last executing test programs: 4m14.091843037s ago: executing program 4 (id=342): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x40000) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000380)=@v2={0x3, 0x2, 0xfe, 0xe79f, 0x2, 'JE'}, 0xb, 0x1) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x94, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x9}}, 0x0, @default, 0x1882, @void, @val={0x1, 0x4, [{0x79, 0x1}, {0x17, 0x1}, {0x2}, {0x4}]}, @void, @val={0x4, 0x6, {0x7, 0x4, 0x1, 0x4}}, @void, @val={0x5, 0x26, {0x6, 0xac, 0x26, "4535a7d15d92ed3883177b0403cbc09fa3dbf799bd588a59887355f0766d272c4f077e"}}, @val={0x25, 0x3, {0x0, 0x38, 0x6b}}, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x4}]}, 0x94}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 4m8.887899274s ago: executing program 4 (id=355): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="0500"/12, @ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES16=r0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x5, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "be34970c002bfb83"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x8080) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4m8.180219858s ago: executing program 4 (id=356): ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000180)={r5}) bind$ax25(r1, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0xffffffd4, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000180)=ANY=[@ANYRES64=r10], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r11, 0x0}) ioctl$RTC_VL_CLR(r11, 0x7014) write(r7, &(0x7f0000000000)="71fa41efc5dbc6670e493c4f678de0a59e450fcea4a7af700db37bcc20d7f2a23ac701834f035484a6e056e43a5014ab2750a40b6a8f80af6943c37b15da916ed11ea8ab59e74320490e6671374c9958c9bc0f3fe2e3e8f4b492e1", 0x5b) 4m7.993030339s ago: executing program 4 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x43073000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000400000000100000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, 0x0, &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x4e24, 0x8, 0x4e22, 0x100, 0xa, 0x80, 0x0, 0x2f}, {0x2, 0x100000001, 0x7, 0x0, 0xf, 0xad2, 0x0, 0x5}, {0x3, 0x1, 0x2, 0x4}, 0x7953, 0x0, 0x0, 0x1, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x4d5, 0x3c}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x34ff, 0x1, 0x0, 0x4, 0xff6, 0x7fffffff, 0xb0}}, 0xe8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) 4m6.026687944s ago: executing program 4 (id=363): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x10c000, 0x0) 4m5.641725337s ago: executing program 4 (id=365): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) set_mempolicy(0x2, 0x0, 0x3ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) io_submit(r2, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 3m50.561437363s ago: executing program 32 (id=365): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) set_mempolicy(0x2, 0x0, 0x3ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) io_submit(r2, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 6.850945179s ago: executing program 5 (id=1345): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000040)=0x1ff, 0x4) 6.849350517s ago: executing program 0 (id=1346): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r3, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 6.809393446s ago: executing program 1 (id=1347): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) 6.598895302s ago: executing program 3 (id=1350): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e755044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x2, 0x80000001}) 6.057224431s ago: executing program 1 (id=1352): syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x4, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) 5.856587194s ago: executing program 5 (id=1353): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [{0x2, 0x1}], {}, [], {0x10, 0x5}}, 0x2c, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x0, 0x3, 0x0, 0x0, 0xffffffff}, 0xc}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) times(0x0) 5.515347396s ago: executing program 1 (id=1354): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={'sha384-avx2\x00'}}) 5.377085841s ago: executing program 0 (id=1355): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x536, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={r4, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3dc, 0x9, 0x1, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f00000002c0)=0x9c) 5.376751055s ago: executing program 3 (id=1356): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000003000000001c0000000000000000000000000000000075cc12057c01fffffff6a6f24809666fd32ab47f5f8fa42f3b512b26d037cebfaa413b13650e1d1ba7c330444f8d9a665c97bcec3a41ce2183a997e4571fd980fba64e0eb85c7c74728599306b8c1792639cc05c"], 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c0001"], 0xe8}}, 0x0) 4.343418689s ago: executing program 1 (id=1358): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) pipe2(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x407, 0xa0018ce0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 4.324112185s ago: executing program 3 (id=1359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002252e000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0xa8}}, 0x0) 3.733192692s ago: executing program 3 (id=1360): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_setup(0x7, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) lseek(0xffffffffffffffff, 0x339, 0x0) 3.603636049s ago: executing program 2 (id=1362): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000004, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) 3.145230124s ago: executing program 0 (id=1363): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0xfffffffb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000012c0), 0x0) syz_emit_vhci(&(0x7f0000000740)=ANY=[], 0xe) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 3.103764932s ago: executing program 1 (id=1364): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.881134701s ago: executing program 0 (id=1365): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.434797857s ago: executing program 3 (id=1366): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xd3, 0xcc, 0xb5, 0x10, 0x13b1, 0x42, 0x2b29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x1, 0xe7, 0x11, 0xe1, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) 2.352645751s ago: executing program 0 (id=1367): dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.965218558s ago: executing program 2 (id=1368): gettid() madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000d00)) 1.926822494s ago: executing program 5 (id=1369): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000003000000001c0000000000000000000000000000000075cc12057c01fffffff6a6f24809666fd32ab47f5f8fa42f3b512b26d037cebfaa413b13650e1d1ba7c330444f8d9a665c97bcec3a41ce2183a997e4571fd980fba64e0eb85c7c74728599306b8c1792639cc05c"], 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c0001"], 0xe8}}, 0x0) 1.869714849s ago: executing program 0 (id=1370): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) 1.540754356s ago: executing program 5 (id=1371): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc07}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) readv(r0, 0x0, 0x0) 1.332258942s ago: executing program 5 (id=1372): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x24}}, 0x0) 1.304342002s ago: executing program 2 (id=1373): socket$netlink(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x161542, 0x100) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x15, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x4, 0x0, 0x3}, 0x0, 0x0) 1.181184499s ago: executing program 2 (id=1374): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x35dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 1.180840443s ago: executing program 5 (id=1375): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffe, 0x2) 1.127581848s ago: executing program 2 (id=1376): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x141380, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r3, r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 249.163398ms ago: executing program 1 (id=1377): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x80489439, &(0x7f0000000900)={'batadv_slave_1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100), &(0x7f0000000380)) 50.528309ms ago: executing program 3 (id=1378): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), 0x0}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = socket$inet6_udp(0x2d, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) unshare(0x8000000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r1}, 0x10) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x101201, 0x0) write$tcp_mem(r5, &(0x7f00000001c0)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 0s ago: executing program 2 (id=1379): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/profiling', 0x22042, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0x22, &(0x7f0000000040), 0x8) stat(&(0x7f0000011d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000002c0)={0x7d, 0xac, {r3}, {r6}, 0xfffffffffffffffd, 0x1}) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): d/64, error -71 [ 266.414362][ T5866] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 266.456113][ T5866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.468821][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 266.490832][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.528388][ T5866] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 266.538016][ T5894] usb usb3-port1: attempt power cycle [ 266.809597][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.863005][ T5866] usb 1-1: Product: syz [ 266.868221][ T5866] usb 1-1: Manufacturer: syz [ 266.876214][ T5866] usb 1-1: SerialNumber: syz [ 266.883691][ T5866] usb 1-1: config 0 descriptor?? [ 266.889846][ T5866] usb 1-1: ucan: probing device on interface #0 [ 266.902813][ T5866] usb 1-1: ucan: invalid EP count (0) [ 266.909370][ T5866] usb 1-1: ucan: probe failed; try to update the device firmware [ 267.192708][ T5894] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 267.223991][ T5894] usb 3-1: device descriptor read/8, error -71 [ 267.340704][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'. [ 267.350555][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'. [ 267.702079][ T9112] netlink: 16 bytes leftover after parsing attributes in process `syz.5.749'. [ 267.792747][ T5894] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 267.905605][ T5894] usb 3-1: device descriptor read/8, error -71 [ 267.967833][ T9104] delete_channel: no stack [ 268.022896][ T5894] usb usb3-port1: unable to enumerate USB device [ 268.587083][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.752'. [ 268.596271][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.752'. [ 268.629028][ T9125] delete_channel: no stack [ 269.063468][ T5894] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 269.108398][ T974] usb 1-1: USB disconnect, device number 39 [ 269.222661][ T5894] usb 6-1: device descriptor read/64, error -71 [ 269.503157][ T974] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 269.510835][ T5894] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 269.652680][ T5894] usb 6-1: device descriptor read/64, error -71 [ 269.664217][ T974] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.708508][ T974] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 269.749566][ T974] usb 1-1: config 0 has no interface number 0 [ 269.779551][ T974] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 269.795788][ T5894] usb usb6-port1: attempt power cycle [ 269.827948][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.875505][ T974] usb 1-1: config 0 descriptor?? [ 270.012526][ T9154] FAULT_INJECTION: forcing a failure. [ 270.012526][ T9154] name failslab, interval 1, probability 0, space 0, times 0 [ 270.029935][ T9154] CPU: 1 UID: 0 PID: 9154 Comm: syz.1.760 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 270.029960][ T9154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 270.029970][ T9154] Call Trace: [ 270.029976][ T9154] [ 270.029983][ T9154] dump_stack_lvl+0x16c/0x1f0 [ 270.030007][ T9154] should_fail_ex+0x512/0x640 [ 270.030029][ T9154] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 270.030059][ T9154] should_failslab+0xc2/0x120 [ 270.030076][ T9154] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 270.030101][ T9154] ? find_held_lock+0x2b/0x80 [ 270.030120][ T9154] ? __d_alloc+0x31/0xaa0 [ 270.030142][ T9154] __d_alloc+0x31/0xaa0 [ 270.030157][ T9154] ? __d_lookup+0x266/0x4a0 [ 270.030180][ T9154] d_alloc+0x4a/0x1e0 [ 270.030199][ T9154] lookup_one_qstr_excl_raw.part.0+0x96/0x160 [ 270.030218][ T9154] ? lookup_dcache+0x66/0x170 [ 270.030238][ T9154] lookup_one_qstr_excl+0x3e/0x120 [ 270.030260][ T9154] filename_create+0x1e7/0x4a0 [ 270.030283][ T9154] ? __pfx_filename_create+0x10/0x10 [ 270.030305][ T9154] ? find_held_lock+0x2b/0x80 [ 270.030332][ T9154] do_mkdirat+0xaa/0x3e0 [ 270.030358][ T9154] ? __pfx_do_mkdirat+0x10/0x10 [ 270.030381][ T9154] ? getname_flags.part.0+0x1c5/0x550 [ 270.030399][ T9154] ? rcu_is_watching+0x12/0xc0 [ 270.030422][ T9154] __x64_sys_mkdirat+0x83/0xb0 [ 270.030446][ T9154] do_syscall_64+0xcd/0x260 [ 270.030464][ T9154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.030477][ T9154] RIP: 0033:0x7fdc2bf8e969 [ 270.030488][ T9154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.030501][ T9154] RSP: 002b:00007fdc2ceda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 270.030514][ T9154] RAX: ffffffffffffffda RBX: 00007fdc2c1b5fa0 RCX: 00007fdc2bf8e969 [ 270.030523][ T9154] RDX: 0000000000000010 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 270.030531][ T9154] RBP: 00007fdc2ceda090 R08: 0000000000000000 R09: 0000000000000000 [ 270.030539][ T9154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.030547][ T9154] R13: 0000000000000000 R14: 00007fdc2c1b5fa0 R15: 00007fff0b1e4a08 [ 270.030565][ T9154] [ 270.245437][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.423471][ T5894] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 270.456579][ T5894] usb 6-1: device descriptor read/8, error -71 [ 270.695097][ T5871] usb 6-1: [UEAGLE-ATM] firmware is not available [ 270.753057][ T5894] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 270.886266][ T30] audit: type=1400 audit(2000000202.257:771): avc: granted { setsecparam } for pid=9129 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 270.916586][ T5894] usb 6-1: device descriptor read/8, error -71 [ 270.924066][ T9] usb 1-1: USB disconnect, device number 40 [ 271.053200][ T5894] usb usb6-port1: unable to enumerate USB device [ 271.582970][ T5894] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 271.651332][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 271.660307][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 271.952684][ T5894] usb 2-1: device descriptor read/64, error -71 [ 272.212747][ T5894] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 272.770211][ T5894] usb 2-1: device descriptor read/64, error -71 [ 272.907387][ T5894] usb usb2-port1: attempt power cycle [ 273.272739][ T5894] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 273.394127][ T5894] usb 2-1: device descriptor read/8, error -71 [ 273.774381][ T5894] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 273.782300][ T974] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 273.873517][ T5894] usb 2-1: device descriptor read/8, error -71 [ 273.952401][ T9163] delete_channel: no stack [ 273.992947][ T5894] usb usb2-port1: unable to enumerate USB device [ 274.001299][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.022977][ T974] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 274.052289][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.459356][ T9212] delete_channel: no stack [ 274.600516][ T974] usb 3-1: config 0 descriptor?? [ 274.862816][ T5866] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 