 0x1, 0xb21a, 0xfffffff2, 0x4, 0x7, 0x3, 0x7, 0x2, 0x10, 0xffffff94, 0x800, 0x9, 0x0, 0x1d97, 0x7, 0xf, 0x942d, 0x9, 0x800, 0x10001, 0x7, 0x9, 0x54, 0x8, 0x1, 0x1ff, 0xf, 0x10000, 0x7f, 0x9, 0xd0, 0x2, 0xf34, 0x3, 0xf5f, 0x2, 0x1, 0x0, 0x1000, 0x6, 0x23a, 0x8, 0x57f1, 0x1ff, 0x3, 0x9, 0xee, 0x94800000, 0x8, 0x6, 0x6, 0x64, 0x7, 0x101, 0x9, 0x3281, 0xf, 0x0, 0x4, 0x4, 0x3, 0xb, 0x40, 0x3, 0x7fffffff, 0x1, 0x800, 0x40, 0x77, 0x6, 0x1ff, 0x6, 0x4, 0x9, 0x3, 0x87d, 0x4, 0x8, 0x7348, 0xd4, 0x3ff, 0x5, 0xf, 0x6, 0x13, 0x6, 0x80, 0x7, 0x40, 0xe, 0x9, 0x1, 0x0, 0x5, 0x0, 0x2, 0x5, 0x10, 0xffffff80, 0x8, 0x12, 0xcf, 0x8, 0x4, 0x3, 0x8, 0xfffffffc, 0xfffffffa, 0x7, 0x7, 0x5, 0x9, 0x1, 0xcf, 0x4, 0x3, 0x1, 0x4, 0x9, 0x4, 0xfffffffb, 0x5, 0x6, 0x0, 0xe, 0x9, 0x7, 0x6, 0x4, 0x0, 0xffff674b, 0x4, 0x3e9d8f2a, 0x401, 0x6e, 0x8, 0x0, 0x10, 0x1, 0x3, 0x5228, 0xfffffff7, 0x9, 0x6, 0x6, 0x8, 0x1, 0x3, 0x80000001, 0x5, 0x4, 0x1, 0x8001, 0x7, 0x4, 0x4, 0x714, 0x9, 0x9, 0x3, 0xfffffc00, 0x9, 0xe6ed, 0xf52, 0xf3, 0x7, 0x3, 0x7, 0x100, 0x0, 0x0, 0x8, 0xfffffff7, 0x80000000, 0x0, 0x1, 0x4, 0x0, 0x5, 0x3, 0x7, 0x1, 0x9, 0xffffffff, 0x80000001, 0x69, 0x6, 0x0, 0x8, 0x8001, 0x0, 0x1d9b5b57, 0x5726596, 0x2, 0x5, 0x0, 0x101, 0x7, 0x9, 0x7ff, 0x5, 0x7, 0x0, 0x9ff, 0x7, 0x4, 0x0, 0x0, 0xffff29db, 0x10001, 0x703, 0xf8f, 0x9, 0x7ff, 0x5, 0x8001, 0xfffffe00, 0xffffffff, 0xfffffff7, 0x0, 0x0, 0x908e, 0x200, 0x6, 0x4, 0x9, 0x1, 0xb683, 0x8, 0x40, 0x0, 0xa34, 0x3, 0x6, 0xc, 0xffffffff, 0xe, 0x4, 0xfffffbff, 0x0, 0x0, 0x2, 0x9, 0x0, 0x7fffffff, 0x5, 0x81, 0x95, 0xe8, 0x1, 0x2, 0x5, 0x18c, 0xbc72, 0x68c, 0x2, 0xb5, 0x81, 0x7fffffff, 0x3, 0x7, 0x3, 0x0, 0x8001, 0x2645, 0x2, 0x1, 0x5, 0x0, 0x423, 0x7, 0xf7d9, 0x45f8, 0x2, 0x7, 0x3, 0x3, 0x3, 0xfff, 0x5, 0x200, 0x8, 0x5, 0x1000, 0x5, 0xffff, 0x4, 0x38900, 0x31527ef7, 0xa, 0x7, 0x8c, 0xfffffffa, 0x5, 0x7, 0x5, 0x6, 0x7, 0x6, 0x9, 0x3, 0x9, 0x0, 0xffffffff, 0x1, 0x2, 0x48, 0x8000, 0x7f, 0xffffffff, 0x8, 0x5, 0x10001, 0x664, 0x6a05, 0xe, 0x2, 0x401, 0x6, 0xffff, 0x4, 0x3, 0x4, 0x3eb, 0x9, 0x400, 0x8, 0x0, 0xfffffff6, 0x4, 0x100, 0x9, 0x7, 0x9, 0x6, 0xe0f, 0x1, 0x6, 0xffff8001, 0x0, 0x40, 0x4, 0x8001, 0x0, 0x8, 0x8, 0x40, 0xe, 0x3, 0x5, 0xd, 0x9, 0x1, 0x5, 0x3fc, 0x3ff, 0x8, 0x6, 0xfffffffa, 0x7fff, 0x3, 0x5, 0x4, 0x40, 0x2, 0x101, 0x7, 0xd, 0x6, 0x26b30000, 0x4, 0x2, 0xb4ba, 0x4, 0xa92, 0x5, 0x3, 0x26e2, 0x8, 0x6, 0x9, 0x7, 0x78000000, 0xff, 0x8, 0xb, 0x7, 0xfffffeff, 0x1ff, 0x8, 0x2, 0xc, 0x2, 0xfffffffa, 0x40, 0x9, 0x8001, 0x8, 0x7fffffff, 0x10001, 0x80000000, 0x1, 0xb, 0x6, 0x6, 0x5, 0xf, 0x0, 0x2, 0x7, 0x1, 0x0, 0x6, 0xfffffffa, 0x0, 0x1, 0x539eda95, 0xffff, 0x4, 0x8, 0xd63, 0x7ff, 0x100, 0x5, 0x78a9, 0x0, 0x1, 0x2, 0x10, 0x1, 0xfffffff9, 0x4, 0x3, 0x1, 0xfffffffa, 0xfffffffd, 0x9, 0x1, 0xf6d, 0x1ff, 0x40, 0x4, 0x21623915, 0x7, 0x722, 0x2, 0xff, 0x0, 0x0, 0x8, 0x7, 0x401, 0x0, 0x4, 0x3929, 0x3, 0xfffffc01, 0x1, 0xfffffffe, 0x4, 0x8, 0xffffffff, 0x2, 0x4, 0xb, 0x1, 0x5, 0x8, 0x6, 0x1, 0x2, 0x0, 0x8, 0x70, 0x9, 0x0, 0x3, 0x0, 0x7b, 0x4e4, 0x2, 0xb, 0x3, 0x3, 0x8a28, 0x9, 0x3, 0xfffffff1, 0x9dd5, 0xf, 0xb, 0x8, 0x2, 0x1, 0xffffffff, 0xb387, 0x1, 0x8, 0x7f, 0x1000, 0x8001, 0x0, 0x8, 0x8001, 0xa35, 0xffffff80, 0x0, 0xfffffff9, 0x7, 0x101, 0x0, 0xffffff00, 0x7f, 0xf, 0x2, 0x492, 0x4, 0x7, 0x2, 0x80, 0x6cf61585, 0x4, 0xf, 0x85a, 0xf4ae, 0x3, 0x5, 0xffffffff, 0x4, 0x800, 0x2f, 0x9, 0x2, 0xffff, 0x8, 0x200, 0x3b754fcb, 0x9, 0x24, 0xfffff800, 0x6379, 0xa3, 0x8, 0x3ff, 0x200, 0x81, 0x1ff, 0xbd5b, 0x4, 0x5, 0x7fffffff, 0x4, 0x1, 0x3f8, 0x101, 0x4000, 0x0, 0x5a6, 0x2, 0x4, 0x4fb, 0x3ff, 0x5, 0x7, 0x4, 0x10000, 0x7, 0x10, 0x6, 0x5, 0xe, 0xf9, 0x4, 0x2, 0xb, 0x5650, 0x10, 0x7, 0x800, 0x80000001, 0xd, 0xc635, 0xffff, 0x6, 0x8, 0x6a68, 0x4, 0x7, 0x2, 0xffffffff, 0x9, 0x7, 0x3, 0x2, 0x2, 0x7fff, 0x1, 0x8, 0x40, 0x3, 0xa6, 0x3, 0x7, 0x2, 0x19c1b800, 0xc92, 0x96, 0xcfb5, 0x5, 0x7, 0x7, 0x0, 0x5, 0x0, 0x9, 0x59, 0x7, 0x580, 0x0, 0x6, 0x9, 0x8, 0x81, 0x7, 0x2a0880, 0xfff, 0x2, 0x9, 0x56, 0x40, 0x7, 0x8, 0x7, 0x3ff, 0x8, 0xa3b, 0x92d6, 0x719b2680, 0x2e8e, 0x3, 0x3, 0x10000, 0x3, 0x2, 0x5, 0x5, 0x8, 0x7, 0x0, 0x5, 0x3, 0x1, 0x6, 0x40, 0xd, 0x80, 0x5, 0xc6, 0x8, 0xc038, 0x8, 0x9, 0x7f, 0x3, 0x6b9, 0x10, 0x2a657e8a, 0x7c0, 0x4, 0x200, 0x4, 0x3, 0xfffffffa, 0x4, 0x98d, 0x81, 0xc76, 0x88, 0x50000, 0x1ff, 0x400, 0x2, 0xc, 0xdcfd, 0xfff, 0x401, 0xaa, 0x8, 0x65b, 0x401, 0x8, 0x6, 0x3ff, 0x4bb9, 0xb, 0x7d83bce1, 0x2, 0x1, 0x7ff, 0x7f, 0x8, 0xc2, 0xb1c3, 0x3, 0x3, 0xe, 0xc48, 0x3, 0x100, 0x8, 0x80000001, 0x8, 0xe5e3, 0x401, 0x1f, 0x62d8, 0x3ff, 0x7, 0x6, 0x9, 0x400, 0x6, 0x7fff, 0x6, 0x5d300bdc, 0x7, 0x0, 0xd1a8, 0x4, 0x10000, 0xfffffffa, 0x2, 0x479a, 0x7f, 0x0, 0x6f, 0x4, 0x2, 0x4, 0x10000, 0x5, 0x3, 0x3, 0x8, 0xd, 0x7, 0x0, 0x3, 0xebbc, 0xd, 0x3, 0x100, 0x2, 0x6, 0xc, 0x6, 0x1, 0x77635ac8, 0x7fffffff, 0x80000000, 0x6, 0x6, 0xa0b, 0x0, 0x0, 0x1, 0x4, 0x8, 0x7, 0x6, 0x72f, 0x7, 0x1, 0x9, 0x4, 0x3ff, 0x9, 0x5, 0xfffffff9, 0x3, 0x81, 0x101, 0xbd43, 0x6, 0x101, 0x1, 0x4, 0x0, 0x45c9, 0xb087, 0x9, 0x80, 0x2e1327e8, 0xb2da, 0xd, 0xab1, 0x81, 0x2, 0x9, 0x4, 0x8, 0x8001, 0x9, 0x6, 0x800, 0x0, 0x2, 0x9, 0xfff, 0x4, 0x9, 0x4, 0x8, 0x5, 0xc04, 0x0, 0x3, 0xbf3, 0x6, 0x9, 0x9, 0xd4, 0xc54, 0x0, 0x3, 0x6, 0x0, 0xdd, 0x5, 0x200, 0xfffffff8, 0x960, 0xfffffffb, 0x98000000, 0x673, 0xffff, 0x78, 0x10000, 0x5, 0x7f, 0x8, 0xa, 0x2, 0x8, 0x3ec, 0x4aa, 0x7, 0x2, 0x4, 0x5, 0xffffffb4, 0x4, 0xffffffff, 0x3, 0x4, 0x3, 0x8000, 0x1, 0xfffffff0, 0x2, 0xfffffffc, 0x10, 0x9, 0x3, 0x0, 0xfa, 0x7, 0xa8, 0x8, 0x0, 0x80000000, 0x7, 0x9, 0x0, 0x9, 0x1000, 0x8, 0x4, 0x13419ac7, 0x4, 0x7, 0x2, 0x3, 0x4, 0x5, 0x5, 0x5, 0x3, 0x401, 0xee, 0x911, 0x8, 0x696, 0x1, 0x5, 0x1000, 0x8, 0x9, 0xd, 0x3, 0x12, 0x4, 0x5, 0x4, 0x57, 0x0, 0xed, 0xecb, 0xe, 0x3, 0x1, 0x9, 0x180, 0xf, 0x58d, 0x40e, 0x6, 0x0, 0xfffffeff, 0xd, 0x10000, 0x3f5, 0xff, 0x7, 0x9, 0x9, 0x7, 0xe3ef, 0x9, 0x6, 0xcff, 0x0, 0xea, 0x10001, 0x4, 0x200, 0xf, 0xc0e, 0x5, 0xc0, 0x3, 0x2, 0x10000, 0x8cee, 0x9, 0x7fff, 0x4af6, 0x3, 0x5, 0x3, 0x7, 0x85e6, 0x4, 0xffffffff, 0x1, 0x7, 0xac8, 0x6, 0x7f, 0x1, 0xffffffff, 0x0, 0x5725, 0x3, 0x1, 0x101, 0x2, 0x1eb, 0x2, 0x6, 0x2, 0x9, 0x4, 0xfffffffc, 0x0, 0x47, 0x76, 0x6, 0x5, 0x1, 0x80, 0xfff, 0x0, 0x8, 0x3, 0x1, 0x2, 0x7, 0xb89, 0x9, 0x77, 0x0, 0x5f, 0x7fffffff, 0x3, 0xb, 0x0, 0x2, 0x7f, 0x8, 0x1, 0x1, 0x7a9, 0xbe, 0xb, 0x9, 0x9, 0x7fffffff, 0x9, 0x8000, 0x6, 0x20, 0x9, 0xfff, 0x80000000, 0xd32a, 0x7, 0x100, 0x8, 0xfffffffb, 0x7600, 0x1, 0x2, 0x6, 0x7d7, 0x3, 0xffff0000, 0x7, 0xe04c, 0x3257, 0x0, 0x8, 0x7, 0xbf, 0x7, 0xb, 0x0, 0x7dc, 0x8, 0x8, 0x200, 0x80000000, 0xffff0001, 0x2f6b64f8, 0x2, 0x10000, 0x1, 0x7, 0x1, 0x3, 0xa9, 0x0, 0x800000, 0x8, 0x7, 0x0, 0x9, 0x400, 0x4, 0x3, 0x6, 0x0, 0x1, 0xd, 0xffffffff, 0xff2, 0x7, 0xa, 0x10000, 0x6, 0x124bc948, 0x200, 0x0, 0x4, 0x1f, 0x2, 0x0, 0x1ff, 0x4, 0x0, 0x7, 0x8, 0xf8, 0x5, 0x9d6, 0x2, 0x6, 0xb, 0xf, 0x9, 0x1, 0x0, 0xca, 0x39e, 0x4, 0xc5a9, 0x401, 0x2, 0xd, 0xffffffff, 0xda, 0x1000, 0x3, 0x2, 0x180, 0x1, 0x9, 0xd, 0x5, 0xfffffff7, 0xf6fe, 0xff, 0x800, 0x3, 0x4, 0x4, 0x1, 0x200, 0x42e, 0x5, 0x6, 0xe, 0x0, 0x8, 0xffff8000, 0x26, 0x0, 0xffffffff, 0xc, 0xa99, 0x8, 0x3, 0x2, 0x9, 0x800, 0x4, 0x1, 0xfffffffa, 0x41, 0x0, 0x8, 0x7f, 0x4, 0x17, 0x10001, 0x6, 0x4, 0xfffffffe, 0x57, 0x2, 0x2, 0x0, 0xd324, 0x7, 0x3, 0x6f, 0x3, 0xfffffff6, 0x4, 0xffffff14, 0x7, 0xfffff800, 0x0, 0x7c, 0x7fff, 0x0, 0x100, 0x3, 0x3, 0x6, 0x6, 0x800, 0x3, 0x0, 0x2, 0x2, 0xa, 0x9, 0x2, 0x0, 0x4, 0x6, 0x9c8, 0x8, 0xbee5, 0xff, 0xd633, 0xfa, 0x7, 0xd22, 0x6, 0x9, 0xfff, 0x1, 0x8, 0x2, 0x7, 0x8, 0x9, 0x0, 0x2000000, 0x7, 0x9, 0x2, 0x5, 0x4, 0x7fff, 0x0, 0x4, 0x1ff, 0x1000, 0x8, 0x8, 0x7, 0x8, 0x7, 0x6, 0x7, 0x0, 0x8, 0xc, 0x2, 0x60000000, 0x5, 0xff, 0xb7, 0x4, 0x4, 0x7fffffff, 0x9, 0x7a, 0xbc12, 0x5, 0x2, 0xffffff28, 0x3ff, 0x10000, 0x9, 0xf637, 0x5, 0x8, 0x4, 0x14b, 0x0, 0x5, 0x64aa, 0x5, 0x8, 0x2, 0x6, 0x0, 0x1, 0x80000000, 0x7f, 0x10, 0x5, 0x6d, 0x9, 0x6, 0x1c, 0x80000000, 0x7, 0x4, 0x3, 0x9, 0x4, 0x5, 0x3ff, 0x6, 0x9, 0x4, 0x3ff, 0x2, 0xfffff170, 0x7, 0x0, 0x7, 0xfff, 0x9, 0x3, 0xffff, 0x1ff, 0x7, 0x0, 0x40, 0x0, 0x2, 0x54d9, 0x5, 0x1, 0x7, 0x3, 0x8, 0xffff, 0x7ff, 0x4, 0x4e, 0x8, 0x3, 0x9, 0x2, 0x7, 0xfffffff8, 0x81, 0x8, 0x0, 0x6b, 0xfffff000, 0xb3, 0x9, 0x1, 0x8, 0x8d, 0x6, 0x100, 0x1, 0x8, 0x9, 0x7, 0x7, 0x4, 0x0, 0x7f, 0x40, 0x9, 0x8, 0x6, 0x5, 0x6, 0x5, 0x4, 0x6, 0x0, 0x8, 0x3, 0x80000001, 0xe2, 0x10, 0x497, 0x1, 0x8bc, 0x5, 0x4, 0x1, 0x8, 0x81, 0x6, 0xa, 0xb, 0x1, 0x9, 0x101, 0x6, 0x5, 0x100, 0x3, 0x37, 0x4, 0x2, 0x81, 0xfffffff8, 0x2, 0x63, 0xe9, 0x6, 0xc17, 0x400, 0x4, 0x0, 0x7, 0x6, 0xd7d, 0x6, 0x100, 0x80, 0x5, 0x0, 0x10, 0x2e0, 0x9, 0x3, 0x5, 0x40, 0x148407b4, 0x8, 0x7, 0xda, 0xfffffff8, 0x8, 0xb, 0x10001, 0x7ff, 0x6, 0x0, 0x2, 0x2, 0x400, 0x0, 0x7, 0x33, 0x2, 0x1, 0x3, 0x54d, 0xfffffffc, 0x6, 0x0, 0x0, 0x4, 0x1, 0x5, 0x61, 0x2, 0x9, 0x7, 0x9, 0x8, 0xa, 0x401, 0x7, 0xffffffff, 0xce0, 0x81, 0x5, 0x553, 0x6, 0x6, 0x5, 0x6, 0x41, 0x7, 0x7, 0x7, 0x4, 0x9, 0x6, 0xc, 0xb, 0xabe4, 0x1, 0x5, 0x4, 0x8, 0x7fff, 0x4, 0xef7d, 0x8, 0x1, 0x7f, 0x0, 0x8, 0x6, 0x8, 0x8, 0x9, 0xdb5d, 0x7f, 0xffffffff, 0x8, 0xfffffc00, 0x6, 0x5, 0x9, 0x2, 0xf, 0x7, 0x7, 0x3, 0x2, 0xfffffffe, 0x8000, 0x81, 0x401, 0x3, 0x6, 0x6, 0x0, 0x7fffffff, 0x4, 0x8, 0x1, 0x24, 0x8c, 0x2, 0x9, 0x2, 0x5, 0x8, 0xf, 0x3, 0x8, 0xfffff44c, 0x5, 0x9, 0x5a59d678, 0x7ff, 0x8, 0xdb, 0x800, 0x1, 0x5, 0x3ff, 0xc6a, 0x2, 0x5, 0x9, 0x5, 0x7, 0x3ff, 0x7, 0x0, 0x468d800, 0x6, 0x400, 0xf0, 0xf6, 0x10001, 0x80, 0x81, 0x46e8, 0x7456, 0xa28b, 0x3, 0x40, 0xffff, 0x100, 0x4, 0x1000100, 0x6a3c, 0x7fffffff, 0x8, 0x3, 0x2, 0x4, 0x3, 0x19, 0x7, 0x37, 0x0, 0xe3, 0xc3e, 0x9, 0x4, 0x5, 0xc000000, 0x8, 0x5, 0x3, 0x5, 0x5, 0x7, 0x3, 0x14, 0x8, 0xcdf, 0x7, 0x44, 0x3, 0xfffffff1, 0xc2a, 0x8001, 0x8, 0x6, 0xbdf4, 0x400, 0x4, 0x40, 0x0, 0x7, 0xe8, 0x7, 0x29, 0x4, 0x1, 0x81, 0x6, 0x80000001, 0x6, 0x8, 0x7fff, 0x0, 0xe0ec, 0xc, 0x7, 0xfffffffd, 0x380000, 0x8, 0x59, 0xd9, 0x80000000, 0x1000, 0x7, 0x30de, 0x4, 0x9, 0xd20, 0x4, 0x80, 0x7, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0xe7, 0x6, 0x2, 0xb, 0x8001, 0x5, 0x100, 0x8001, 0x9, 0x8, 0x3, 0xfffffffa, 0x42, 0x6, 0x9cd, 0x5, 0x6, 0xf2, 0x3, 0xe, 0x697be413, 0x5958fdab, 0xfad, 0x7, 0x5, 0xffffffff, 0x7f, 0x8, 0x80000001, 0x7, 0x2, 0x1, 0x64d, 0x4, 0x1, 0xfffffff7, 0x37, 0x10000, 0x9, 0x5, 0xe, 0x6, 0x30, 0x3, 0x7fff, 0xffffb480, 0x6, 0x9, 0x6d3f, 0x0, 0x8, 0x7, 0x10, 0x3, 0x4, 0x8000, 0xfffffff6, 0x8, 0xa000000, 0xf, 0xf, 0xbb27, 0x1, 0xe, 0x7, 0x7, 0x58a84576, 0x2, 0x4, 0x7ff, 0xcc90, 0x5, 0x4, 0xffffffff, 0x4, 0x4, 0x3, 0x2, 0x7fff, 0x2, 0x4, 0x4, 0x4, 0x6, 0x4, 0xfff, 0x9, 0x8, 0x44, 0x4, 0x6, 0x9, 0xffff, 0x10000, 0x1, 0x9, 0x1, 0x1af, 0xf, 0x81, 0x2, 0x8, 0xfffffff9, 0x6, 0x200, 0x1000, 0x3, 0x2, 0x8, 0x40, 0xfff, 0x7, 0xfffffffe, 0x6, 0x1, 0x1, 0x7, 0x65cf, 0x9, 0x9, 0x7, 0x0, 0x4, 0x1, 0xef5, 0x8, 0x3, 0xf, 0x1, 0x10, 0x9, 0x8d6, 0x9, 0x7, 0x7, 0x0, 0x800, 0x5a, 0x6, 0x8, 0x9, 0x6, 0x8, 0x5, 0x4, 0x6, 0x7d, 0x7fffffff, 0x8, 0x3, 0x9, 0xe8, 0xf3, 0x401, 0x10001, 0xfffff475, 0x5bf2, 0x8, 0x2, 0x35b, 0x4, 0x4, 0xfff, 0x101, 0x92, 0x7, 0xfffffffc, 0x50e29a1a, 0xb8, 0xfffffffa, 0x4, 0xfff, 0x5, 0x1, 0x1, 0x5, 0x400, 0x2, 0x6, 0x7ff, 0xfc, 0x1, 0x2d, 0xffff, 0x7, 0x4, 0x6, 0x0, 0xffffffff, 0x3, 0x0, 0x6, 0x7, 0x8, 0x1, 0x5423, 0x2, 0x7, 0x1, 0x8, 0x80000001, 0x8001, 0x7f, 0x800, 0x0, 0x101, 0x8, 0x9, 0x2, 0x800, 0xed7, 0x3, 0x3, 0x8, 0x2e6, 0xfffffa9a, 0x8, 0x0, 0x4, 0xb, 0x8, 0xea8, 0x7ff, 0x0, 0x1, 0x4371, 0x8000, 0x9, 0x4, 0x4, 0x8, 0x4, 0x8000, 0x5d, 0x7, 0x7, 0x7fffffff, 0x9, 0xffff, 0x4, 0xb, 0x80000001, 0x2, 0x9, 0x2, 0x71, 0x617c, 0x6, 0x4, 0x3, 0xcb5, 0x4, 0x3, 0x5, 0x1, 0x47a2, 0x8, 0x8, 0x0, 0x456, 0x3, 0x6a2, 0x1, 0x6, 0x7fff, 0xfffffffb, 0x9, 0x6, 0x7, 0x81, 0xfffffff7, 0x698b, 0x2, 0x8, 0x8, 0x4, 0x50c1, 0x7ff, 0xe8, 0x4, 0x7fff, 0x2, 0x3911, 0x6, 0x4, 0x7, 0x8, 0x9, 0x6, 0x4, 0x0, 0x3f0a0000, 0x2, 0x7f, 0xfffffff3, 0xd, 0x8, 0x400, 0x6, 0x8, 0x2, 0x7fffffff, 0x6, 0x5, 0x7, 0x46d3578c, 0x8, 0x9, 0x7, 0x4aa0cb08, 0x2, 0x8, 0x1, 0x5, 0x3, 0x3, 0x2, 0x500, 0x2, 0xec8d, 0x0, 0x9, 0xf, 0xf25d, 0xfff, 0x4, 0x401, 0x3ea20082, 0x2, 0x5, 0x3b, 0x38000, 0xc0, 0x2, 0x1, 0x1, 0x0, 0x7, 0x3f2, 0x4, 0x8de, 0xfffffffe, 0x5, 0x81, 0xfffffff3, 0x0, 0xf45, 0x0, 0x5c136380, 0x7ff, 0x6, 0x5, 0x80, 0x0, 0x8, 0x3, 0x6, 0xc9a, 0x5, 0x9, 0x0, 0x5, 0x1, 0x0, 0x7, 0x6, 0x4, 0x8b, 0x3ff, 0xfffff471, 0xa, 0x3, 0xc409, 0x7, 0x1, 0x7, 0xffffffff, 0x100, 0x7ff, 0x2d, 0x4, 0x7fff, 0x5, 0x9, 0x2, 0x6, 0x6, 0x7, 0x80000001, 0xffffff38, 0x1000, 0x6, 0x0, 0x3, 0x7, 0x4, 0x1, 0x5, 0x287, 0x8001, 0x39, 0xf46, 0xfffffffc, 0xa2bd, 0x6, 0x101, 0xc, 0x7, 0xba, 0x5, 0x94b0, 0x8001, 0x2, 0x8, 0x76e, 0x7, 0x9, 0xffff679f, 0x6, 0x3, 0x2, 0x0, 0xd1, 0xfffffff1, 0x9, 0x2, 0x3, 0x5, 0x7, 0x4, 0x541d, 0xc2eb, 0x0, 0xd0e, 0xffffffff, 0x3, 0x7, 0x3, 0xda1, 0xffff8a21, 0x8, 0xfffffff8, 0x6, 0x3, 0x9, 0x0, 0x5, 0x8, 0x1, 0x0, 0x5, 0x7, 0x9, 0x6, 0x144c80, 0x1, 0x1000, 0xe6f6, 0x809, 0x0, 0x2, 0x7fff, 0x1, 0xff, 0x1000, 0x0, 0x6, 0x2, 0x7, 0x2, 0xfffffffb, 0x6, 0x5, 0x5, 0x1, 0xe3, 0x8, 0x865, 0x2, 0x0, 0x9, 0x0, 0x1, 0x8, 0x5, 0x5, 0x9e, 0x2, 0x6, 0x7, 0xfffffffb, 0x7, 0x4, 0x6, 0x200, 0xfffffffc, 0x6, 0x4, 0x49, 0x4, 0x1, 0x40, 0x4, 0xffffff00, 0x6, 0x3ff, 0x7f, 0xa6f, 0x9, 0xffff, 0x100, 0x1ff, 0x5, 0x2, 0x9, 0x7f, 0x4, 0xd, 0x1, 0x4, 0x9, 0x9f, 0x1, 0x7ff, 0x3, 0xffff, 0x0, 0x3279, 0xffffffff, 0x8, 0x6, 0x5, 0x7, 0x46f, 0x2, 0x15d, 0x4, 0x8, 0x3ff, 0xfffffffc, 0x0, 0x25e, 0x8, 0x7, 0xe54, 0xcfb, 0x7d2ee83d, 0x425, 0x166, 0xbd, 0x7, 0x9, 0x2a, 0x7ff, 0x9, 0x7f, 0x2, 0x2, 0x400, 0xfffffffa, 0xfffffff8, 0x7, 0x5, 0x4, 0x8, 0x2, 0x6, 0x0], 0x6, 0x8}, {0x2000000, 0x0, 0x0, 0x7fffffff, 0xfffffff9}, {0xc000003, 0x0, 0x0, 0x235, 0x4}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=680): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8242, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000012300)={0x0, 0x12c, @ioapic={0x70000, 0xc8f, 0xfffff5ab, 0x7fffffff, 0x0, [{0x8, 0x81, 0xfd, '\x00', 0x7}, {0x0, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0xa, '\x00', 0x2}, {0xd, 0x1, 0xe9, '\x00', 0x3}, {0xff, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x1, '\x00', 0x6f}, {0x45, 0x51, 0x3}, {0x10, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x9a, '\x00', 0x4b}, {0x5, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x7}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0x3, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x6}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0x87, 0x21, 0x7, '\x00', 0x7}, {0x1, 0x9, 0x0, '\x00', 0x6}]}}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 1 (id=682): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="796100000000000000007e00000008000300260877534ffccafa89df57433f520b1fbed5efe12e4ce62a61356711e7d13d527fe734942d7bf4253a79748d6be29cd370cd90838a9d6d89877453da6123b78089b8000000000000000050eaf993f6a7efc4db605a87a3f670570989d0e486c8479fb5a6b99d9874f7ea626de09f086ec60fb70a1b5fabc4fe89e3799c87a404b42ae0e8be26c6a1872afd4d18daab6b3c", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x4008050) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r2], 0x3fffffffffffff78}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000340)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000680)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r6}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000340)={0x9000, 0x12000}) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000380)={0x9000, 0x10000}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r8, 0xc02064cc, &(0x7f0000000080)={r9, r9, 0x0, 0x0, 0x2}) r10 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r10, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r10, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000440)=[r11], 0x0, 0x1}) r12 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r12, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r12, 0xc01064c1, &(0x7f0000000080)={r13}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000700)) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) kernel console output (not intermixed with test programs): T5929] chnl_net:caif_netlink_parms(): no