last executing test programs: 2.759077576s ago: executing program 1 (id=7989): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c4601040202be05000000000000020006000400000019000000380000005e020000d30a000004002000010005000900000100"], 0x758) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.720177091s ago: executing program 1 (id=7991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb3a, 0x6, 0x26, 0x7, 0x9, 0x10000, 0x42, 0xdec, 0x10001, 0x40, 0x2, 0x2, 0x7, 0x0, 0xfffeffff, 0x0, 0xffffff84, 0xf, 0x5, 0xfffffffd, 0x2, 0x3, 0x9, 0x1, 0x577, 0x7, 0x4, 0x7, 0xe, 0x7, 0x0, 0x5, 0x8, 0x355d, 0x5, 0x9, 0x10000, 0x3, 0x97, 0x0, 0x5, 0xaa4, 0x4, 0x5, 0x8, 0xfd, 0x9, 0x400, 0x5, 0x9, 0x74, 0xa88e, 0x20000, 0x10, 0x4, 0x80, 0x7, 0x81, 0x6, 0x7, 0xb06e, 0x3, 0x2, 0x8, 0x7fffffff, 0x80000001, 0x1000, 0x3, 0x7fffffff, 0x2, 0x8, 0x8001, 0x7fffffff, 0x0, 0x3, 0xc, 0xffff, 0x1000, 0x2bca, 0x57, 0x9, 0x9, 0xfffffffd, 0x0, 0x1, 0x9, 0x5, 0x101, 0xcd1c, 0x2, 0x2, 0x4, 0xfffffffa, 0x450, 0x9, 0x8, 0x9, 0x80, 0x6, 0x0, 0x0, 0x5, 0x1, 0x22462e3c, 0x1, 0xb, 0xfffffff8, 0x3, 0x2, 0x10001, 0x3, 0x1, 0xe7b, 0x4, 0x6, 0xfff, 0x3, 0x6d, 0xffffffff, 0xa, 0x80, 0x8001, 0x9, 0x3, 0x7, 0x7, 0x9, 0x1a93, 0x248, 0x66f, 0x8, 0x2800000, 0x2, 0x2, 0x4, 0x3, 0x200, 0x1, 0x8, 0x80000001, 0xb, 0xab64, 0x7fff, 0x4, 0x8, 0xc, 0x6, 0x200, 0x401, 0x1, 0xfffffffd, 0x5537, 0x4, 0x0, 0x73c9, 0xdad5, 0x9, 0x9, 0x5, 0x7f, 0xffff7190, 0x7, 0x1, 0x16, 0x5, 0x1000, 0x7, 0xffffffff, 0x4, 0x28f, 0x1dd0, 0x8001, 0x5, 0x6, 0x6, 0x80, 0xb, 0xed, 0x10001, 0x3, 0x9, 0x5, 0x2, 0x8, 0x23, 0x0, 0x401, 0xc, 0xfffffffc, 0x2, 0x7, 0x893, 0x6, 0x9, 0x0, 0x8001, 0x100, 0xb7c, 0x9, 0x4, 0x435, 0x2d4f, 0xffffffff, 0x400, 0x3, 0x8a, 0xfff, 0x1, 0x3, 0x7f, 0x7, 0x6, 0x2, 0x7, 0x694, 0x1, 0xe94, 0x67, 0x7, 0x7, 0x6, 0x9, 0xfffff001, 0x9, 0x2, 0x343, 0x8000, 0xfff, 0x0, 0x20, 0x10, 0x7, 0x6, 0x5, 0x8, 0x6, 0x9, 0x2232, 0x3, 0x2, 0xfe79800, 0x0, 0x4f6, 0x3, 0x8, 0x260c, 0xaedb, 0xd084, 0x10000, 0x8, 0x2, 0x1000, 0x400, 0x6000, 0x0, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff81, 0x9, 0x2, 0x3, 0x5, 0xdfffff01, 0x0, 0x1599, 0x7ff, 0xb, 0x209c, 0x436c, 0x2, 0x42d2, 0x6, 0x5678f281, 0x100, 0x7, 0xee, 0x5, 0x0, 0x8001, 0x80000, 0x8, 0xc425, 0x88, 0x401, 0x8, 0xffffffff, 0x3, 0x1, 0xffffffff, 0x80, 0xf7f, 0x9, 0x3, 0x3, 0xfffffff9, 0x80000000, 0x40, 0x0, 0x3, 0x1, 0xe, 0xfffffff7, 0x400, 0x1ff, 0x2, 0x9, 0x5, 0x54e, 0x4, 0x1000, 0x7, 0xb166, 0x2, 0x36c, 0x5, 0x200, 0x9, 0xffff, 0x1, 0x5, 0xc86, 0xfffffff1, 0x1, 0x67, 0x2, 0xffff, 0x1, 0x9, 0x10001, 0x0, 0xc4a, 0x80000001, 0xfffffffd, 0x366, 0xd, 0x0, 0x9, 0xea, 0xd7, 0x2, 0x9, 0x1, 0x77, 0x2, 0x3, 0x2, 0x3, 0x4, 0x3, 0x4, 0x7, 0x1000, 0x2c21, 0x3a41, 0x2e90, 0x0, 0x3000000, 0x5, 0x1, 0xe60, 0x6, 0xa, 0x1, 0xfffffffa, 0x5, 0x0, 0x2, 0x40, 0x9, 0x100, 0x27e1, 0x8000000, 0x9, 0x4, 0xd, 0x1, 0x8, 0x3e83, 0xb7, 0x3, 0x20000000, 0x3, 0xd, 0x10, 0x1, 0xffffffe0, 0x200, 0x5, 0xffffffff, 0x8, 0x6, 0x40, 0x10000, 0x10, 0x3, 0x9, 0x1000000, 0x9, 0x1, 0x2, 0x7, 0x2, 0xfffffff9, 0x10001, 0x4c2, 0xfff, 0x8, 0x4d76, 0x7f, 0x5, 0x1, 0x3366, 0x2, 0x4, 0x800, 0x800, 0x3, 0x6, 0xe, 0xff, 0x80000001, 0xe, 0x51, 0x2, 0x6, 0xfffffffb, 0x6, 0x4, 0xec49, 0x101, 0x97, 0xf0cb, 0xfff, 0x5, 0xd, 0x8, 0xa, 0x6, 0x8, 0x7, 0x81, 0xe61, 0x1, 0x7, 0x4, 0x2, 0x1, 0x9, 0x0, 0xfffffffd, 0x800, 0x4, 0x0, 0x1, 0x4, 0x1, 0x10001, 0xb, 0xe, 0xcd, 0x4, 0x9, 0x6, 0x9, 0x7, 0x0, 0x9, 0x3, 0x6, 0xec16, 0xa443, 0x9, 0x6, 0x5, 0x8, 0x1, 0x9, 0x7, 0x2, 0x5, 0x3, 0x58, 0x40, 0x81, 0xbf1f, 0x6, 0x40, 0x5, 0x9c, 0x1, 0x9, 0x22472c26, 0xfffffffb, 0x0, 0x7, 0x1, 0x5, 0x201, 0x5, 0x6, 0x9, 0x9, 0x80000001, 0x1, 0x1, 0x65d3, 0x2, 0x1, 0xffff8001, 0x5, 0xb, 0x8, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x1, 0x1, 0x400, 0x8, 0x8, 0x401}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 2.562667001s ago: executing program 1 (id=7994): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="fae731c725a81ab0a2302e3be87d318c", 0x10}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="b1", 0x1}, {&(0x7f00000006c0)="f02590fe8b89a8ba8f8ccf2fa3", 0xd}], 0x2}}], 0x3, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)='J', 0x1}], 0x1}}], 0x1, 0x0) 2.547961143s ago: executing program 1 (id=7996): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) 1.650376609s ago: executing program 1 (id=8026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x1e, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) 1.644197819s ago: executing program 3 (id=8028): syz_emit_ethernet(0xa51, &(0x7f0000000800)={@local, @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0xa1b, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x3000000, [{0x3, 0x9, "a78ce540aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0a0b000000be27df3e34066d42c60a5c15b37ada6eb0d2a053d25628546e3026b0fbc15084dbaf736b"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f025"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x1f, 0x5, "090000000900000036da018dff16a70b8b1400001600e18e88605aa6be1a02a326a6bce65f81ed"}, {0x1f, 0xb, "d4e77f8854c2b77855807444dd5cbd4b0ddeac8f5280f5d9178b66796b4c15a850e4078c8a61f4a1936bfd2868bfb38d16aa1129954c7c1c102f6eea58a67659ed751b2a1dea57caba3e1ce15024c25eb512471954efdf4de80d7ca3c6"}, {0x0, 0xc8, "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"}]}}}}}}, 0x0) 1.520272845s ago: executing program 3 (id=8032): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffff", 0x42}], 0x1) 1.382223513s ago: executing program 3 (id=8034): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050001000400000006"], 0x4c}}, 0x0) 1.346969688s ago: executing program 3 (id=8035): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000005280)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c4dd01", 0x28, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xffffffff, [{0x3, 0x3, "89a77a7b21e4b68d250c3c535329070e39cc84f4d1cd"}]}}}}}}, 0x0) 1.306735053s ago: executing program 3 (id=8037): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) 1.165109671s ago: executing program 4 (id=8045): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) write$binfmt_elf64(r1, 0x0, 0x78) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 411.456778ms ago: executing program 3 (id=8065): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x1986ec, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) 411.033678ms ago: executing program 2 (id=8067): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x840, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000000)={0x53, 0xffffffffffffffff, 0x4, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)='\n\x00rG', 0x0, 0xfffffffd, 0x19f9e939a30d04e, 0x4, 0x0}) io_uring_enter(r0, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 380.178382ms ago: executing program 2 (id=8070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) 336.356347ms ago: executing program 2 (id=8071): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000006c0001002abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c80005001000000008003c"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 301.314152ms ago: executing program 4 (id=8073): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0xfffd, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x1000, 0x10001}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}, 0x1f62}], 0x1, 0x18102, 0x0) readv(r0, &(0x7f0000000280)=[{0x0}], 0x1) 300.840702ms ago: executing program 2 (id=8074): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) listen(r3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000f", 0x56}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) 250.113858ms ago: executing program 4 (id=8076): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 249.893898ms ago: executing program 0 (id=8077): unshare(0x2a020480) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0) 240.81312ms ago: executing program 2 (id=8078): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x2) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 200.284065ms ago: executing program 4 (id=8079): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee0000000000000000", 0x53}], 0x1) 200.013365ms ago: executing program 0 (id=8080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="80000080f2975c1ec93b401393a4", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1c, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 199.778365ms ago: executing program 4 (id=8081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) 171.948839ms ago: executing program 4 (id=8082): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x840, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @local}, 0x2, 0x4, 0x3, 0x4}}, 0x0, 0x0, 0x1}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000000)={0x53, 0xffffffffffffffff, 0x4, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)='\n\x00rG', 0x0, 0xfffffffd, 0x19f9e939a30d04e, 0x4, 0x0}) io_uring_enter(r0, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 167.950039ms ago: executing program 0 (id=8083): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r0, 0x0, 0x40008001) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x8f, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a000018000000060001000100000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 143.105372ms ago: executing program 1 (id=8084): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) write$binfmt_elf64(r1, 0x0, 0x78) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 112.123796ms ago: executing program 0 (id=8085): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000480)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4) 82.59386ms ago: executing program 0 (id=8086): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x0, 0xe03}, {0x1c, 0x6, 0xfd, 0x8}, {0x6, 0xc2, 0xfe, 0x7ffffcb9}]}) 955.34µs ago: executing program 0 (id=8087): r0 = socket(0x1e, 0x1, 0x0) r1 = syz_io_uring_setup(0x188f, &(0x7f00000004c0)={0x0, 0x20aedf, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x32d7, 0x0, 0x46, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) 0s ago: executing program 2 (id=8088): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001880)=""/4096, 0x1000}], 0x1) kernel console output (not intermixed with test programs): z.0.5403'. [ 236.364444][T17081] loop3: detected capacity change from 0 to 8192 [ 236.420662][ T3823] loop3: p1 < > p2 p4 < p5 > [ 236.425380][ T3823] loop3: partition table partially beyond EOD, truncated [ 236.433867][ T3823] loop3: p1 start 134217728 is beyond EOD, truncated [ 236.440625][ T3823] loop3: p2 size 591360 extends beyond EOD, truncated [ 236.449515][ T3823] loop3: p5 size 591360 extends beyond EOD, truncated [ 236.461701][T17081] loop3: p1 < > p2 p4 < p5 > [ 236.466411][T17081] loop3: partition table partially beyond EOD, truncated [ 236.473815][T17081] loop3: p1 start 134217728 is beyond EOD, truncated [ 236.480589][T17081] loop3: p2 size 591360 extends beyond EOD, truncated [ 236.488281][T17081] loop3: p5 size 591360 extends beyond EOD, truncated [ 236.538488][ T3823] udevd[3823]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 236.549483][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 236.571552][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 236.841691][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 236.853313][ T3823] udevd[3823]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 236.866826][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 237.045448][T17100] loop6: detected capacity change from 0 to 7 [ 237.145746][T17120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.154819][T17120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.618044][T17133] can: request_module (can-proto-3) failed. [ 238.420030][T17156] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5431'. [ 238.970902][T17160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5432'. [ 239.188524][T17171] can: request_module (can-proto-3) failed. [ 239.217172][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5440'. [ 239.226624][T17179] netlink: 'syz.0.5440': attribute type 10 has an invalid length. [ 239.234488][T17179] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5440'. [ 239.291737][T17186] netlink: 'syz.0.5443': attribute type 1 has an invalid length. [ 239.400015][T17201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.414088][T17201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.877961][T17254] loop4: detected capacity change from 0 to 128 [ 240.314659][T17271] loop2: detected capacity change from 0 to 7 [ 240.864965][T17302] netlink: 'syz.3.5487': attribute type 1 has an invalid length. [ 240.872797][T17302] netlink: 'syz.3.5487': attribute type 2 has an invalid length. [ 242.219614][ T29] audit: type=1400 audit(1768532678.615:696): avc: denied { connect } for pid=17366 comm="syz.4.5516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 242.466202][T17382] netlink: 'syz.3.5520': attribute type 25 has an invalid length. [ 242.474095][T17382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5520'. [ 242.565720][T17382] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5520'. [ 242.600994][T17382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5520'. [ 242.639573][T17382] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.036738][T17410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5531'. [ 243.379402][T17421] loop4: detected capacity change from 0 to 128 [ 243.554662][T17445] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5546'. [ 243.662491][T17461] netlink: 'syz.4.5552': attribute type 1 has an invalid length. [ 243.679995][T17462] can: request_module (can-proto-3) failed. [ 243.845172][T17484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.945865][T17495] can: request_module (can-proto-3) failed. [ 244.024475][T17501] loop4: detected capacity change from 0 to 128 [ 244.095469][T17512] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5572'. [ 244.131501][T17512] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5572'. [ 244.148635][T17512] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.203298][T17519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5575'. [ 244.320173][T17529] loop2: detected capacity change from 0 to 7 [ 244.364889][T17531] can: request_module (can-proto-3) failed. [ 244.584253][T17548] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5586'. [ 244.619568][T17548] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5586'. [ 244.687724][T17551] syzkaller0: entered promiscuous mode [ 244.693268][T17551] syzkaller0: entered allmulticast mode [ 245.099162][T17577] loop2: detected capacity change from 0 to 7 [ 245.183878][T17588] loop2: detected capacity change from 0 to 7 [ 245.190702][T17588] loop2: [ 245.229916][T17597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17597 comm=syz.0.5608 [ 245.526649][T17622] loop2: detected capacity change from 0 to 7 [ 245.533581][ T3823] loop2: [ 245.590182][T17622] loop2: [ 245.634737][T17626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17626 comm=syz.1.5619 [ 245.826924][T17649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17649 comm=syz.2.5630 [ 245.975261][T17672] netlink: 'syz.2.5641': attribute type 25 has an invalid length. [ 