274.893044][ T5894] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 275.023142][ T871] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 275.031484][ T5894] usb 2-1: device descriptor read/64, error -71 [ 275.074202][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 275.090475][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 275.099668][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 275.143876][ T974] usbhid 3-1:0.0: can't add hid device: -71 [ 275.253168][ T974] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 275.322294][ T5866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.333172][ T871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.350507][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x16, changing to 0x6 [ 275.362271][ T871] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 275.372242][ T974] usb 3-1: USB disconnect, device number 39 [ 275.384895][ T871] usb 6-1: config 0 has no interface number 0 [ 275.392472][ T871] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 275.404297][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 275.415158][ T871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.426097][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 275.440664][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.456177][ T871] usb 6-1: config 0 descriptor?? [ 275.472659][ T5894] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 275.481491][ T5866] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 275.499810][ T5866] usb 1-1: New USB device strings: Mfr=80, Product=2, SerialNumber=3 [ 275.508408][ T5866] usb 1-1: Product: syz [ 275.513200][ T5866] usb 1-1: Manufacturer: syz [ 275.518110][ T5866] usb 1-1: SerialNumber: syz [ 275.526148][ T5866] usb 1-1: config 0 descriptor?? [ 275.534396][ T5866] ati_remote 1-1:0.0: ati_remote_probe: Unexpected endpoint_in [ 275.565070][ T30] audit: type=1400 audit(2000000206.937:772): avc: denied { ioctl } for pid=9219 comm="syz.3.777" path="socket:[21318]" dev="sockfs" ino=21318 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 275.644014][ T5894] usb 2-1: device descriptor read/64, error -71 [ 275.739668][ T5817] usb 1-1: USB disconnect, device number 41 [ 275.755056][ T5894] usb usb2-port1: attempt power cycle [ 276.634874][ T5894] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 276.644130][ T5817] usb 6-1: USB disconnect, device number 28 [ 276.714883][ T5894] usb 2-1: device descriptor read/8, error -71 [ 276.966198][ T5894] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 276.995000][ T9247] Cannot find add_set index 0 as target [ 277.032804][ T5894] usb 2-1: device descriptor read/8, error -71 [ 277.152937][ T5894] usb usb2-port1: unable to enumerate USB device [ 277.402738][ T5917] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 277.426360][ T9265] veth0_vlan: entered allmulticast mode [ 277.574931][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.695935][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 277.741743][ T5871] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 277.821828][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.841063][ T5917] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 277.857954][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.866344][ T5917] usb 3-1: Product: syz [ 277.870549][ T5917] usb 3-1: Manufacturer: syz [ 277.875356][ T5917] usb 3-1: SerialNumber: syz [ 277.881839][ T5917] usb 3-1: config 0 descriptor?? [ 277.887911][ T9256] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 277.899338][ T5917] usb 3-1: ucan: probing device on interface #0 [ 277.906074][ T5917] usb 3-1: ucan: invalid EP count (1) [ 277.911545][ T5917] usb 3-1: ucan: probe failed; try to update the device firmware [ 277.973347][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 277.985091][ T5871] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 277.997920][ T5871] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 278.010383][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 278.146632][ T5871] usb 4-1: Product: syz [ 278.266788][ T5871] usb 4-1: Manufacturer: syz [ 278.298181][ T5871] usb 4-1: SerialNumber: syz [ 278.315048][ T9277] netlink: 20 bytes leftover after parsing attributes in process `syz.5.797'. [ 278.335154][ T5871] usb 4-1: config 0 descriptor?? [ 278.347005][ T9265] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 278.365716][ T5871] hub 4-1:0.0: bad descriptor, ignoring hub [ 278.380366][ T5871] hub 4-1:0.0: probe with driver hub failed with error -5 [ 278.609015][ T9287] netlink: 16 bytes leftover after parsing attributes in process `syz.5.798'. [ 278.665712][ T9293] Cannot find add_set index 0 as target [ 278.705904][ T5832] Bluetooth: Wrong link type (-22) [ 278.816527][ T30] audit: type=1400 audit(2000000210.187:773): avc: denied { bind } for pid=9295 comm="syz.5.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 278.859493][ T5894] usb 4-1: USB disconnect, device number 44 [ 279.040585][ T9296] syz.5.801 (9296): drop_caches: 2 [ 279.092869][ T5871] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 279.255850][ T5871] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.280296][ T5871] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 279.302262][ T30] audit: type=1400 audit(2000000210.667:774): avc: denied { create } for pid=9309 comm="syz.5.