params data found [ 62.777338][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.779646][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.782046][ T5927] bridge_slave_0: entered allmulticast mode [ 62.784747][ T5927] bridge_slave_0: entered promiscuous mode [ 62.789227][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.808608][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.812028][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.814459][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.817078][ T5927] bridge_slave_1: entered allmulticast mode [ 62.819839][ T5927] bridge_slave_1: entered promiscuous mode [ 62.843314][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.867279][ T5928] team0: Port device team_slave_0 added [ 62.870199][ T5923] team0: Port device team_slave_0 added [ 62.878585][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.882408][ T5928] team0: Port device team_slave_1 added [ 62.885642][ T5923] team0: Port device team_slave_1 added [ 62.898590][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.928159][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.930423][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.938875][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.949408][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.951671][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.959896][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.969477][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.971626][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.979766][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.994518][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.996890][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.004871][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.010069][ T5927] team0: Port device team_slave_0 added [ 63.017915][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.020162][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.022459][ T5929] bridge_slave_0: entered allmulticast mode [ 63.025251][ T5929] bridge_slave_0: entered promiscuous mode [ 63.032484][ T5927] team0: Port device team_slave_1 added [ 63.046066][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.048299][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.050749][ T5929] bridge_slave_1: entered allmulticast mode [ 63.053431][ T5929] bridge_slave_1: entered promiscuous mode [ 63.071104][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.073362][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.081970][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.088785][ T5923] hsr_slave_0: entered promiscuous mode [ 63.091125][ T5923] hsr_slave_1: entered promiscuous mode [ 63.094215][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.096737][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.104774][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.137644][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.142449][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.150978][ T5928] hsr_slave_0: entered promiscuous mode [ 63.154174][ T5928] hsr_slave_1: entered promiscuous mode [ 63.157468][ T5928] debugfs: 'hsr0' already exists in 'hsr' [ 63.159960][ T5928] Cannot create hsr debugfs directory [ 63.224378][ T5927] hsr_slave_0: entered promiscuous mode [ 63.226623][ T5927] hsr_slave_1: entered promiscuous mode [ 63.228682][ T5927] debugfs: 'hsr0' already exists in 'hsr' [ 63.230528][ T5927] Cannot create hsr debugfs directory [ 63.233239][ T5929] team0: Port device team_slave_0 added [ 63.239774][ T5929] team0: Port device team_slave_1 added [ 63.281326][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.283642][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.291844][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.312806][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.315839][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.326271][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.441697][ T5929] hsr_slave_0: entered promiscuous mode [ 63.444807][ T5929] hsr_slave_1: entered promiscuous mode [ 63.447920][ T5929] debugfs: 'hsr0' already exists in 'hsr' [ 63.450253][ T5929] Cannot create hsr debugfs directory [ 63.604228][ T5928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.609837][ T5928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.629322][ T5928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.649762][ T5928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.684210][ T5923] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.691407][ T5923] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.697763][ T5923] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.705696][ T5923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.773570][ T5927] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.778118][ T5927] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.783456][ T5927] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.789965][ T5927] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.875519][ T5929] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.880487][ T5929] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.889692][ T5929] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.894021][ T5929] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.922243][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.930980][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.957779][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.970985][ T5923] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.984700][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.987125][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.996628][ T781] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.999003][ T781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.004109][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.009391][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.011673][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.037744][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.040189][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.057861][ T5927] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.073646][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.076540][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.089100][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.091285][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.140185][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.153023][ T40] audit: type=1400 audit(1771246936.426:91): avc: denied { sys_module } for pid=5928 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.161379][ T5283] Bluetooth: hci0: command tx timeout [ 64.200750][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.224269][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.227302][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.237602][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.239748][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.259285][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.306005][ T5283] Bluetooth: hci2: command tx timeout [ 64.306050][ T63] Bluetooth: hci3: command tx timeout [ 64.308055][ T5283] Bluetooth: hci1: command tx timeout [ 64.311900][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.339761][ T5928] veth0_vlan: entered promiscuous mode [ 64.368469][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.371281][ T5928] veth1_vlan: entered promiscuous mode [ 64.423096][ T5928] veth0_macvtap: entered promiscuous mode [ 64.435814][ T5923] veth0_vlan: entered promiscuous mode [ 64.439543][ T5928] veth1_macvtap: entered promiscuous mode [ 64.470688][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.474255][ T5927] veth0_vlan: entered promiscuous mode [ 64.477992][ T5923] veth1_vlan: entered promiscuous mode [ 64.490406][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.509923][ T5927] veth1_vlan: entered promiscuous mode [ 64.518227][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.522870][ T1146] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.527984][ T1146] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.536660][ T1146] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.539498][ T1146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.581716][ T5923] veth0_macvtap: entered promiscuous mode [ 64.588507][ T5923] veth1_macvtap: entered promiscuous mode [ 64.601870][ T5927] veth0_macvtap: entered promiscuous mode [ 64.613554][ T5927] veth1_macvtap: entered promiscuous mode [ 64.623391][ T5929] veth0_vlan: entered promiscuous mode [ 64.659105][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.669129][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.669478][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.672747][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.674343][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.677706][ T5929] veth1_vlan: entered promiscuous mode [ 64.693364][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.702428][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.716321][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.724389][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.727927][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.736333][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.739523][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.742709][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.762691][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.765830][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.772805][ T5929] veth0_macvtap: entered promiscuous mode [ 64.779864][ T5929] veth1_macvtap: entered promiscuous mode [ 64.782342][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.807236][ T5928] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.849072][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.859673][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.862189][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.862465][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.884815][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.888166][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.903076][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.906262][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.923428][ T781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.926843][ T781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.954636][ T781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.958028][ T781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.972871][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.977138][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.001107][ T781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.004321][ T781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.023156][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.026396][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.043220][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.298694][ T6035] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.305395][ T5977] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 65.349503][ T6037] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.435401][ T5977] usb 8-1: device descriptor read/64, error -71 [ 65.442175][ T6037] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.527068][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 65.625726][ T5990] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 65.675595][ T5977] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 65.795362][ T5990] usb 6-1: Using ep0 maxpacket: 8 [ 65.798983][ T5990] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 65.801618][ T5990] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 65.804345][ T5990] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 65.807247][ T5990] usb 6-1: config 250 has no interface number 0 [ 65.809283][ T5990] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 65.812850][ T5990] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 65.815352][ T5977] usb 8-1: device descriptor read/64, error -71 [ 65.816744][ T5990] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 65.821162][ T5990] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 65.824289][ T5990] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 65.829601][ T5990] usb 6-1: config 250 interface 228 has no altsetting 0 [ 65.833080][ T5990] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 65.836320][ T5990] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 65.838909][ T5990] usb 6-1: Product: syz [ 65.840573][ T5990] usb 6-1: SerialNumber: syz [ 65.848524][ T5990] hub 6-1:250.228: bad descriptor, ignoring hub [ 65.851104][ T5990] hub 6-1:250.228: probe with driver hub failed with error -5 [ 65.935750][ T5977] usb usb8-port1: attempt power cycle [ 66.055570][ T5990] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 66.235396][ T5283] Bluetooth: hci0: command tx timeout [ 66.295265][ T5977] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 66.308541][ T6048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.312303][ T6048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.332971][ T6050] syz.0.13 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 66.336431][ T5977] usb 8-1: device descriptor read/8, error -71 [ 66.385383][ T5283] Bluetooth: hci1: command tx timeout [ 66.393029][ T6037] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.397223][ T5283] Bluetooth: hci3: command tx timeout [ 66.399489][ T5283] Bluetooth: hci2: command tx timeout [ 66.524618][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 66.530466][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 66.606178][ T5977] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 66.636597][ T5977] usb 8-1: device descriptor read/8, error -71 [ 66.745653][ T5977] usb usb8-port1: unable to enumerate USB device [ 66.915362][ T34] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 66.987188][ T6041] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 66.990988][ T6041] usb 6-1: device reset changed ep0 maxpacket size! [ 66.994566][ T5990] usb 6-1: USB disconnect, device number 2 [ 67.002471][ T5990] usblp0: removed [ 67.077393][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.080613][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 67.083460][ T34] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 67.086914][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.090755][ T34] usb 5-1: config 0 descriptor?? [ 67.098309][ T34] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 67.100512][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 67.106525][ T34] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 67.109644][ T34] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 67.111909][ T34] usb 5-1: media controller created [ 67.114681][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 67.126736][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 67.128605][ T34] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 67.133124][ T34] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input5 [ 67.140568][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 67.142687][ T34] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 67.145467][ T5990] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 67.294111][ T40] kauditd_printk_skb: 77 callbacks suppressed [ 67.294122][ T40] audit: type=1400 audit(1771246939.566:169): avc: denied { read } for pid=6060 comm="syz.0.17" name="event4" dev="devtmpfs" ino=2855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.304887][ T6061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.305295][ T40] audit: type=1400 audit(1771246939.566:170): avc: denied { open } for pid=6060 comm="syz.0.17" path="/dev/input/event4" dev="devtmpfs" ino=2855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.308379][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 