last executing test programs: 50.092853595s ago: executing program 4 (id=1076): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x48, r2, 0x1, 0x70bd24, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_b, @random, {0x7, 0xf91}, @value=@ver_80211n={0x0, 0x86e, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x1, 0x54, @val={0x10, 0x1, 0x50}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 49.971214902s ago: executing program 4 (id=1081): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' 8'], 0x86) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 49.805490021s ago: executing program 4 (id=1083): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, @void, @value}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) 49.700923668s ago: executing program 4 (id=1084): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 49.619733822s ago: executing program 4 (id=1085): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000e47000/0x2000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x4031, 0xffffffffffffffff, 0x0) 49.460006272s ago: executing program 4 (id=1087): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000180)="c10c28ad0be68bd97d175dd10a8a732a44621d5c8f37e1af7cf84177edcf1ad3a11d7688fcb29118bdc76c785d643a4685de62d217", 0x35}], 0x2}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="1f93c4eb239cb9f5262cbc3f21c588f5cf0e9f32dd6ec6f53d4c32d8226f11dec4f2c5c6b3e889ad280b335ca335332ec4cacac5039fcfdcdbd9d0c6fcf5bd0d3c0dbb3d58845ae9c943d73322f9b965897cc890976447ff14698bb0be087e947a12727cae", 0x65}, {0x0}], 0x2, &(0x7f0000000900)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0xe1a}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001c00)=[{0x0}, {&(0x7f00000004c0)="45d04ab8ef11f123cb2c4415c892a08071cb4d", 0x13}, {&(0x7f0000000b80)="a3040437f6e5ecc1e5325459de8bfd94744cea6da38f695dd37fd1db446d3ecfed819e5ddca55db091cd15ad17a05bd9c448fbaaaa39b27c0c4113826b7a3614cc5dd07114b6acf36590f96f26513174dac701533b00f10a3a880245c2dcf9fbceaa00f1409ff196557fb8c326a8e55561cad25ce77e4582b2504870fe120e", 0x7f}, {&(0x7f0000000c00)="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", 0x200}], 0x4}}], 0x3, 0x4080) 49.293042547s ago: executing program 32 (id=1087): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000180)="c10c28ad0be68bd97d175dd10a8a732a44621d5c8f37e1af7cf84177edcf1ad3a11d7688fcb29118bdc76c785d643a4685de62d217", 0x35}], 0x2}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="1f93c4eb239cb9f5262cbc3f21c588f5cf0e9f32dd6ec6f53d4c32d8226f11dec4f2c5c6b3e889ad280b335ca335332ec4cacac5039fcfdcdbd9d0c6fcf5bd0d3c0dbb3d58845ae9c943d73322f9b965897cc890976447ff14698bb0be087e947a12727cae", 0x65}, {0x0}], 0x2, &(0x7f0000000900)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0xe1a}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001c00)=[{0x0}, {&(0x7f00000004c0)="45d04ab8ef11f123cb2c4415c892a08071cb4d", 0x13}, {&(0x7f0000000b80)="a3040437f6e5ecc1e5325459de8bfd94744cea6da38f695dd37fd1db446d3ecfed819e5ddca55db091cd15ad17a05bd9c448fbaaaa39b27c0c4113826b7a3614cc5dd07114b6acf36590f96f26513174dac701533b00f10a3a880245c2dcf9fbceaa00f1409ff196557fb8c326a8e55561cad25ce77e4582b2504870fe120e", 0x7f}, {&(0x7f0000000c00)="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", 0x200}], 0x4}}], 0x3, 0x4080) 2.827973268s ago: executing program 1 (id=1932): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 2.66331162s ago: executing program 1 (id=1934): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) io_setup(0xa853, &(0x7f0000000000)=0x0) io_submit(r1, 0x3, &(0x7f00000005c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xb18, r0, &(0x7f0000000140)="e33df6f15096510c0aa8223d1e969d6a80bf632735ef53c2ccaaafddd3552c61169086971ec492c50ae6faad95242c5a065351056621a38086ad6aad5f97fd8a1fe25c8d1db1a5704e47486af83bdb7125a6ef5621e736cb4cf1e511fe94e11b40930b5a488572531cfd6f642daf53bd2c8330fd2816b01506e922f7", 0x7c, 0xb}, 0x0, 0x0]) 2.323222247s ago: executing program 1 (id=1939): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r2, 0x4}, &(0x7f0000000180)=0x8) 2.263403449s ago: executing program 0 (id=1941): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000dc0)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0x5, 0xffe0}}}, 0x24}}, 0x0) 2.177030196s ago: executing program 1 (id=1944): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe4) syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 2.103999903s ago: executing program 0 (id=1945): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x9459831e6c2e00fd, {0x2, 0x0, @empty}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 2.034590687s ago: executing program 1 (id=1947): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) 1.888320719s ago: executing program 0 (id=1950): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 1.842152871s ago: executing program 2 (id=1952): r0 = socket$isdn(0x22, 0x2, 0x10) r1 = socket$isdn(0x22, 0x2, 0x2) r2 = dup3(r1, r0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0xfff, 0x9, 0x4, 0x3, 0x6, 0x1, 0xf8b}, 0xc) 1.752097099s ago: executing program 0 (id=1953): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0) 1.689883112s ago: executing program 2 (id=1956): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x409, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x200, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x2}]}}}]}, 0x44}}, 0x2) 1.616073514s ago: executing program 0 (id=1958): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x73, @dev={0xac, 0x14, 0x14, 0x4}, 0x4, 0x40020002, 'wrr\x00', 0x1}, 0x62) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 1.531653233s ago: executing program 2 (id=1959): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="afe61b8a9d9da6", 0x7) 1.442417813s ago: executing program 0 (id=1961): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x20, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.090386693s ago: executing program 2 (id=1965): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f00"], 0x54}}, 0x0) 905.61834ms ago: executing program 2 (id=1968): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000080000000800000006"], 0x48) r1 = socket(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000002040), &(0x7f0000000100)=@tcp6=r1}, 0x20) recvfrom$rose(r1, &(0x7f0000000600)=""/211, 0xd3, 0x1, 0x0, 0x0) 802.071549ms ago: executing program 3 (id=1970): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x7) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0) syz_clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 712.023465ms ago: executing program 3 (id=1972): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{}], 0x1, 0x0, 0x0, 0x0, 0x0, 0x59}) 648.671514ms ago: executing program 3 (id=1974): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x1000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x1000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 496.794464ms ago: executing program 3 (id=1976): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12) 449.612826ms ago: executing program 5 (id=1977): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 351.587132ms ago: executing program 3 (id=1978): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x528}}, 0xc000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) 351.316278ms ago: executing program 5 (id=1979): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x300, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 326.259067ms ago: executing program 1 (id=1980): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 272.11184ms ago: executing program 5 (id=1981): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0}, 0x10) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f00000000c0)={0x10000, 0x1, &(0x7f0000000100)=[0x7174], 0x0, 0x0, 0x0}) 223.591892ms ago: executing program 3 (id=1982): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 155.363361ms ago: executing program 5 (id=1983): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)={0x2c, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40905}, 0x0) 100.979425ms ago: executing program 5 (id=1984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000c7116a15703b7273000d08000300", @ANYRES32=r2], 0x24}}, 0x0) 45.072216ms ago: executing program 5 (id=1985): syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 0s ago: executing program 2 (id=1986): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x101600, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) kernel console output (not intermixed with test programs): [ 112.967231][ T48] hid-generic C990:0003:007F.000B: unknown main item tag 0x0 [ 112.978933][ T48] hid-generic C990:0003:007F.000B: unknown main item tag 0x0 [ 112.988113][ T48] hid-generic C990:0003:007F.000B: unknown main item tag 0x0 [ 112.997608][ T48] hid-generic C990:0003:007F.000B: unknown main item tag 0x0 [ 113.005100][ T48] hid-generic C990:0003:007F.000B: unknown main item tag 0x0 [ 113.012968][ T48] hid-generic C990:0003:007F.000B: unknown main item tag 0x0 [ 113.020473][ T48] hid-generic C990:0003:007F.000B: unknown main item tag 0x0 [ 113.027896][ T48] hid-generic C990:0003:007F.000B: unknown main item tag 0x0 [ 113.035373][ T48] hid-generic C990:0003:007F.000B: unknown main item tag 0x0 [ 113.042824][ T48] hid-generic C990:0003:007F.000B: unknown main item tag 0x0 [ 113.050215][ T48] hid-generic C990:0003:007F.000B: unknown main item tag 0x0 [ 113.057805][ T48] hid-generic C990:0003:007F.000B: unknown main item tag 0x0 [ 113.065380][ T48] hid-generic C990:0003:007F.000B: unknown main item tag 0x0 [ 113.072851][ T873] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 113.083639][ T48] hid-generic C990:0003:007F.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 113.149484][ T5906] gspca_nw80x: reg_w err -71 [ 113.156831][ T5906] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 113.167091][ T5906] usb 5-1: USB disconnect, device number 11 [ 113.250895][ T873] usb 3-1: Using ep0 maxpacket: 32 [ 113.253764][ T5874] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 113.260187][ T873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 113.272898][ T873] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 113.282012][ T873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.289987][ T873] usb 3-1: Product: syz [ 113.294341][ T873] usb 3-1: Manufacturer: syz [ 113.299986][ T873] usb 3-1: SerialNumber: syz [ 113.306162][ T873] usb 3-1: config 0 descriptor?? [ 113.412385][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 113.424432][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 113.436767][ T5874] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 113.446877][ T5874] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 113.456141][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.466067][ T5874] usb 2-1: config 0 descriptor?? [ 113.471938][ T7530] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 113.481294][ T5874] gspca_main: spca561-2.14.0 probing abcd:cdee [ 113.685943][ T5874] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 113.695565][ T5874] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 113.702731][ T5874] usb 2-1: MIDIStreaming interface descriptor not found [ 113.722020][ T7539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.735'. [ 113.722204][ T873] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 113.737999][ T5874] usb 2-1: USB disconnect, device number 12 [ 114.172549][ T48] usb 3-1: USB disconnect, device number 11 [ 114.230495][ T5825] Bluetooth: hci5: command 0x1003 tx timeout [ 114.230785][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 115.061453][ T7602] block nbd1: shutting down sockets [ 115.409172][ T7621] kvm_intel: kvm [7620]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xae [ 115.531851][ T7632] netlink: 'syz.1.777': attribute type 10 has an invalid length. [ 115.619591][ T7635] hub 6-0:1.0: USB hub found [ 115.629727][ T7635] hub 6-0:1.0: 1 port detected [ 115.665677][ T5874] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 115.766887][ T7647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.785'. [ 115.841880][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 115.858275][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 115.874486][ T5906] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 115.874552][ T5874] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 115.911240][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.921160][ T5874] usb 3-1: Product: syz [ 115.925359][ T5874] usb 3-1: Manufacturer: syz [ 115.930594][ T5874] usb 3-1: SerialNumber: syz [ 115.940832][ T5874] usb 3-1: config 0 descriptor?? [ 116.042056][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 116.052745][ T5906] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 116.078710][ T5906] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.104668][ T5906] usb 4-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 116.115470][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.125011][ T5906] usb 4-1: Product: syz [ 116.129653][ T5906] usb 4-1: Manufacturer: syz [ 116.134986][ T5906] usb 4-1: SerialNumber: syz [ 116.191020][ T5874] usb 3-1: USB disconnect, device number 12 [ 116.280598][ T873] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 116.366847][ T5906] usbhid 4-1:1.0: can't add hid device: -71 [ 116.374828][ T5906] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 116.388274][ T5906] usb 4-1: USB disconnect, device number 8 [ 116.441508][ T873] usb 2-1: Using ep0 maxpacket: 32 [ 116.452336][ T873] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 116.461860][ T873] usb 2-1: config 0 has no interface number 0 [ 116.485104][ T873] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 116.500480][ T873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.508999][ T873] usb 2-1: Product: syz [ 116.513291][ T873] usb 2-1: Manufacturer: syz [ 116.517877][ T873] usb 2-1: SerialNumber: syz [ 116.524995][ T873] usb 2-1: config 0 descriptor?? [ 116.532258][ T873] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 116.566433][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 116.566449][ T30] audit: type=1400 audit(1744012725.433:380): avc: denied { ioctl } for pid=7686 comm="syz.0.803" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 116.649057][ T30] audit: type=1400 audit(1744012725.513:381): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 116.744800][ T873] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 116.763998][ T873] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 116.847914][ T30] audit: type=1400 audit(1744012725.713:382): avc: denied { getopt } for pid=7697 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.030420][ T873] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 117.137020][ T7717] netlink: 'syz.3.816': attribute type 10 has an invalid length. [ 117.157922][ T7717] netlink: 152 bytes leftover after parsing attributes in process `syz.3.816'. [ 117.173142][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 117.173425][ T5874] usb 2-1: USB disconnect, device number 13 [ 117.200425][ T873] usb 1-1: Using ep0 maxpacket: 32 [ 117.207915][ T873] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 117.214457][ T5874] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 117.226500][ T873] usb 1-1: config 0 has no interface number 1 [ 117.240838][ T5874] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 117.251476][ T873] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 117.259672][ T5874] quatech2 2-1:0.51: device disconnected [ 117.268238][ T873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.280099][ T873] usb 1-1: Product: syz [ 117.287240][ T873] usb 1-1: Manufacturer: syz [ 117.295603][ T873] usb 1-1: SerialNumber: syz [ 117.305438][ T873] usb 1-1: config 0 descriptor?? [ 117.317479][ T30] audit: type=1400 audit(1744012726.183:383): avc: denied { connect } for pid=7726 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.377136][ T873] snd-usb-audio 1-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 117.405127][ T30] audit: type=1400 audit(1744012726.273:384): avc: denied { read } for pid=7731 comm="syz.3.824" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 117.428016][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.438345][ T30] audit: type=1400 audit(1744012726.273:385): avc: denied { open } for pid=7731 comm="syz.3.824" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 117.473961][ T30] audit: type=1400 audit(1744012726.273:386): avc: denied { ioctl } for pid=7731 comm="syz.3.824" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 117.565775][ T873] usb 1-1: USB disconnect, device number 12 [ 117.640942][ T10] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 117.714684][ T30] audit: type=1400 audit(1744012726.583:387): avc: denied { create } for pid=7740 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.761366][ T30] audit: type=1400 audit(1744012726.583:388): avc: denied { connect } for pid=7740 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.785707][ T30] audit: type=1400 audit(1744012726.583:389): avc: denied { bind } for pid=7740 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.823088][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.836858][ T10] usb 3-1: config 0 has no interface number 0 [ 117.850774][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 117.875452][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 117.893787][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 117.907234][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.919905][ T10] usb 3-1: config 0 descriptor?? [ 117.925773][ T7730] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 117.954803][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 118.020630][ T5874] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 118.044957][ T7751] syz_tun: entered allmulticast mode [ 118.154040][ T5873] usb 3-1: USB disconnect, device number 13 [ 118.180344][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 118.201037][ T5874] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.225202][ T5874] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.243059][ T5874] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.258105][ T5874] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.286291][ T5874] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.306912][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.537781][ T5874] usb 4-1: GET_CAPABILITIES returned 0 [ 118.556169][ T5874] usbtmc 4-1:16.0: can't read capabilities [ 118.768296][ T5874] usb 4-1: USB disconnect, device number 9 [ 118.822436][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.850'. [ 118.837877][ T873] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz1 [ 118.839415][ T7785] vlan2: entered allmulticast mode [ 118.857562][ T7785] veth1_macvtap: entered allmulticast mode [ 119.025778][ T7792] netlink: 'syz.4.854': attribute type 39 has an invalid length. [ 119.073254][ T7792] syz_tun (unregistering): left allmulticast mode [ 119.123063][ T7761] syz.0.837 (7761): drop_caches: 2 [ 119.241477][ T12] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 119.442331][ T7817] netlink: 32 bytes leftover after parsing attributes in process `syz.4.865'. [ 119.456268][ T7817] netlink: 32 bytes leftover after parsing attributes in process `syz.4.865'. [ 119.602491][ T7829] netlink: 'syz.4.870': attribute type 3 has an invalid length. [ 119.620095][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'. [ 119.666275][ T7832] loop6: detected capacity change from 0 to 524287999 [ 119.693800][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.703218][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.712469][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.721672][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.730177][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.740346][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.756066][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.765287][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.792855][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.802059][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.810129][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.819351][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.827388][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.836606][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.844946][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.854196][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.862067][ T7832] ldm_validate_partition_table(): Disk read failed. [ 119.869654][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.878857][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.886937][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.896154][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.905991][ T7832] Dev loop6: unable to read RDB block 0 [ 119.913420][ T7832] loop6: unable to read partition table [ 119.919294][ T7832] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 119.932974][ T7839] ldm_validate_partition_table(): Disk read failed. [ 119.940153][ T7839] Dev loop6: unable to read RDB block 0 [ 119.947295][ T7839] loop6: unable to read partition table [ 119.956556][ T7837] ldm_validate_partition_table(): Disk read failed. [ 119.965409][ T7837] Dev loop6: unable to read RDB block 0 [ 119.971977][ T7837] loop6: unable to read partition table [ 119.977813][ T7837] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 119.990946][ T5873] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 120.204181][ T5873] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 120.213407][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.221986][ T5873] usb 5-1: Product: syz [ 120.226221][ T5873] usb 5-1: Manufacturer: syz [ 120.233168][ T5873] usb 5-1: SerialNumber: syz [ 120.242255][ T5873] usb 5-1: config 0 descriptor?? [ 120.660120][ T5873] usb 5-1: Firmware: major: 107, minor: 86, hardware type: RZUSB (3) [ 120.670584][ T48] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 120.670814][ T5874] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 120.740382][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 120.830427][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 120.837104][ T5874] usb 4-1: config 0 has no interfaces? [ 120.844297][ T5874] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 120.850429][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 120.853666][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.864530][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.868582][ T5874] usb 4-1: Product: syz [ 120.876900][ T5873] usb 5-1: failed to fetch extended address, random address set [ 120.878592][ T5874] usb 4-1: Manufacturer: syz [ 120.887795][ T48] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 120.892304][ T5874] usb 4-1: SerialNumber: syz [ 120.899638][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.915506][ T5874] usb 4-1: config 0 descriptor?? [ 120.921899][ T48] usb 3-1: Product: syz [ 120.926220][ T48] usb 3-1: Manufacturer: syz [ 120.931041][ T48] usb 3-1: SerialNumber: syz [ 120.937032][ T48] usb 3-1: config 0 descriptor?? [ 120.940327][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 120.948561][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 120.952315][ T5873] usb 5-1: USB disconnect, device number 12 [ 120.963745][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 120.983966][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 120.995710][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.004878][ T10] usb 1-1: Product: syz [ 121.009154][ T10] usb 1-1: Manufacturer: syz [ 121.017088][ T10] usb 1-1: SerialNumber: syz [ 121.027769][ T10] usb 1-1: config 0 descriptor?? [ 121.037059][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 121.046888][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 121.163646][ T973] usb 4-1: USB disconnect, device number 10 [ 121.271175][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 121.271624][ T5825] Bluetooth: hci5: command 0x1003 tx timeout [ 121.353933][ T48] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 121.424407][ T7875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.556478][ T48] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 121.577533][ T48] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 121.599799][ T48] usb 3-1: USB disconnect, device number 14 [ 121.620212][ T7885] netlink: 'syz.4.896': attribute type 11 has an invalid length. [ 121.643418][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (51) [ 121.780333][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 121.780350][ T30] audit: type=1400 audit(1744012730.643:436): avc: denied { ioctl } for pid=7891 comm="syz.3.899" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 121.811344][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.844659][ T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 121.869584][ T10] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 121.877010][ T10] em28xx 1-1:0.0: No AC97 audio processor [ 121.896987][ T10] usb 1-1: USB disconnect, device number 13 [ 121.905504][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 121.913418][ T10] em28xx 1-1:0.0: Freeing device [ 122.138849][ T5874] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 122.253030][ T7912] ALSA: mixer_oss: invalid OSS volume '' [ 122.311828][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 122.337142][ T5874] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 122.351930][ T5874] usb 4-1: config 0 has no interface number 0 [ 122.368534][ T5874] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 122.380000][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.434226][ T5874] usb 4-1: Product: syz [ 122.438432][ T5874] usb 4-1: Manufacturer: syz [ 122.451659][ T5874] usb 4-1: SerialNumber: syz [ 122.466996][ T5874] usb 4-1: config 0 descriptor?? [ 122.474516][ T5874] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 122.694726][ T5874] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 122.722278][ T5874] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 122.899481][ T30] audit: type=1400 audit(1744012731.763:437): avc: denied { ioctl } for pid=7937 comm="syz.4.919" path="socket:[17809]" dev="sockfs" ino=17809 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.955811][ T5874] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz1 [ 123.129423][ T30] audit: type=1400 audit(1744012731.993:438): avc: denied { write } for pid=7947 comm="syz.4.