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 279.329274][ T5871] usb 2-1: config 0 has no interface number 0 [ 279.338809][ T30] audit: type=1400 audit(2000000210.707:775): avc: denied { sys_admin } for pid=9309 comm="syz.5.805" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 279.344797][ T5871] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 279.403075][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.417611][ T5871] usb 2-1: config 0 descriptor?? [ 280.272279][ T9330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.810'. [ 280.289976][ T5866] usb 3-1: USB disconnect, device number 40 [ 280.312974][ T5871] usb 2-1: USB disconnect, device number 61 [ 280.392433][ T9336] Cannot find add_set index 0 as target [ 280.923045][ T5866] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 281.084659][ T5866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.095038][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 281.305128][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 281.319823][ T5866] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 281.335842][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.347079][ T5866] usb 3-1: config 0 descriptor?? [ 281.524499][ T30] audit: type=1400 audit(2000000212.877:776): avc: denied { ioctl } for pid=9342 comm="syz.5.816" path="socket:[22168]" dev="sockfs" ino=22168 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 283.369428][ T9368] netlink: 16 bytes leftover after parsing attributes in process `syz.5.823'. [ 283.434458][ T5871] usb 3-1: USB disconnect, device number 41 [ 284.477483][ T5917] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 285.105175][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.126470][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 285.139566][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.339727][ T5917] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 285.904215][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.119676][ T5917] usb 1-1: Product: syz [ 286.133347][ T5917] usb 1-1: Manufacturer: syz [ 286.148360][ T5917] usb 1-1: SerialNumber: syz [ 286.176878][ T5917] usb 1-1: config 0 descriptor?? [ 286.182524][ T9371] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 286.227147][ T5917] usb 1-1: ucan: probing device on interface #0 [ 286.493173][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.833'. [ 286.502116][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.833'. [ 286.540841][ T9410] delete_channel: no stack [ 287.074784][ T9412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.836'. [ 287.103034][ T5917] usb 1-1: ucan: invalid EP count (1) [ 287.242743][ T974] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 287.257694][ T5917] usb 1-1: ucan: probe failed; try to update the device firmware [ 287.766557][ T9418] FAULT_INJECTION: forcing a failure. [ 287.766557][ T9418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.793374][ T5917] usb 1-1: USB disconnect, device number 42 [ 287.800480][ T9418] CPU: 0 UID: 0 PID: 9418 Comm: syz.1.838 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 287.800504][ T9418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 287.800513][ T9418] Call Trace: [ 287.800519][ T9418] [ 287.800526][ T9418] dump_stack_lvl+0x16c/0x1f0 [ 287.800548][ T9418] should_fail_ex+0x512/0x640 [ 287.800571][ T9418] _copy_from_user+0x2e/0xd0 [ 287.800594][ T9418] snd_pcm_channel_info_user+0x93/0x140 [ 287.800617][ T9418] ? __pfx_snd_pcm_channel_info_user+0x10/0x10 [ 287.800639][ T9418] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 287.800657][ T9418] ? __wake_up+0x3f/0x60 [ 287.800679][ T9418] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 287.800707][ T9418] snd_pcm_common_ioctl+0x42b/0x3300 [ 287.800731][ T9418] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 287.800756][ T9418] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 287.800782][ T9418] ? __pfx_snd_pcm_common_ioctl+0x10/0x10 [ 287.800811][ T9418] ? hook_file_ioctl_common+0x145/0x410 [ 287.800843][ T9418] ? selinux_file_ioctl+0x180/0x270 [ 287.800869][ T9418] snd_pcm_ioctl+0x7e/0xb0 [ 287.800889][ T9418] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 287.800912][ T9418] __x64_sys_ioctl+0x190/0x200 [ 287.800935][ T9418] do_syscall_64+0xcd/0x260 [ 287.800955][ T9418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.800972][ T9418] RIP: 0033:0x7fdc2bf8e969 [ 287.800986][ T9418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.801004][ T9418] RSP: 002b:00007fdc2ceda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.801019][ T9418] RAX: ffffffffffffffda RBX: 00007fdc2c1b5fa0 RCX: 00007fdc2bf8e969 [ 287.801030][ T9418] RDX: 0000200000000080 RSI: 0000000080184132 RDI: 0000000000000005 [ 287.801040][ T9418] RBP: 00007fdc2ceda090 R08: 0000000000000000 R09: 0000000000000000 [ 287.801051][ T9418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.801060][ T9418] R13: 0000000000000000 R14: 00007fdc2c1b5fa0 R15: 00007fff0b1e4a08 [ 287.801082][ T9418] [ 288.043925][ T974] usb 4-1: Using ep0 maxpacket: 8 [ 288.060026][ T974] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.070420][ T974] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x16, changing to 0x6 [ 288.096825][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 288.118296][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 288.132237][ T974] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.880679][ T974] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 288.920081][ T974] usb 4-1: New USB device strings: Mfr=80, Product=2, SerialNumber=3 [ 288.943907][ T974] usb 4-1: Product: syz [ 288.980821][ T974] usb 4-1: Manufacturer: syz [ 288.987872][ T974] usb 4-1: SerialNumber: syz [ 289.058041][ T974] usb 4-1: config 0 descriptor?? [ 289.091821][ T974] ati_remote 4-1:0.0: ati_remote_probe: Unexpected endpoint_in [ 289.267170][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'. [ 289.357105][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'. [ 289.469939][ T9446] FAULT_INJECTION: forcing a failure. [ 289.469939][ T9446] name failslab, interval 1, probability 0, space 0, times 0 [ 289.483199][ T9446] CPU: 0 UID: 0 PID: 9446 Comm: syz.1.845 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 289.483224][ T9446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 289.483234][ T9446] Call Trace: [ 289.483242][ T9446] [ 289.483249][ T9446] dump_stack_lvl+0x16c/0x1f0 [ 289.483274][ T9446] should_fail_ex+0x512/0x640 [ 289.483295][ T9446] ? __kvmalloc_node_noprof+0x122/0x600 [ 289.483330][ T9446] should_failslab+0xc2/0x120 [ 289.483347][ T9446] __kvmalloc_node_noprof+0x135/0x600 [ 289.483372][ T9446] ? __pfx___schedule+0x10/0x10 [ 289.483389][ T9446] ? io_sqe_buffers_register+0x12f/0x850 [ 289.483418][ T9446] ? io_sqe_buffers_register+0x12f/0x850 [ 289.483440][ T9446] io_sqe_buffers_register+0x12f/0x850 [ 289.483470][ T9446] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 289.483506][ T9446] __io_uring_register+0x22cc/0x2390 [ 289.483531][ T9446] ? trace_contention_end+0xdd/0x130 [ 289.483558][ T9446] ? __pfx___io_uring_register+0x10/0x10 [ 289.483579][ T9446] ? __mutex_lock+0x1ca/0xb90 [ 289.483600][ T9446] ? __x64_sys_io_uring_register+0x159/0x280 [ 289.483626][ T9446] ? __pfx___mutex_lock+0x10/0x10 [ 289.483652][ T9446] ? __fget_files+0x20e/0x3c0 [ 289.483684][ T9446] __x64_sys_io_uring_register+0x169/0x280 [ 289.483712][ T9446] do_syscall_64+0xcd/0x260 [ 289.483733][ T9446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.483751][ T9446] RIP: 0033:0x7fdc2bf8e969 [ 289.483765][ T9446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.483781][ T9446] RSP: 002b:00007fdc2ce98038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 289.483797][ T9446] RAX: ffffffffffffffda RBX: 00007fdc2c1b6160 RCX: 00007fdc2bf8e969 [ 289.483808][ T9446] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000008 [ 289.483818][ T9446] RBP: 00007fdc2ce98090 R08: 0000000000000000 R09: 0000000000000000 [ 289.483828][ T9446] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 289.483837][ T9446] R13: 0000000000000000 R14: 00007fdc2c1b6160 R15: 00007fff0b1e4a08 [ 289.483861][ T9446] [ 289.929059][ T911] usb 4-1: USB disconnect, device number 45 [ 290.160140][ T9455] 9pnet_fd: Insufficient options for proto=fd [ 290.169295][ T30] audit: type=1400 audit(2000000221.527:777): avc: denied { write } for pid=9454 comm="syz.3.848" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 290.200995][ T5832] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 290.224304][ T9437] delete_channel: no stack [ 290.269281][ T30] audit: type=1400 audit(2000000221.567:778): avc: denied { map } for pid=9454 comm="syz.3.848" path="socket:[23050]" dev="sockfs" ino=23050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 290.378253][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.850'. [ 290.387271][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.850'. [ 290.431004][ T9458] delete_channel: no stack [ 290.510334][ T911] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 290.518399][ T5864] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 290.692738][ T911] usb 3-1: device descriptor read/64, error -71 [ 290.842694][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 290.849335][ T5864] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 290.859756][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.870223][ T5864] usb 2-1: config 0 has no interface number 0 [ 290.876905][ T5864] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.050640][ T5864] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 291.060142][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 291.068674][ T5864] usb 2-1: Product: syz [ 291.073129][ T5864] usb 2-1: SerialNumber: syz [ 291.106228][ T911] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 291.116401][ T5864] usb 2-1: config 0 descriptor?? [ 291.505874][ T5864] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 291.623650][ T911] usb 3-1: device descriptor read/64, error -71 [ 291.764131][ T5917] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 291.772238][ T911] usb usb3-port1: attempt power cycle [ 291.804673][ T5832] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 291.838984][ T9482] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 291.924335][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 291.949666][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 291.969288][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 291.984937][ T5917] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 291.994306][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.002448][ T5917] usb 6-1: Product: syz [ 292.006954][ T5917] usb 6-1: Manufacturer: syz [ 292.012363][ T5917] usb 