246.006865][T17677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17677 comm=syz.1.5643 [ 246.085976][T17685] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1a [ 246.168179][T17694] loop2: detected capacity change from 0 to 7 [ 246.186723][T17694] loop2: [ 246.192846][T17701] netlink: 'syz.1.5654': attribute type 25 has an invalid length. [ 246.285217][T17715] netlink: 'syz.2.5661': attribute type 1 has an invalid length. [ 246.297460][T17715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.304716][T17715] IPv6: NLM_F_CREATE should be set when creating new route [ 246.311948][T17715] IPv6: NLM_F_CREATE should be set when creating new route [ 246.422637][T17717] loop1: detected capacity change from 0 to 128 [ 246.588692][T17735] loop2: detected capacity change from 0 to 7 [ 246.595393][ T3823] loop2: [ 246.619197][T17735] loop2: [ 246.792414][T17753] netlink: 'syz.2.5674': attribute type 10 has an invalid length. [ 246.954373][T17773] loop2: detected capacity change from 0 to 7 [ 246.961652][ T3823] loop2: [ 246.972165][T17773] loop2: [ 246.979246][ T3006] loop2: [ 247.033671][ T29] audit: type=1400 audit(1768532683.435:697): avc: denied { getopt } for pid=17785 comm="syz.3.5684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 247.612911][T17819] syzkaller0: entered promiscuous mode [ 247.618452][T17819] syzkaller0: entered allmulticast mode [ 247.676114][ T3823] loop0: p1 < > p2 p4 < p5 > [ 247.680858][ T3823] loop0: partition table partially beyond EOD, truncated [ 247.690766][ T3823] loop0: p1 start 134217728 is beyond EOD, truncated [ 247.697509][ T3823] loop0: p2 size 591360 extends beyond EOD, truncated [ 247.705587][ T3823] loop0: p5 size 591360 extends beyond EOD, truncated [ 247.716632][T17821] loop0: p1 < > p2 p4 < p5 > [ 247.721384][T17821] loop0: partition table partially beyond EOD, truncated [ 247.732909][T17821] loop0: p1 start 134217728 is beyond EOD, truncated [ 247.738925][T17827] syzkaller0: entered promiscuous mode [ 247.739634][T17821] loop0: p2 size 591360 extends beyond EOD, truncated [ 247.745163][T17827] syzkaller0: entered allmulticast mode [ 247.758724][T17821] loop0: p5 size 591360 extends beyond EOD, truncated [ 247.801796][T17831] __nla_validate_parse: 11 callbacks suppressed [ 247.801812][T17831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5702'. [ 247.806771][ T3823] udevd[3823]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 247.809718][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 247.821050][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 247.853498][ T3825] udevd[3825]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 247.864876][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 247.873392][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 248.097145][T17859] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5715'. [ 248.160587][T17866] netlink: 'syz.4.5718': attribute type 1 has an invalid length. [ 248.310880][T17862] chnl_net:caif_netlink_parms(): no params data found [ 248.367001][ T1579] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.396549][T17893] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5725'. [ 248.417605][T17862] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.425153][T17862] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.433275][T17862] bridge_slave_0: entered allmulticast mode [ 248.439798][T17862] bridge_slave_0: entered promiscuous mode [ 248.447850][T17862] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.454941][T17862] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.462244][T17862] bridge_slave_1: entered allmulticast mode [ 248.468569][T17862] bridge_slave_1: entered promiscuous mode [ 248.478976][ T1579] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.508201][T17862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.519093][T17862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.539941][T17862] team0: Port device team_slave_0 added [ 248.546639][T17862] team0: Port device team_slave_1 added [ 248.563731][ T1579] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.568690][T17909] set_capacity_and_notify: 2 callbacks suppressed [ 248.568718][T17909] loop2: detected capacity change from 0 to 7 [ 248.587235][ T3823] loop2: [ 248.592832][T17909] loop2: [ 248.597002][T17862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.604103][T17862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.612346][ T3006] loop2: [ 248.630171][T17862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.651208][T17862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.658184][T17862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.684317][T17862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.697998][ T1579] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.720790][T17913] can: request_module (can-proto-3) failed. [ 248.730186][T17862] hsr_slave_0: entered promiscuous mode [ 248.736469][T17862] hsr_slave_1: entered promiscuous mode [ 248.743434][T17862] debugfs: 'hsr0' already exists in 'hsr' [ 248.749183][T17862] Cannot create hsr debugfs directory [ 248.801426][ T1579] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.811068][ T1579] bridge_slave_0: left allmulticast mode [ 248.816714][ T1579] bridge_slave_0: left promiscuous mode [ 248.822457][ T1579] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.921971][ T1579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.932365][ T1579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.941951][ T1579] bond0 (unregistering): Released all slaves [ 248.989108][ T1579] hsr_slave_0: left promiscuous mode [ 248.994972][ T1579] hsr_slave_1: left promiscuous mode [ 249.000964][ T1579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.008458][ T1579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.016375][ T1579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.023807][ T1579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.034115][ T1579] veth1_macvtap: left promiscuous mode [ 249.039653][ T1579] veth0_macvtap: left promiscuous mode [ 249.045348][ T1579] veth1_vlan: left promiscuous mode [ 249.050702][ T1579] veth0_vlan: left promiscuous mode [ 249.132854][ T1579] team0 (unregistering): Port device team_slave_1 removed [ 249.142612][ T1579] team0 (unregistering): Port device team_slave_0 removed [ 249.166527][T17928] loop0: detected capacity change from 0 to 128 [ 249.208741][T17927] netlink: 'syz.1.5737': attribute type 6 has an invalid length. [ 249.305763][T17953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=17953 comm=syz.1.5740 [ 249.374464][T17964] can: request_module (can-proto-3) failed. [ 249.444290][T17981] netlink: 'syz.4.5746': attribute type 25 has an invalid length. [ 249.452204][T17981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5746'. [ 249.462183][T17981] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5746'. [ 249.480854][T17981] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5746'. [ 249.490600][T17984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.491533][T17981] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.500389][T17984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.525108][T17862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.542699][T17862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.551906][T17862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.552803][ T1579] IPVS: stop unused estimator thread 0... [ 249.571569][T17862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 249.610283][T17862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.622999][T17862] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.633333][ T1579] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.640432][ T1579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.660058][T17905] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.667159][T17905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.728350][T17862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.797168][T17862] veth0_vlan: entered promiscuous mode [ 249.805259][T17862] veth1_vlan: entered promiscuous mode [ 249.819768][T17862] veth0_macvtap: entered promiscuous mode [ 249.826987][T17862] veth1_macvtap: entered promiscuous mode [ 249.837414][T17862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.848159][T17862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.858690][T17456] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.867832][T17456] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.876684][T17456] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.886310][T17456] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.906958][ T29] audit: type=1400 audit(1768532686.305:698): avc: denied { mount } for pid=17862 comm="syz-executor" name="/" dev="gadgetfs" ino=3868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 250.024510][T18040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=18040 comm=syz.2.5752 [ 250.099220][T18047] can: request_module (can-proto-3) failed. [ 250.609997][T18074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=18074 comm=syz.2.5765 [ 250.647459][ T29] audit: type=1326 audit(1768532687.045:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18061 comm="syz.0.5760" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f4873f749 code=0x0 [ 250.765677][T18081] loop1: detected capacity change from 0 to 128 [ 251.188017][T18110] loop4: detected capacity change from 0 to 128 [ 251.482712][T18109] syz.4.5775: attempt to access beyond end of device [ 251.482712][T18109] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 251.553274][T18126] netlink: 'syz.0.5780': attribute type 6 has an invalid length. [ 251.634984][T18135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5785'. [ 251.710229][T18145] syzkaller0: entered promiscuous mode [ 251.715730][T18145] syzkaller0: entered allmulticast mode [ 251.740734][T18149] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5792'. [ 251.843976][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5796'. [ 252.230567][T18183] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5805'. [ 252.259679][T18185] syzkaller0: entered promiscuous mode [ 252.265220][T18185] syzkaller0: entered allmulticast mode [ 252.462084][T18187] chnl_net:caif_netlink_parms(): no params data found [ 252.496007][T18187] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.503235][T18187] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.510515][T18187] bridge_slave_0: entered allmulticast mode [ 252.517027][T18187] bridge_slave_0: entered promiscuous mode [ 252.524275][T18187] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.531501][T18187] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.538849][T18187] bridge_slave_1: entered allmulticast mode [ 252.545432][T18187] bridge_slave_1: entered promiscuous mode [ 252.561169][T18187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.571931][T18187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.583033][ T825] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.612249][T18187] team0: Port device team_slave_0 added [ 252.621102][T18187] team0: Port device team_slave_1 added [ 252.628069][ T29] audit: type=1400 audit(1768532689.025:700): avc: denied { read } for pid=18201 comm="syz.2.5808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 252.741943][ T825] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.753652][T18187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.760638][T18187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.786632][T18187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.798693][T18187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.805820][T18187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.831824][T18187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.947256][T18209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5810'. [ 252.960639][ T825] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.041997][T18187] hsr_slave_0: entered promiscuous mode [ 253.098716][T18187] hsr_slave_1: entered promiscuous mode [ 253.148471][T18187] debugfs: 'hsr0' already exists in 'hsr' [ 253.154277][T18187] Cannot create hsr debugfs directory [ 253.155680][T18215] loop2: detected capacity change from 0 to 7 [ 253.169537][ T825] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.178349][T18215] loop2: [ 253.285037][ T825] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.309716][ T825] bridge_slave_0: left allmulticast mode [ 253.315455][ T825] bridge_slave_0: left promiscuous mode [ 253.321442][ T825] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.412338][ T825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.422018][ T825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.431452][ T825] bond0 (unregistering): Released all slaves [ 253.438869][T18224] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5817'. [ 253.457664][T18229] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.482319][ T825] tipc: Disabling bearer [ 253.531030][ T825] tipc: Left network mode [ 253.540337][T18244] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5823'. [ 253.553781][ T825] hsr_slave_0: left promiscuous mode [ 253.560911][ T825] hsr_slave_1: left promiscuous mode [ 253.567409][ T825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.574983][ T825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.583703][ T825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.591143][ T825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.609737][ T825] veth0_macvtap: left promiscuous mode [ 253.616609][ T825] veth1_vlan: left promiscuous mode [ 253.623178][ T825] veth0_vlan: left promiscuous mode [ 253.650508][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5827'. [ 253.694779][ T825] team0 (unregistering): Port device team_slave_1 removed [ 253.704399][ T825] team0 (unregistering): Port device team_slave_0 removed [ 253.734968][T18244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5823'. [ 253.746042][T18244] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.766536][T18265] bond_slave_0: entered promiscuous mode [ 253.772266][T18265] bond_slave_1: entered promiscuous mode [ 253.795047][T18265] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 253.813479][T18265] bond_slave_0: left promiscuous mode [ 253.818966][T18265] bond_slave_1: left promiscuous mode [ 253.935629][T18187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 253.948125][T18187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.955354][T18284] can: request_module (can-proto-3) failed. [ 253.975771][T18187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.998365][T18187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 254.060690][ T825] IPVS: stop unused estimator thread 0... [ 254.089917][T18187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.108158][T18187] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.130511][ T825] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.137613][ T825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.154987][ T825] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.162096][ T825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.180940][T18187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.191430][T18187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.283059][T18187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.316820][T18329] can: request_module (can-proto-3) failed. [ 254.327097][T18334] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5844'. [ 254.355884][T18337] loop0: detected capacity change from 0 to 128 [ 254.382081][T18337] syz.0.5839: attempt to access beyond end of device [ 254.382081][T18337] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 254.437187][T18347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5847'. [ 254.446451][T18347] netlink: 'syz.3.5847': attribute type 7 has an invalid length. [ 254.454283][T18347] netlink: 'syz.3.5847': attribute type 8 has an invalid length. [ 254.462039][T18347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5847'. [ 254.557239][T18347] bridge0: entered promiscuous mode [ 254.571130][T18347] ip6gretap0: entered promiscuous mode [ 254.587969][T18347] gretap0: entered promiscuous mode [ 254.630802][T18187] veth0_vlan: entered promiscuous mode [ 254.647397][T18187] veth1_vlan: entered promiscuous mode [ 254.665001][T18187] veth0_macvtap: entered promiscuous mode [ 254.672471][T18187] veth1_macvtap: entered promiscuous mode [ 254.683997][T18187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.699739][T18187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.710859][T18118] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.728293][T18118] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.747381][T18118] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.766650][T18118] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.346426][T18392] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5857'. [ 255.364129][T18389] can: request_module (can-proto-3) failed. [ 255.502641][T18406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5863'. [ 255.521295][T18406] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.528622][T18406] IPv6: NLM_F_CREATE should be set when creating new route [ 255.606771][T18411] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.686643][T18422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.700093][T18422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.857348][T18430] loop4: detected capacity change from 0 to 128 [ 255.911945][ T29] audit: type=1326 audit(1768532692.315:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18417 comm="syz.1.5869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab7c44f749 code=0x0 [ 256.546901][T18469] loop3: detected capacity change from 0 to 128 [ 256.704626][ T29] audit: type=1326 audit(1768532693.105:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18497 comm="syz.1.5900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab7c44f749 code=0x0 [ 257.201111][T18566] loop2: detected capacity change from 0 to 7 [ 257.249604][T18573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.258837][T18573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.816564][T18608] loop1: detected capacity change from 0 to 128 [ 258.020540][ T29] audit: type=1326 audit(1768532694.425:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18615 comm="syz.3.5955" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f289d63f749 code=0x0 [ 258.133183][T18625] syzkaller0: entered promiscuous mode [ 258.138712][T18625] syzkaller0: entered allmulticast mode [ 258.175609][T18628] __nla_validate_parse: 4 callbacks suppressed [ 258.175624][T18628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5961'. [ 258.385202][T18639] loop4: detected capacity change from 0 to 128 [ 258.395256][T18639] syz.4.5967: attempt to access beyond end of device [ 258.395256][T18639] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 258.477791][T18656] syzkaller0: entered promiscuous mode [ 258.483340][T18656] syzkaller0: entered allmulticast mode [ 258.490836][T18650] tipc: Enabling of bearer rejected, failed to enable media [ 258.614018][T18667] loop2: detected capacity change from 0 to 7 [ 258.751064][ T29] audit: type=1400 audit(1768532695.155:704): avc: denied { mount } for pid=18688 comm="syz.1.5986" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 258.794871][T18696] nftables ruleset with unbound chain [ 258.835041][T18702] loop2: detected capacity change from 0 to 7 [ 258.915950][T18710] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5996'. [ 258.938882][T18681] loop0: detected capacity change from 0 to 128 [ 258.942338][T18710] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5996'. [ 258.983409][T18710] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.054322][T18725] syzkaller0: entered promiscuous mode [ 259.059928][T18725] syzkaller0: entered allmulticast mode [ 259.106984][T18729] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6003'. [ 259.644373][ T29] audit: type=1326 audit(1768532696.005:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18734 comm="syz.1.6004" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab7c44f749 code=0x0 [ 259.700224][T18743] loop6: detected capacity change from 0 to 7 [ 259.818258][T18756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6012'. [ 259.827414][T18756] netlink: 'syz.4.6012': attribute type 7 has an invalid length. [ 259.835242][T18756] netlink: 'syz.4.6012': attribute type 8 has an invalid length. [ 259.843159][T18756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6012'. [ 259.871340][T18760] loop2: detected capacity change from 0 to 7 [ 260.117014][T18768] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6016'. [ 260.704748][T18810] syzkaller0: entered promiscuous mode [ 260.710304][T18810] syzkaller0: entered allmulticast mode [ 261.110733][ T29] audit: type=1326 audit(1768532697.465:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18815 comm="syz.3.6037" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f289d63f749 code=0x0 [ 261.578641][T18834] syzkaller0: entered promiscuous mode [ 261.584200][T18834] syzkaller0: entered allmulticast mode [ 261.632430][T18837] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6045'. [ 261.781173][T18837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6045'. [ 261.828112][T18846] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6046'. [ 261.999771][T18850] netlink: 'syz.0.6048': attribute type 1 has an invalid length. [ 262.058181][T18859] syzkaller0: entered promiscuous mode [ 262.063817][T18859] syzkaller0: entered allmulticast mode [ 262.300095][T18871] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 262.306638][T18871] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 262.314868][T18871] vhci_hcd vhci_hcd.0: Device attached [ 262.613778][ T29] audit: type=1326 audit(1768532699.015:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18877 comm="syz.2.6060" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f199fc6f749 code=0x0 [ 262.637101][ T23] usb 2-1: SetAddress Request (2) to port 0 [ 262.643267][ T23] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 262.747958][T18900] netlink: 'syz.4.6064': attribute type 7 has an invalid length. [ 262.755739][T18900] netlink: 'syz.4.6064': attribute type 8 has an invalid length. [ 262.945245][T18875] vhci_hcd: connection reset by peer [ 262.972881][ T1583] vhci_hcd vhci_hcd.0: stop threads [ 262.978108][ T1583] vhci_hcd vhci_hcd.0: release socket [ 262.983544][ T1583] vhci_hcd vhci_hcd.0: disconnect device [ 263.194205][T18906] syzkaller0: entered promiscuous mode [ 263.199713][T18906] syzkaller0: entered allmulticast mode [ 263.635769][T12157] cgroup: fork rejected by pids controller in /syz0 [ 263.864644][ T825] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.923826][ T825] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.983860][ T825] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.042832][ T825] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.158377][T18955] chnl_net:caif_netlink_parms(): no params data found [ 264.228341][T18971] loop4: detected capacity change from 0 to 128 [ 264.243770][T18971] syz.4.6088: attempt to access beyond end of device [ 264.243770][T18971] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 264.258972][T18971] syz.4.6088: attempt to access beyond end of device [ 264.258972][T18971] loop4: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 264.272753][T18971] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 264.347669][T18955] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.354901][T18955] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.363797][T18955] bridge_slave_0: entered allmulticast mode [ 264.370426][T18955] bridge_slave_0: entered promiscuous mode [ 264.377102][T18979] __nla_validate_parse: 2 callbacks suppressed [ 264.377117][T18979] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6089'. [ 264.397515][T18955] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.404726][T18955] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.442695][T18955] bridge_slave_1: entered allmulticast mode [ 264.449835][T18955] bridge_slave_1: entered promiscuous mode [ 264.458107][ T825] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.491439][ T825] bridge_slave_0: left allmulticast mode [ 264.497140][ T825] bridge_slave_0: left promiscuous mode [ 264.502936][ T825] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.563356][ T825] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 264.574762][ T825] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 264.642148][ T825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.651932][ T825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.662326][ T825] bond0 (unregistering): Released all slaves [ 264.671069][ T825] bond1 (unregistering): Released all slaves [ 264.680049][ T825] bond2 (unregistering): Released all slaves [ 264.688675][ T825] bond3 (unregistering): Released all slaves [ 264.697631][ T825] bond4 (unregistering): Released all slaves [ 264.705420][T18979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6089'. [ 264.749540][ T825] hsr_slave_0: left promiscuous mode [ 264.758341][ T825] hsr_slave_1: left promiscuous mode [ 264.772699][ T825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.780139][ T825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.792978][ T825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.800454][ T825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.812207][T19010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6096'. [ 264.821273][T19010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6096'. [ 264.833136][ T825] veth1_macvtap: left promiscuous mode [ 264.838697][ T825] veth0_macvtap: left promiscuous mode [ 264.844513][ T825] veth1_vlan: left promiscuous mode [ 264.849828][ T825] veth0_vlan: left promiscuous mode [ 264.900619][ T825] team0 (unregistering): Port device team_slave_1 removed [ 264.909790][ T825] team0 (unregistering): Port device team_slave_0 removed [ 264.939225][T18955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.955196][T18955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.977356][T18955] team0: Port device team_slave_0 added [ 265.016728][T18955] team0: Port device team_slave_1 added [ 265.047499][T18955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.054507][T18955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.080498][T18955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.092817][T18955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.099773][T18955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.125813][T18955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.163561][T18955] hsr_slave_0: entered promiscuous mode [ 265.169608][T18955] hsr_slave_1: entered promiscuous mode [ 265.177263][T18955] debugfs: 'hsr0' already exists in 'hsr' [ 265.183034][T18955] Cannot create hsr debugfs directory [ 265.368937][T19047] netlink: 12 bytes leftover after parsing attributes in process `wÞ££‘'. [ 265.381175][ T825] IPVS: stop unused estimator thread 0... [ 265.846502][T18955] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.904005][T18955] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.961477][T18955] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 266.049708][T18955] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 266.277960][T18955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.340832][T18955] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.350425][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.357497][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.398926][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.406097][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.471086][T18955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.481665][T18955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.525063][T19117] loop6: detected capacity change from 0 to 7 [ 266.533929][T19118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6121'. [ 266.604163][T18955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.678162][T18955] veth0_vlan: entered promiscuous mode [ 266.740963][T19140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6126'. [ 266.750120][T19140] netlink: 'syz.3.6126': attribute type 7 has an invalid length. [ 266.752183][T18955] veth1_vlan: entered promiscuous mode [ 266.757949][T19140] netlink: 'syz.3.6126': attribute type 8 has an invalid length. [ 266.771320][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6126'. [ 266.777119][T18955] veth0_macvtap: entered promiscuous mode [ 266.815661][T19140] syz_tun: entered promiscuous mode [ 266.822412][T19140] syz_tun: left promiscuous mode [ 266.830419][T18955] veth1_macvtap: entered promiscuous mode [ 266.845316][T18955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.856011][T18955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.860188][ T29] audit: type=1400 audit(1768532703.235:708): avc: denied { write } for pid=19124 comm="syz.4.6123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 266.874284][T18118] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.906207][T18118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.924371][T18118] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.937069][T19145] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6127'. [ 266.956757][T18118] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.023974][T19150] syzkaller0: entered promiscuous mode [ 267.029467][T19150] syzkaller0: entered allmulticast mode [ 267.089941][ T29] audit: type=1400 audit(1768532703.445:709): avc: denied { getopt } for pid=19151 comm="syz.0.6129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.300856][T19161] loop3: detected capacity change from 0 to 128 [ 267.310126][T19161] syz.3.6133: attempt to access beyond end of device [ 267.310126][T19161] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 267.325197][T19161] syz.3.6133: attempt to access beyond end of device [ 267.325197][T19161] loop3: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 267.338952][T19161] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 267.526920][T19185] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6141'. [ 267.697546][T19171] chnl_net:caif_netlink_parms(): no params data found [ 267.720908][ T23] usb 2-1: device descriptor read/8, error -110 [ 267.731346][T19207] loop2: detected capacity change from 0 to 7 [ 267.762774][T19207] loop2: [ 267.828768][T19171] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.829907][ T23] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 267.836131][T19171] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.850593][T19171] bridge_slave_0: entered allmulticast mode [ 267.857225][T19171] bridge_slave_0: entered promiscuous mode [ 267.864157][T19171] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.871244][T19171] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.878472][T19171] bridge_slave_1: entered allmulticast mode [ 267.888379][T19171] bridge_slave_1: entered promiscuous mode [ 267.895529][ T23] usb 2-1: enqueue for inactive port 0 [ 267.912356][ T23] usb 2-1: enqueue for inactive port 0 [ 267.924177][T19171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.946070][ T23] usb 2-1: enqueue for inactive port 0 [ 267.946397][T19171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.997362][T19171] team0: Port device team_slave_0 added [ 268.009799][T19171] team0: Port device team_slave_1 added [ 268.036415][T19171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.043438][T19171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.069690][T19171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.081387][T19171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.082958][T19234] loop2: detected capacity change from 0 to 7 [ 268.088334][T19171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.098054][T19236] loop6: detected capacity change from 0 to 7 [ 268.120631][T19171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.130110][ T3823] loop2: [ 268.163404][T19234] loop2: [ 268.176338][ T3006] loop2: [ 268.224425][T19171] hsr_slave_0: entered promiscuous mode [ 268.238967][T19171] hsr_slave_1: entered promiscuous mode [ 268.245282][T19171] debugfs: 'hsr0' already exists in 'hsr' [ 268.251044][T19171] Cannot create hsr debugfs directory [ 268.310589][T19243] syzkaller0: entered promiscuous mode [ 268.316095][T19243] syzkaller0: entered allmulticast mode [ 268.547956][T19255] netlink: 'syz.0.6170': attribute type 3 has an invalid length. [ 268.572527][T19171] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.715988][T19171] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.772846][T19171] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.904873][T19171] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.952953][ T29] audit: type=1400 audit(1768532705.355:710): avc: denied { write } for pid=19287 comm="syz.1.6181" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 268.977578][T19281] loop3: detected capacity change from 0 to 128 [ 268.987070][T19281] syz.3.6176: attempt to access beyond end of device [ 268.987070][T19281] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 269.024668][T19171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 269.040328][T19171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 269.050722][T19171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 269.061099][T19171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 269.146719][T19305] can: request_module (can-proto-3) failed. [ 269.157845][T19171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.172203][T19171] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.182227][T17456] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.189370][T17456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.208070][T17456] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.215157][T17456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.321221][T19319] netlink: 'syz.4.6188': attribute type 7 has an invalid length. [ 269.329008][T19319] netlink: 'syz.4.6188': attribute type 8 has an invalid length. [ 269.345428][T19171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.352589][ T23] usb usb2-port1: attempt power cycle [ 269.429106][T19171] veth0_vlan: entered promiscuous mode [ 269.444626][T19171] veth1_vlan: entered promiscuous mode [ 269.466952][T19171] veth0_macvtap: entered promiscuous mode [ 269.475809][T19171] veth1_macvtap: entered promiscuous mode [ 269.486739][T19171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.498850][T19171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.510382][ T2935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.528437][ T2935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.547231][ T2935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.557215][ T2935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.046299][T19365] __nla_validate_parse: 6 callbacks suppressed [ 270.046314][T19365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6200'. [ 270.061623][T19365] netlink: 'syz.0.6200': attribute type 7 has an invalid length. [ 270.069451][T19365] netlink: 'syz.0.6200': attribute type 8 has an invalid length. [ 270.077335][T19365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6200'. [ 270.093489][T19365] syz_tun: entered promiscuous mode [ 270.110620][T19365] syz_tun: left promiscuous mode [ 270.415530][T19408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6218'. [ 270.424585][T19408] netlink: 'syz.0.6218': attribute type 7 has an invalid length. [ 270.432535][T19408] netlink: 'syz.0.6218': attribute type 8 has an invalid length. [ 270.440375][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6218'. [ 271.313722][T19424] loop2: detected capacity change from 0 to 7 [ 271.541940][ T3006] loop2: [ 272.152506][T19424] loop2: [ 272.299087][T19446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6232'. [ 272.308241][T19446] netlink: 'syz.0.6232': attribute type 7 has an invalid length. [ 272.316046][T19446] netlink: 'syz.0.6232': attribute type 8 has an invalid length. [ 272.323784][T19446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6232'. [ 272.487042][ T23] usb usb2-port1: unable to enumerate USB device [ 272.550075][ T3006] loop2: [ 272.612308][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6237'. [ 272.721844][T19468] syz_tun: left allmulticast mode [ 273.068985][T19478] loop2: detected capacity change from 0 to 7 [ 273.094892][ T29] audit: type=1400 audit(1768532709.495:711): avc: denied { map } for pid=19479 comm="syz.4.6246" path="socket:[59118]" dev="sockfs" ino=59118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 273.134964][T19171] loop2: [ 273.234573][T19478] loop2: [ 273.276471][T19484] syzkaller0: entered promiscuous mode [ 273.282005][T19484] syzkaller0: entered allmulticast mode [ 273.390175][T19491] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6249'. [ 273.411409][T19486] loop3: detected capacity change from 0 to 128 [ 273.443337][T19498] loop1: detected capacity change from 0 to 512 [ 273.456340][T19498] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.6253: inode has both inline data and extents flags [ 273.474503][T19498] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.6253: couldn't read orphan inode 15 (err -117) [ 273.496996][T19498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.571924][ T29] audit: type=1400 audit(1768532709.975:712): avc: denied { getopt } for pid=19509 comm="syz.2.6257" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 273.642038][T11754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.712440][T19524] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6265'. [ 273.745948][T19526] syzkaller0: entered promiscuous mode [ 273.751524][T19526] syzkaller0: entered allmulticast mode [ 273.765066][T19529] loop6: detected capacity change from 0 to 7 [ 273.792071][T19531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.801614][T19527] loop3: detected capacity change from 0 to 128 [ 273.809006][T19531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.818791][T19527] syz.3.6264: attempt to access beyond end of device [ 273.818791][T19527] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 273.833378][T19527] syz.3.6264: attempt to access beyond end of device [ 273.833378][T19527] loop3: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 273.847059][T19527] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 274.214545][T19536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6269'. [ 274.223597][T19536] netlink: 'syz.4.6269': attribute type 7 has an invalid length. [ 274.231345][T19536] netlink: 'syz.4.6269': attribute type 8 has an invalid length. [ 274.241084][T19536] syz_tun: entered promiscuous mode [ 274.247073][T19536] syz_tun: left promiscuous mode [ 274.306873][T19538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.315516][T19538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.351698][T19540] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.458298][T19545] loop0: detected capacity change from 0 to 128 [ 274.649926][T19550] loop3: detected capacity change from 0 to 1024 [ 274.657344][T19550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 274.666123][T19550] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6855c01c, mo2=0003] [ 274.674490][T19550] System zones: 0-1, 3-36 [ 274.679751][T19550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.729192][T17862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.743760][T19558] loop1: detected capacity change from 0 to 512 [ 274.758603][T19558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.773658][T19558] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6279: invalid indirect mapped block 4294967295 (level 1) [ 274.788079][T19558] EXT4-fs (loop1): Remounting filesystem read-only [ 274.794915][T19558] EXT4-fs (loop1): 2 truncates cleaned up [ 274.801215][T19558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.838750][T19566] netlink: 'syz.3.6281': attribute type 7 has an invalid length. [ 274.848031][T19566] netlink: 'syz.3.6281': attribute type 8 has an invalid length. [ 274.858273][T11754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.860637][T19566] syz_tun: entered promiscuous mode [ 274.877079][T19566] syz_tun: left promiscuous mode [ 274.927459][T19570] syzkaller0: entered promiscuous mode [ 274.933030][T19570] syzkaller0: entered allmulticast mode [ 275.025150][T19582] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.043436][T19574] loop4: detected capacity change from 0 to 128 [ 275.074463][T19587] __nla_validate_parse: 6 callbacks suppressed [ 275.074480][T19587] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6291'. [ 275.189246][ T29] audit: type=1326 audit(1768532711.585:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.1.6292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab7c44f749 code=0x0 [ 275.758355][T19606] loop6: detected capacity change from 0 to 7 [ 275.809788][T19608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6299'. [ 276.005911][T19620] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6303: invalid indirect mapped block 256 (level 2) [ 276.021678][T19617] syzkaller0: entered promiscuous mode [ 276.027320][T19617] syzkaller0: entered allmulticast mode [ 276.037939][T19620] EXT4-fs (loop1): 2 truncates cleaned up [ 276.045228][T19620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.074876][T19620] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.6303: bg 0: block 5: invalid block bitmap [ 276.087371][ T29] audit: type=1400 audit(1768532712.475:714): avc: denied { read write } for pid=19619 comm="syz.1.6303" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 276.110057][T19620] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 276.110126][T19620] EXT4-fs (loop1): This should not happen!! Data will be lost [ 276.110126][T19620] [ 276.110139][T19620] EXT4-fs (loop1): Total free blocks count 0 [ 276.110152][T19620] EXT4-fs (loop1): Free/Dirty block details [ 276.110162][T19620] EXT4-fs (loop1): free_blocks=0 [ 276.110173][T19620] EXT4-fs (loop1): dirty_blocks=66 [ 276.110184][T19620] EXT4-fs (loop1): Block reservation details [ 276.110195][T19620] EXT4-fs (loop1): i_reserved_data_blocks=66 [ 276.122539][ T29] audit: type=1400 audit(1768532712.475:715): avc: denied { open } for pid=19619 comm="syz.1.6303" path="/595/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 276.379435][ T2935] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 276.430563][T19631] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6310'. [ 276.439570][T19631] netlink: 'syz.4.6310': attribute type 7 has an invalid length. [ 276.447379][T19631] netlink: 'syz.4.6310': attribute type 8 has an invalid length. [ 276.455169][T19631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6310'. [ 276.485145][T19633] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6309'. [ 276.590145][T19633] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6309'. [ 276.599672][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6311'. [ 276.654643][T19643] EXT4-fs: Ignoring removed i_version option [ 276.660782][T19643] EXT4-fs: Ignoring removed bh option [ 276.694730][T19643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.748773][ T29] audit: type=1400 audit(1768532713.145:716): avc: denied { read } for pid=19653 comm="syz.2.6318" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 276.772318][ T29] audit: type=1400 audit(1768532713.145:717): avc: denied { open } for pid=19653 comm="syz.2.6318" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 276.796323][T19643] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.840278][ T29] audit: type=1326 audit(1768532713.215:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19644 comm="syz.1.6314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab7c44f749 code=0x0 [ 276.888124][ T29] audit: type=1400 audit(1768532713.275:719): avc: denied { ioctl } for pid=19653 comm="syz.2.6318" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 276.924414][T19643] EXT4-fs (loop3): shut down requested (2) [ 276.940833][ T29] audit: type=1400 audit(1768532713.335:720): avc: denied { ioctl } for pid=19642 comm="syz.3.6315" path="/114/bus/file1" dev="loop3" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 276.946007][T19663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.965801][T17862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.187839][T19664] syz.4.6319: attempt to access beyond end of device [ 277.187839][T19664] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 277.217780][T19664] syz.4.6319: attempt to access beyond end of device [ 277.217780][T19664] loop4: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 277.231492][T19664] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 277.276543][T19663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.621619][T19674] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6325'. [ 277.677836][T19674] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6325'. [ 277.717498][T19674] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.795640][T19683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6327'. [ 277.804651][T19683] netlink: 'syz.2.6327': attribute type 7 has an invalid length. [ 277.812407][T19683] netlink: 'syz.2.6327': attribute type 8 has an invalid length. [ 277.922790][T19677] chnl_net:caif_netlink_parms(): no params data found [ 