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.187822][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 123.188538][ T48] usb 4-1: USB disconnect, device number 11 [ 123.200573][ T30] audit: type=1400 audit(1744012732.053:439): avc: denied { setopt } for pid=7950 comm="syz.1.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.272512][ T48] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 123.315675][ T48] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 123.356412][ T48] quatech2 4-1:0.51: device disconnected [ 123.569638][ T7971] serio: Serial port ptm0 [ 123.840661][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 123.865630][ T30] audit: type=1400 audit(1744012732.733:440): avc: denied { mount } for pid=7977 comm="syz.3.937" name="/" dev="hugetlbfs" ino=18665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 123.930883][ T30] audit: type=1400 audit(1744012732.793:441): avc: denied { unmount } for pid=6096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 124.000364][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 124.007202][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 124.019142][ T10] usb 5-1: config 0 has no interface number 0 [ 124.047641][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 124.067824][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.084918][ T10] usb 5-1: Product: syz [ 124.093483][ T10] usb 5-1: Manufacturer: syz [ 124.098125][ T10] usb 5-1: SerialNumber: syz [ 124.112480][ T10] usb 5-1: config 0 descriptor?? [ 124.121377][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 124.329667][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 124.340972][ T48] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 124.349531][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 124.493246][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.511797][ T48] usb 2-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 124.540740][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.559994][ T48] usb 2-1: config 0 descriptor?? [ 125.015875][ T48] logitech 0003:046D:C283.000E: hidraw0: USB HID v0.00 Device [HID 046d:c283] on usb-dummy_hcd.1-1/input0 [ 125.030644][ T48] logitech 0003:046D:C283.000E: no inputs found [ 125.030685][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 125.247542][ T10] usb 2-1: USB disconnect, device number 14 [ 125.311586][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 125.311959][ T873] usb 5-1: USB disconnect, device number 13 [ 125.346111][ T873] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 125.378476][ T873] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 125.420888][ T873] quatech2 5-1:0.51: device disconnected [ 125.429193][ T30] audit: type=1400 audit(1744012734.293:442): avc: denied { connect } for pid=8023 comm="syz.3.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.707284][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.838903][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'. [ 126.326498][ T30] audit: type=1326 audit(1744012735.193:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9278d169 code=0x7ffc0000 [ 126.371719][ T30] audit: type=1326 audit(1744012735.223:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9278d169 code=0x7ffc0000 [ 126.394945][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.437389][ T30] audit: type=1326 audit(1744012735.223:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f4e9278d169 code=0x7ffc0000 [ 126.460550][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.703320][ T8088] team0: Device gtp0 is of different type [ 126.876876][ T8097] batman_adv: batadv0: Adding interface: dummy0 [ 126.890192][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 126.890209][ T30] audit: type=1400 audit(1744012735.753:452): avc: denied { watch watch_reads } for pid=8100 comm="syz.2.993" path="/196/file0" dev="tmpfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.900355][ T8097] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.919619][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.959864][ T8097] batman_adv: batadv0: Interface activated: dummy0 [ 127.123691][ T8111] nfs: Bad value for 'source' [ 127.154492][ T30] audit: type=1400 audit(1744012736.023:453): avc: denied { create } for pid=8116 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 127.380454][ T5874] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 127.535398][ T8136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1010'. [ 127.542010][ T5874] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 127.562962][ T5874] usb 5-1: config 0 has no interface number 0 [ 127.579001][ T5874] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 127.608372][ T5874] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.623460][ T5874] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 127.641311][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.649478][ T5874] usb 5-1: Product: syz [ 127.653986][ T5874] usb 5-1: Manufacturer: syz [ 127.658990][ T5874] usb 5-1: SerialNumber: syz [ 127.666766][ T5874] usb 5-1: config 0 descriptor?? [ 127.672592][ T8115] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 127.681892][ T5874] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 127.712890][ T5874] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 127.726138][ T8145] mkiss: ax0: crc mode is auto. [ 127.803395][ T30] audit: type=1400 audit(1744012736.673:454): avc: denied { audit_read } for pid=8149 comm="syz.0.1017" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.133436][ T10] usb 5-1: USB disconnect, device number 14 [ 128.147030][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 128.159847][ T10] cyberjack 5-1:0.69: device disconnected [ 128.453528][ T8142] [U] . [ 128.572647][ T10] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 128.734376][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 128.747720][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 128.765864][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 128.771037][ T30] audit: type=1400 audit(1744012737.633:455): avc: denied { write } for pid=8184 comm="syz.4.1033" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 128.778693][ T10] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 128.821714][ T8186] 9pnet_fd: Insufficient options for proto=fd [ 128.829688][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.850352][ T10] usb 2-1: Product: syz [ 128.854560][ T10] usb 2-1: Manufacturer: syz [ 128.860441][ T48] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 128.869345][ T10] usb 2-1: SerialNumber: syz [ 128.893170][ T10] usb 2-1: config 0 descriptor?? [ 128.908966][ T8175] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.917390][ T8175] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.938395][ T10] usb 2-1: ucan: probing device on interface #0 [ 128.997996][ T8192] tap0: tun_chr_ioctl cmd 1074025672 [ 129.010762][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 129.025976][ T8192] tap0: ignored: set checksum disabled [ 129.040646][ T48] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 129.048813][ T48] usb 4-1: config 0 has no interface number 0 [ 129.059899][ T48] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 129.074196][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.084293][ T48] usb 4-1: Product: syz [ 129.088523][ T48] usb 4-1: Manufacturer: syz [ 129.103506][ T48] usb 4-1: SerialNumber: syz [ 129.128448][ T48] usb 4-1: config 0 descriptor?? [ 129.135937][ T48] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 129.158130][ T10] usb 2-1: ucan: could not read protocol version, ret=-71 [ 129.158491][ T30] audit: type=1400 audit(1744012738.023:456): avc: denied { read } for pid=8196 comm="syz.2.1038" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 129.180363][ T10] usb 2-1: ucan: probe failed; try to update the device firmware [ 129.210103][ T30] audit: type=1400 audit(1744012738.023:457): avc: denied { open } for pid=8196 comm="syz.2.1038" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 129.240720][ T10] usb 2-1: USB disconnect, device number 15 [ 129.283398][ T30] audit: type=1400 audit(1744012738.043:458): avc: denied { write } for pid=8196 comm="syz.2.1038" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 129.342033][ T48] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 129.382371][ T30] audit: type=1400 audit(1744012738.143:459): avc: denied { bind } for pid=8198 comm="syz.2.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 129.402372][ T48] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 129.414233][ T30] audit: type=1400 audit(1744012738.143:460): avc: denied { listen } for pid=8198 comm="syz.2.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 129.554195][ T8181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.572535][ T8181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.627162][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 129.822632][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 129.831531][ T5873] usb 4-1: USB disconnect, device number 12 [ 129.841008][ T5873] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 129.863577][ T5873] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 129.886710][ T5873] quatech2 4-1:0.51: device disconnected [ 130.072798][ T8243] syz.1.1059 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 130.118457][ T8247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.224065][ T30] audit: type=1800 audit(1744012739.083:461): pid=8235 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1055" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 130.613163][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1072'. [ 130.839129][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 130.906748][ T8293] team0: Port device geneve0 removed [ 131.590433][ T5873] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 131.741323][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 131.769795][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.778882][ T5873] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 131.827886][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.838068][ T5873] usb 4-1: Product: syz [ 131.842714][ T5873] usb 4-1: Manufacturer: syz [ 131.847348][ T5873] usb 4-1: SerialNumber: syz [ 131.859652][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.868172][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.876600][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.884510][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.892179][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.913029][ T5873] usb 4-1: config 0 descriptor?? [ 132.113270][ T8317] chnl_net:caif_netlink_parms(): no params data found [ 132.194340][ T8317] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.202672][ T8317] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.209964][ T8317] bridge_slave_0: entered allmulticast mode [ 132.218080][ T8317] bridge_slave_0: entered promiscuous mode [ 132.228187][ T8317] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.236747][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.244847][ T8317] bridge_slave_1: entered allmulticast mode [ 132.252707][ T8317] bridge_slave_1: entered promiscuous mode [ 132.277758][ T8317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.289504][ T8317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.323942][ T8317] team0: Port device team_slave_0 added [ 132.332125][ T5873] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 132.339281][ T8317] team0: Port device team_slave_1 added [ 132.366114][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.373340][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.399522][ T8317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.412819][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.419816][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.462375][ T8317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.473324][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 132.524658][ T8317] hsr_slave_0: entered promiscuous mode [ 132.533630][ T8317] hsr_slave_1: entered promiscuous mode [ 132.541348][ T8317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.558938][ T8317] Cannot create hsr debugfs directory [ 132.631019][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 132.637616][ T10] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 132.646112][ T10] usb 3-1: config 0 has no interface number 0 [ 132.654474][ T10] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 132.670576][ T10] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.689140][ T10] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 132.714605][ T10] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 132.731717][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.750337][ T10] usb 3-1: Product: syz [ 132.759771][ T10] usb 3-1: Manufacturer: syz [ 132.774112][ T5874] usb 4-1: USB disconnect, device number 13 [ 132.781307][ T10] usb 3-1: SerialNumber: syz [ 132.791578][ T10] usb 3-1: config 0 descriptor?? [ 132.791741][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 132.791752][ T30] audit: type=1400 audit(1744012741.653:463): avc: denied { connect } for pid=8342 comm="syz.1.