67.310088][ T6061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.317455][ T5990] usb 6-1: Using ep0 maxpacket: 16 [ 67.317659][ T40] audit: type=1400 audit(1771246939.586:171): avc: denied { ioctl } for pid=6060 comm="syz.0.17" path="/dev/input/event4" dev="devtmpfs" ino=2855 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.319894][ T34] dvb-usb: error while querying for an remote control event. [ 67.326693][ T5990] usb 6-1: New USB device found, idVendor=0bda, idProduct=f179, bcdDevice=cf.df [ 67.336907][ T5990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.339417][ T5990] usb 6-1: Product: syz [ 67.340758][ T5990] usb 6-1: Manufacturer: syz [ 67.342240][ T5990] usb 6-1: SerialNumber: syz [ 67.345536][ T5990] usb 6-1: config 0 descriptor?? [ 67.485356][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 67.487674][ T34] dvb-usb: error while querying for an remote control event. [ 67.527360][ T29] usb 5-1: USB disconnect, device number 2 [ 67.551758][ T29] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 67.725966][ T6037] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.910799][ T6048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.914399][ T6048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.128431][ T40] audit: type=1400 audit(1771246940.406:172): avc: denied { watch watch_reads } for pid=6067 comm="syz.0.18" path="/8" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.208711][ T40] audit: type=1400 audit(1771246940.486:173): avc: denied { read write } for pid=6080 comm="syz.0.20" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 68.216588][ T40] audit: type=1400 audit(1771246940.486:174): avc: denied { open } for pid=6080 comm="syz.0.20" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 68.263959][ T40] audit: type=1400 audit(1771246940.536:175): avc: denied { ioctl } for pid=6080 comm="syz.0.20" path="/dev/input/mouse0" dev="devtmpfs" ino=946 ioctlcmd=0x5407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 68.271348][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.272059][ T40] audit: type=1400 audit(1771246940.536:176): avc: denied { bind } for pid=6080 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.275424][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.281454][ T40] audit: type=1400 audit(1771246940.536:177): avc: denied { setopt } for pid=6080 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.290710][ T40] audit: type=1400 audit(1771246940.536:178): avc: denied { accept } for pid=6080 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.294243][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.305251][ T5934] Bluetooth: hci0: command tx timeout [ 68.310258][ T46] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.402075][ T6089] bond1: Removing last arp target with arp_interval on [ 68.415780][ T6089] bond2: Removing last arp target with arp_interval on [ 68.430102][ T6089] bond3: Removing last arp target with arp_interval on [ 68.441958][ T6089] bond4: Removing last arp target with arp_interval on [ 68.461483][ T6089] bond5: Removing last arp target with arp_interval on [ 68.467669][ T5934] Bluetooth: hci2: command tx timeout [ 68.470269][ T5283] Bluetooth: hci3: command tx timeout [ 68.472859][ T63] Bluetooth: hci1: command tx timeout [ 68.611834][ T6102] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6102 comm=syz.2.25 [ 68.619631][ T6102] Cannot find add_set index 1 as target [ 68.622113][ T6102] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 68.719987][ T6104] Zero length message leads to an empty skb [ 68.945445][ T5956] usb 6-1: USB disconnect, device number 3 [ 69.046021][ T57] cfg80211: failed to load regulatory.db [ 69.072489][ T6126] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 69.077034][ T6126] Cannot find add_set index 0 as target [ 69.114775][ T6126] nbd: couldn't find device at index -2127233020 [ 69.141522][ T6136] syz.0.36 uses obsolete (PF_INET,SOCK_PACKET) [ 69.219229][ T6144] macsec1: entered promiscuous mode [ 69.221503][ T6144] macsec1: entered allmulticast mode [ 69.230720][ T6144] macsec2: entered promiscuous mode [ 69.232815][ T6144] macsec2: entered allmulticast mode [ 69.242132][ T6144] macsec3: entered promiscuous mode [ 69.244391][ T6144] macsec3: entered allmulticast mode [ 69.251835][ T6144] macsec4: entered promiscuous mode [ 69.254117][ T6144] macsec4: entered allmulticast mode [ 69.263599][ T6144] macsec5: entered promiscuous mode [ 69.267424][ T6144] macsec5: entered allmulticast mode [ 69.276745][ T6144] macsec6: entered promiscuous mode [ 69.279153][ T6144] macsec6: entered allmulticast mode [ 69.287425][ T6144] macsec7: entered promiscuous mode [ 69.289604][ T6144] macsec7: entered allmulticast mode [ 69.297239][ T6144] macsec8: entered promiscuous mode [ 69.299548][ T6144] macsec8: entered allmulticast mode [ 69.307742][ T6144] macsec9: entered promiscuous mode [ 69.310003][ T6144] macsec9: entered allmulticast mode [ 69.320188][ T6144] macsec10: entered promiscuous mode [ 69.322619][ T6144] macsec10: entered allmulticast mode [ 69.330868][ T6144] macsec11: entered promiscuous mode [ 69.333229][ T6144] macsec11: entered allmulticast mode [ 69.341573][ T6144] macsec12: entered promiscuous mode [ 69.343991][ T6144] macsec12: entered allmulticast mode [ 69.351767][ T6144] macsec13: entered promiscuous mode [ 69.353859][ T6144] macsec13: entered allmulticast mode [ 69.361054][ T6144] macsec14: entered promiscuous mode [ 69.363045][ T6144] macsec14: entered allmulticast mode [ 69.368071][ T6144] macsec15: entered promiscuous mode [ 69.369968][ T6144] macsec15: entered allmulticast mode [ 69.375008][ T6144] macsec16: entered promiscuous mode [ 69.376832][ T6144] macsec16: entered allmulticast mode [ 69.381783][ T6144] macsec17: entered promiscuous mode [ 69.383919][ T6144] macsec17: entered allmulticast mode [ 69.389265][ T6144] macsec18: entered promiscuous mode [ 69.391394][ T6144] macsec18: entered allmulticast mode [ 69.397126][ T6144] macsec19: entered promiscuous mode [ 69.398827][ T6144] macsec19: entered allmulticast mode [ 69.403758][ T6144] macsec20: entered promiscuous mode [ 69.405573][ T6144] macsec20: entered allmulticast mode [ 69.410106][ T6144] macsec21: entered promiscuous mode [ 69.412165][ T6144] macsec21: entered allmulticast mode [ 69.418938][ T6144] macsec22: entered promiscuous mode [ 69.421163][ T6144] macsec22: entered allmulticast mode [ 69.432225][ T6144] macsec23: entered promiscuous mode [ 69.434269][ T6144] macsec23: entered allmulticast mode [ 69.441150][ T6144] macsec24: entered promiscuous mode [ 69.443133][ T6144] macsec24: entered allmulticast mode [ 69.450761][ T6144] macsec25: entered promiscuous mode [ 69.453209][ T6144] macsec25: entered allmulticast mode [ 69.465384][ T6144] macsec26: entered promiscuous mode [ 69.468263][ T6144] macsec26: entered allmulticast mode [ 69.478332][ T6144] macsec27: entered promiscuous mode [ 69.480400][ T6144] macsec27: entered allmulticast mode [ 69.498810][ T6144] macsec28: entered promiscuous mode [ 69.500507][ T6144] macsec28: entered allmulticast mode [ 69.514041][ T6144] macsec29: entered promiscuous mode [ 69.517153][ T6144] macsec29: entered allmulticast mode [ 69.525095][ T6144] macsec30: entered promiscuous mode [ 69.528302][ T6144] macsec30: entered allmulticast mode [ 69.533665][ T6144] macsec31: entered promiscuous mode [ 69.535618][ T6144] macsec31: entered allmulticast mode [ 69.541006][ T6144] macsec32: entered promiscuous mode [ 69.542802][ T6144] macsec32: entered allmulticast mode [ 69.553013][ T6144] macsec33: entered promiscuous mode [ 69.555029][ T6144] macsec33: entered allmulticast mode [ 69.565789][ T6151] syz.3.41 (6151) used greatest stack depth: 19104 bytes left [ 69.585154][ T6155] netlink: 'syz.3.42': attribute type 1 has an invalid length. [ 69.588869][ T6155] netlink: 'syz.3.42': attribute type 7 has an invalid length. [ 69.591713][ T6155] netlink: 'syz.3.42': attribute type 8 has an invalid length. [ 69.594197][ T6155] netlink: 132 bytes leftover after parsing attributes in process `syz.3.42'. [ 69.599234][ T6155] netlink: 'syz.3.42': attribute type 11 has an invalid length. [ 69.728988][ T6161] netlink: 868 bytes leftover after parsing attributes in process `syz.2.45'. [ 69.759623][ T56] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.905738][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 69.917418][ T56] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 69.920014][ T56] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 69.923953][ T56] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 69.927560][ T56] usb 5-1: config 250 has no interface number 0 [ 69.929565][ T56] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 69.933638][ T56] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 69.938191][ T56] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 69.941424][ T56] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 69.944870][ T56] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 69.953684][ T56] usb 5-1: config 250 interface 228 has no altsetting 0 [ 69.958320][ T56] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 69.961564][ T56] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 69.965086][ T56] usb 5-1: Product: syz [ 69.967239][ T56] usb 5-1: SerialNumber: syz [ 69.974962][ T56] hub 5-1:250.228: bad descriptor, ignoring hub [ 69.978786][ T56] hub 5-1:250.228: probe with driver hub failed with error -5 [ 70.050964][ T6192] can0: slcan on ttynull. [ 70.180458][ T56] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 70.215741][ T6205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6205 comm=syz.2.53 [ 70.236523][ T6192] can0 (unregistered): slcan off ttynull. [ 70.468137][ T56] usb 5-1: USB disconnect, device number 3 [ 70.474337][ T56] usblp0: removed [ 70.546148][ T5934] Bluetooth: hci3: command tx timeout [ 70.546216][ T63] Bluetooth: hci2: command tx timeout [ 70.546243][ T5283] Bluetooth: hci1: command tx timeout [ 70.559332][ T6192] sp0: Synchronizing with TNC [ 70.934374][ T6208] wg1: entered promiscuous mode [ 70.945266][ T6208] wg1: entered allmulticast mode [ 71.081314][ T6232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=6232 comm=syz.2.65 [ 71.105530][ T6229] 9p: Bad value for 'rfdno' [ 71.188250][ T6246] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 71.264857][ T6251] ======================================================= [ 71.264857][ T6251] WARNING: The mand mount option has been deprecated and [ 71.264857][ T6251] and is ignored by this kernel. Remove the mand [ 71.264857][ T6251] option from the mount to silence this warning. [ 71.264857][ T6251] ======================================================= [ 71.284752][ T6251] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 71.350583][ T6251] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 71.354437][ T6251] overlayfs: failed to look up (tracing) for ino (-66) [ 71.375983][ T6255] "syz.1.73" (6255) uses obsolete ecb(arc4) skcipher [ 71.395424][ T56] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 71.545236][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 71.548319][ T56] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 71.551064][ T56] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 71.553695][ T56] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 71.557034][ T56] usb 7-1: config 250 has no interface number 0 [ 71.562201][ T56] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 71.567938][ T56] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 71.571644][ T56] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 71.578051][ T56] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 71.582233][ T56] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 71.587449][ T56] usb 7-1: config 250 interface 228 has no altsetting 0 [ 71.591071][ T56] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 71.594128][ T56] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 71.596854][ T56] usb 7-1: Product: syz [ 71.598199][ T56] usb 7-1: SerialNumber: syz [ 71.604580][ T56] hub 7-1:250.228: bad descriptor, ignoring hub [ 71.606796][ T56] hub 7-1:250.228: probe with driver hub failed with error -5 [ 71.772903][ T6296] netlink: 44 bytes leftover after parsing attributes in process `syz.0.83'. [ 71.804593][ T5990] IPVS: starting estimator thread 0... [ 71.806136][ T56] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 71.830565][ T6300] netlink: 96 bytes leftover after parsing attributes in process `syz.0.83'. [ 71.841960][ T6304] netlink: 40 bytes leftover after parsing attributes in process `syz.3.88'. [ 71.898999][ T6284] IPVS: set_ctl: invalid protocol: 137 10.1.1.5:20001 [ 71.925332][ T6298] IPVS: using max 28 ests per chain, 67200 per kthread [ 71.928477][ T6284] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 71.952451][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 72.018762][ T6316] openvswitch: netlink: EtherType 50a is less than min 600 [ 72.029369][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 72.036131][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'. [ 72.085445][ T6316] comedi comedi3: comedi_config --init_data is deprecated [ 72.127023][ T56] usb 7-1: USB disconnect, device number 2 [ 72.139084][ T56] usblp0: removed [ 72.165890][ T6326] overlayfs: unescaped trailing colons in lowerdir mount option. [ 72.219277][ T6333] netlink: 'syz.1.97': attribute type 3 has an invalid length. [ 72.315126][ T40] kauditd_printk_skb: 115 callbacks suppressed [ 72.317919][ T40] audit: type=1400 audit(1771246944.586:294): avc: denied { watch watch_reads } for pid=6334 comm="syz.1.98" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.399807][ T40] audit: type=1400 audit(1771246944.676:295): avc: denied { getopt } for pid=6340 comm="syz.1.100" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.475461][ T40] audit: type=1400 audit(1771246944.756:296): avc: denied { getopt } for pid=6340 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.733802][ T6347] overlayfs: conflicting lowerdir path [ 72.919265][ T40] audit: type=1400 audit(1771246945.196:297): avc: denied { read write } for pid=6354 comm="syz.2.105" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 72.926966][ T40] audit: type=1400 audit(1771246945.196:298): avc: denied { open } for pid=6354 comm="syz.2.105" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.144373][ T6360] xfrm1: entered allmulticast mode [ 73.189821][ T6365] netlink: 'syz.2.110': attribute type 23 has an invalid length. [ 73.194982][ T40] audit: type=1400 audit(1771246945.466:299): avc: denied { bind } for pid=6367 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.201463][ T40] audit: type=1400 audit(1771246945.466:300): avc: denied { name_bind } for pid=6367 comm="syz.0.111" src=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 73.211093][ T40] audit: type=1400 audit(1771246945.476:301): avc: denied { node_bind } for pid=6367 comm="syz.0.111" src=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 73.291610][ T6378] tmpfs: Group quota block hardlimit too large. [ 73.292442][ T40] audit: type=1400 audit(1771246945.566:302): avc: denied { remount } for pid=6376 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.298304][ T6378] tmpfs: Bad value for 'size' [ 73.312098][ T6378] warning: `syz.2.114' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.318853][ T6378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.114'. [ 73.324147][ T6382] Bluetooth: MGMT ver 1.23 [ 73.327551][ T40] audit: type=1400 audit(1771246945.606:303): avc: denied { read } for pid=6381 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.377558][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 73.380433][ T6393] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 73.383510][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 73.387494][ T6394] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 73.398389][ T6384] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 