277.981393][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.995659][T19677] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.002842][T19677] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.011014][T19703] ext4: Unknown parameter 'nouser_xattr' [ 278.149986][T19677] bridge_slave_0: entered allmulticast mode [ 278.157785][T19677] bridge_slave_0: entered promiscuous mode [ 278.169991][T19677] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.177116][T19677] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.185123][T19677] bridge_slave_1: entered allmulticast mode [ 278.192704][T19677] bridge_slave_1: entered promiscuous mode [ 278.549589][ T29] audit: type=1326 audit(1768532714.945:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19712 comm="syz.3.6335" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f289d63f749 code=0x0 [ 278.589220][T19677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.604494][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.620652][T19677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.651424][T19677] team0: Port device team_slave_0 added [ 278.668516][T19677] team0: Port device team_slave_1 added [ 278.676751][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.732561][T19677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.739552][T19677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.765598][T19677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.779351][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.792149][T19677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.799157][T19677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.825079][T19677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.866604][T19677] hsr_slave_0: entered promiscuous mode [ 278.873099][T19677] hsr_slave_1: entered promiscuous mode [ 278.879040][T19677] debugfs: 'hsr0' already exists in 'hsr' [ 278.884801][T19677] Cannot create hsr debugfs directory [ 278.987745][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.996272][ T52] bridge_slave_0: left allmulticast mode [ 279.002044][ T52] bridge_slave_0: left promiscuous mode [ 279.007776][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.092910][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.103508][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.114024][ T52] bond0 (unregistering): Released all slaves [ 279.122969][ T52] bond1 (unregistering): Released all slaves [ 279.172436][ T52] hsr_slave_0: left promiscuous mode [ 279.178228][ T52] hsr_slave_1: left promiscuous mode [ 279.183842][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.191238][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.198667][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.206060][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.216557][ T52] veth1_macvtap: left promiscuous mode [ 279.222144][ T52] veth0_macvtap: left promiscuous mode [ 279.227753][ T52] veth1_vlan: left promiscuous mode [ 279.233101][ T52] veth0_vlan: left promiscuous mode [ 279.312124][ T52] team0 (unregistering): Port device team_slave_1 removed [ 279.322496][ T52] team0 (unregistering): Port device team_slave_0 removed [ 279.410661][T19756] set_capacity_and_notify: 5 callbacks suppressed [ 279.410678][T19756] loop3: detected capacity change from 0 to 128 [ 279.714705][T19779] syzkaller0: entered promiscuous mode [ 279.720315][T19779] syzkaller0: entered allmulticast mode [ 279.904983][ T52] IPVS: stop unused estimator thread 0... [ 279.945478][T19677] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 279.985934][T19677] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 279.999089][T19677] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 280.013325][T19677] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 280.101828][T19677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.136552][T19677] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.155628][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.162809][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.184036][T19677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.194448][T19677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.207884][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.214979][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.293833][ T31] kworker/u8:1: attempt to access beyond end of device [ 280.293833][ T31] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 280.383662][T19677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.463555][T19839] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 280.470097][T19839] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 280.478358][T19839] vhci_hcd vhci_hcd.0: Device attached [ 280.512510][T19677] veth0_vlan: entered promiscuous mode [ 280.518406][T19864] __nla_validate_parse: 5 callbacks suppressed [ 280.518419][T19864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6364'. [ 280.533746][T19864] netlink: 'syz.4.6364': attribute type 7 has an invalid length. [ 280.541594][T19864] netlink: 'syz.4.6364': attribute type 8 has an invalid length. [ 280.542483][T19677] veth1_vlan: entered promiscuous mode [ 280.549406][T19864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6364'. [ 280.592114][T19677] veth0_macvtap: entered promiscuous mode [ 280.602956][T19677] veth1_macvtap: entered promiscuous mode [ 280.614902][T19677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.628276][T19677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.638996][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.648597][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.664006][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.683146][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.770571][T19883] loop4: detected capacity change from 0 to 512 [ 280.790286][T19883] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 280.822211][ T3397] usb 6-1: SetAddress Request (2) to port 0 [ 280.828334][ T3397] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 280.837149][T19883] EXT4-fs (loop4): 1 truncate cleaned up [ 280.847720][T19883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.863761][ T29] audit: type=1400 audit(1768532717.265:722): avc: denied { setattr } for pid=19881 comm="syz.4.6370" path="/124/bus/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 280.965667][T19893] loop0: detected capacity change from 0 to 128 [ 281.082075][T18187] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.104093][ T29] audit: type=1400 audit(1768532717.495:723): avc: denied { shutdown } for pid=19892 comm="syz.0.6373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 281.271907][T19853] vhci_hcd: connection reset by peer [ 281.277627][T17456] vhci_hcd vhci_hcd.2: stop threads [ 281.282962][T17456] vhci_hcd vhci_hcd.2: release socket [ 281.288380][T17456] vhci_hcd vhci_hcd.2: disconnect device [ 281.348445][T19904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6376'. [ 281.381435][T19908] syzkaller0: entered promiscuous mode [ 281.387082][T19908] syzkaller0: entered allmulticast mode [ 281.489326][ T29] audit: type=1326 audit(1768532717.885:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19915 comm="syz.4.6382" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1778ff749 code=0x0 [ 281.649216][T19922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6384'. [ 281.658316][T19922] netlink: 'syz.3.6384': attribute type 7 has an invalid length. [ 281.666138][T19922] netlink: 'syz.3.6384': attribute type 8 has an invalid length. [ 281.674182][T19922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6384'. [ 282.006249][T19932] loop3: detected capacity change from 0 to 128 [ 282.510493][T19950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.519201][T19950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.616634][ T29] audit: type=1400 audit(1768532718.975:725): avc: denied { write } for pid=19956 comm="syz.0.6400" lport=44428 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 282.703979][T19967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.712740][T19967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.126431][T19976] loop1: detected capacity change from 0 to 128 [ 283.193535][T19977] loop3: detected capacity change from 0 to 128 [ 283.347414][T19977] syz.3.6406: attempt to access beyond end of device [ 283.347414][T19977] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 283.363434][T19977] syz.3.6406: attempt to access beyond end of device [ 283.363434][T19977] loop3: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 283.377296][T19977] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 283.495822][T19976] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 283.503467][T19976] FAT-fs (loop1): Filesystem has been set read-only [ 283.623159][T19991] syzkaller0: entered promiscuous mode [ 283.628656][T19991] syzkaller0: entered allmulticast mode [ 283.719326][T19997] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6416'. [ 283.737890][T19997] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6416'. [ 284.326259][T20015] syzkaller0: entered promiscuous mode [ 284.331799][T20015] syzkaller0: entered allmulticast mode [ 284.482428][T20021] syzkaller0: entered promiscuous mode [ 284.487957][T20021] syzkaller0: entered allmulticast mode [ 284.623759][T20034] syzkaller0: entered promiscuous mode [ 284.629252][T20034] syzkaller0: entered allmulticast mode [ 284.701817][T20041] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6435'. [ 284.783797][T20048] syzkaller0: entered promiscuous mode [ 284.789329][T20048] syzkaller0: entered allmulticast mode [ 284.972980][T20055] syzkaller0: entered promiscuous mode [ 284.978471][T20055] syzkaller0: entered allmulticast mode [ 284.987878][T20057] netlink: 'syz.0.6442': attribute type 1 has an invalid length. [ 285.685120][T20095] syzkaller0: entered promiscuous mode [ 285.690715][T20095] syzkaller0: entered allmulticast mode [ 285.872870][ T29] audit: type=1326 audit(1768532722.275:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20089 comm="syz.1.6458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ec69ef749 code=0x0 [ 285.900354][ T3397] usb 6-1: device descriptor read/8, error -110 [ 286.009906][ T3397] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 286.031637][ T3397] usb 6-1: enqueue for inactive port 0 [ 286.037208][ T3397] usb 6-1: enqueue for inactive port 0 [ 286.048333][ T3397] usb 6-1: enqueue for inactive port 0 [ 286.057439][T20106] syzkaller0: entered promiscuous mode [ 286.063015][T20106] syzkaller0: entered allmulticast mode [ 286.089687][ T29] audit: type=1400 audit(1768532722.485:727): avc: denied { read } for pid=20108 comm="syz.0.6462" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 286.112881][ T29] audit: type=1400 audit(1768532722.485:728): avc: denied { open } for pid=20108 comm="syz.0.6462" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 286.136711][ T29] audit: type=1400 audit(1768532722.485:729): avc: denied { ioctl } for pid=20108 comm="syz.0.6462" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 286.201882][T20115] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6465'. [ 287.029272][T20129] syzkaller0: entered promiscuous mode [ 287.034972][T20129] syzkaller0: entered allmulticast mode [ 287.045560][T20121] loop2: detected capacity change from 0 to 128 [ 287.150423][T20132] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6471'. [ 287.170122][T20132] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.177436][T20132] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.200260][ T3397] usb usb6-port1: attempt power cycle [ 287.271310][T20142] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 287.370701][T20154] netlink: 'syz.2.6481': attribute type 1 has an invalid length. [ 287.384444][T20154] bond1: entered promiscuous mode [ 287.389659][T20154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.435739][T20154] bond1: (slave bridge1): making interface the new active one [ 287.443277][T20154] bridge1: entered promiscuous mode [ 287.448751][ T29] audit: type=1400 audit(1768532723.835:730): avc: denied { ioctl } for pid=20153 comm="syz.2.6481" path="socket:[62228]" dev="sockfs" ino=62228 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 287.449884][T20154] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 287.499696][T20159] syzkaller0: entered promiscuous mode [ 287.505307][T20159] syzkaller0: entered allmulticast mode [ 287.616167][ T29] audit: type=1400 audit(1768532724.015:731): avc: denied { unmount } for pid=19171 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 287.690110][T20176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6490'. [ 288.806610][T20200] loop0: detected capacity change from 0 to 128 [ 289.034622][T20200] syz.0.6497: attempt to access beyond end of device [ 289.034622][T20200] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 289.318433][T20202] syzkaller0: entered promiscuous mode [ 289.323979][T20202] syzkaller0: entered allmulticast mode [ 289.342573][T20206] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6501'. [ 289.506562][T20212] loop2: detected capacity change from 0 to 7 [ 289.524982][ T3823] loop2: [ 289.602577][T20212] loop2: [ 289.630100][ T3397] usb usb6-port1: unable to enumerate USB device [ 289.672459][ T29] audit: type=1326 audit(1768532726.075:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20221 comm="syz.4.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1778ff749 code=0x7ffc0000 [ 289.708307][T20226] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6511'. [ 289.710849][ T29] audit: type=1326 audit(1768532726.075:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20221 comm="syz.4.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fe1778ff749 code=0x7ffc0000 [ 289.736585][T20226] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6511'. [ 289.740754][ T29] audit: type=1326 audit(1768532726.075:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20221 comm="syz.4.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1778ff749 code=0x7ffc0000 [ 289.773004][ T29] audit: type=1326 audit(1768532726.075:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20221 comm="syz.4.