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 132.797250][ T8335] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 132.829370][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.865289][ T10] ums-sddr09 3-1:0.20: USB Mass Storage device detected [ 132.896293][ T8317] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 132.909207][ T8317] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 132.919458][ T8317] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 132.937613][ T10] ums-sddr09 3-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 132.939522][ T8317] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.000144][ T8317] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.007345][ T8317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.014801][ T8317] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.020712][ T8352] loop6: detected capacity change from 0 to 524287999 [ 133.021921][ T8317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.029232][ C0] blk_print_req_error: 41 callbacks suppressed [ 133.029244][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.051182][ C0] buffer_io_error: 41 callbacks suppressed [ 133.051195][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.072312][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.081563][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.120196][ T48] usb 3-1: USB disconnect, device number 15 [ 133.184453][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.198364][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.233475][ T8317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.240605][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.249747][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.253888][ T8317] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.264598][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.273776][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.281906][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.291066][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.302907][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.312079][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.331247][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.338431][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.342864][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.354787][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.364848][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.374048][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.375709][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1107'. [ 133.392979][ T8356] netlink: 'syz.0.1107': attribute type 5 has an invalid length. [ 133.393332][ T8352] ldm_validate_partition_table(): Disk read failed. [ 133.418128][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.425282][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.430816][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.441654][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.461147][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.470376][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.489966][ T8352] Dev loop6: unable to read RDB block 0 [ 133.513900][ T8352] loop6: unable to read partition table [ 133.519827][ T8352] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 133.741669][ T8370] netlink: 'syz.2.1112': attribute type 21 has an invalid length. [ 133.749696][ T8370] netlink: 'syz.2.1112': attribute type 22 has an invalid length. [ 133.757553][ T8317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.782197][ T5874] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 133.835233][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.850322][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.940428][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 133.957316][ T5874] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 133.977642][ T30] audit: type=1400 audit(1744012742.843:464): avc: denied { setopt } for pid=8383 comm="syz.1.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 133.986742][ T5874] usb 4-1: config 0 has no interface number 0 [ 134.004382][ T5838] Bluetooth: hci4: command tx timeout [ 134.034924][ T5874] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.077849][ T5874] usb 4-1: config 0 interface 85 has no altsetting 0 [ 134.092745][ T8317] veth0_vlan: entered promiscuous mode [ 134.123210][ T30] audit: type=1400 audit(1744012742.993:465): avc: denied { append } for pid=8389 comm="syz.2.1120" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 134.126405][ T5874] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 134.166610][ T8317] veth1_vlan: entered promiscuous mode [ 134.215032][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.226894][ T5874] usb 4-1: Product: syz [ 134.228940][ T8317] veth0_macvtap: entered promiscuous mode [ 134.237504][ T5874] usb 4-1: Manufacturer: syz [ 134.242743][ T5874] usb 4-1: SerialNumber: syz [ 134.249437][ T5874] usb 4-1: config 0 descriptor?? [ 134.252716][ T8317] veth1_macvtap: entered promiscuous mode [ 134.278605][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.293897][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.305347][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.316757][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.336106][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.347716][ T8397] loop6: detected capacity change from 0 to 524287999 [ 134.359385][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.359703][ T8397] ldm_validate_partition_table(): Disk read failed. [ 134.380863][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.381170][ T8397] Dev loop6: unable to read RDB block 0 [ 134.399973][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.405715][ T8397] loop6: unable to read partition table [ 134.412962][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.426099][ T8397] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 134.426249][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.449089][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.512321][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.560658][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.580317][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.595360][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.612612][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.624690][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.635539][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.647372][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.648453][ T30] audit: type=1400 audit(1744012743.523:466): avc: denied { read } for pid=8403 comm="syz.1.1125" path="socket:[20843]" dev="sockfs" ino=20843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 134.659182][ T8317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.691989][ T8317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.705855][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.732340][ T8317] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.742381][ T8317] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.751211][ T8317] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.759950][ T8317] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.827677][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.849906][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.893440][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.902395][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.906381][ T5874] appletouch 4-1:0.85: Geyser mode initialized. [ 134.927821][ T30] audit: type=1400 audit(1744012743.793:467): avc: denied { mounton } for pid=8317 comm="syz-executor" path="/root/syzkaller.9zS6or/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 134.931585][ T5874] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input12 [ 134.981218][ T5873] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 135.141017][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 135.158335][ T5873] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 135.177056][ T5873] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 135.200297][ T5873] usb 3-1: config 0 has no interface number 0 [ 135.208347][ T5906] usb 4-1: USB disconnect, device number 14 [ 135.218993][ T5873] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.231774][ T5873] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.243606][ T5873] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 135.261317][ T5906] appletouch 4-1:0.85: input: appletouch disconnected [ 135.273857][ T5873] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 135.283840][ T5873] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 135.293048][ T5873] usb 3-1: Product: syz [ 135.297318][ T5873] usb 3-1: Manufacturer: syz [ 135.305256][ T5873] usb 3-1: config 0 descriptor?? [ 135.311355][ T8411] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 135.413605][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 135.617852][ T30] audit: type=1400 audit(1744012744.483:468): avc: denied { bind } for pid=8429 comm="syz.0.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.640623][ T5874] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 135.670211][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1138'. [ 135.686256][ T8432] vlan2: entered allmulticast mode [ 135.691780][ T8432] veth1_macvtap: entered allmulticast mode [ 135.763112][ T8434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1139'. [ 135.793989][ T5874] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 135.803778][ T5874] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 135.815463][ T5874] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.831107][ T5874] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 135.842467][ T5874] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 135.854534][ T5874] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 135.862441][ T5874] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 135.873032][ T5874] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.883300][ T5874] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 135.894864][ T5874] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 135.905917][ T5874] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 135.913980][ T5874] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 135.924176][ T5874] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.935600][ T5874] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 135.938487][ T5873] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input13 [ 135.952727][ T5874] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 135.969515][ T5874] usb 6-1: string descriptor 0 read error: -22 [ 135.976398][ T5874] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 135.985512][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.999504][ T5874] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 136.031057][ T48] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 136.070541][ T5838] Bluetooth: hci4: command tx timeout [ 136.186398][ T5874] usb 3-1: USB disconnect, device number 16 [ 136.186466][ C1] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 136.208888][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.220196][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.220269][ T48] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 acpid: input dev[ 136.220296][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 ice has been dis[ 136.223020][ T48] usb 4-1: config 0 descriptor?? connected, fd 3 [ 136.269603][ T5906] usb 6-1: USB disconnect, device number 2 [ 136.667231][ T48] steelseries 0003:1038:12B6.000F: unknown main item tag 0x0 [ 136.674798][ T48] steelseries 0003:1038:12B6.000F: unknown main item tag 0x0 [ 136.682284][ T48] steelseries 0003:1038:12B6.000F: unknown main item tag 0x6 [ 136.689672][ T48] steelseries 0003:1038:12B6.000F: item fetching failed at offset 4/7 [ 136.698744][ T48] steelseries 0003:1038:12B6.000F: probe with driver steelseries failed with error -22 [ 136.812244][ T8445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.932913][ T5874] usb 4-1: USB disconnect, device number 15 [ 136.961539][ T48] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz1 [ 137.500499][ T48] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 137.650371][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 137.660466][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 137.666775][ T48] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 137.677197][ T48] usb 2-1: config 0 has an invalid descriptor of length 85, skipping remainder of the config [ 137.687679][ T48] usb 2-1: config 0 has no interface number 0 [ 137.695547][ T48] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 137.704988][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.713065][ T48] usb 2-1: Product: syz [ 137.717243][ T48] usb 2-1: Manufacturer: syz [ 137.722360][ T48] usb 2-1: SerialNumber: syz [ 137.728465][ T48] usb 2-1: config 0 descriptor?? [ 137.800322][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 137.806749][ T24] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 137.815914][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.832066][ T24] usb 1-1: config 0 descriptor?? [ 137.843357][ T24] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 137.955049][ T48] usb 2-1: USB disconnect, device number 16 [ 138.150990][ T5838] Bluetooth: hci4: command tx timeout [ 138.319734][ T8490] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1166'. [ 138.587046][ T8507] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1174'. [ 138.597390][ T30] audit: type=1400 audit(1744012747.453:469): avc: denied { ioctl } for pid=8504 comm="syz.1.1173" path="socket:[21205]" dev="sockfs" ino=21205 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 138.655044][ T24] gspca_nw80x: reg_r err -71 [ 138.665778][ T24] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 138.682916][ T24] usb 1-1: USB disconnect, device number 14 [ 138.907035][ T30] audit: type=1400 audit(1744012747.773:470): avc: denied { write } for pid=8518 comm="syz.1.1179" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 138.948454][ T48] kernel write not supported for file /492/attr/exec (pid: 48 comm: kworker/1:1) [ 139.464063][ T30] audit: type=1326 audit(1744012748.333:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8551 comm="syz.3.1194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e9278d169 code=0x0 [ 139.603976][ T30] audit: type=1400 audit(1744012748.473:472): avc: denied { setopt } for pid=8556 comm="syz.2.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 139.658420][ T30] audit: type=1400 audit(1744012748.523:473): avc: denied { module_load } for pid=8559 comm="syz.2.1197" path=2F6D656D66643AFB2261268F65118CD634F920202864656C6574656429 dev="hugetlbfs" ino=21702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 139.659869][ T8561] Invalid ELF header magic: != ELF [ 139.685904][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.231500][ T5825] Bluetooth: hci4: command tx timeout [ 140.720601][ T5875] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 140.894290][ T5875] usb 4-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 140.910660][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 140.942877][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 23573, setting to 64 [ 140.975220][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 141.006882][ T5875] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 141.026685][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 141.060303][ T5875] usb 4-1: Product: syz [ 141.064519][ T5875] usb 4-1: Manufacturer: syz [ 141.079133][ T5875] usb 4-1: SerialNumber: syz [ 141.089943][ T5875] usb 4-1: config 0 descriptor?? [ 141.098595][ T8594] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 141.113901][ T30] audit: type=1400 audit(1744012749.983:474): avc: denied { setopt } for pid=8615 comm="syz.0.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.138601][ T30] audit: type=1400 audit(1744012750.003:475): avc: denied { bind } for pid=8615 comm="syz.0.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.192679][ T30] audit: type=1400 audit(1744012750.003:476): avc: denied { name_bind } for pid=8615 comm="syz.0.1220" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 141.241277][ T30] audit: type=1400 audit(1744012750.003:477): avc: denied { node_bind } for pid=8615 comm="syz.0.1220" saddr=fe80::aa src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 141.324086][ T5875] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 141.340800][ T5875] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 141.527701][ T5875] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 141.546251][ T5875] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 141.559058][ T5874] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 141.569504][ T5875] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 141.636206][ T30] audit: type=1400 audit(1744012750.503:478): avc: denied { ioctl } for pid=8641 comm="syz.0.1230" path="socket:[22592]" dev="sockfs" ino=22592 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.660820][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.725530][ T5875] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 141.741290][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.747913][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.754699][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.761759][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.768830][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.775753][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.782489][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.789133][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.796413][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.803332][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.809966][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.816661][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.823495][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.830186][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.837023][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.843807][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.850762][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.857392][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.864396][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.872343][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.879254][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.886132][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.892816][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.899478][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.906066][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.913035][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.919661][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.926348][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.933062][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.939691][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.946309][ T5875] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 141.954961][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.961535][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.968047][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.974579][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.976076][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.982820][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.989281][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 141.995938][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.002498][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.009027][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.015768][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.022315][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.028820][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.035303][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.042136][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.048624][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.055132][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.061656][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.068160][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.075105][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.082663][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.089190][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.095710][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.102458][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.108973][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.115499][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.122003][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.128503][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.130364][ T48] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 142.135235][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.156270][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.163176][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.169808][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.176802][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.184236][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.191440][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.198068][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.204679][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.211328][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.218071][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.224904][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.231635][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.238361][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.245004][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.252288][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.259154][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.266023][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.272659][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.280078][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.286631][ T5874] usb 6-1: config 7 has an invalid interface number: 101 but max is 0 [ 142.293007][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 142.295129][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.306744][ T5874] usb 6-1: config 7 has no interface number 0 [ 142.310400][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 142.313076][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.325987][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.332615][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.339210][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.346164][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.346355][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.346614][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.347001][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.347236][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.348482][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.348903][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.349090][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.349289][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.349475][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.349726][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.349912][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.350094][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.350277][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.350469][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.350657][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.350836][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 142.351884][ T5875] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 142.352900][ T5874] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 142.352925][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.352942][ T5874] usb 6-1: Product: syz [ 142.352956][ T5874] usb 6-1: Manufacturer: syz [ 142.352983][ T5874] usb 6-1: SerialNumber: syz [ 142.361745][ T5875] usb 4-1: USB disconnect, device number 16 [ 142.365568][ T48] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 142.365595][ T48] usb 2-1: config 0 has no interface number 0 [ 142.365629][ T48] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.365655][ T48] usb 2-1: config 0 interface 85 has no altsetting 0 [ 142.394064][ T48] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 142.562862][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.571039][ T48] usb 2-1: Product: syz [ 142.575210][ T48] usb 2-1: Manufacturer: syz [ 142.579808][ T48] usb 2-1: SerialNumber: syz [ 142.588775][ T48] usb 2-1: config 0 descriptor?? [ 142.644945][ T973] IPVS: starting estimator thread 0... [ 142.730547][ T5875] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 142.740552][ T8664] IPVS: using max 47 ests per chain, 112800 per kthread [ 142.880720][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 142.880828][ T873] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 142.896218][ T5875] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 142.905841][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.923109][ T5875] usb 4-1: config 0 descriptor?? [ 142.936486][ T5875] gspca_main: sq930x-2.14.0 probing 041e:403c [ 143.050671][ T873] usb 3-1: Using ep0 maxpacket: 16 [ 143.059669][ T873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.071161][ T873] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 143.082731][ T873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.093226][ T873] usb 3-1: config 0 descriptor?? [ 143.151606][ T5874] as10x_usb: device has been detected [ 143.157813][ T5874] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 143.182024][ T5874] usb 6-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 143.197468][ T5874] as10x_usb: error during firmware upload part1 [ 143.206718][ T48] appletouch 2-1:0.85: Geyser mode initialized. [ 143.207699][ T5874] Registered device Elgato EyeTV DTT Deluxe [ 143.221454][ T48] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input14 [ 143.388939][ T5874] usb 6-1: USB disconnect, device number 3 [ 143.406271][ T5874] Unregistered device Elgato EyeTV DTT Deluxe [ 143.407852][ T5874] as10x_usb: device has been disconnected [ 143.459177][ T24] usb 2-1: USB disconnect, device number 17 [ 143.478165][ T24] appletouch 2-1:0.85: input: appletouch disconnected [ 143.515120][ T873] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 143.770542][ T5875] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 143.830642][ T5875] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 143.845276][ T5875] usb 4-1: USB disconnect, device number 17 [ 143.945000][ T873] usb 3-1: USB disconnect, device number 17 [ 144.092239][ T8709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1261'. [ 144.101537][ T5874] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 144.199025][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 144.199040][ T30] audit: type=1400 audit(1744012753.063:482): avc: denied { connect } for pid=8714 comm="syz.1.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.226370][ T30] audit: type=1400 audit(1744012753.103:483): avc: denied { write } for pid=8714 comm="syz.1.1264" path="socket:[21984]" dev="sockfs" ino=21984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.270595][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 144.278719][ T30] audit: type=1400 audit(1744012753.143:484): avc: denied { read } for pid=8714 comm="syz.1.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.312413][ T5874] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 144.325254][ T5874] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 144.339576][ T5874] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.355440][ T5874] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 144.375204][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 144.396433][ T5874] usb 1-1: Product: syz [ 144.401827][ T5874] usb 1-1: Manufacturer: syz [ 144.406458][ T5874] usb 1-1: SerialNumber: syz [ 144.431949][ T5874] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input16 [ 144.595465][ T30] audit: type=1400 audit(1744012753.463:485): avc: denied { listen } for pid=8727 comm="syz.1.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.660709][ T30] audit: type=1400 audit(1744012753.463:486): avc: denied { accept } for pid=8727 comm="syz.1.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.723652][ T973] usb 1-1: USB disconnect, device number 15 [ 144.753677][ T973] appletouch 1-1:1.0: input: appletouch disconnected [ 144.901178][ T8744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1277'. [ 145.118116][ T8758] delete_channel: no stack [ 145.130611][ T873] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 145.223894][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1286'. [ 145.293424][ T873] usb 4-1: Using ep0 maxpacket: 8 [ 145.317090][ T873] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 145.337806][ T873] usb 4-1: config 179 has no interface number 0 [ 145.346115][ T873] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 145.367815][ T873] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 145.379978][ T873] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 145.391661][ T873] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 145.403197][ T873] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 145.417078][ T873] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 145.427035][ T873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.454331][ T8746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 145.765966][ T8789] input: syz1 as /devices/virtual/input/input17 [ 145.948505][ T48] usb 4-1: USB disconnect, device number 18 [ 145.954805][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 145.954854][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 146.017665][ T30] audit: type=1400 audit(2000000000.540:487): avc: denied { bind } for pid=8794 comm="syz.2.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.644419][ T30] audit: type=1400 audit(2000000001.170:488): avc: denied { ioctl } for pid=8813 comm="syz.1.1308" path="socket:[23079]" dev="sockfs" ino=23079 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.906267][ T13] tipc: Subscription rejected, illegal request [ 147.020398][ T30] audit: type=1326 audit(2000000001.540:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8796 comm="syz.2.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b41d8d169 code=0x7fc00000 [ 147.043754][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.083272][ T30] audit: type=1326 audit(2000000001.540:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8796 comm="syz.2.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b41d8d169 code=0x7fc00000 [ 147.133721][ T30] audit: type=1326 audit(2000000001.540:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8796 comm="syz.2.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b41d8d169 code=0x7fc00000 [ 147.288444][ T8841] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1318'. [ 147.320247][ T5874] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 147.482075][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.500777][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.520520][ T5874] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 147.538698][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.559887][ T5874] usb 6-1: config 0 descriptor?? [ 147.669783][ T8863] mmap: syz.0.1329 (8863) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 147.735555][ T8865] kernel read not supported for file /eth0 (pid: 8865 comm: syz.3.1330) [ 147.770928][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 147.829947][ T8871] vxcan1: entered allmulticast mode [ 147.836950][ T8871] vxcan1: left allmulticast mode [ 147.940424][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 147.948060][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 147.965236][ T24] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 147.976488][ T24] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 147.988660][ T24] usb 3-1: Product: syz [ 147.996697][ T24] usb 3-1: Manufacturer: syz [ 148.003931][ T24] usb 3-1: SerialNumber: syz [ 148.005869][ T5874] isku 0003:1E7D:319C.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 148.027326][ T24] usb 3-1: config 0 descriptor?? [ 148.033052][ T8852] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 148.196120][ T5874] isku 0003:1E7D:319C.0012: couldn't init struct isku_device [ 148.207274][ T5874] isku 0003:1E7D:319C.0012: couldn't install keyboard [ 148.219778][ T5874] isku 0003:1E7D:319C.0012: probe with driver isku failed with error -71 [ 148.236355][ T5874] usb 6-1: USB disconnect, device number 4 [ 148.362783][ T8883] macvlan0: entered allmulticast mode [ 148.368300][ T8883] veth1_vlan: entered allmulticast mode [ 148.456999][ T24] usb 3-1: USB disconnect, device number 18 [ 148.660122][ T48] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 148.824679][ T48] usb 4-1: config 0 has an invalid interface number: 33 but max is 0 [ 148.843920][ T48] usb 4-1: config 0 has no interface number 0 [ 148.862282][ T48] usb 4-1: New USB device found, idVendor=24cf, idProduct=59e4, bcdDevice= 9.43 [ 148.883205][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.891948][ T8908] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 148.912276][ T316] Bluetooth: hci5: Frame reassembly failed (-84) [ 148.933958][ T8909] SELinux: ebitmap: truncated map [ 148.940737][ T48] usb 4-1: config 0 descriptor?? [ 148.946203][ T8909] SELinux: failed to load policy [ 148.953984][ T48] usb-storage 4-1:0.33: USB Mass Storage device detected [ 149.188501][ T24] usb 4-1: USB disconnect, device number 19 [ 149.281108][ T48] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 149.450830][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 149.460768][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.481712][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.500764][ T48] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 149.512187][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.523530][ T48] usb 1-1: config 0 descriptor?? [ 149.740644][ T5875] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 149.832192][ T5825] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 149.841272][ T5825] Bluetooth: hci3: Injecting HCI hardware error event [ 149.850054][ T5829] Bluetooth: hci3: hardware error 0x00 [ 149.913272][ T5875] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.930549][ T5875] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.965228][ T48] playstation 0003:054C:05C4.0013: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 149.982576][ T5875] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.010294][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.018347][ T5875] usb 2-1: Product: syz [ 150.030071][ T5875] usb 2-1: Manufacturer: syz [ 150.034707][ T5875] usb 2-1: SerialNumber: syz [ 150.144759][ T48] playstation 0003:054C:05C4.0013: Invalid reportID received, expected 18 got 163 [ 150.160377][ T48] playstation 0003:054C:05C4.0013: Failed to retrieve DualShock4 pairing info: -22 [ 150.174715][ T48] playstation 0003:054C:05C4.0013: Failed to get MAC address from DualShock4 [ 150.184019][ T48] playstation 0003:054C:05C4.0013: Failed to create dualshock4. [ 150.194992][ T48] playstation 0003:054C:05C4.0013: probe with driver playstation failed with error -22 [ 150.347578][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 150.347596][ T30] audit: type=1400 audit(2000000004.870:515): avc: denied { wake_alarm } for pid=8967 comm="syz.2.1378" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 150.374823][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.404228][ T48] usb 1-1: USB disconnect, device number 16 [ 150.509554][ T8972] sp0: Synchronizing with TNC [ 150.524932][ T5875] usb 2-1: 0:2 : does not exist [ 150.951940][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 150.953041][ T5825] Bluetooth: hci5: command 0x1003 tx timeout [ 151.029723][ T5875] usb 2-1: USB disconnect, device number 18 [ 151.211289][ T30] audit: type=1400 audit(2000000005.720:516): avc: denied { watch_reads } for pid=8994 comm="syz.5.1391" path="/42" dev="tmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 151.365261][ T9004] @: renamed from vlan0 (while UP) [ 151.418876][ T30] audit: type=1326 audit(2000000005.940:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.5.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17778d169 code=0x7ffc0000 [ 151.442214][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.486214][ T30] audit: type=1326 audit(2000000005.940:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.5.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17778d169 code=0x7ffc0000 [ 151.509557][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.614342][ T30] audit: type=1326 audit(2000000005.940:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.5.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe17778d169 code=0x7ffc0000 [ 151.679097][ T30] audit: type=1326 audit(2000000005.940:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.5.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17778d169 code=0x7ffc0000 [ 151.757005][ T30] audit: type=1326 audit(2000000005.940:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.5.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17778d169 code=0x7ffc0000 [ 151.780310][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.859445][ T30] audit: type=1326 audit(2000000005.940:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.5.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fe17778d169 code=0x7ffc0000 [ 151.912618][ T5829] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 151.925627][ T30] audit: type=1326 audit(2000000005.940:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.5.