73.405679][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 73.425942][ T6397] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 73.430781][ T63] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 73.430856][ T63] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 73.575285][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 73.583273][ T9] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 73.586018][ T9] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 73.588648][ T9] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 73.591487][ T9] usb 8-1: config 250 has no interface number 0 [ 73.602498][ T9] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 73.606238][ T9] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 73.609479][ T9] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 73.613057][ T9] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 73.618838][ T9] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 73.623034][ T9] usb 8-1: config 250 interface 228 has no altsetting 0 [ 73.627843][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 73.630677][ T9] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 73.633256][ T9] usb 8-1: Product: syz [ 73.634596][ T9] usb 8-1: SerialNumber: syz [ 73.646435][ T9] hub 8-1:250.228: bad descriptor, ignoring hub [ 73.648432][ T9] hub 8-1:250.228: probe with driver hub failed with error -5 [ 73.667246][ T6409] netlink: 132 bytes leftover after parsing attributes in process `syz.1.123'. [ 73.853663][ T9] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 74.156033][ T9] usb 8-1: USB disconnect, device number 6 [ 74.160226][ T9] usblp0: removed [ 74.401523][ T63] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 74.660177][ T63] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 74.663839][ T63] Bluetooth: hci3: Dropping invalid advertising data [ 74.669936][ T63] Bluetooth: hci3: Malformed LE Event: 0x02 [ 74.673404][ T6423] Cannot find add_set index 0 as target [ 74.728324][ T6428] netlink: 'syz.3.129': attribute type 1 has an invalid length. [ 74.759168][ T6430] netlink: 'syz.3.131': attribute type 2 has an invalid length. [ 74.818902][ T6434] netlink: 'syz.3.132': attribute type 9 has an invalid length. [ 74.986735][ T6446] kernel profiling enabled (shift: 5) [ 75.069567][ T6449] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 75.315317][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 75.466548][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 75.470012][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 75.473745][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 75.477569][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 75.480758][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.487706][ T9] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 75.490854][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.493465][ T9] usb 6-1: Product: syz [ 75.494921][ T9] usb 6-1: Manufacturer: syz [ 75.496793][ T9] usb 6-1: SerialNumber: syz [ 75.500378][ T9] usb 6-1: config 0 descriptor?? [ 75.505927][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input7 [ 75.585462][ T5990] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 75.716955][ T5990] usb 8-1: device descriptor read/64, error -71 [ 75.762658][ T9] usb 6-1: USB disconnect, device number 4 [ 75.955265][ T5990] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 76.085667][ T5990] usb 8-1: device descriptor read/64, error -71 [ 76.195762][ T5990] usb usb8-port1: attempt power cycle [ 76.306290][ T29] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 76.320278][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.323199][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.467235][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 76.474281][ T29] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 76.481605][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.484971][ T29] usb 7-1: Product: syz [ 76.487519][ T29] usb 7-1: Manufacturer: syz [ 76.489468][ T29] usb 7-1: SerialNumber: syz [ 76.497134][ T29] usb 7-1: config 0 descriptor?? [ 76.502323][ T29] hub 7-1:0.0: bad descriptor, ignoring hub [ 76.506879][ T29] hub 7-1:0.0: probe with driver hub failed with error -5 [ 76.510994][ T29] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input8 [ 76.545238][ T5990] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 76.575774][ T5990] usb 8-1: device descriptor read/8, error -71 [ 76.786588][ T6493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6493 comm=syz.0.150 [ 76.815354][ T5990] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 76.818336][ T9] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 76.846030][ T5990] usb 8-1: device descriptor read/8, error -71 [ 76.907064][ T34] usb 7-1: USB disconnect, device number 3 [ 76.956497][ T9] usb 6-1: device descriptor read/64, error -71 [ 76.959459][ T5990] usb usb8-port1: unable to enumerate USB device [ 77.195873][ T9] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 77.325293][ T9] usb 6-1: device descriptor read/64, error -71 [ 77.405267][ T39] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.435607][ T9] usb usb6-port1: attempt power cycle [ 77.556955][ T39] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 77.561221][ T39] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 77.565058][ T39] usb 5-1: config 220 interface 0 has no altsetting 0 [ 77.570046][ T39] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 77.573657][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.577055][ T39] usb 5-1: Product: syz [ 77.578839][ T39] usb 5-1: Manufacturer: syz [ 77.580648][ T39] usb 5-1: SerialNumber: syz [ 77.765298][ T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 77.775352][ T9] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 77.795648][ T9] usb 6-1: device descriptor read/8, error -71 [ 77.915269][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 77.919606][ T34] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 77.923239][ T34] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 77.926166][ T34] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 77.929360][ T34] usb 7-1: config 250 has no interface number 0 [ 77.932086][ T34] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 77.937009][ T34] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 77.941360][ T34] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 77.945760][ T34] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 77.950117][ T34] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 77.955816][ T34] usb 7-1: config 250 interface 228 has no altsetting 0 [ 77.960916][ T34] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 77.964716][ T34] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 77.968289][ T34] usb 7-1: Product: syz [ 77.969939][ T34] usb 7-1: SerialNumber: syz [ 77.979641][ T34] hub 7-1:250.228: bad descriptor, ignoring hub [ 77.985259][ T34] hub 7-1:250.228: probe with driver hub failed with error -5 [ 78.035280][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 78.055909][ T9] usb 6-1: device descriptor read/8, error -71 [ 78.165970][ T9] usb usb6-port1: unable to enumerate USB device [ 78.188089][ T34] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 78.227354][ T34] usb 7-1: USB disconnect, device number 4 [ 78.232033][ T34] usblp0: removed [ 78.375379][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 78.387311][ T6506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.391064][ T6506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.577260][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 78.577277][ T40] audit: type=1400 audit(1771246950.856:340): avc: denied { append } for pid=6511 comm="syz.3.156" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.925493][ T5990] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 79.045767][ T34] usb 7-1: device descriptor read/64, error -71 [ 79.076627][ T5990] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.080341][ T5990] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.084856][ T5990] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 79.087895][ T5990] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.295586][ T5990] usb 8-1: usb_control_msg returned -32 [ 79.297379][ T5990] usbtmc 8-1:16.0: can't read capabilities [ 79.315422][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 79.485327][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 79.491247][ T34] usb 7-1: New USB device found, idVendor=0bda, idProduct=f179, bcdDevice=cf.df [ 79.495530][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.498987][ T34] usb 7-1: Product: syz [ 79.500863][ T34] usb 7-1: Manufacturer: syz [ 79.502887][ T34] usb 7-1: SerialNumber: syz [ 79.507883][ T34] usb 7-1: config 0 descriptor?? [ 79.648609][ T40] audit: type=1400 audit(1771246951.926:341): avc: denied { write } for pid=6515 comm="syz.3.158" name="usbtmc0" dev="devtmpfs" ino=2920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 79.698373][ T40] audit: type=1400 audit(1771246951.976:342): avc: denied { shutdown } for pid=6522 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.705362][ T40] audit: type=1400 audit(1771246951.976:343): avc: denied { getopt } for pid=6522 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.712793][ T40] audit: type=1400 audit(1771246951.976:344): avc: denied { connect } for pid=6522 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.720687][ T40] audit: type=1400 audit(1771246951.976:345): avc: denied { name_connect } for pid=6522 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 79.755766][ T6525] can0: slcan on ttynull. [ 79.905705][ T40] audit: type=1400 audit(1771246952.176:346): avc: denied { read open } for pid=6530 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.916081][ T40] audit: type=1400 audit(1771246952.176:347): avc: denied { getattr } for pid=6530 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.929471][ T40] audit: type=1400 audit(1771246952.206:348): avc: denied { add_name } for pid=6529 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.937148][ T6525] can0 (unregistered): slcan off ttynull. [ 79.940869][ T6531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6531 comm=syz.1.162 [ 79.945576][ T40] audit: type=1400 audit(1771246952.206:349): avc: denied { create } for pid=6529 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.952457][ T6525] sp0: Synchronizing with TNC [ 80.066625][ T6536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.069476][ T6536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.138386][ T39] uvcvideo 5-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 80.140955][ T39] uvcvideo 5-1:220.0: No valid video chain found. [ 80.145821][ T39] usb 5-1: USB disconnect, device number 4 [ 80.506605][ T6550] mkiss: ax0: crc mode is auto. [ 80.577406][ T6552] netlink: 'syz.0.167': attribute type 1 has an invalid length. [ 80.592070][ T6552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.652902][ T6552] bond1: (slave veth3): Enslaving as an active interface with a down link [ 80.676604][ T6552] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 80.679890][ T6552] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 81.105370][ T5956] usb 7-1: USB disconnect, device number 6 [ 81.181895][ T6575] can0: slcan on ttynull. [ 81.197019][ T6579] geneve2: entered promiscuous mode [ 81.198916][ T6579] geneve2: entered allmulticast mode [ 81.226056][ T6576] Cannot find add_set index 0 as target [ 81.329278][ T6585] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 81.332179][ T6585] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 81.334961][ T6585] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 81.338190][ T6585] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 81.360347][ T6587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6587 comm=syz.0.172 [ 81.375463][ T6575] can0 (unregistered): slcan off ttynull. [ 81.398854][ T6575] sp0: Synchronizing with TNC [ 81.421011][ T6592] option changes via remount are deprecated (pid=6591 comm=syz.1.179) [ 81.423666][ T6592] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 81.594372][ T6597] netlink: 'syz.1.181': attribute type 1 has an invalid length. [ 81.610672][ T6597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.658142][ T6597] bond1: (slave veth3): Enslaving as an active interface with a down link [ 81.687455][ T6597] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 81.690536][ T6597] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 81.756148][ T5956] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 81.773306][ T57] usb 8-1: USB disconnect, device number 11 [ 81.915447][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 81.919200][ T5956] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 81.922278][ T5956] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 81.925420][ T5956] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 81.928469][ T5956] usb 5-1: config 250 has no interface number 0 [ 81.930882][ T5956] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 81.936200][ T5956] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 81.939749][ T5956] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.943591][ T5956] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 81.956388][ T5956] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 81.961418][ T5956] usb 5-1: config 250 interface 228 has no altsetting 0 [ 81.976262][ T5956] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 81.979889][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 81.982674][ T5956] usb 5-1: Product: syz [ 81.984224][ T5956] usb 5-1: SerialNumber: syz [ 81.996912][ T5956] hub 5-1:250.228: bad descriptor, ignoring hub [ 81.999297][ T5956] hub 5-1:250.228: probe with driver hub failed with error -5 [ 82.006169][ T6604] __nla_validate_parse: 3 callbacks suppressed [ 82.006181][ T6604] netlink: 252 bytes leftover after parsing attributes in process `syz.2.184'. [ 82.039182][ T6608] netlink: 'syz.3.185': attribute type 20 has an invalid length. [ 82.161708][ T63] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 82.177159][ T6623] ªªªªªª: renamed from wg2 (while UP) [ 82.199561][ T5956] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 82.250105][ T6628] No source specified [ 82.386346][ T6633] netlink: 'syz.2.193': attribute type 1 has an invalid length. [ 82.407400][ T6633] 8021q: adding VLAN 0 to HW filter on device bond6 [ 82.457508][ T6646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.460416][ T6646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.471964][ T6648] tmpfs: Bad value for 'mpol' [ 82.474922][ T6633] bond6: (slave veth3): Enslaving as an active interface with a down link [ 82.519863][ T6633] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 82.523001][ T6633] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 82.536286][ T6650] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.200'. [ 82.540087][ T6650] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 82.654051][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 82.657385][ T6659] sd 0:0:0:0: PR command failed: 1026 [ 82.659116][ T6659] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 82.670394][ T6659] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 82.748279][ T6664] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 82.752388][ T6664] overlayfs: failed to set xattr on upper [ 82.762103][ T6664] overlayfs: ...falling back to redirect_dir=nofollow. [ 82.764983][ T6664] overlayfs: ...falling back to index=off. [ 82.767813][ T6664] overlayfs: ...falling back to uuid=null. [ 82.770282][ T6664] overlayfs: ...falling back to xino=off. [ 83.085300][ T39] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 83.106360][ T6595] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 83.110888][ T6595] usb 5-1: device reset changed ep0 maxpacket size! [ 83.114556][ T5956] usb 5-1: USB disconnect, device number 5 [ 83.120170][ T5956] usblp0: removed [ 83.237926][ T39] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 83.242195][ T39] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 83.246573][ T39] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 83.250195][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.257132][ T6672] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 83.265327][ T5956] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 83.266755][ T39] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 83.415437][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 83.422358][ T5956] usb 5-1: New USB device found, idVendor=0bda, idProduct=f179, bcdDevice=cf.df [ 83.426421][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.429706][ T5956] usb 5-1: Product: syz [ 83.431451][ T5956] usb 5-1: Manufacturer: syz [ 83.433420][ T5956] usb 5-1: SerialNumber: syz [ 83.445664][ T5956] usb 5-1: config 0 descriptor?? [ 83.477440][ T39] usb 7-1: USB disconnect, device number 7 [ 83.553738][ T6700] overlayfs: failed to resolve './file0': -2 [ 83.560064][ T6700] overlayfs: failed to resolve './file0': -2 [ 83.563052][ T6700] overlayfs: failed to resolve './file0': -2 [ 83.567982][ T6700] overlayfs: failed to resolve './file0': -2 [ 83.570910][ T6700] overlayfs: failed to resolve './file0': -2 [ 83.573815][ T6700] overlayfs: failed to resolve './file0': -2 [ 83.578301][ T6700] overlayfs: failed to resolve './file0': -2 [ 83.581399][ T6700] overlayfs: failed to resolve './file0': -2 [ 83.584599][ T6700] overlayfs: failed to resolve './file0': -2 [ 83.587725][ T6700] overlayfs: failed to resolve './file0': -2 [ 83.590625][ T6700] overlayfs: failed to resolve './file0': -2 [ 83.593564][ T6700] overlayfs: failed to resolve './file0': -2 [ 83.596709][ T6700] overlayfs: failed to resolve './file0': -2 [ 83.599699][ T6700] overlayfs: failed to resolve './file0': -2 [ 83.602745][ T6700] overlayfs: failed to resolve './file0': -2 [ 83.605931][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 83.605940][ T40] audit: type=1400 audit(1771246955.886:382): avc: denied { create } for pid=6696 comm="syz.3.219" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.861929][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.223'. [ 83.884761][ T40] audit: type=1400 audit(1771246956.156:383): avc: denied { bind } for pid=6709 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.897016][ T40] audit: type=1400 audit(1771246956.176:384): avc: denied { create } for pid=6709 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 83.963728][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 84.005483][ T6646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.008330][ T6646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.028314][ T39] IPVS: starting estimator thread 0... [ 84.051314][ T40] audit: type=1400 audit(1771246956.326:385): avc: denied { read } for pid=6714 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.068471][ T6720] kAFS: unable to lookup cell 'syz1' [ 84.115276][ T6718] IPVS: using max 26 ests per chain, 62400 per kthread [ 84.229379][ T40] audit: type=1400 audit(1771246956.506:386): avc: denied { read write } for pid=6729 comm="syz.2.230" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 84.238605][ T40] audit: type=1400 audit(1771246956.506:387): avc: denied { open } for pid=6729 comm="syz.2.230" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 84.371774][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 84.475294][ T40] audit: type=1400 audit(1771246956.746:388): avc: denied { connect } for pid=6740 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.482083][ T40] audit: type=1400 audit(1771246956.746:389): avc: denied { getopt } for pid=6740 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.566745][ T6746] binder: 6745:6746 ioctl c0306201 0 returned -14 [ 84.574336][ T6746] binder: 6745:6746 ioctl c0306201 0 returned -14 [ 84.578850][ T6746] tmpfs: Unknown parameter ' ' [ 84.920867][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 84.989421][ T40] audit: type=1400 audit(1771246957.266:390): avc: denied { accept } for pid=6753 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.031212][ T5932] usb 5-1: USB disconnect, device number 6 [ 85.070082][ T10] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 85.073191][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 85.078179][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 85.085741][ T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 85.090657][ T10] usb 6-1: Product: syz [ 85.092031][ T10] usb 6-1: Manufacturer: syz [ 85.093543][ T10] usb 6-1: SerialNumber: syz [ 85.110430][ T6764] mkiss: ax0: crc mode is auto. [ 85.114662][ T10] usb 6-1: config 0 descriptor?? [ 85.120288][ T10] usb 6-1: selecting invalid altsetting 0 [ 85.169496][ T40] audit: type=1400 audit(1771246957.446:391): avc: denied { ioctl } for pid=6763 comm="syz.0.244" path="socket:[12716]" dev="sockfs" ino=12716 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.232277][ T6775] netlink: 'syz.0.247': attribute type 9 has an invalid length. [ 85.261981][ T6775] io-wq is not configured for unbound workers [ 85.266206][ T6779] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.248'. [ 85.308362][ T6786] 9p: Unknown access argument 18446744073709551615&: -22 [ 85.310943][ T6786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.252'. [ 85.330473][ T10] usb 6-1: USB disconnect, device number 9 [ 85.379140][ T6792] netlink: 5 bytes leftover after parsing attributes in process `syz.0.253'. [ 85.525363][ T5932] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 85.675902][ T5932] usb 8-1: Using ep0 maxpacket: 8 [ 85.679747][ T5932] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 85.683115][ T5932] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 85.689465][ T5932] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 85.693399][ T5932] usb 8-1: config 250 has no interface number 0 [ 85.698068][ T5932] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 85.702910][ T5932] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 85.707570][ T5932] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 85.711856][ T5932] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 85.716308][ T5932] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 85.721933][ T5932] usb 8-1: config 250 interface 228 has no altsetting 0 [ 85.727929][ T5932] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 85.731742][ T5932] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 85.734894][ T5932] usb 8-1: Product: syz [ 85.736772][ T5932] usb 8-1: SerialNumber: syz [ 85.744029][ T5932] hub 8-1:250.228: bad descriptor, ignoring hub [ 85.746888][ T5932] hub 8-1:250.228: probe with driver hub failed with error -5 [ 85.871389][ T6811] sp0: Synchronizing with TNC [ 85.877932][ T6810] [U] è [ 85.947718][ T5932] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 85.973941][ T6814] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 85.976384][ T6814] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.980190][ T6814] vhci_hcd vhci_hcd.0: Device attached [ 85.983362][ T6815] vhci_hcd: unknown pdu 1 [ 85.987285][ T78] vhci_hcd vhci_hcd.1: stop threads [ 85.989092][ T78] vhci_hcd vhci_hcd.1: release socket [ 85.990865][ T78] vhci_hcd vhci_hcd.1: disconnect device [ 86.191711][ T6825] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 86.198016][ T6827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.203108][ T6827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.223646][ T6826] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.242414][ T6826] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.270341][ T6826] 8021q: adding VLAN 0 to HW filter on device bond4 [ 86.290753][ T6826] 8021q: adding VLAN 0 to HW filter on device bond5 [ 86.313730][ T6826] 8021q: adding VLAN 0 to HW filter on device bond6 [ 86.318949][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.262'. [ 86.335455][ T6826] 8021q: adding VLAN 0 to HW filter on device bond7 [ 86.362761][ T6826] 8021q: adding VLAN 0 to HW filter on device bond8 [ 86.385949][ T6826] 8021q: adding VLAN 0 to HW filter on device bond9 [ 86.398901][ T6826] 8021q: adding VLAN 0 to HW filter on device bond10 [ 86.412932][ T6826] 8021q: adding VLAN 0 to HW filter on device bond11 [ 86.426456][ T6826] 8021q: adding VLAN 0 to HW filter on device bond12 [ 86.438897][ T6826] 8021q: adding VLAN 0 to HW filter on device bond13 [ 86.467085][ T6826] 8021q: adding VLAN 0 to HW filter on device bond14 [ 86.489508][ T6826] 8021q: adding VLAN 0 to HW filter on device bond15 [ 86.519165][ T6826] 8021q: adding VLAN 0 to HW filter on device bond16 [ 86.555505][ T6826] 8021q: adding VLAN 0 to HW filter on device bond17 [ 86.605552][ T6826] 8021q: adding VLAN 0 to HW filter on device bond18 [ 86.636567][ T6826] 8021q: adding VLAN 0 to HW filter on device bond19 [ 86.659370][ T6826] 8021q: adding VLAN 0 to HW filter on device bond20 [ 86.690580][ T6826] 8021q: adding VLAN 0 to HW filter on device bond21 [ 86.713924][ T6826] 8021q: adding VLAN 0 to HW filter on device bond22 [ 86.722862][ T6868] binder: 6867:6868 unknown command 0 [ 86.724670][ T6868] binder: 6867:6868 ioctl c0306201 200000000080 returned -22 [ 86.735759][ T6826] 8021q: adding VLAN 0 to HW filter on device bond23 [ 86.760488][ T6826] 8021q: adding VLAN 0 to HW filter on device bond24 [ 86.781860][ T6826] 8021q: adding VLAN 0 to HW filter on device bond25 [ 86.831465][ T6826] 8021q: adding VLAN 0 to HW filter on device bond26 [ 86.866295][ T6782] usb 8-1: reset high-speed USB device number 12 using dummy_hcd [ 86.870623][ T6782] usb 8-1: device reset changed ep0 maxpacket size! [ 86.876247][ T6063] usb 8-1: USB disconnect, device number 12 [ 86.882676][ T6063] usblp0: removed [ 86.937853][ T6826] 8021q: adding VLAN 0 to HW filter on device bond27 [ 86.969783][ T6826] 8021q: adding VLAN 0 to HW filter on device bond28 [ 86.973504][ T6896] capability: warning: `syz.2.274' uses 32-bit capabilities (legacy support in use) [ 86.990524][ T6826] 8021q: adding VLAN 0 to HW filter on device bond29 [ 87.008607][ T6826] 8021q: adding VLAN 0 to HW filter on device bond30 [ 87.026310][ T6063] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 87.042220][ T6826] 8021q: adding VLAN 0 to HW filter on device bond31 [ 87.112630][ T63] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 87.195512][ T6063] usb 8-1: Using ep0 maxpacket: 16 [ 87.206295][ T6063] usb 8-1: New USB device found, idVendor=0bda, idProduct=f179, bcdDevice=cf.df [ 87.209186][ T6063] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.212194][ T6063] usb 8-1: Product: syz [ 87.213599][ T6063] usb 8-1: Manufacturer: syz [ 87.215126][ T6063] usb 8-1: SerialNumber: syz [ 87.218924][ T6063] usb 8-1: config 0 descriptor?? [ 87.289198][ T6930] No source specified [ 87.362403][ T6935] 8021q: VLANs not supported on ip_vti0 [ 87.366667][ T6935] CUSE: unknown device info "" [ 87.368290][ T6935] CUSE: zero length info key specified [ 87.422215][ T6938] fuseblk: Bad value for 'fd' [ 88.446659][ T6976] bridge0: entered promiscuous mode [ 88.446880][ T6063] usb 8-1: USB disconnect, device number 13 [ 88.449215][ T6976] macsec1: entered promiscuous mode [ 88.516122][ T6982] capability: warning: `syz.0.302' uses deprecated v2 capabilities in a way that may be insecure [ 88.565525][ T6989] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 88.697135][ T7005] block nbd3: not configured, cannot reconfigure [ 88.720024][ T6999] Bluetooth: MGMT ver 1.23 [ 88.756573][ T7013] __nla_validate_parse: 1 callbacks suppressed [ 88.756589][ T7013] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.311'. [ 88.772672][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.312'. [ 88.775686][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 88.796593][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 88.850301][ T7015] netlink: 'syz.3.312': attribute type 10 has an invalid length. [ 88.858792][ T7015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.862188][ T7015] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 88.898530][ T7026] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 88.904921][ T7023] netlink: 'syz.2.315': attribute type 10 has an invalid length. [ 88.927170][ T7023] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 88.955393][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 89.115287][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 89.118555][ T10] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 89.121265][ T10] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 89.123720][ T10] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 89.126723][ T10] usb 5-1: config 250 has no interface number 0 [ 89.128650][ T10] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 89.132289][ T10] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 89.135840][ T10] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 89.139134][ T10] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 89.142265][ T10] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 89.146544][ T10] usb 5-1: config 250 interface 228 has no altsetting 0 [ 89.150142][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 89.152981][ T10] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 89.155824][ T10] usb 5-1: Product: syz [ 89.157159][ T10] usb 5-1: SerialNumber: syz [ 89.161590][ T10] hub 5-1:250.228: bad descriptor, ignoring hub [ 89.163688][ T10] hub 5-1:250.228: probe with driver hub failed with error -5 [ 89.366839][ T10] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 89.522128][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 89.522140][ T7030] vlan2: entered promiscuous mode [ 89.522141][ T40] audit: type=1400 audit(1771246961.796:415): avc: denied { map } for pid=7032 comm="syz.1.319" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 89.524342][ T7033] netlink: 'syz.1.319': attribute type 3 has an invalid length. [ 89.524867][ T7030] vlan2: entered allmulticast mode [ 89.526474][ T7033] netlink: 'syz.1.319': attribute type 1 has an invalid length. [ 89.526484][ T7033] netlink: 216 bytes leftover after parsing attributes in process `syz.1.319'. [ 89.548186][ T7030] hsr_slave_1: entered allmulticast mode [ 89.555685][ T7033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.319'. [ 89.620684][ T7035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.624881][ T7035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.795673][ T40] audit: type=1400 audit(1771246962.066:416): avc: denied { watch watch_reads } for pid=7041 comm="syz.3.322" path="/62/file0" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 90.015458][ T6504] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 90.175225][ T6504] usb 6-1: Using ep0 maxpacket: 8 [ 90.178470][ T6504] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 90.182060][ T6504] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.185747][ T6504] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.188758][ T6504] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.192165][ T6504] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.196622][ T6504] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.199410][ T6504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.285975][ T7010] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 90.290589][ T7010] usb 5-1: device reset changed ep0 maxpacket size! [ 90.294172][ T57] usb 5-1: USB disconnect, device number 7 [ 90.300082][ T57] usblp0: removed [ 90.435252][ T57] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 90.607328][ T57] usb 5-1: Using ep0 maxpacket: 16 [ 90.613272][ T57] usb 5-1: New USB device found, idVendor=0bda, idProduct=f179, bcdDevice=cf.df [ 90.617514][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.620753][ T57] usb 5-1: Product: syz [ 90.622466][ T57] usb 5-1: Manufacturer: syz [ 90.624425][ T57] usb 5-1: SerialNumber: syz [ 90.630507][ T57] usb 5-1: config 0 descriptor?? [ 90.635274][ T7042] overlayfs: statfs failed on './file0' [ 