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1778ff749 code=0x7ffc0000 [ 289.805588][T20229] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6512'. [ 289.814804][T20229] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6512'. [ 289.870586][T20236] syzkaller0: entered promiscuous mode [ 289.876077][T20236] syzkaller0: entered allmulticast mode [ 290.043958][T20247] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 290.136110][T20249] loop4: detected capacity change from 0 to 128 [ 290.794590][T20254] loop2: detected capacity change from 0 to 7 [ 290.817521][T20254] loop2: [ 290.902883][T20260] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6524'. [ 290.941099][T20264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6526'. [ 290.951428][T20246] syz.4.6518: attempt to access beyond end of device [ 290.951428][T20246] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 291.059103][T20275] syzkaller0: entered promiscuous mode [ 291.064937][T20275] syzkaller0: entered allmulticast mode [ 291.262092][ T29] audit: type=1400 audit(1768532727.645:736): avc: denied { append } for pid=20278 comm="syz.1.6532" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 291.426461][T20287] loop3: detected capacity change from 0 to 128 [ 291.569095][T20290] loop2: detected capacity change from 0 to 7 [ 291.583075][ T3823] loop2: [ 291.631086][T20290] loop2: [ 291.886442][ T29] audit: type=1326 audit(1768532728.265:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20291 comm="syz.2.6536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcba3d6f749 code=0x0 [ 292.127074][T20300] __nla_validate_parse: 3 callbacks suppressed [ 292.127091][T20300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6539'. [ 292.170963][T20307] syzkaller0: entered promiscuous mode [ 292.176471][T20307] syzkaller0: entered allmulticast mode [ 292.201812][T20312] tipc: Can't bind to reserved service type 2 [ 292.206617][T20313] netlink: 'syz.1.6544': attribute type 1 has an invalid length. [ 292.735276][T20352] netlink: 'syz.3.6558': attribute type 1 has an invalid length. [ 292.745085][T20354] loop1: detected capacity change from 0 to 128 [ 292.844553][T20360] loop2: detected capacity change from 0 to 7 [ 292.939421][T20362] syzkaller0: entered promiscuous mode [ 292.945014][T20362] syzkaller0: entered allmulticast mode [ 292.963522][T20364] syzkaller0: entered promiscuous mode [ 292.969026][T20364] syzkaller0: entered allmulticast mode [ 293.079090][T20368] loop6: detected capacity change from 0 to 7 [ 293.350159][T20384] loop4: detected capacity change from 0 to 128 [ 293.368526][T20386] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6571'. [ 293.654662][T20398] loop2: detected capacity change from 0 to 7 [ 293.760315][T20403] syzkaller0: entered promiscuous mode [ 293.765820][T20403] syzkaller0: entered allmulticast mode [ 293.877777][T20413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.889130][T20413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.994622][T20376] syz.4.6569: attempt to access beyond end of device [ 293.994622][T20376] loop4: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 294.005720][T20428] loop2: detected capacity change from 0 to 7 [ 294.256180][T20443] loop1: detected capacity change from 0 to 128 [ 294.309732][T20456] loop2: detected capacity change from 0 to 128 [ 294.383735][T20455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6595'. [ 294.556336][ T29] audit: type=1400 audit(1768532730.955:738): avc: denied { nlmsg_read } for pid=20472 comm="syz.0.6602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 294.577939][T20473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6602'. [ 294.754578][T20499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6615'. [ 294.838282][T20515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6617'. [ 295.133965][ T29] audit: type=1400 audit(1768532731.535:739): avc: denied { map } for pid=20542 comm="syz.0.6633" path="socket:[63948]" dev="sockfs" ino=63948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 295.232041][T20553] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6639'. [ 295.279662][T20553] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6639'. [ 295.468721][ T29] audit: type=1326 audit(1768532731.865:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20565 comm="syz.1.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec69ef749 code=0x7ffc0000 [ 295.493021][ T29] audit: type=1326 audit(1768532731.895:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20565 comm="syz.1.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ec69ef749 code=0x7ffc0000 [ 295.516432][ T29] audit: type=1326 audit(1768532731.895:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20565 comm="syz.1.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec69ef749 code=0x7ffc0000 [ 295.539894][ T29] audit: type=1326 audit(1768532731.895:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20565 comm="syz.1.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec69ef749 code=0x7ffc0000 [ 295.634692][ T29] audit: type=1326 audit(1768532731.965:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20565 comm="syz.1.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f8ec69ef749 code=0x7ffc0000 [ 295.658097][ T29] audit: type=1326 audit(1768532731.965:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20565 comm="syz.1.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec69ef749 code=0x7ffc0000 [ 295.836896][T20592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.846543][T20592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.259126][T20596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6658'. [ 296.308658][T20603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6661'. [ 296.456861][T20605] loop0: detected capacity change from 0 to 128 [ 296.512204][T20618] syz_tun: entered promiscuous mode [ 296.518326][T20618] syz_tun: left promiscuous mode [ 296.580859][T20622] netlink: 'syz.2.6668': attribute type 1 has an invalid length. [ 297.005385][T20672] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 297.012012][T20672] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 297.020229][T20672] vhci_hcd vhci_hcd.0: Device attached [ 297.219276][T20691] netlink: 'syz.3.6700': attribute type 27 has an invalid length. [ 297.246020][T20691] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.253162][T20691] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.271384][T20692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.280538][T20692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.300070][T12039] usb 2-1: SetAddress Request (6) to port 0 [ 297.306282][T20691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.309050][T12039] usb 2-1: new SuperSpeed USB device number 6 using vhci_hcd [ 297.316289][T20691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.355971][T20696] loop2: detected capacity change from 0 to 7 [ 297.368675][T17456] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.380384][T17456] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.389454][T17456] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.398972][T17456] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.436202][T20702] syzkaller0: entered promiscuous mode [ 297.441745][T20702] syzkaller0: entered allmulticast mode [ 297.712307][T20677] vhci_hcd: connection reset by peer [ 297.718819][ T825] vhci_hcd vhci_hcd.0: stop threads [ 297.724093][ T825] vhci_hcd vhci_hcd.0: release socket [ 297.729513][ T825] vhci_hcd vhci_hcd.0: disconnect device [ 297.767585][T20734] syzkaller0: entered promiscuous mode [ 297.773116][T20734] syzkaller0: entered allmulticast mode [ 298.495927][T20806] __nla_validate_parse: 4 callbacks suppressed [ 298.495940][T20806] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6748'. [ 298.551201][T20806] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6748'. [ 298.610799][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 298.610813][ T29] audit: type=1400 audit(1768532735.015:747): avc: denied { name_connect } for pid=20808 comm="syz.4.6749" dest=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 298.862569][ T29] audit: type=1326 audit(1768532735.265:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20810 comm="syz.1.6750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ec69ef749 code=0x0 [ 298.864373][T20825] set_capacity_and_notify: 1 callbacks suppressed [ 298.864387][T20825] loop2: detected capacity change from 0 to 7 [ 299.010456][T20835] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6760'. [ 299.026332][ T29] audit: type=1400 audit(1768532735.425:749): avc: denied { ioctl } for pid=20836 comm="syz.0.6761" path="socket:[63390]" dev="sockfs" ino=63390 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 299.069578][T20835] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6760'. [ 299.223535][T20854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20854 comm=syz.2.6768 [ 299.716132][T20894] loop6: detected capacity change from 0 to 7 [ 299.852575][T20921] loop6: detected capacity change from 0 to 7 [ 299.900748][T20925] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20925 comm=syz.0.6802 [ 300.024930][T20943] syzkaller0: entered promiscuous mode [ 300.030525][T20943] syzkaller0: entered allmulticast mode [ 300.548193][T20974] syzkaller0: entered promiscuous mode [ 300.553808][T20974] syzkaller0: entered allmulticast mode [ 300.656846][T20979] syzkaller0: entered promiscuous mode [ 300.662426][T20979] syzkaller0: entered allmulticast mode [ 300.844380][T20989] loop2: detected capacity change from 0 to 7 [ 300.872246][T20995] syzkaller0: entered promiscuous mode [ 300.877776][T20995] syzkaller0: entered allmulticast mode [ 300.903501][T20999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20999 comm=syz.1.6834 [ 301.059146][T21008] netlink: 'syz.4.6839': attribute type 1 has an invalid length. [ 301.192872][T21006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6838'. [ 301.203785][T21006] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.261202][T21006] bridge_slave_0: left allmulticast mode [ 301.267002][T21006] bridge_slave_0: left promiscuous mode [ 301.272637][T21006] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.448535][T21025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6845'. [ 301.824998][T21031] loop3: detected capacity change from 0 to 128 [ 301.886586][T21031] syz.3.6847: attempt to access beyond end of device [ 301.886586][T21031] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 302.147816][T21045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6854'. [ 302.157184][T21045] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.165017][T21045] bridge_slave_0: left allmulticast mode [ 302.170770][T21045] bridge_slave_0: left promiscuous mode [ 302.176407][T21045] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.286973][T21050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6856'. [ 302.360110][T12039] usb 2-1: device descriptor read/8, error -110 [ 302.469873][T12039] usb 2-1: new SuperSpeed USB device number 6 using vhci_hcd [ 302.489917][T12039] usb 2-1: enqueue for inactive port 0 [ 302.495605][T12039] usb 2-1: enqueue for inactive port 0 [ 302.501574][T12039] usb 2-1: enqueue for inactive port 0 [ 303.290580][T21095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6876'. [ 303.348619][T21103] loop6: detected capacity change from 0 to 7 [ 303.486416][T21122] syzkaller0: entered promiscuous mode [ 303.492043][T21122] syzkaller0: entered allmulticast mode [ 303.553353][T12039] usb usb2-port1: attempt power cycle [ 303.579921][ T29] audit: type=1326 audit(1768532739.965:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21110 comm="syz.0.6884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff66e9af749 code=0x0 [ 303.967530][T21156] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21156 comm=syz.3.6904 [ 304.128888][T21174] netlink: 'syz.1.6912': attribute type 1 has an invalid length. [ 304.265672][T21193] loop2: detected capacity change from 0 to 7 [ 304.386674][T21207] netlink: 'syz.3.6930': attribute type 1 has an invalid length. [ 304.658813][T21230] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6939'. [ 304.667913][T21230] netlink: 'syz.3.6939': attribute type 7 has an invalid length. [ 304.675663][T21230] netlink: 'syz.3.6939': attribute type 8 has an invalid length. [ 304.683482][T21230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6939'. [ 304.710389][T21232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6940'. [ 304.719433][T21232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6940'. [ 304.794309][T21232] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 304.885896][T21232] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 304.893873][T21232] debugfs: 'hsr1' already exists in 'hsr' [ 304.899612][T21232] Cannot create hsr debugfs directory [ 304.906723][T21236] syzkaller0: entered promiscuous mode [ 304.912235][T21236] syzkaller0: entered allmulticast mode [ 304.995289][T21243] syzkaller0: entered promiscuous mode [ 305.000858][T21243] syzkaller0: entered allmulticast mode [ 305.008707][T21243] 0: reclassify loop, rule prio 0, protocol 800 [ 305.140162][T21257] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21257 comm=syz.1.6951 [ 305.209297][T21266] hsr0: entered allmulticast mode [ 305.214537][T21266] hsr_slave_0: entered allmulticast mode [ 305.220449][T21266] hsr_slave_1: entered allmulticast mode [ 305.226422][T21266] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 305.283184][T21275] loop2: detected capacity change from 0 to 7 [ 305.316599][T21282] loop6: detected capacity change from 0 to 7 [ 305.525352][T21316] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=21316 comm=syz.4.6980 [ 305.529082][T21312] syzkaller0: entered promiscuous mode [ 305.543861][T21312] syzkaller0: entered allmulticast mode [ 305.584767][T21323] netlink: 592 bytes leftover after parsing attributes in process `syz.4.6983'. [ 305.594465][T21323] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6983'. [ 305.629042][T21323] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6983'. [ 305.657310][T21332] syzkaller0: entered promiscuous mode [ 305.662858][T21332] syzkaller0: entered allmulticast mode [ 305.740492][T21339] syzkaller0: entered promiscuous mode [ 305.746004][T21339] syzkaller0: entered allmulticast mode [ 305.790292][T12039] usb usb2-port1: unable to enumerate USB device [ 305.868809][T21359] syzkaller0: entered promiscuous mode [ 305.874339][T21359] syzkaller0: entered allmulticast mode [ 305.907370][T21361] netlink: 592 bytes leftover after parsing attributes in process `syz.4.7001'. [ 305.958647][T21363] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7001'. [ 305.994478][T21363] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7001'. [ 306.006613][T21369] syzkaller0: entered promiscuous mode [ 306.012256][T21369] syzkaller0: entered allmulticast mode [ 306.103683][T21385] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 306.135411][T21387] syzkaller0: entered promiscuous mode [ 306.140937][T21387] syzkaller0: entered allmulticast mode [ 306.314647][T21394] loop1: detected capacity change from 0 to 128 [ 306.510054][T21401] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 306.516610][T21401] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 306.524916][T21401] vhci_hcd vhci_hcd.0: Device attached [ 307.073774][T21432] loop2: detected capacity change from 0 to 7 [ 307.187525][T21402] vhci_hcd: connection closed [ 307.190549][ T2935] vhci_hcd vhci_hcd.3: stop threads [ 307.200488][ T2935] vhci_hcd vhci_hcd.3: release socket [ 307.205878][ T2935] vhci_hcd vhci_hcd.3: disconnect device [ 307.743413][T21498] ip6erspan0: entered promiscuous mode [ 309.254088][T21579] loop6: detected capacity change from 0 to 7 [ 309.267310][T21579] loop6: [ 309.311950][T21586] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 309.348509][T21586] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 309.369772][T21586] debugfs: 'hsr1' already exists in 'hsr' [ 309.375683][T21586] Cannot create hsr debugfs directory [ 309.515652][T21601] syzkaller0: entered promiscuous mode [ 309.521275][T21601] syzkaller0: entered allmulticast mode [ 309.533530][T21609] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 