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17778d169 code=0x7ffc0000 [ 151.949977][ T30] audit: type=1326 audit(2000000005.940:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.5.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17778d169 code=0x7ffc0000 [ 152.086259][ T9049] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1412'. [ 152.190072][ T873] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 152.350283][ T873] usb 1-1: Using ep0 maxpacket: 16 [ 152.364125][ T873] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 152.390391][ T873] usb 1-1: config 0 has no interface number 0 [ 152.403346][ T873] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 152.429960][ T873] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 152.447668][ T873] usb 1-1: config 0 interface 41 has no altsetting 0 [ 152.467778][ T873] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 152.487418][ T873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.507620][ T873] usb 1-1: Product: syz [ 152.517720][ T873] usb 1-1: Manufacturer: syz [ 152.530208][ T873] usb 1-1: SerialNumber: syz [ 152.545804][ T873] usb 1-1: config 0 descriptor?? [ 152.564372][ T9035] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.572219][ T9035] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.796378][ T9035] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.805607][ T9035] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.830068][ T973] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 152.979889][ T973] usb 2-1: Using ep0 maxpacket: 8 [ 152.988276][ T973] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 152.997735][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.005894][ T973] usb 2-1: Product: syz [ 153.010173][ T973] usb 2-1: Manufacturer: syz [ 153.014800][ T973] usb 2-1: SerialNumber: syz [ 153.025769][ T973] usb 2-1: config 0 descriptor?? [ 153.031667][ T5875] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 153.205050][ T5875] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.283483][ T973] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 153.295840][ T5875] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 153.314271][ T5875] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 153.323411][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.338848][ T9090] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 153.350885][ T5875] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 153.430250][ T873] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 153.463888][ T873] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 153.500620][ T873] usb 1-1: USB disconnect, device number 17 [ 153.577409][ T48] usb 6-1: USB disconnect, device number 5 [ 153.755740][ T9107] input: syz1 as /devices/virtual/input/input19 [ 153.871266][ T973] usb write operation failed. (-71) [ 153.879249][ T973] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 153.906618][ T973] dvbdev: DVB: registering new adapter (Terratec H7) [ 153.914075][ T973] usb 2-1: media controller created [ 153.926899][ T973] usb read operation failed. (-71) [ 153.935197][ T973] usb write operation failed. (-71) [ 153.951570][ T973] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 153.973761][ T973] usb 2-1: USB disconnect, device number 19 [ 154.149015][ T9125] block device autoloading is deprecated and will be removed. [ 154.165455][ T9125] syz.3.1447: attempt to access beyond end of device [ 154.165455][ T9125] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 154.297544][ T9136] ntfs3(loop0): try to read out of volume at offset 0x0 [ 154.383339][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1455'. [ 154.537612][ T9148] kernel read not supported for file /eth0 (pid: 9148 comm: syz.3.1457) [ 154.594716][ T9153] 9pnet_fd: Insufficient options for proto=fd [ 154.766320][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.774832][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.820148][ T9163] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1464'. [ 154.844109][ T9163] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1464'. [ 154.894326][ T9165] loop7: detected capacity change from 0 to 2 [ 154.928126][ T9165] Dev loop7: unable to read RDB block 2 [ 154.957942][ T9165] loop7: unable to read partition table [ 154.984969][ T9165] loop7: partition table beyond EOD, truncated [ 155.013428][ T9165] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 155.013428][ T9165] ) failed (rc=-5) [ 155.223118][ T973] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 155.390185][ T973] usb 2-1: Using ep0 maxpacket: 16 [ 155.401616][ T973] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.419782][ T973] usb 2-1: config 0 has no interfaces? [ 155.436338][ T973] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 155.446096][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.468455][ T973] usb 2-1: Product: syz [ 155.478493][ T973] usb 2-1: Manufacturer: syz [ 155.502032][ T973] usb 2-1: SerialNumber: syz [ 155.519185][ T973] usb 2-1: config 0 descriptor?? [ 155.660088][ T9191] netlink: 'syz.0.1479': attribute type 1 has an invalid length. [ 155.680959][ T9191] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1479'. [ 155.773026][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 155.773043][ T30] audit: type=1400 audit(2000000010.300:530): avc: denied { connect } for pid=9170 comm="syz.1.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 155.816020][ T973] usb 2-1: USB disconnect, device number 20 [ 155.862843][ T30] audit: type=1400 audit(2000000010.340:531): avc: denied { bind } for pid=9170 comm="syz.1.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 156.081185][ T30] audit: type=1400 audit(2000000010.610:532): avc: denied { connect } for pid=9217 comm="syz.5.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 156.608103][ T30] audit: type=1400 audit(2000000011.130:533): avc: denied { getopt } for pid=9246 comm="syz.5.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 156.747881][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1506'. [ 157.546162][ T9275] vivid-001: disconnect [ 157.552150][ T9274] vivid-001: reconnect [ 157.800397][ T9293] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 157.807894][ T9290] IPVS: stopping backup sync thread 9293 ... [ 157.898406][ T9297] Bluetooth: hci5: Frame reassembly failed (-84) [ 157.932730][ T9301] input: syz1 as /devices/virtual/input/input20 [ 158.230091][ T873] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 158.295592][ T9320] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 158.391132][ T873] usb 6-1: Using ep0 maxpacket: 16 [ 158.401339][ T873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.412127][ T873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.424481][ T873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 158.437594][ T873] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 158.447918][ T873] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.463035][ T873] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 158.472962][ T873] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 158.481162][ T873] usb 6-1: Manufacturer: syz [ 158.487946][ T873] usb 6-1: config 0 descriptor?? [ 158.759793][ T873] rc_core: IR keymap rc-hauppauge not found [ 158.766798][ T873] Registered IR keymap rc-empty [ 158.772224][ T873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 158.790015][ T873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 158.812213][ T873] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 158.829116][ T873] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21 [ 158.846604][ T873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 158.870499][ T873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 158.890364][ T873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 158.909691][ T873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 158.930680][ T873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 158.949932][ T873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 158.969644][ T873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 158.989893][ T873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 158.998697][ T5875] kernel read not supported for file /dsp (pid: 5875 comm: kworker/0:5) [ 159.009608][ T873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 159.024078][ T5874] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 159.029730][ T873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 159.049878][ T873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 159.071239][ T873] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 159.081107][ T873] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 159.118498][ T30] audit: type=1400 audit(2000000013.640:534): avc: denied { unlink } for pid=9346 comm="syz.3.1551" name="file1" dev="tmpfs" ino=1261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 159.163618][ T973] usb 6-1: USB disconnect, device number 6 acpid: input device has been disconnected, fd 3 [ 159.201453][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.212964][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 159.224787][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 159.237946][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 159.248095][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.267296][ T5874] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 159.277990][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.286467][ T5874] usb 3-1: Product: syz [ 159.291136][ T5874] usb 3-1: Manufacturer: syz [ 159.296337][ T5874] usb 3-1: SerialNumber: syz [ 159.305560][ T5874] usb 3-1: config 0 descriptor?? [ 159.322645][ T5874] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 159.383009][ T30] audit: type=1400 audit(2000000013.910:535): avc: denied { connect } for pid=9356 comm="syz.3.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.405249][ T30] audit: type=1400 audit(2000000013.930:536): avc: denied { write } for pid=9356 comm="syz.3.1556" laddr=172.20.20.10 lport=1 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.428646][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.540867][ T5874] usb 3-1: USB disconnect, device number 19 [ 159.909540][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 159.909742][ T5838] Bluetooth: hci5: command 0x1003 tx timeout [ 160.153959][ T9393] netlink: 'syz.1.1573': attribute type 4 has an invalid length. [ 160.189770][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1573'. [ 160.223377][ T9393] NCSI netlink: No device for ifindex 6906736 [ 160.598029][ T9422] mkiss: ax0: crc mode is auto. [ 160.632523][ T48] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 160.801141][ T48] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.823026][ T48] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 160.838318][ T48] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 160.853751][ T48] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.865692][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.892250][ T48] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.976904][ T48] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 161.156024][ T48] usb 6-1: USB disconnect, device number 7 [ 161.224274][ T30] audit: type=1326 audit(2000000015.750:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.3.1606" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e9278d169 code=0x0 [ 161.275881][ T30] audit: type=1400 audit(2000000015.800:538): avc: denied { mounton } for pid=9461 comm="syz.3.1606" path="/proc/575/task/576/net" dev="proc" ino=25565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 161.409929][ T973] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 161.443888][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1610'. [ 161.516373][ T9476] mkiss: ax0: crc mode is auto. [ 161.579797][ T973] usb 2-1: Using ep0 maxpacket: 8 [ 161.587674][ T973] usb 2-1: config 0 has no interfaces? [ 161.595181][ T973] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 161.605600][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.622476][ T973] usb 2-1: config 0 descriptor?? [ 161.842028][ T973] usb 2-1: USB disconnect, device number 21 [ 161.851287][ T9490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.021001][ T9497] ALSA: mixer_oss: invalid OSS volume '?(737_7,NOĮBj' [ 162.030379][ T9497] ALSA: mixer_oss: invalid OSS volume 'p%磌G#H.HTJn' [ 162.040557][ T9497] ALSA: mixer_oss: invalid OSS volume 'ʋR<c[)9g' [ 162.048305][ T9497] ALSA: mixer_oss: invalid OSS volume '*>{c_o7e5' [ 162.067202][ T9497] ALSA: mixer_oss: invalid OSS volume 'À|Uq1l+' [ 162.082279][ T9497] ALSA: mixer_oss: invalid OSS volume 'kYkrk>iR#{^X' [ 162.092101][ T9497] ALSA: mixer_oss: invalid OSS volume '*G]M-L]q4z[1M>-IOs' [ 162.103246][ T9497] ALSA: mixer_oss: invalid OSS volume 'SnXySu*<(?