90.691104][ T40] audit: type=1400 audit(1771246962.966:417): avc: denied { unmount } for pid=7071 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 90.786258][ T7081] netlink: 64 bytes leftover after parsing attributes in process `syz.2.335'. [ 90.791084][ T7081] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 90.842961][ T10] usb 5-1: USB disconnect, device number 8 [ 90.870521][ T40] audit: type=1400 audit(1771246963.146:418): avc: denied { listen } for pid=7086 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.965211][ T40] audit: type=1400 audit(1771246963.236:419): avc: denied { mounton } for pid=7097 comm="syz.2.342" path="/proc/262/task" dev="proc" ino=13280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 90.986457][ T57] usb 6-1: USB disconnect, device number 10 [ 91.489074][ T7148] binder: 7147:7148 ioctl c0306201 0 returned -14 [ 91.615422][ T40] audit: type=1400 audit(1771246963.886:420): avc: denied { append } for pid=7153 comm="syz.0.362" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 91.619504][ T7154] openvswitch: netlink: IP tunnel dst address not specified [ 92.036127][ T7169] FAULT_INJECTION: forcing a failure. [ 92.036127][ T7169] name failslab, interval 1, probability 0, space 0, times 0 [ 92.041039][ T7169] CPU: 0 UID: 0 PID: 7169 Comm: syz.2.369 Not tainted syzkaller #0 PREEMPT(full) [ 92.041058][ T7169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.041068][ T7169] Call Trace: [ 92.041074][ T7169] [ 92.041080][ T7169] dump_stack_lvl+0x100/0x190 [ 92.041109][ T7169] should_fail_ex.cold+0x5/0xa [ 92.041130][ T7169] should_failslab+0xc2/0x120 [ 92.041154][ T7169] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 92.041175][ T7169] ? __alloc_skb+0x140/0x710 [ 92.041194][ T7169] __alloc_skb+0x140/0x710 [ 92.041210][ T7169] ? __alloc_skb+0x5b7/0x710 [ 92.041226][ T7169] ? __pfx___alloc_skb+0x10/0x10 [ 92.041249][ T7169] pfkey_sendmsg+0x46c/0x840 [ 92.041272][ T7169] ____sys_sendmsg+0xa54/0xc30 [ 92.041297][ T7169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.041331][ T7169] ___sys_sendmsg+0x190/0x1e0 [ 92.041356][ T7169] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.041410][ T7169] __sys_sendmsg+0x170/0x220 [ 92.041431][ T7169] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.041464][ T7169] do_syscall_64+0x106/0xf80 [ 92.041489][ T7169] ? clear_bhb_loop+0x40/0x90 [ 92.041510][ T7169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.041526][ T7169] RIP: 0033:0x7ffb68f9bf79 [ 92.041540][ T7169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.041553][ T7169] RSP: 002b:00007ffb69e4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.041568][ T7169] RAX: ffffffffffffffda RBX: 00007ffb69215fa0 RCX: 00007ffb68f9bf79 [ 92.041578][ T7169] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 92.041588][ T7169] RBP: 00007ffb69e4c090 R08: 0000000000000000 R09: 0000000000000000 [ 92.041597][ T7169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.041606][ T7169] R13: 00007ffb69216038 R14: 00007ffb69215fa0 R15: 00007ffd0646c1e8 [ 92.041629][ T7169] [ 92.061101][ T40] audit: type=1400 audit(1771246964.336:421): avc: denied { getopt } for pid=7170 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 92.131103][ T5956] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 92.157144][ T7176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.371'. [ 92.161515][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 92.164975][ T7176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.371'. [ 92.173890][ T7178] Cannot find add_set index 1 as target [ 92.275249][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 92.277072][ T40] audit: type=1400 audit(1771246964.556:422): avc: denied { listen } for pid=7175 comm="syz.2.371" lport=46533 faddr=fc01:: fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.284788][ T40] audit: type=1400 audit(1771246964.556:423): avc: denied { accept } for pid=7175 comm="syz.2.371" lport=46533 faddr=fc01:: fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.293635][ T5956] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 92.296606][ T5956] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 92.299605][ T5956] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 92.302702][ T5956] usb 5-1: config 250 has no interface number 0 [ 92.305112][ T5956] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 92.310711][ T5956] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 92.314143][ T5956] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.318404][ T5956] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 92.322323][ T5956] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 92.326984][ T5956] usb 5-1: config 250 interface 228 has no altsetting 0 [ 92.330520][ T5956] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 92.334130][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 92.336878][ T5956] usb 5-1: Product: syz [ 92.338547][ T5956] usb 5-1: SerialNumber: syz [ 92.345888][ T5956] hub 5-1:250.228: bad descriptor, ignoring hub [ 92.347941][ T5956] hub 5-1:250.228: probe with driver hub failed with error -5 [ 92.440202][ T7184] mmap: syz.2.371 (7184) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.465262][ T57] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 92.546762][ T5956] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 92.625244][ T57] usb 6-1: Using ep0 maxpacket: 32 [ 92.628714][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.632536][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.636961][ T57] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 92.639957][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.644451][ T57] usb 6-1: config 0 descriptor?? [ 92.798650][ T7186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.801552][ T7186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.126076][ T7123] xt_hashlimit: size too large, truncated to 1048576 [ 93.540219][ T40] audit: type=1400 audit(1771246965.816:424): avc: denied { create } for pid=7205 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 93.606515][ T29] usb 5-1: USB disconnect, device number 9 [ 93.613241][ T29] usblp0: removed [ 93.614088][ T57] savu 0003:1E7D:2D5A.0002: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 93.627522][ T57] usb 6-1: USB disconnect, device number 11 [ 93.661383][ T7207] fido_id[7207]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory [ 93.867797][ T7188] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 94.224295][ T7251] fuse: Unknown parameter 'f#' [ 94.620203][ T7287] netlink: 'syz.0.408': attribute type 10 has an invalid length. [ 94.651754][ T7287] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 94.675332][ T5932] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 94.758817][ T7287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7287 comm=syz.0.408 [ 94.835515][ T5932] usb 7-1: Using ep0 maxpacket: 8 [ 94.847534][ T5932] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 94.849142][ T7287] __nla_validate_parse: 2 callbacks suppressed [ 94.849153][ T7287] netlink: 14 bytes leftover after parsing attributes in process `syz.0.408'. [ 94.850106][ T5932] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 94.863629][ T7287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.863861][ T5932] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 94.872623][ T5932] usb 7-1: config 250 has no interface number 0 [ 94.874667][ T5932] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 94.876697][ T7287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.878638][ T5932] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 94.885941][ T5932] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.890633][ T5932] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 94.893927][ T5932] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 94.898824][ T5932] usb 7-1: config 250 interface 228 has no altsetting 0 [ 94.899499][ T7287] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 94.902635][ T5932] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 94.908744][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 94.912403][ T5932] usb 7-1: Product: syz [ 94.914225][ T5932] usb 7-1: SerialNumber: syz [ 94.918042][ T7287] bond0 (unregistering): Released all slaves [ 94.919867][ T5932] hub 7-1:250.228: bad descriptor, ignoring hub [ 94.922525][ T5932] hub 7-1:250.228: probe with driver hub failed with error -5 [ 94.931142][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 94.931151][ T40] audit: type=1400 audit(1771246967.206:432): avc: denied { accept } for pid=7309 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 95.038461][ T40] audit: type=1400 audit(1771246967.316:433): avc: denied { setopt } for pid=7315 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.069741][ T40] audit: type=1400 audit(1771246967.346:434): avc: denied { read append } for pid=7315 comm="syz.0.415" path="/85/file0/cpuset.effective_cpus" dev="9p" ino=72614269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.078064][ T40] audit: type=1400 audit(1771246967.346:435): avc: denied { lock } for pid=7315 comm="syz.0.415" path="/85/file0/cpuset.effective_cpus" dev="9p" ino=72614269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.123722][ T5932] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 95.129508][ T7321] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 95.250297][ T7328] FAULT_INJECTION: forcing a failure. [ 95.250297][ T7328] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.254472][ T7328] CPU: 1 UID: 0 PID: 7328 Comm: syz.3.422 Not tainted syzkaller #0 PREEMPT(full) [ 95.254487][ T7328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.254494][ T7328] Call Trace: [ 95.254498][ T7328] [ 95.254502][ T7328] dump_stack_lvl+0x100/0x190 [ 95.254532][ T7328] should_fail_ex.cold+0x5/0xa [ 95.254552][ T7328] _copy_from_user+0x2e/0xd0 [ 95.254570][ T7328] move_addr_to_kernel+0x65/0x170 [ 95.254595][ T7328] __sys_sendto+0x1c9/0x520 [ 95.254612][ T7328] ? __pfx___sys_sendto+0x10/0x10 [ 95.254643][ T7328] ? ksys_write+0x1ac/0x250 [ 95.254659][ T7328] ? __pfx_ksys_write+0x10/0x10 [ 95.254675][ T7328] __x64_sys_sendto+0xe0/0x1c0 [ 95.254686][ T7328] ? do_syscall_64+0x95/0xf80 [ 95.254700][ T7328] ? lockdep_hardirqs_on+0x78/0x100 [ 95.254714][ T7328] do_syscall_64+0x106/0xf80 [ 95.254727][ T7328] ? clear_bhb_loop+0x40/0x90 [ 95.254740][ T7328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.254751][ T7328] RIP: 0033:0x7f6f9e59bf79 [ 95.254760][ T7328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.254772][ T7328] RSP: 002b:00007f6f9f377028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 95.254784][ T7328] RAX: ffffffffffffffda RBX: 00007f6f9e815fa0 RCX: 00007f6f9e59bf79 [ 95.254790][ T7328] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 95.254797][ T7328] RBP: 00007f6f9f377090 R08: 000020000005ffe4 R09: 000000000000001c [ 95.254803][ T7328] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 95.254809][ T7328] R13: 00007f6f9e816038 R14: 00007f6f9e815fa0 R15: 00007ffd3f193728 [ 95.254823][ T7328] [ 95.349936][ T40] audit: type=1400 audit(1771246967.626:436): avc: denied { setcurrent } for pid=7329 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 95.356076][ T40] audit: type=1401 audit(1771246967.626:437): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 95.374328][ T40] audit: type=1400 audit(1771246967.646:438): avc: denied { mounton } for pid=7329 comm="syz.3.423" path="/91/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 95.377166][ T7336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.385104][ T7336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.419059][ T40] audit: type=1400 audit(1771246967.696:439): avc: denied { bind } for pid=7338 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.428454][ T40] audit: type=1400 audit(1771246967.696:440): avc: denied { setattr } for pid=7338 comm="syz.0.419" name="PHONET" dev="sockfs" ino=16212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.509466][ T63] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 95.512133][ T63] Bluetooth: hci2: Injecting HCI hardware error event [ 95.516712][ T63] Bluetooth: hci2: hardware error 0x00 [ 95.774947][ T7361] FAULT_INJECTION: forcing a failure. [ 95.774947][ T7361] name failslab, interval 1, probability 0, space 0, times 0 [ 95.780217][ T7361] CPU: 0 UID: 0 PID: 7361 Comm: syz.1.431 Not tainted syzkaller #0 PREEMPT(full) [ 95.780239][ T7361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.780249][ T7361] Call Trace: [ 95.780256][ T7361] [ 95.780263][ T7361] dump_stack_lvl+0x100/0x190 [ 95.780291][ T7361] should_fail_ex.cold+0x5/0xa [ 95.780312][ T7361] should_failslab+0xc2/0x120 [ 95.780336][ T7361] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 95.780355][ T7361] ? sctp_get_port_local+0x828/0x1630 [ 95.780380][ T7361] sctp_get_port_local+0x828/0x1630 [ 95.780406][ T7361] ? __pfx_sctp_get_port_local+0x10/0x10 [ 95.780472][ T7361] ? sctp_bind_addr_match+0x19d/0x300 [ 95.780494][ T7361] sctp_do_bind+0x2b9/0x760 [ 95.780527][ T7361] sctp_connect_new_asoc+0x5e7/0x770 [ 95.780553][ T7361] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 95.780584][ T7361] sctp_sendmsg+0x171a/0x22b0 [ 95.780613][ T7361] ? __pfx_sctp_sendmsg+0x10/0x10 [ 95.780640][ T7361] ? __pfx_sock_has_perm+0x10/0x10 [ 95.780672][ T7361] ? __pfx_sctp_sendmsg+0x10/0x10 [ 95.780696][ T7361] inet_sendmsg+0x11c/0x140 [ 95.780721][ T7361] __sys_sendto+0x467/0x520 [ 95.780739][ T7361] ? __pfx___sys_sendto+0x10/0x10 [ 95.780774][ T7361] ? ksys_write+0x1ac/0x250 [ 95.780794][ T7361] ? __pfx_ksys_write+0x10/0x10 [ 95.780817][ T7361] __x64_sys_sendto+0xe0/0x1c0 [ 95.780832][ T7361] ? do_syscall_64+0x95/0xf80 [ 95.780850][ T7361] ? lockdep_hardirqs_on+0x78/0x100 [ 95.780869][ T7361] do_syscall_64+0x106/0xf80 [ 95.780886][ T7361] ? clear_bhb_loop+0x40/0x90 [ 95.780906][ T7361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.780922][ T7361] RIP: 0033:0x7f053619bf79 [ 95.780936][ T7361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.780950][ T7361] RSP: 002b:00007f0536fb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 95.780966][ T7361] RAX: ffffffffffffffda RBX: 00007f0536415fa0 RCX: 00007f053619bf79 [ 95.780976][ T7361] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 95.780985][ T7361] RBP: 00007f0536fb0090 R08: 000020000005ffe4 R09: 000000000000001c [ 95.780994][ T7361] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 95.781003][ T7361] R13: 00007f0536416038 R14: 00007f0536415fa0 R15: 00007ffc4d5ac488 [ 95.781024][ T7361] [ 95.841085][ T40] audit: type=1400 audit(1771246968.116:441): avc: denied { create } for pid=7364 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 96.077090][ T7385] input: syz0 as /devices/virtual/input/input11 [ 96.176082][ T5932] usb 7-1: USB disconnect, device number 8 [ 96.185531][ T5932] usblp0: removed [ 96.227187][ T7396] FAULT_INJECTION: forcing a failure. [ 96.227187][ T7396] name failslab, interval 1, probability 0, space 0, times 0 [ 96.232654][ T7396] CPU: 2 UID: 0 PID: 7396 Comm: syz.3.442 Not tainted syzkaller #0 PREEMPT(full) [ 96.232676][ T7396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.232687][ T7396] Call Trace: [ 96.232693][ T7396] [ 96.232702][ T7396] dump_stack_lvl+0x100/0x190 [ 96.232732][ T7396] should_fail_ex.cold+0x5/0xa [ 96.232758][ T7396] should_failslab+0xc2/0x120 [ 96.232782][ T7396] __kmalloc_cache_noprof+0x7a/0x6f0 [ 96.232803][ T7396] ? sctp_add_bind_addr+0xae/0x3e0 [ 96.232822][ T7396] ? __pfx_sctp_get_port_local+0x10/0x10 [ 96.232848][ T7396] sctp_add_bind_addr+0xae/0x3e0 [ 96.232872][ T7396] sctp_do_bind+0x36c/0x760 [ 96.232902][ T7396] sctp_connect_new_asoc+0x5e7/0x770 [ 96.232931][ T7396] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 96.232967][ T7396] sctp_sendmsg+0x171a/0x22b0 [ 96.233000][ T7396] ? __pfx_sctp_sendmsg+0x10/0x10 [ 96.233031][ T7396] ? __pfx_sock_has_perm+0x10/0x10 [ 96.233067][ T7396] ? __pfx_sctp_sendmsg+0x10/0x10 [ 96.233094][ T7396] inet_sendmsg+0x11c/0x140 [ 96.233122][ T7396] __sys_sendto+0x467/0x520 [ 96.233143][ T7396] ? __pfx___sys_sendto+0x10/0x10 [ 96.233183][ T7396] ? ksys_write+0x1ac/0x250 [ 96.233206][ T7396] ? __pfx_ksys_write+0x10/0x10 [ 96.233233][ T7396] __x64_sys_sendto+0xe0/0x1c0 [ 96.233250][ T7396] ? do_syscall_64+0x95/0xf80 [ 96.233273][ T7396] ? lockdep_hardirqs_on+0x78/0x100 [ 96.233297][ T7396] do_syscall_64+0x106/0xf80 [ 96.233318][ T7396] ? clear_bhb_loop+0x40/0x90 [ 96.233343][ T7396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.233361][ T7396] RIP: 0033:0x7f6f9e59bf79 [ 96.233378][ T7396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.233395][ T7396] RSP: 002b:00007f6f9f377028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 96.233412][ T7396] RAX: ffffffffffffffda RBX: 00007f6f9e815fa0 RCX: 00007f6f9e59bf79 [ 96.233425][ T7396] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 96.233434][ T7396] RBP: 00007f6f9f377090 R08: 000020000005ffe4 R09: 000000000000001c [ 96.233444][ T7396] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 96.233453][ T7396] R13: 00007f6f9e816038 R14: 00007f6f9e815fa0 R15: 00007ffd3f193728 [ 96.233476][ T7396] [ 96.237120][ T7398] Invalid ELF header magic: != ELF [ 96.327945][ T7405] process 'syz.3.445' launched '/dev/fd/4/./file1' with NULL argv: empty string added [ 96.734504][ T7430] FAULT_INJECTION: forcing a failure. [ 96.734504][ T7430] name failslab, interval 1, probability 0, space 0, times 0 [ 96.741484][ T7430] CPU: 3 UID: 0 PID: 7430 Comm: syz.0.454 Not tainted syzkaller #0 PREEMPT(full) [ 96.741509][ T7430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.741519][ T7430] Call Trace: [ 96.741525][ T7430] [ 96.741532][ T7430] dump_stack_lvl+0x100/0x190 [ 96.741565][ T7430] should_fail_ex.cold+0x5/0xa [ 96.741589][ T7430] should_failslab+0xc2/0x120 [ 96.741615][ T7430] __kmalloc_cache_noprof+0x7a/0x6f0 [ 96.741633][ T7430] ? sctp_association_new+0xbb/0x2990 [ 96.741666][ T7430] sctp_association_new+0xbb/0x2990 [ 96.741699][ T7430] sctp_connect_new_asoc+0x1a8/0x770 [ 96.741730][ T7430] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 96.741775][ T7430] sctp_sendmsg+0x171a/0x22b0 [ 96.741811][ T7430] ? __pfx_sctp_sendmsg+0x10/0x10 [ 96.741843][ T7430] ? __pfx_sock_has_perm+0x10/0x10 [ 96.741881][ T7430] ? __pfx_sctp_sendmsg+0x10/0x10 [ 96.741910][ T7430] inet_sendmsg+0x11c/0x140 [ 96.741940][ T7430] __sys_sendto+0x467/0x520 [ 96.741961][ T7430] ? __pfx___sys_sendto+0x10/0x10 [ 96.742002][ T7430] ? ksys_write+0x1ac/0x250 [ 96.742026][ T7430] ? __pfx_ksys_write+0x10/0x10 [ 96.742053][ T7430] __x64_sys_sendto+0xe0/0x1c0 [ 96.742070][ T7430] ? do_syscall_64+0x95/0xf80 [ 96.742092][ T7430] ? lockdep_hardirqs_on+0x78/0x100 [ 96.742114][ T7430] do_syscall_64+0x106/0xf80 [ 96.742134][ T7430] ? clear_bhb_loop+0x40/0x90 [ 96.742156][ T7430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.742174][ T7430] RIP: 0033:0x7f35e699bf79 [ 96.742191][ T7430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.742207][ T7430] RSP: 002b:00007f35e4bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 96.742224][ T7430] RAX: ffffffffffffffda RBX: 00007f35e6c15fa0 RCX: 00007f35e699bf79 [ 96.742235][ T7430] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 96.742245][ T7430] RBP: 00007f35e4bee090 R08: 000020000005ffe4 R09: 000000000000001c [ 96.742256][ T7430] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 96.742265][ T7430] R13: 00007f35e6c16038 R14: 00007f35e6c15fa0 R15: 00007fff6c967ed8 [ 96.742290][ T7430] [ 96.942245][ T7443] netlink: 'syz.2.458': attribute type 1 has an invalid length. [ 97.455446][ T5956] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 97.585361][ T63] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 97.605642][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 97.607664][ T7477] 9pnet_virtio: no channels available for device syz [ 97.625392][ T5956] usb 6-1: Using ep0 maxpacket: 8 [ 97.628900][ T5956] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 97.631587][ T5956] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 97.634290][ T5956] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 97.637316][ T5956] usb 6-1: config 250 has no interface number 0 [ 97.637339][ T5956] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 97.637354][ T5956] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 97.637368][ T5956] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 97.650045][ T5956] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 97.653684][ T5956] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 97.658943][ T5956] usb 6-1: config 250 interface 228 has no altsetting 0 [ 97.663099][ T5956] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 97.667183][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 97.670594][ T5956] usb 6-1: Product: syz [ 97.671970][ T5956] usb 6-1: SerialNumber: syz [ 97.677184][ T5956] hub 6-1:250.228: bad descriptor, ignoring hub [ 97.679222][ T5956] hub 6-1:250.228: probe with driver hub failed with error -5 [ 97.886693][ T5956] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 98.132849][ T7494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.136182][ T7494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.206126][ T57] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 98.355288][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 98.358236][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.361537][ T57] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 98.364137][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.368339][ T57] usb 8-1: config 0 descriptor?? [ 98.426506][ T5934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.430591][ T5934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.434131][ T5934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.438339][ T7501] netlink: 48 bytes leftover after parsing attributes in process `syz.2.476'. [ 98.439606][ T5934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.445368][ T5934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.564112][ T7503] chnl_net:caif_netlink_parms(): no params data found [ 98.607539][ T7503] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.609935][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.612191][ T7503] bridge_slave_0: entered allmulticast mode [ 98.614962][ T7503] bridge_slave_0: entered promiscuous mode [ 98.618438][ T7503] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.620725][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.622965][ T7503] bridge_slave_1: entered allmulticast mode [ 98.625877][ T7503] bridge_slave_1: entered promiscuous mode [ 98.644913][ T7503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.650868][ T7503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.676565][ T7503] team0: Port device team_slave_0 added [ 98.680793][ T7503] team0: Port device team_slave_1 added [ 98.695771][ T7503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.698534][ T7503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.709170][ T7503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.715066][ T7503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.718231][ T7503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.728300][ T7503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.769126][ T7503] hsr_slave_0: entered promiscuous mode [ 98.772294][ T7503] hsr_slave_1: entered promiscuous mode [ 98.775472][ T7503] debugfs: 'hsr0' already exists in 'hsr' [ 98.777936][ T7503] Cannot create hsr debugfs directory [ 98.926183][ T7503] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.927971][ T5956] usb 6-1: USB disconnect, device number 12 [ 98.932735][ T57] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 98.936187][ T7503] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.938938][ T5956] usblp0: removed [ 98.943387][ T7503] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.953940][ T7503] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.984324][ T7503] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.987470][ T7503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.990600][ T7503] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.993449][ T7503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.041533][ T7503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.055685][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.059840][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.077131][ T7503] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.093110][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.095496][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.096064][ T7489] overlayfs: statfs failed on './file0' [ 99.104350][ T5990] usb 8-1: USB disconnect, device number 14 [ 99.118340][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.121480][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.182216][ T7533] : entered promiscuous mode [ 99.190189][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'. [ 99.193149][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'. [ 99.196177][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'. [ 99.278823][ T7503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.474877][ T7503] veth0_vlan: entered promiscuous mode [ 99.482519][ T7503] veth1_vlan: entered promiscuous mode [ 99.497475][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 99.504480][ T7503] veth0_macvtap: entered promiscuous mode [ 99.510853][ T7503] veth1_macvtap: entered promiscuous mode [ 99.524371][ T7503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.533397][ T7503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.544828][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.548841][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.552203][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.564999][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.611107][ T781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.614494][ T781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.664718][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.677669][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.947401][ T7583] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.977837][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 99.977851][ T40] audit: type=1400 audit(1771246972.256:474): avc: denied { setopt } for pid=7587 comm="syz.2.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 100.001651][ T40] audit: type=1326 audit(1771246972.276:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7582 comm="syz.4.496" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd2539bf79 code=0x0 [ 100.033937][ T40] audit: type=1400 audit(1771246972.306:476): avc: denied { bind } for pid=7592 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.041852][ T7593] program syz.1.498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.052744][ T7594] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 100.465464][ T5934] Bluetooth: hci0: command tx timeout [ 100.883474][ T40] audit: type=1400 audit(1771246973.156:477): avc: denied { getopt } for pid=7622 comm="syz.3.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.922917][ T40] audit: type=1400 audit(1771246973.196:478): avc: denied { append } for pid=7627 comm="syz.2.510" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.948154][ T7631] team0: Device gtp0 is of different type [ 101.000354][ T40] audit: type=1400 audit(1771246973.276:479): avc: denied { read } for pid=7637 comm="syz.1.514" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 101.008629][ T40] audit: type=1400 audit(1771246973.276:480): avc: denied { open } for pid=7637 comm="syz.1.514" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 101.060228][ T40] audit: type=1400 audit(1771246973.336:481): avc: denied { accept } for pid=7646 comm="syz.3.516" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.114002][ T40] audit: type=1400 audit(1771246973.386:482): avc: denied { append } for pid=7648 comm="syz.1.517" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.128235][ T40] audit: type=1400 audit(1771246973.406:483): avc: denied { create } for pid=7650 comm="syz.3.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.179866][ T7654] netlink: 40 bytes leftover after parsing attributes in process `syz.3.519'. [ 101.179895][ T7655] netlink: 40 bytes leftover after parsing attributes in process `syz.3.519'. [ 101.237958][ T7661] program syz.3.521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.242854][ T7660] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.248856][ T7660] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.251883][ T7660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.252312][ T39] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 101.263439][ T39] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 101.356220][ T7669] overlayfs: missing 'lowerdir' [ 101.495666][ T56] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 101.587898][ T7673] overlayfs: failed lookup in lower (newroot/123, name='file0', err=-40): overlapping layers [ 101.594555][ T7672] evm: overlay not supported [ 101.646884][ T56] usb 6-1: config 0 has no interfaces? [ 101.650236][ T56] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.654205][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 101.658965][ T56] usb 6-1: SerialNumber: syz [ 101.669559][ T56] usb 6-1: config 0 descriptor?? [ 101.881408][ T5990] usb 6-1: USB disconnect, device number 13 [ 101.892941][ T7690] hpfs: Bad magic ... probably not HPFS [ 101.928186][ T7693] binder: 7692:7693 ioctl c0306201 2000000003c0 returned -14 [ 102.190412][ T7713] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 102.546180][ T5934] Bluetooth: hci0: command tx timeout [ 102.653466][ T7740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.550'. [ 102.671272][ T7747] openvswitch: netlink: Flow actions attr not present in new flow. [ 102.766195][ T7754] trusted_key: encrypted_key: keyword 'u' not recognized [ 102.828861][ T7761] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 102.878825][ T7771] netlink: 'syz.1.561': attribute type 21 has an invalid length. [ 102.881694][ T7771] netlink: 128 bytes leftover after parsing attributes in process `syz.1.561'. [ 102.911337][ T7771] netlink: 3 bytes leftover after parsing attributes in process `syz.1.561'. [ 102.931584][ T7771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7771 comm=syz.1.561 [ 102.933215][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 102.965310][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 102.996648][ T7778] SELinux: policydb string length 0 does not match expected length 8 [ 103.002381][ T7778] SELinux: failed to load policy [ 103.153888][ T7798] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 103.176748][ T7801] netlink: 3 bytes leftover after parsing attributes in process `syz.2.574'. [ 103.201242][ T7803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58640 sclass=netlink_route_socket pid=7803 comm=syz.3.575 [ 103.203533][ T7805] netlink: 'syz.1.572': attribute type 5 has an invalid length. [ 103.279681][ T7817] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 103.283295][ T7817] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 103.290644][ T7817] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 103.345699][ T7823] binder: 7822:7823 ioctl c0485630 200000000080 returned -22 [ 103.351280][ T7828] netlink: 64 bytes leftover after parsing attributes in process `syz.3.581'. [ 103.354284][ T7828] netlink: 64 bytes leftover after parsing attributes in process `syz.3.581'. [ 103.361103][ T7823] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 103.377280][ T7823] CIFS: Unable to determine destination address [ 103.380096][ T7823] binder: 7822:7823 ioctl 400454d9 200000000340 returned -22 [ 103.430646][ T7833] befs: (loop1): No write support. Marking filesystem read-only [ 103.433659][ T7833] befs: (loop1): unable to read superblock [ 103.437391][ T7833] 9pnet_virtio: no channels available