309.674189][T21626] __nla_validate_parse: 15 callbacks suppressed [ 309.674204][T21626] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7113'. [ 309.835047][T21642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7122'. [ 310.092718][T21652] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21652 comm=syz.2.7125 [ 310.274670][T21682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7137'. [ 310.283835][T21682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7137'. [ 310.503815][T21707] syzkaller0: entered promiscuous mode [ 310.509345][T21707] syzkaller0: entered allmulticast mode [ 310.625189][T21727] syzkaller0: entered promiscuous mode [ 310.630727][T21727] syzkaller0: entered allmulticast mode [ 310.866096][T21747] syzkaller0: entered promiscuous mode [ 310.871667][T21747] syzkaller0: entered allmulticast mode [ 311.241794][ T29] audit: type=1326 audit(1768532747.635:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21763 comm="syz.0.7176" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff66e9af749 code=0x0 [ 311.350892][T21794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7189'. [ 311.359949][T21794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7189'. [ 311.629800][ T29] audit: type=1400 audit(1768532747.995:752): avc: denied { lock } for pid=21796 comm="syz.2.7190" path="socket:[67445]" dev="sockfs" ino=67445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 311.734296][T21821] loop3: detected capacity change from 0 to 7 [ 311.917421][T21845] syzkaller0: entered promiscuous mode [ 311.923024][T21845] syzkaller0: entered allmulticast mode [ 312.077995][T21867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7221'. [ 312.088419][T21867] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.097148][T21867] bridge_slave_0: left allmulticast mode [ 312.102928][T21867] bridge_slave_0: left promiscuous mode [ 312.108620][T21867] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.184664][T21874] syzkaller0: entered promiscuous mode [ 312.190190][T21874] syzkaller0: entered allmulticast mode [ 312.588658][T21915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7242'. [ 312.597749][T21915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7242'. [ 312.832276][T21941] syzkaller1: entered promiscuous mode [ 312.837771][T21941] syzkaller1: entered allmulticast mode [ 312.879454][T21950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7254'. [ 312.968042][T21966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.980347][T21966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.005668][T21966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.032947][T21966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.246323][T22020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.256374][T22020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.573293][T22050] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 313.581409][T22050] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 313.589712][T22050] hsr2: Slave A (netdevsim1) is not up; please bring it up to get a fully working HSR network [ 313.600072][T22050] hsr2: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 313.632479][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.650123][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.681984][T17905] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.725218][T17905] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.823619][T22068] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22068 comm=syz.4.7308 [ 314.113050][T22084] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 314.119605][T22084] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 314.127766][T22084] vhci_hcd vhci_hcd.0: Device attached [ 314.400545][T12457] usb 10-1: SetAddress Request (6) to port 0 [ 314.408445][T12457] usb 10-1: new SuperSpeed USB device number 6 using vhci_hcd [ 314.415994][T22112] hsr0: entered allmulticast mode [ 314.416012][T22112] hsr_slave_0: entered allmulticast mode [ 314.426726][T22112] hsr_slave_1: entered allmulticast mode [ 314.560532][T22131] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.575203][T22131] bridge_slave_0: left allmulticast mode [ 314.580909][T22131] bridge_slave_0: left promiscuous mode [ 314.586775][T22131] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.780596][T22090] vhci_hcd: connection reset by peer [ 314.786067][ T52] vhci_hcd vhci_hcd.4: stop threads [ 314.791322][ T52] vhci_hcd vhci_hcd.4: release socket [ 314.796708][ T52] vhci_hcd vhci_hcd.4: disconnect device [ 315.303934][ T29] audit: type=1400 audit(1768532751.705:753): avc: denied { ioctl } for pid=22151 comm="syz.1.7346" path="socket:[69807]" dev="sockfs" ino=69807 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 315.471247][ T29] audit: type=1400 audit(1768532751.875:754): avc: denied { create } for pid=22176 comm="syz.3.7358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 315.474911][T22177] vlan2: entered promiscuous mode [ 315.495853][T22177] team0: entered promiscuous mode [ 315.500905][T22177] team_slave_0: entered promiscuous mode [ 315.506734][T22177] team_slave_1: entered promiscuous mode [ 315.617618][T22187] __nla_validate_parse: 10 callbacks suppressed [ 315.617693][T22187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7362'. [ 315.632981][T22187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7362'. [ 315.877512][ T29] audit: type=1400 audit(1768532752.275:755): avc: denied { accept } for pid=22201 comm="syz.2.7369" lport=45891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 315.983449][T22210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7373'. [ 316.086586][T22226] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7380'. [ 316.269478][T22249] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7391'. [ 316.477982][T22288] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.7410' sets config #1 [ 316.613358][T22317] syz_tun: entered promiscuous mode [ 316.618739][T22317] macsec1: entered allmulticast mode [ 316.624174][T22317] syz_tun: entered allmulticast mode [ 316.633877][T22317] syz_tun: left allmulticast mode [ 316.638992][T22317] syz_tun: left promiscuous mode [ 316.737952][T22335] 0: reclassify loop, rule prio 0, protocol 800 [ 316.781535][ T29] audit: type=1400 audit(1768532753.005:756): avc: denied { create } for pid=22295 comm="syz.2.7414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 316.801292][ T29] audit: type=1400 audit(1768532753.015:757): avc: denied { ioctl } for pid=22295 comm="syz.2.7414" path="socket:[70059]" dev="sockfs" ino=70059 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 316.826080][ T29] audit: type=1400 audit(1768532753.065:758): avc: denied { read } for pid=22295 comm="syz.2.7414" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 316.850623][ T29] audit: type=1400 audit(1768532753.065:759): avc: denied { open } for pid=22295 comm="syz.2.7414" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 317.146339][T22343] loop0: detected capacity change from 0 to 128 [ 317.208325][T22345] program syz.4.7435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.259462][T22351] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7438'. [ 317.318325][T22357] syzkaller0: entered promiscuous mode [ 317.323843][T22357] syzkaller0: entered allmulticast mode [ 317.431130][T22363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7444'. [ 317.448319][T22363] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.469360][T22363] bridge_slave_0: left allmulticast mode [ 317.475133][T22363] bridge_slave_0: left promiscuous mode [ 317.480941][T22363] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.505573][T22363] bridge0 (unregistering): left promiscuous mode [ 317.515314][T22366] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22366 comm=syz.4.7446 [ 317.562106][T22369] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7448'. [ 317.571219][T22369] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7448'. [ 317.577723][T22373] syzkaller0: entered promiscuous mode [ 317.585661][T22373] syzkaller0: entered allmulticast mode [ 317.607911][T22376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7450'. [ 317.683352][T22388] syzkaller0: entered promiscuous mode [ 317.688867][T22388] syzkaller0: entered allmulticast mode [ 317.723037][T22390] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22390 comm=syz.3.7457 [ 317.867220][T22420] syzkaller0: entered promiscuous mode [ 317.872791][T22420] syzkaller0: entered allmulticast mode [ 318.192058][T22454] syzkaller0: entered promiscuous mode [ 318.197553][T22454] syzkaller0: entered allmulticast mode [ 318.280855][T22462] loop3: detected capacity change from 0 to 128 [ 318.294757][T22462] syz.3.7483: attempt to access beyond end of device [ 318.294757][T22462] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 318.759196][T22492] loop0: detected capacity change from 0 to 128 [ 318.843167][T22496] syzkaller1: entered promiscuous mode [ 318.848756][T22496] syzkaller1: entered allmulticast mode [ 319.352493][T22518] syzkaller0: entered promiscuous mode [ 319.358159][T22518] syzkaller0: entered allmulticast mode [ 319.484627][T12457] usb 10-1: device descriptor read/8, error -110 [ 319.486094][T22532] erspan0: entered promiscuous mode [ 319.532740][T22532] erspan0: left promiscuous mode [ 319.599893][T12457] usb 10-1: new SuperSpeed USB device number 6 using vhci_hcd [ 319.629996][T12457] usb 10-1: enqueue for inactive port 0 [ 319.637410][T12457] usb 10-1: enqueue for inactive port 0 [ 319.657477][T12457] usb 10-1: enqueue for inactive port 0 [ 319.707554][T22556] Invalid argument reading file caps for ./file0 [ 319.986452][T22587] erspan0: entered promiscuous mode [ 320.001221][T22587] gretap0: entered promiscuous mode [ 320.014779][T22587] debugfs: 'hsr2' already exists in 'hsr' [ 320.020556][T22587] Cannot create hsr debugfs directory [ 320.219108][T22622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.240680][T22622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.249486][T22622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.259322][T22622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.266790][T22624] syzkaller0: entered promiscuous mode [ 320.269230][T22622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.272789][T22624] syzkaller0: entered allmulticast mode [ 320.284536][T22622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.307431][T22622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.316109][T22622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.329611][T22622] batadv0: entered promiscuous mode [ 320.335007][T22622] macvtap1: entered promiscuous mode [ 320.340485][T22622] macvtap1: entered allmulticast mode [ 320.345903][T22622] batadv0: entered allmulticast mode [ 320.352073][T22622] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 320.371841][T22622] batadv0: left allmulticast mode [ 320.377044][T22622] batadv0: left promiscuous mode [ 320.409301][T22635] netlink: 'syz.3.7553': attribute type 4 has an invalid length. [ 320.439652][T22641] netlink: 'syz.3.7556': attribute type 1 has an invalid length. [ 320.690095][T12457] usb usb10-port1: attempt power cycle [ 320.953076][T22660] netlink: 'syz.0.7564': attribute type 1 has an invalid length. [ 320.967309][T22660] bond1: entered promiscuous mode [ 320.972912][T22660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 320.988181][T22660] bond1: (slave bridge0): making interface the new active one [ 320.995723][T22660] bridge0: entered promiscuous mode [ 321.002144][T22660] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 321.013143][T22666] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22666 comm=syz.4.7567 [ 321.086532][ T29] audit: type=1400 audit(1768532757.485:760): avc: denied { checkpoint_restore } for pid=22678 comm="syz.0.7573" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.135267][T22686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.144256][T22686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.157422][T22689] __nla_validate_parse: 21 callbacks suppressed [ 321.157453][T22689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7577'. [ 321.172831][T22689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7577'. [ 321.173912][T22686] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7576'. [ 321.206237][T22686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7576'. [ 321.296711][ T29] audit: type=1400 audit(1768532757.695:761): avc: denied { setopt } for pid=22696 comm="syz.2.7579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 321.350339][T22699] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22699 comm=syz.2.7580 [ 321.371424][T22701] syzkaller0: entered promiscuous mode [ 321.376937][T22701] syzkaller0: entered allmulticast mode [ 321.529165][ T29] audit: type=1400 audit(1768532757.925:762): avc: denied { write } for pid=22712 comm="syz.2.7587" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 321.557009][ T29] audit: type=1400 audit(1768532757.925:763): avc: denied { ioctl } for pid=22712 comm="syz.2.7587" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 321.609230][T22718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7589'. [ 321.658007][T22721] loop3: detected capacity change from 0 to 128 [ 322.147999][T22750] syzkaller0: entered promiscuous mode [ 322.153562][T22750] syzkaller0: entered allmulticast mode [ 322.226733][T22753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.236039][T22753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.454585][T22759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7608'. [ 322.467814][T22759] bond1: option ad_actor_sys_prio: invalid value (0) [ 322.474611][T22759] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 322.482511][T22759] bond1 (unregistering): Released all slaves [ 322.512913][T22762] syzkaller1: entered promiscuous mode [ 322.518442][T22762] syzkaller1: entered allmulticast mode [ 322.550024][T12457] usb usb10-port1: unable to enumerate USB device [ 322.674152][T22776] syzkaller0: entered promiscuous mode [ 322.679664][T22776] syzkaller0: entered allmulticast mode [ 322.725200][T22790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7620'. [ 322.754010][T22794] netlink: 'syz.2.7621': attribute type 5 has an invalid length. [ 322.761890][T22794] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7621'. [ 322.940427][T22812] usb usb8: usbfs: process 22812 (syz.4.7622) did not claim interface 0 before use [ 323.118957][T22825] netlink: 'syz.3.7634': attribute type 5 has an invalid length. [ 323.127214][T22825] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7634'. [ 323.254783][ T29] audit: type=1326 audit(1768532759.655:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22831 comm="syz.2.7636" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcba3d6f749 code=0x0 [ 323.622090][T22859] netlink: 'syz.3.7645': attribute type 5 has an invalid length. [ 323.629942][T22859] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7645'. [ 323.938320][T22894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=22894 comm=syz.1.7659 [ 324.041726][ T29] audit: type=1400 audit(1768532760.425:765): avc: denied { accept } for pid=22889 comm="syz.0.7657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 324.264399][T22921] syzkaller0: entered promiscuous mode [ 324.270000][T22921] syzkaller0: entered allmulticast mode [ 324.495772][T22923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=22923 comm=syz.1.7670 [ 324.719561][T22946] syzkaller0: entered promiscuous mode [ 324.725215][T22946] syzkaller0: entered allmulticast mode [ 324.732844][ T29] audit: type=1400 audit(1768532761.135:766): avc: denied { recv } for pid=18187 comm="syz-executor" saddr=10.128.0.163 src=49264 daddr=10.128.1.118 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 324.811201][T22948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.819869][T22948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.854134][T22953] x_tables: duplicate underflow at hook 3 [ 325.160218][T22977] syzkaller0: entered promiscuous mode [ 325.165768][T22977] syzkaller0: entered allmulticast mode [ 325.315880][T22989] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22989 comm=syz.4.7701 [ 325.391694][T22992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=22992 comm=syz.4.7702 [ 325.747858][T23009] syzkaller0: entered promiscuous mode [ 325.753378][T23009] syzkaller0: entered allmulticast mode [ 325.808263][T23015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=23015 comm=syz.1.7713 [ 325.967254][T23042] syzkaller0: entered promiscuous mode [ 325.972961][T23042] syzkaller0: entered allmulticast mode [ 326.004217][T23049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=23049 comm=syz.0.7730 [ 326.797319][T23070] __nla_validate_parse: 6 callbacks suppressed [ 326.797337][T23070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7739'. [ 326.850807][T23079] netlink: 120 bytes leftover after parsing attributes in process `syz.4.7742'. [ 326.910255][T23090] xt_hashlimit: size too large, truncated to 1048576 [ 326.964723][T23093] : renamed from vxcan1 (while UP) [ 327.194847][T23106] usb usb8: usbfs: process 23106 (syz.1.7753) did not claim interface 0 before use [ 327.422225][T23126] syzkaller0: entered promiscuous mode [ 327.427737][T23126] syzkaller0: entered allmulticast mode [ 327.746648][T23133] netlink: 596 bytes leftover after parsing attributes in process `syz.3.7766'. [ 327.755772][T23133] netlink: 596 bytes leftover after parsing attributes in process `syz.3.7766'. [ 327.904396][T23153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.914623][T23153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.051917][ T29] audit: type=1400 audit(1768532764.455:767): avc: denied { bind } for pid=23176 comm="syz.2.7788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 328.364602][T23182] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23182 comm=syz.1.7790 [ 328.444290][T23188] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7793'. [ 328.468095][T23193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.477181][T23193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.486285][T23193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.495138][T23193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.503821][T23193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.512420][T23193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.521452][T23193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.530306][T23193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.941269][T23207] 0: reclassify loop, rule prio 0, protocol 800 [ 329.159626][T23221] loop0: detected capacity change from 0 to 128 [ 329.658932][ T29] audit: type=1400 audit(1768532766.055:768): avc: denied { read } for pid=23240 comm="syz.2.7814" path="socket:[73639]" dev="sockfs" ino=73639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 329.703459][T23244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.713981][T23246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7816'. [ 329.714035][T23244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.736169][T23244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.745089][T23244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.772519][T23244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.781308][T23244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.789645][T23244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.799065][T23244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.824271][T23252] syzkaller0: entered promiscuous mode [ 329.829778][T23252] syzkaller0: entered allmulticast mode [ 329.872849][T23256] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23256 comm=syz.0.7821 [ 330.141564][T23276] syzkaller0: entered promiscuous mode [ 330.147148][T23276] syzkaller0: entered allmulticast mode [ 330.256901][T23286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7833'. [ 330.323842][T23290] syzkaller0: entered promiscuous mode [ 330.329485][T23290] syzkaller0: entered allmulticast mode [ 330.811180][T23305] syzkaller0: entered promiscuous mode [ 330.816665][T23305] syzkaller0: entered allmulticast mode [ 330.872885][T17905] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.895837][T17905] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.952301][T23316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.957473][T23314] syzkaller0: entered promiscuous mode [ 330.966457][T23314] syzkaller0: entered allmulticast mode [ 330.981518][T23316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.001696][T23316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.001744][T17905] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.003750][T17905] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.039877][T23316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.072426][T23316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.093085][T23316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.111903][T23316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.125252][T23316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.187839][T23335] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7856'. [ 331.201347][T23333] syzkaller0: entered promiscuous mode [ 331.206826][T23333] syzkaller0: entered allmulticast mode [ 331.365718][T23349] syzkaller0: entered promiscuous mode [ 331.371282][T23349] syzkaller0: entered allmulticast mode [ 331.396313][T23362] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7868'. [ 331.510362][T23376] syzkaller0: entered promiscuous mode [ 331.515867][T23376] syzkaller0: entered allmulticast mode [ 331.690245][T23385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7876'. [ 331.852511][T23395] syzkaller0: entered promiscuous mode [ 331.858014][T23395] syzkaller0: entered allmulticast mode [ 331.985751][T23399] syzkaller0: entered promiscuous mode [ 331.991333][T23399] syzkaller0: entered allmulticast mode [ 332.259341][T23421] syzkaller0: entered promiscuous mode [ 332.264979][T23421] syzkaller0: entered allmulticast mode [ 332.275256][T23423] tipc: Started in network mode [ 332.280189][T23423] tipc: Node identity , cluster identity 4711 [ 332.286261][T23423] tipc: Failed to obtain node identity [ 332.291781][T23423] tipc: Enabling of bearer rejected, failed to enable media [ 332.495406][T23452] __nla_validate_parse: 1 callbacks suppressed [ 332.495420][T23452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7906'. [ 332.510618][T23452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7906'. [ 332.568085][T23452] ip_vti0: Master is either lo or non-ether device [ 332.631897][T23462] syzkaller0: entered promiscuous mode [ 332.637486][T23462] syzkaller0: entered allmulticast mode [ 332.670585][T23474] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23474 comm=syz.0.7915 [ 332.890604][T23490] loop4: detected capacity change from 0 to 128 [ 333.857240][T23550] xt_hashlimit: size too large, truncated to 1048576 [ 334.521653][T23572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7959'. [ 334.543702][T23576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.554435][T23576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.564433][T23576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.575184][T23576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.585423][T23576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.594634][T23576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.606605][T23576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.616238][T23576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.630911][T23576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7960'. [ 334.644981][T23576] dummy0: entered promiscuous mode [ 334.653561][T23576] macvtap1: entered promiscuous mode [ 334.659407][T23576] macvtap1: entered allmulticast mode [ 334.665176][T23576] dummy0: entered allmulticast mode [ 334.676330][T23576] dummy0: left allmulticast mode [ 334.681584][T23576] dummy0: left promiscuous mode [ 335.080809][T23593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.090325][T23593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.099569][T23593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.108941][T23593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.120966][T23593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.130953][T23593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.141256][T23593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.150945][T23593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.160482][T23593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7967'. [ 336.030596][T23630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7981'. [ 336.048528][T23630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7981'. [ 336.152492][T23646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.163003][T23646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.172694][T23646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.182455][T23646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.192476][T23646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.201792][T23646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.211118][T23646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.221174][T23652] Invalid argument reading file caps for ./file0 [ 336.221523][T23646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.238869][T23646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7987'. [ 336.286530][T23656] syzkaller0: entered promiscuous mode [ 336.292119][T23656] syzkaller0: entered allmulticast mode [ 336.387844][T23661] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23661 comm=syz.2.7993 [ 336.519642][T23678] Invalid argument reading file caps for ./file0 [ 336.557232][T23683] syzkaller0: entered promiscuous mode [ 336.562833][T23683] syzkaller0: entered allmulticast mode [ 336.658953][T23689] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23689 comm=syz.4.8006 [ 337.049984][ T29] audit: type=1326 audit(1768532773.435:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23704 comm="syz.4.8014" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1778ff749 code=0x0 [ 337.513840][T23754] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23754 comm=syz.0.8033 [ 337.597761][T23762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8034'. [ 337.668772][T23736] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 337.675301][T23736] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 337.683564][T23736] vhci_hcd vhci_hcd.0: Device attached [ 337.767241][T23783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8043'. [ 337.776276][T23783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8043'. [ 337.825074][T23791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8046'. [ 337.905706][T23800] syzkaller0: entered promiscuous mode [ 337.911319][T23800] syzkaller0: entered allmulticast mode [ 337.949919][T12457] usb 4-1: SetAddress Request (2) to port 0 [ 337.955967][T12457] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 338.094592][T23814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8057'. [ 338.103627][T23814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8057'. [ 338.145543][T23766] vhci_hcd: connection reset by peer [ 338.152162][ T52] vhci_hcd vhci_hcd.1: stop threads [ 338.157417][ T52] vhci_hcd vhci_hcd.1: release socket [ 338.162968][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 338.282987][T23822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8061'. [ 338.312521][T23824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23824 comm=syz.2.8062 [ 338.598300][T23838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8069'. [ 338.620198][T23838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8069'. [ 338.690245][T23850] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23850 comm=syz.2.8074 [ 338.814880][T23868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8083'. [ 339.061124][T23876] ================================================================== [ 339.069231][T23876] BUG: KCSAN: data-race in __tipc_sendstream / tipc_poll [ 339.076267][T23876] [ 339.078583][T23876] read-write to 0xffff888103d9bf26 of 2 bytes by task 23879 on cpu 1: [ 339.086717][T23876] __tipc_sendstream+0x7e1/0xb20 [ 339.091656][T23876] tipc_sendstream+0x3e/0x60 [ 339.096264][T23876] __sock_sendmsg+0x145/0x180 [ 339.100938][T23876] sock_write_iter+0x1a7/0x1f0 [ 339.105718][T23876] vfs_write+0x52a/0x960 [ 339.109956][T23876] ksys_write+0xda/0x1a0 [ 339.114186][T23876] __x64_sys_write+0x40/0x50 [ 339.118770][T23876] x64_sys_call+0x2847/0x3000 [ 339.123452][T23876] do_syscall_64+0xca/0x2b0 [ 339.127956][T23876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.133969][T23876] [ 339.136300][T23876] read to 0xffff888103d9bf26 of 2 bytes by task 23876 on cpu 0: [ 339.143927][T23876] tipc_poll+0x1f9/0x350 [ 339.148178][T23876] sock_poll+0x20d/0x230 [ 339.152440][T23876] __io_arm_poll_handler+0x1ee/0xb70 [ 339.157724][T23876] io_poll_add+0x69/0xe0 [ 339.161978][T23876] __io_issue_sqe+0xfe/0x2e0 [ 339.166586][T23876] io_issue_sqe+0x56/0xa80 [ 339.171014][T23876] io_submit_sqes+0x78b/0x11b0 [ 339.175781][T23876] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 339.181338][T23876] __x64_sys_io_uring_enter+0x78/0x90 [ 339.186728][T23876] x64_sys_call+0x27e4/0x3000 [ 339.191405][T23876] do_syscall_64+0xca/0x2b0 [ 339.195905][T23876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.201803][T23876] [ 339.204117][T23876] value changed: 0x01c7 -> 0x0082 [ 339.209128][T23876] [ 339.211442][T23876] Reported by Kernel Concurrency Sanitizer on: [ 339.217603][T23876] CPU: 0 UID: 0 PID: 23876 Comm: syz.0.8087 Not tainted syzkaller #0 PREEMPT(voluntary) [ 339.227494][T23876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 339.237550][T23876] ================================================================== [ 342.999939][T12457] usb 4-1: device descriptor read/8, error -110 [ 343.110017][T12457] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 343.129862][T12457] usb 4-1: enqueue for inactive port 0 [ 343.135352][T12457] usb 4-1: enqueue for inactive port 0 [ 343.140975][T12457] usb 4-1: enqueue for inactive port 0 [ 344.160152][T12457] usb usb4-port1: attempt power cycle [ 345.980098][T12457] usb usb4-port1: unable to enumerate USB device