-S' [ 162.113479][ T9497] ALSA: mixer_oss: invalid OSS volume '{f' [ 162.127354][ T9497] ALSA: mixer_oss: invalid OSS volume 'a 9eoMAtAM֓@_' [ 162.138829][ T9497] ALSA: mixer_oss: invalid OSS volume 'jTF>KQ6-.M' [ 162.154036][ T9497] ALSA: mixer_oss: invalid OSS volume 'kur HARDIRQ-unsafe lock order detected [ 180.849400][ T12] 6.15.0-rc1-syzkaller #0 Not tainted [ 180.854735][ T12] ----------------------------------------------------- [ 180.861632][ T12] kworker/u8:0/12 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 180.869229][ T12] ffffffff8f575f78 (disc_data_lock#3){.+.+}-{3:3}, at: sp_get+0x18/0xf0 [ 180.877556][ T12] [ 180.877556][ T12] and this task is already holding: [ 180.884886][ T12] ffffffff9ae25ff8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 180.893553][ T12] which would create a new lock dependency: [ 180.899409][ T12] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#3){.+.+}-{3:3} [ 180.907204][ T12] [ 180.907204][ T12] but this new dependency connects a HARDIRQ-irq-safe lock: [ 180.916631][ T12] (&port_lock_key){-.-.}-{3:3} [ 180.916645][ T12] [ 180.916645][ T12] ... which became HARDIRQ-irq-safe at: [ 180.929132][ T12] lock_acquire+0x179/0x350 [ 180.933706][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 180.938967][ T12] serial8250_handle_irq+0x95/0xcb0 [ 180.944223][ T12] serial8250_default_handle_irq+0x9a/0x210 [ 180.950172][ T12] serial8250_interrupt+0x103/0x210 [ 180.955425][ T12] __handle_irq_event_percpu+0x229/0x7d0 [ 180.961126][ T12] handle_irq_event+0xab/0x1e0 [ 180.965946][ T12] handle_edge_irq+0x263/0xd10 [ 180.970768][ T12] __common_interrupt+0xdf/0x250 [ 180.975762][ T12] common_interrupt+0xba/0xe0 [ 180.980494][ T12] asm_common_interrupt+0x26/0x40 [ 180.985586][ T12] _raw_spin_unlock_irqrestore+0x31/0x80 [ 180.991274][ T12] uart_write+0x2a4/0xb30 [ 180.995674][ T12] n_tty_write+0x40f/0x1160 [ 181.000236][ T12] file_tty_write.constprop.0+0x4ff/0x9b0 [ 181.006016][ T12] redirected_tty_write+0xd4/0x150 [ 181.011187][ T12] vfs_write+0x5ba/0x1180 [ 181.015573][ T12] ksys_write+0x12a/0x240 [ 181.019957][ T12] do_syscall_64+0xcd/0x260 [ 181.024533][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.030480][ T12] [ 181.030480][ T12] to a HARDIRQ-irq-unsafe lock: [ 181.037463][ T12] (disc_data_lock#3){.+.+}-{3:3} [ 181.037489][ T12] [ 181.037489][ T12] ... which became HARDIRQ-irq-unsafe at: [ 181.050327][ T12] ... [ 181.050331][ T12] lock_acquire+0x179/0x350 [ 181.057440][ T12] _raw_read_lock+0x5f/0x70 [ 181.062001][ T12] sp_get+0x18/0xf0 [ 181.065872][ T12] sixpack_receive_buf+0x59/0x1c90 [ 181.071041][ T12] tty_ioctl+0x57d/0x1610 [ 181.075435][ T12] __x64_sys_ioctl+0x190/0x200 [ 181.080257][ T12] do_syscall_64+0xcd/0x260 [ 181.084820][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.090766][ T12] [ 181.090766][ T12] other info that might help us debug this: [ 181.090766][ T12] [ 181.100964][ T12] Possible interrupt unsafe locking scenario: [ 181.100964][ T12] [ 181.109248][ T12] CPU0 CPU1 [ 181.114580][ T12] ---- ---- [ 181.119912][ T12] lock(disc_data_lock#3); [ 181.124389][ T12] local_irq_disable(); [ 181.131116][ T12] lock(&port_lock_key); [ 181.137932][ T12] lock(disc_data_lock#3); [ 181.144930][ T12] [ 181.148355][ T12] lock(&port_lock_key); [ 181.152826][ T12] [ 181.152826][ T12] *** DEADLOCK *** [ 181.152826][ T12] [ 181.160936][ T12] 6 locks held by kworker/u8:0/12: [ 181.166018][ T12] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 181.177128][ T12] #1: ffffc90000117d18 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 181.188137][ T12] #2: ffff888025500ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x34/0x780 [ 181.197154][ T12] #3: ffff88805a18a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 181.206427][ T12] #4: ffffffff9ae25ff8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 181.215542][ T12] #5: ffff88805a18a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 181.224813][ T12] [ 181.224813][ T12] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 181.235184][ T12] -> (&port_lock_key){-.-.}-{3:3} { [ 181.240360][ T12] IN-HARDIRQ-W at: [ 181.244320][ T12] lock_acquire+0x179/0x350 [ 181.250442][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 181.257260][ T12] serial8250_handle_irq+0x95/0xcb0 [ 181.264077][ T12] serial8250_default_handle_irq+0x9a/0x210 [ 181.271587][ T12] serial8250_interrupt+0x103/0x210 [ 181.278406][ T12] __handle_irq_event_percpu+0x229/0x7d0 [ 181.285660][ T12] handle_irq_event+0xab/0x1e0 [ 181.292055][ T12] handle_edge_irq+0x263/0xd10 [ 181.298440][ T12] __common_interrupt+0xdf/0x250 [ 181.304997][ T12] common_interrupt+0xba/0xe0 [ 181.311301][ T12] asm_common_interrupt+0x26/0x40 [ 181.317942][ T12] _raw_spin_unlock_irqrestore+0x31/0x80 [ 181.325199][ T12] uart_write+0x2a4/0xb30 [ 181.331153][ T12] n_tty_write+0x40f/0x1160 [ 181.337277][ T12] file_tty_write.constprop.0+0x4ff/0x9b0 [ 181.344632][ T12] redirected_tty_write+0xd4/0x150 [ 181.351387][ T12] vfs_write+0x5ba/0x1180 [ 181.357333][ T12] ksys_write+0x12a/0x240 [ 181.363279][ T12] do_syscall_64+0xcd/0x260 [ 181.369403][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.376925][ T12] IN-SOFTIRQ-W at: [ 181.380878][ T12] lock_acquire+0x179/0x350 [ 181.387011][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 181.393853][ T12] serial8250_handle_irq+0x95/0xcb0 [ 181.400687][ T12] serial8250_default_handle_irq+0x9a/0x210 [ 181.408201][ T12] serial8250_interrupt+0x103/0x210 [ 181.415021][ T12] __handle_irq_event_percpu+0x229/0x7d0 [ 181.422291][ T12] handle_irq_event+0xab/0x1e0 [ 181.428673][ T12] handle_edge_irq+0x263/0xd10 [ 181.435056][ T12] __common_interrupt+0xdf/0x250 [ 181.441620][ T12] common_interrupt+0xba/0xe0 [ 181.447937][ T12] asm_common_interrupt+0x26/0x40 [ 181.454581][ T12] kasan_quarantine_put+0x97/0x240 [ 181.461309][ T12] slab_free_after_rcu_debug+0x116/0x350 [ 181.468560][ T12] rcu_core+0x799/0x14e0 [ 181.474424][ T12] handle_softirqs+0x216/0x8e0 [ 181.480821][ T12] run_ksoftirqd+0x3a/0x60 [ 181.486869][ T12] smpboot_thread_fn+0x3f4/0xae0 [ 181.493431][ T12] kthread+0x3c2/0x780 [ 181.499118][ T12] ret_from_fork+0x45/0x80 [ 181.505153][ T12] ret_from_fork_asm+0x1a/0x30 [ 181.511553][ T12] INITIAL USE at: [ 181.515429][ T12] lock_acquire+0x179/0x350 [ 181.521474][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 181.528206][ T12] serial8250_do_set_termios+0x310/0x1710 [ 181.535457][ T12] serial8250_set_termios+0x6e/0x80 [ 181.542201][ T12] uart_set_options+0x31a/0x5f0 [ 181.548587][ T12] serial8250_console_setup+0x189/0x450 [ 181.555671][ T12] univ8250_console_setup+0x1eb/0x2e0 [ 181.562574][ T12] try_enable_preferred_console+0x2fd/0x530 [ 181.570001][ T12] register_console+0x3ab/0x11b0 [ 181.576484][ T12] univ8250_console_init+0x5f/0x90 [ 181.583136][ T12] console_init+0x14f/0x680 [ 181.589180][ T12] start_kernel+0x29f/0x4d0 [ 181.595221][ T12] x86_64_start_reservations+0x18/0x30 [ 181.602225][ T12] x86_64_start_kernel+0xb0/0xc0 [ 181.608698][ T12] common_startup_64+0x13e/0x148 [ 181.615182][ T12] } [ 181.617651][ T12] ... key at: [] port_lock_key+0x0/0x40 [ 181.625265][ T12] [ 181.625265][ T12] the dependencies between the lock to be acquired [ 181.625270][ T12] and HARDIRQ-irq-unsafe lock: [ 181.638735][ T12] -> (disc_data_lock#3){.+.+}-{3:3} { [ 181.644100][ T12] HARDIRQ-ON-R at: [ 181.648049][ T12] lock_acquire+0x179/0x350 [ 181.654172][ T12] _raw_read_lock+0x5f/0x70 [ 181.660296][ T12] sp_get+0x18/0xf0 [ 181.665738][ T12] sixpack_receive_buf+0x59/0x1c90 [ 181.672471][ T12] tty_ioctl+0x57d/0x1610 [ 181.678435][ T12] __x64_sys_ioctl+0x190/0x200 [ 181.684833][ T12] do_syscall_64+0xcd/0x260 [ 181.690970][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.698480][ T12] SOFTIRQ-ON-R at: [ 181.702429][ T12] lock_acquire+0x179/0x350 [ 181.708551][ T12] _raw_read_lock+0x5f/0x70 [ 181.714676][ T12] sp_get+0x18/0xf0 [ 181.720106][ T12] sixpack_receive_buf+0x59/0x1c90 [ 181.726839][ T12] tty_ioctl+0x57d/0x1610 [ 181.732793][ T12] __x64_sys_ioctl+0x190/0x200 [ 181.739178][ T12] do_syscall_64+0xcd/0x260 [ 181.745304][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.752826][ T12] INITIAL USE at: [ 181.756688][ T12] lock_acquire+0x179/0x350 [ 181.762719][ T12] _raw_write_lock_irq+0x36/0x50 [ 181.769192][ T12] sixpack_close+0x1e/0x2f0 [ 181.775238][ T12] tty_ldisc_close+0x111/0x1a0 [ 181.781539][ T12] tty_ldisc_kill+0x8e/0x150 [ 181.787673][ T12] tty_ldisc_release+0x109/0x2e0 [ 181.794148][ T12] tty_release_struct+0x23/0xe0 [ 181.800534][ T12] tty_release+0xe2d/0x1430 [ 181.806575][ T12] __fput+0x3ff/0xb70 [ 181.812100][ T12] task_work_run+0x14d/0x240 [ 181.818222][ T12] syscall_exit_to_user_mode+0x27b/0x2a0 [ 181.825389][ T12] do_syscall_64+0xda/0x260 [ 181.831424][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.838850][ T12] INITIAL READ USE at: [ 181.843148][ T12] lock_acquire+0x179/0x350 [ 181.849616][ T12] _raw_read_lock+0x5f/0x70 [ 181.856086][ T12] sp_get+0x18/0xf0 [ 181.861861][ T12] sixpack_receive_buf+0x59/0x1c90 [ 181.868939][ T12] tty_ioctl+0x57d/0x1610 [ 181.875248][ T12] __x64_sys_ioctl+0x190/0x200 [ 181.881979][ T12] do_syscall_64+0xcd/0x260 [ 181.888464][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.896332][ T12] } [ 181.898813][ T12] ... key at: [] disc_data_lock+0x18/0xfe0 [ 181.906676][ T12] ... acquired at: [ 181.910458][ T12] lock_acquire+0x179/0x350 [ 181.915101][ T12] _raw_read_lock+0x5f/0x70 [ 181.919750][ T12] sp_get+0x18/0xf0 [ 181.923722][ T12] sixpack_write_wakeup+0x20/0x390 [ 181.928977][ T12] tty_wakeup+0xe5/0x120 [ 181.933376][ T12] tty_port_default_wakeup+0x2a/0x40 [ 181.938804][ T12] serial8250_tx_chars+0x68e/0x860 [ 181.944056][ T12] __start_tx+0x3e9/0x4a0 [ 181.948526][ T12] serial8250_start_tx+0x368/0x530 [ 181.953787][ T12] __uart_start+0x292/0x4c0 [ 181.958433][ T12] uart_write+0x218/0xb30 [ 181.962910][ T12] sixpack_receive_buf+0x3d0/0x1c90 [ 181.968251][ T12] tty_ldisc_receive_buf+0x157/0x1a0 [ 181.973697][ T12] tty_port_default_receive_buf+0x70/0xb0 [ 181.979565][ T12] flush_to_ldisc+0x268/0x780 [ 181.984399][ T12] process_one_work+0x9cc/0x1b70 [ 181.989482][ T12] worker_thread+0x6c8/0xf10 [ 181.994213][ T12] kthread+0x3c2/0x780 [ 181.998424][ T12] ret_from_fork+0x45/0x80 [ 182.002982][ T12] ret_from_fork_asm+0x1a/0x30 [ 182.007908][ T12] [ 182.010202][ T12] [ 182.010202][ T12] stack backtrace: [ 182.016068][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 182.016083][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.016092][ T12] Workqueue: events_unbound flush_to_ldisc [ 182.016110][ T12] Call Trace: [ 182.016120][ T12] [ 182.016130][ T12] dump_stack_lvl+0x116/0x1f0 [ 182.016148][ T12] check_irq_usage+0x7dc/0x920 [ 182.016167][ T12] ? check_path.constprop.0+0x24/0x50 [ 182.016184][ T12] ? __lock_acquire+0x1189/0x1ba0 [ 182.016193][ T12] __lock_acquire+0x1189/0x1ba0 [ 182.016203][ T12] ? lock_acquire+0x179/0x350 [ 182.016213][ T12] lock_acquire+0x179/0x350 [ 182.016222][ T12] ? sp_get+0x18/0xf0 [ 182.016234][ T12] ? ldsem_down_read_trylock+0x11a/0x180 [ 182.016245][ T12] ? ldsem_down_read_trylock+0x120/0x180 [ 182.016255][ T12] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 182.016269][ T12] _raw_read_lock+0x5f/0x70 [ 182.016283][ T12] ? sp_get+0x18/0xf0 [ 182.016293][ T12] sp_get+0x18/0xf0 [ 182.016304][ T12] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 182.016317][ T12] sixpack_write_wakeup+0x20/0x390 [ 182.016329][ T12] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 182.016342][ T12] tty_wakeup+0xe5/0x120 [ 182.016355][ T12] tty_port_default_wakeup+0x2a/0x40 [ 182.016364][ T12] serial8250_tx_chars+0x68e/0x860 [ 182.016375][ T12] __start_tx+0x3e9/0x4a0 [ 182.016385][ T12] serial8250_start_tx+0x368/0x530 [ 182.016398][ T12] __uart_start+0x292/0x4c0 [ 182.016411][ T12] uart_write+0x218/0xb30 [ 182.016428][ T12] sixpack_receive_buf+0x3d0/0x1c90 [ 182.016442][ T12] ? ldsem_down_read_trylock+0x120/0x180 [ 182.016452][ T12] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 182.016464][ T12] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 182.016477][ T12] tty_ldisc_receive_buf+0x157/0x1a0 [ 182.016492][ T12] tty_port_default_receive_buf+0x70/0xb0 [ 182.016509][ T12] flush_to_ldisc+0x268/0x780 [ 182.016525][ T12] ? rcu_is_watching+0x12/0xc0 [ 182.016539][ T12] process_one_work+0x9cc/0x1b70 [ 182.016553][ T12] ? __pfx_process_one_work+0x10/0x10 [ 182.016567][ T12] ? assign_work+0x1a0/0x250 [ 182.016578][ T12] worker_thread+0x6c8/0xf10 [ 182.016592][ T12] ? __pfx_worker_thread+0x10/0x10 [ 182.016604][ T12] kthread+0x3c2/0x780 [ 182.016614][ T12] ? __pfx_kthread+0x10/0x10 [ 182.016623][ T12] ? __pfx_kthread+0x10/0x10 [ 182.016633][ T12] ? __pfx_kthread+0x10/0x10 [ 182.016642][ T12] ? __pfx_kthread+0x10/0x10 [ 182.016652][ T12] ? rcu_is_watching+0x12/0xc0 [ 182.016665][ T12] ? __pfx_kthread+0x10/0x10 [ 182.016675][ T12] ret_from_fork+0x45/0x80 [ 182.016685][ T12] ? __pfx_kthread+0x10/0x10 [ 182.016695][ T12] ret_from_fork_asm+0x1a/0x30 [ 182.016713][ T12] [ 182.016814][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.285980][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.118514][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 187.124610][ T5838] Bluetooth: hci1: command 0x0406 tx timeout