for device 127.0.0.1 [ 104.005357][ T29] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 104.186409][ T7851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.190530][ T7851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.196937][ T5934] Bluetooth: hci1: Malformed LE Event: 0x0d [ 104.200912][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 104.206255][ T29] usb 8-1: no configurations [ 104.208240][ T29] usb 8-1: can't read configurations, error -22 [ 104.316771][ T7869] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 104.627270][ T5934] Bluetooth: hci0: command tx timeout [ 104.713456][ T5934] Bluetooth: hci0: Malformed LE Event: 0x1b [ 104.796812][ T7905] SELinux: failed to load policy [ 104.800562][ T7907] netlink: 'syz.4.610': attribute type 1 has an invalid length. [ 104.831340][ T6504] IPVS: starting estimator thread 0... [ 104.897357][ T7922] trusted_key: encrypted_key: insufficient parameters specified [ 104.915490][ T7912] IPVS: using max 26 ests per chain, 62400 per kthread [ 104.954376][ T7927] nftables ruleset with unbound set [ 104.962687][ T7927] support for cryptoloop has been removed. Use dm-crypt instead. [ 105.011819][ T7925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7925 comm=syz.1.616 [ 105.031622][ T105] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.038235][ T105] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.041917][ T105] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.047713][ T105] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.370987][ T7955] netlink: 'syz.3.627': attribute type 83 has an invalid length. [ 105.400988][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 105.401004][ T40] audit: type=1400 audit(1771246977.676:506): avc: denied { mount } for pid=7960 comm="syz.1.630" name="/" dev="ramfs" ino=19339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 105.412199][ T40] audit: type=1400 audit(1771246977.676:507): avc: denied { name_bind 0x1000000 } for pid=7960 comm="syz.1.630" path="socket:[20239]" dev="sockfs" ino=20239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.426445][ T40] audit: type=1400 audit(1771246977.676:508): avc: denied { ioctl } for pid=7960 comm="syz.1.630" path="socket:[20241]" dev="sockfs" ino=20241 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.589454][ T40] audit: type=1400 audit(1771246977.866:509): avc: denied { mount } for pid=7980 comm="syz.2.638" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 105.602542][ T57] Process accounting resumed [ 106.045279][ T57] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 106.056032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.075432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.185511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.190653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.195475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.205464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.225403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.263461][ T8025] infiniband syz1: set active [ 106.265319][ T8025] infiniband syz1: added ipvlan0 [ 106.305818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 106.354881][ T8025] RDS/IB: syz1: added [ 106.356692][ T8025] smc: adding ib device syz1 with port count 1 [ 106.358725][ T8025] smc: ib device syz1 port 1 has no pnetid [ 106.705800][ T5934] Bluetooth: hci0: command tx timeout [ 106.720150][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 106.726902][ T57] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.730223][ T57] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.733504][ T57] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.746200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.755282][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 106.758739][ T57] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.803295][ T57] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.806630][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.905258][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 106.908938][ T9] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.913531][ T9] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.919217][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 106.921894][ T9] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 106.924915][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.930720][ T9] usb 9-1: config 0 descriptor?? [ 107.014342][ T40] audit: type=1400 audit(1771246979.286:510): avc: denied { ioctl } for pid=8048 comm="syz.1.660" path="socket:[20359]" dev="sockfs" ino=20359 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.083253][ T57] usb 7-1: GET_CAPABILITIES returned 0 [ 107.085013][ T57] usbtmc 7-1:16.0: can't read capabilities [ 107.293509][ T7991] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 107.300249][ T8072] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 107.302846][ T8072] __nla_validate_parse: 49 callbacks suppressed [ 107.302857][ T8072] netlink: 228 bytes leftover after parsing attributes in process `syz.1.664'. [ 107.307802][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'. [ 107.343287][ T9] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 107.347526][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'. [ 107.347571][ T9] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 107.353690][ T9] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 107.363741][ T9] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 107.376962][ T9] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 107.382974][ T9] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 107.390287][ T10] usb 7-1: USB disconnect, device number 9 [ 107.553429][ T8023] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 107.615306][ T29] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 107.777712][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.782019][ T29] usb 8-1: config 0 has no interfaces? [ 107.784277][ T29] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 107.788404][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.797984][ T29] usb 8-1: config 0 descriptor?? [ 107.897471][ T8105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.675'. [ 107.903282][ T40] audit: type=1400 audit(1771246980.176:511): avc: denied { getopt } for pid=8104 comm="syz.1.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 107.964443][ T8108] syzkaller1: entered promiscuous mode [ 107.973408][ T8108] syzkaller1: entered allmulticast mode [ 108.007252][ T8085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.010531][ T8085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.013687][ T57] usb 8-1: USB disconnect, device number 17 [ 108.221756][ T8126] ------------[ cut here ]------------ [ 108.224472][ T8126] 1 [ 108.224489][ T8126] WARNING: mm/page_alloc.c:5225 at __alloc_frozen_pages_noprof+0x23ea/0x2ba0, CPU#1: syz.1.682/8126 [ 108.230300][ T8126] Modules linked in: [ 108.232365][ T8126] CPU: 1 UID: 0 PID: 8126 Comm: syz.1.682 Not tainted syzkaller #0 PREEMPT(full) [ 108.236578][ T8126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.241477][ T8126] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 108.245040][ T8126] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 36 91 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 108.252397][ T8126] RSP: 0018:ffffc90004d477a0 EFLAGS: 00010246 [ 108.254404][ T8126] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 108.257284][ T8126] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 108.259823][ T8126] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 108.262373][ T8126] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 108.264907][ T8126] R13: 1ffff920009a8f43 R14: 0000000000000016 R15: 1ffff920009a8f0d [ 108.267866][ T8126] FS: 00007f0536fb06c0(0000) GS:ffff8880d6452000(0000) knlGS:0000000000000000 [ 108.270734][ T8126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.272896][ T8126] CR2: 00007f0536185640 CR3: 000000005ec10000 CR4: 0000000000352ef0 [ 108.276360][ T8126] Call Trace: [ 108.277823][ T8126] [ 108.279106][ T8126] ? bpf_ksym_find+0x128/0x1c0 [ 108.281072][ T8126] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 108.283386][ T8126] ? is_bpf_text_address+0x94/0x1a0 [ 108.285609][ T8126] ? kernel_text_address+0x8d/0x100 [ 108.287768][ T8126] ? __kernel_text_address+0xd/0x30 [ 108.289927][ T8126] ? unwind_get_return_address+0x59/0xa0 [ 108.292205][ T8126] ? arch_stack_walk+0xa6/0xf0 [ 108.294240][ T8126] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 108.296722][ T8126] ? tomoyo_path_number_perm+0x46d/0x580 [ 108.298615][ T8126] ? stack_trace_save+0x8e/0xc0 [ 108.300267][ T8126] ? __lock_acquire+0x4a5/0x2630 [ 108.301964][ T8126] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.304027][ T8126] ? policy_nodemask+0xed/0x4f0 [ 108.305869][ T8126] alloc_pages_mpol+0x1fb/0x550 [ 108.307537][ T8126] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 108.309433][ T8126] ? find_held_lock+0x2b/0x80 [ 108.311214][ T8126] ? avc_has_extended_perms+0x33a/0x1080 [ 108.313156][ T8126] ? avc_has_extended_perms+0x33a/0x1080 [ 108.315092][ T8126] ? drm_syncobj_array_find+0x35/0x3a0 [ 108.317128][ T8126] ___kmalloc_large_node+0x104/0x150 [ 108.318902][ T8126] __kmalloc_large_node_noprof+0x1c/0x70 [ 108.320830][ T8126] __kmalloc_noprof+0x5be/0x850 [ 108.322421][ T8126] drm_syncobj_array_find+0x35/0x3a0 [ 108.324151][ T8126] drm_syncobj_signal_ioctl+0x20b/0x460 [ 108.326527][ T8126] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 108.328543][ T8126] ? drm_dev_exit+0x41/0x60 [ 108.330022][ T8126] ? drm_dev_exit+0x41/0x60 [ 108.331515][ T8126] drm_ioctl_kernel+0x1f3/0x3e0 [ 108.333130][ T8126] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 108.335429][ T8126] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 108.337279][ T8126] drm_ioctl+0x5e6/0xc60 [ 108.338667][ T8126] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 108.340620][ T8126] ? __pfx_drm_ioctl+0x10/0x10 [ 108.342178][ T8126] ? selinux_file_ioctl+0x139/0x290 [ 108.343871][ T8126] ? selinux_file_ioctl+0xb4/0x290 [ 108.345672][ T8126] ? __pfx_drm_ioctl+0x10/0x10 [ 108.347254][ T8126] __x64_sys_ioctl+0x18e/0x210 [ 108.348839][ T8126] do_syscall_64+0x106/0xf80 [ 108.350350][ T8126] ? clear_bhb_loop+0x40/0x90 [ 108.351879][ T8126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.353796][ T8126] RIP: 0033:0x7f053619bf79 [ 108.355380][ T8126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.361584][ T8126] RSP: 002b:00007f0536fb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.364282][ T8126] RAX: ffffffffffffffda RBX: 00007f0536415fa0 RCX: 00007f053619bf79 [ 108.367018][ T8126] RDX: 0000200000000100 RSI: 00000000c01064c5 RDI: 0000000000000004 [ 108.369600][ T8126] RBP: 00007f05362327e0 R08: 0000000000000000 R09: 0000000000000000 [ 108.372051][ T8126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.374631][ T8126] R13: 00007f0536416038 R14: 00007f0536415fa0 R15: 00007ffc4d5ac488 [ 108.377634][ T8126] [ 108.378685][ T8126] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 108.381141][ T8126] CPU: 1 UID: 0 PID: 8126 Comm: syz.1.682 Not tainted syzkaller #0 PREEMPT(full) [ 108.384137][ T8126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.388169][ T8126] Call Trace: [ 108.389469][ T8126] [ 108.390517][ T8126] dump_stack_lvl+0x100/0x190 [ 108.392085][ T8126] vpanic+0x552/0x970 [ 108.393440][ T8126] ? __pfx_vpanic+0x10/0x10 [ 108.395006][ T8126] panic+0xd1/0xe0 [ 108.396302][ T8126] ? __pfx_panic+0x10/0x10 [ 108.397848][ T8126] check_panic_on_warn.cold+0x19/0x34 [ 108.399611][ T8126] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 108.401604][ T8126] __warn.cold+0x191/0x348 [ 108.403025][ T8126] __report_bug+0x296/0x3d0 [ 108.404517][ T8126] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 108.406576][ T8126] ? __pfx___report_bug+0x10/0x10 [ 108.408243][ T8126] ? __lock_acquire+0x4a5/0x2630 [ 108.409910][ T8126] ? __lock_acquire+0x4a5/0x2630 [ 108.411571][ T8126] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 108.413572][ T8126] report_bug+0xb2/0x220 [ 108.415076][ T8126] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 108.417178][ T8126] handle_bug+0x166/0x2a0 [ 108.418622][ T8126] exc_invalid_op+0x17/0x50 [ 108.420145][ T8126] asm_exc_invalid_op+0x1a/0x20 [ 108.421820][ T8126] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 108.424052][ T8126] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 36 91 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 108.430604][ T8126] RSP: 0018:ffffc90004d477a0 EFLAGS: 00010246 [ 108.432685][ T8126] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 108.435378][ T8126] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 108.438144][ T8126] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 108.440813][ T8126] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 108.443466][ T8126] R13: 1ffff920009a8f43 R14: 0000000000000016 R15: 1ffff920009a8f0d [ 108.446211][ T8126] ? bpf_ksym_find+0x128/0x1c0 [ 108.447821][ T8126] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 108.449935][ T8126] ? is_bpf_text_address+0x94/0x1a0 [ 108.451633][ T8126] ? kernel_text_address+0x8d/0x100 [ 108.453471][ T8126] ? __kernel_text_address+0xd/0x30 [ 108.455623][ T8126] ? unwind_get_return_address+0x59/0xa0 [ 108.457988][ T8126] ? arch_stack_walk+0xa6/0xf0 [ 108.460051][ T8126] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 108.462663][ T8126] ? tomoyo_path_number_perm+0x46d/0x580 [ 108.465019][ T8126] ? stack_trace_save+0x8e/0xc0 [ 108.467133][ T8126] ? __lock_acquire+0x4a5/0x2630 [ 108.469291][ T8126] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.471709][ T8126] ? policy_nodemask+0xed/0x4f0 [ 108.473704][ T8126] alloc_pages_mpol+0x1fb/0x550 [ 108.475719][ T8126] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 108.478084][ T8126] ? find_held_lock+0x2b/0x80 [ 108.480088][ T8126] ? avc_has_extended_perms+0x33a/0x1080 [ 108.482359][ T8126] ? avc_has_extended_perms+0x33a/0x1080 [ 108.484757][ T8126] ? drm_syncobj_array_find+0x35/0x3a0 [ 108.487045][ T8126] ___kmalloc_large_node+0x104/0x150 [ 108.489297][ T8126] __kmalloc_large_node_noprof+0x1c/0x70 [ 108.491702][ T8126] __kmalloc_noprof+0x5be/0x850 [ 108.493814][ T8126] drm_syncobj_array_find+0x35/0x3a0 [ 108.496076][ T8126] drm_syncobj_signal_ioctl+0x20b/0x460 [ 108.498451][ T8126] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 108.501089][ T8126] ? drm_dev_exit+0x41/0x60 [ 108.503047][ T8126] ? drm_dev_exit+0x41/0x60 [ 108.505008][ T8126] drm_ioctl_kernel+0x1f3/0x3e0 [ 108.507068][ T8126] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 108.509632][ T8126] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 108.511942][ T8126] drm_ioctl+0x5e6/0xc60 [ 108.513770][ T8126] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 108.516366][ T8126] ? __pfx_drm_ioctl+0x10/0x10 [ 108.518414][ T8126] ? selinux_file_ioctl+0x139/0x290 [ 108.520653][ T8126] ? selinux_file_ioctl+0xb4/0x290 [ 108.522830][ T8126] ? __pfx_drm_ioctl+0x10/0x10 [ 108.524911][ T8126] __x64_sys_ioctl+0x18e/0x210 [ 108.526884][ T8126] do_syscall_64+0x106/0xf80 [ 108.528800][ T8126] ? clear_bhb_loop+0x40/0x90 [ 108.530715][ T8126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.533087][ T8126] RIP: 0033:0x7f053619bf79 [ 108.534927][ T8126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.542584][ T8126] RSP: 002b:00007f0536fb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.545991][ T8126] RAX: ffffffffffffffda RBX: 00007f0536415fa0 RCX: 00007f053619bf79 [ 108.549158][ T8126] RDX: 0000200000000100 RSI: 00000000c01064c5 RDI: 0000000000000004 [ 108.552349][ T8126] RBP: 00007f05362327e0 R08: 0000000000000000 R09: 0000000000000000 [ 108.555611][ T8126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.558874][ T8126] R13: 00007f0536416038 R14: 00007f0536415fa0 R15: 00007ffc4d5ac488 [ 108.562087][ T8126] [ 108.564027][ T8126] Kernel Offset: disabled [ 108.565842][ T8126] Rebooting in 86400 seconds..