6-1: SerialNumber: syz [ 292.023151][ T5917] usb 6-1: config 0 descriptor?? [ 292.029656][ T974] usb 2-1: USB disconnect, device number 62 [ 292.037708][ T5917] streamzap 6-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 292.112781][ T911] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 292.151417][ T911] usb 3-1: device descriptor read/8, error -71 [ 292.222784][ T5894] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 292.259809][ T974] usb 6-1: USB disconnect, device number 29 [ 292.432651][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 292.439123][ T5894] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 292.452439][ T5894] usb 4-1: config 0 has no interface number 0 [ 292.464219][ T5894] usb 4-1: config 0 interface 184 has no altsetting 0 [ 292.475791][ T5894] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 292.485458][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.496022][ T5894] usb 4-1: Product: syz [ 292.500234][ T5894] usb 4-1: Manufacturer: syz [ 292.504877][ T5894] usb 4-1: SerialNumber: syz [ 292.512677][ T5894] usb 4-1: config 0 descriptor?? [ 292.519270][ T5894] smsc75xx v1.0.0 [ 292.693285][ T911] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 292.714295][ T911] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 292.722806][ T911] usb 3-1: config 0 has no interface number 0 [ 292.730813][ T911] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 292.740086][ T911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.748136][ T911] usb 3-1: Product: syz [ 292.752357][ T911] usb 3-1: Manufacturer: syz [ 292.757008][ T911] usb 3-1: SerialNumber: syz [ 292.765218][ T911] usb 3-1: config 0 descriptor?? [ 292.774722][ T911] hub 3-1:0.153: bad descriptor, ignoring hub [ 292.781579][ T911] hub 3-1:0.153: probe with driver hub failed with error -5 [ 292.789975][ T911] sierra 3-1:0.153: Sierra USB modem converter detected [ 292.892769][ T5917] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 292.928415][ T30] audit: type=1400 audit(2000000224.291:779): avc: denied { write } for pid=9483 comm="syz.3.858" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 293.053661][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 293.116221][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 293.140554][ T5894] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 293.154973][ T5917] usb 2-1: config 159 has an invalid interface number: 195 but max is 0 [ 293.181993][ T5894] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 293.191493][ T5917] usb 2-1: config 159 has no interface number 0 [ 293.191740][ T5917] usb 2-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 293.191794][ T5917] usb 2-1: config 159 interface 195 has no altsetting 0 [ 293.194617][ T5917] usb 2-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 293.436513][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.447213][ T9504] FAULT_INJECTION: forcing a failure. [ 293.447213][ T9504] name failslab, interval 1, probability 0, space 0, times 0 [ 293.472600][ T911] usb 3-1: USB disconnect, device number 45 [ 293.479095][ T911] sierra 3-1:0.153: device disconnected [ 293.494419][ T9504] CPU: 0 UID: 0 PID: 9504 Comm: syz.0.863 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 293.494444][ T9504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 293.494454][ T9504] Call Trace: [ 293.494460][ T9504] [ 293.494469][ T9504] dump_stack_lvl+0x16c/0x1f0 [ 293.494494][ T9504] should_fail_ex+0x512/0x640 [ 293.494516][ T9504] ? fs_reclaim_acquire+0xae/0x150 [ 293.494540][ T9504] ? device_write+0x378/0x1e60 [ 293.494559][ T9504] should_failslab+0xc2/0x120 [ 293.494575][ T9504] __kmalloc_noprof+0xd2/0x510 [ 293.494606][ T9504] ? _copy_from_user+0x59/0xd0 [ 293.494630][ T9504] device_write+0x378/0x1e60 [ 293.494653][ T9504] ? __pfx_device_write+0x10/0x10 [ 293.494674][ T9504] ? bpf_lsm_file_permission+0x9/0x10 [ 293.494696][ T9504] ? security_file_permission+0x71/0x210 [ 293.494719][ T9504] ? rw_verify_area+0xcf/0x680 [ 293.494743][ T9504] vfs_write+0x25c/0x1180 [ 293.494765][ T9504] ? __pfx_device_write+0x10/0x10 [ 293.494790][ T9504] ? __pfx_vfs_write+0x10/0x10 [ 293.494811][ T9504] ? find_held_lock+0x2b/0x80 [ 293.494830][ T9504] ? __fget_files+0x204/0x3c0 [ 293.494859][ T9504] ? __fget_files+0x20e/0x3c0 [ 293.494890][ T9504] ksys_write+0x12a/0x240 [ 293.494914][ T9504] ? __pfx_ksys_write+0x10/0x10 [ 293.494936][ T9504] ? rcu_is_watching+0x12/0xc0 [ 293.494961][ T9504] do_syscall_64+0xcd/0x260 [ 293.494982][ T9504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.494999][ T9504] RIP: 0033:0x7fc5b458e969 [ 293.495013][ T9504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.495029][ T9504] RSP: 002b:00007fc5b540f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 293.495046][ T9504] RAX: ffffffffffffffda RBX: 00007fc5b47b5fa0 RCX: 00007fc5b458e969 [ 293.495057][ T9504] RDX: 0000000000000068 RSI: 0000200000001380 RDI: 0000000000000008 [ 293.495066][ T9504] RBP: 00007fc5b540f090 R08: 0000000000000000 R09: 0000000000000000 [ 293.495075][ T9504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.495084][ T9504] R13: 0000000000000000 R14: 00007fc5b47b5fa0 R15: 00007ffdbd249418 [ 293.495105][ T9504] [ 293.716413][ T5917] usb 2-1: Product: syz [ 293.720595][ T5917] usb 2-1: Manufacturer: syz [ 293.731936][ T5917] usb 2-1: SerialNumber: syz [ 293.756806][ T9506] 9pnet_fd: Insufficient options for proto=fd [ 293.764908][ T5894] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 293.776112][ T5894] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 293.785814][ T5894] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 293.795609][ T5894] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 293.809707][ T5894] usb 4-1: USB disconnect, device number 46 [ 293.830288][ T9508] Cannot find add_set index 0 as target [ 293.950299][ T5917] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 293.982447][ T5917] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 294.001763][ T5917] [drm:udl_init] *ERROR* Selecting channel failed [ 294.057462][ T5917] [drm] Initialized udl 0.0.1 for 2-1:159.195 on minor 2 [ 294.064791][ T5917] [drm] Initialized udl on minor 2 [ 294.073457][ T5917] udl 2-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 294.087134][ T5917] udl 2-1:159.195: [drm] Cannot find any crtc or sizes [ 294.099108][ T5871] udl 2-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 294.118892][ T5917] usb 2-1: USB disconnect, device number 63 [ 294.125731][ T5871] udl 2-1:159.195: [drm] Cannot find any crtc or sizes [ 294.253235][ T5832] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 294.267614][ T5832] Bluetooth: hci3: Injecting HCI hardware error event [ 294.283144][ T5830] Bluetooth: hci3: hardware error 0x00 [ 294.756779][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.870'. [ 295.799486][ T9542] overlayfs: failed to resolve './file1': -2 [ 295.963718][ T5832] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 295.973534][ T5832] Bluetooth: hci0: Injecting HCI hardware error event [ 295.983889][ T5823] Bluetooth: hci0: hardware error 0x00 [ 296.235997][ T9556] 9pnet_fd: Insufficient options for proto=fd [ 296.273971][ T5917] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 296.681204][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 296.722438][ T5830] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 296.741622][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 296.768035][ T5917] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 296.789024][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.804494][ T5917] usb 4-1: Product: syz [ 296.811776][ T5917] usb 4-1: Manufacturer: syz [ 296.827803][ T5917] usb 4-1: SerialNumber: syz [ 296.842820][ T5917] usb 4-1: config 0 descriptor?? [ 296.851219][ T9548] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 297.030174][ T5917] usb 4-1: ucan: probing device on interface #0 [ 297.054962][ T5917] usb 4-1: ucan: invalid EP count (1) [ 297.061622][ T5917] usb 4-1: ucan: probe failed; try to update the device firmware [ 297.685961][ T911] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 297.942103][ T911] usb 2-1: Using ep0 maxpacket: 8 [ 297.957341][ T911] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 297.966640][ T911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.977549][ T911] usb 2-1: Product: syz [ 297.981775][ T911] usb 2-1: Manufacturer: syz [ 297.989071][ T911] usb 2-1: SerialNumber: syz [ 298.076367][ T911] usb 2-1: config 0 descriptor?? [ 298.082257][ T5823] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 298.144694][ T9588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.225818][ T30] audit: type=1400 audit(2000000229.592:780): avc: denied { watch_with_perm } for pid=9586 comm="syz.2.888" path="/187/bus" dev="tmpfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 298.408569][ T5894] usb 2-1: USB disconnect, device number 64 [ 300.498336][ T911] usb 4-1: USB disconnect, device number 47 [ 300.498759][ T9605] 9pnet_fd: Insufficient options for proto=fd [ 300.774340][ T5817] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 301.375618][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 301.387097][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 301.406066][ T5817] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 301.415833][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.427061][ T5817] usb 3-1: Product: syz [ 301.432093][ T5817] usb 3-1: Manufacturer: syz [ 301.437041][ T5817] usb 3-1: SerialNumber: syz [ 301.446817][ T5817] usb 3-1: config 0 descriptor?? [ 301.472616][ T5817] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 301.662840][ T5917] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 301.721683][ T911] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 301.868647][ T5817] usb 3-1: USB disconnect, device number 46 [ 301.871892][ T81] usb 3-1: Failed to submit usb control message: -71 [ 301.919303][ T81] usb 3-1: unable to send the bmi data to the device: -71 [ 301.931871][ T30] audit: type=1400 audit(2000000233.302:781): avc: denied { read } for pid=9636 comm="syz.3.900" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 301.959620][ T81] usb 3-1: unable to get target info from device [ 301.966330][ T81] usb 3-1: could not get target info (-71) [ 301.975995][ T81] usb 3-1: could not probe fw (-71) [ 302.006983][ T30] audit: type=1400 audit(2000000233.302:782): avc: denied { open } for pid=9636 comm="syz.3.900" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 302.031405][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 302.146690][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 302.166136][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 302.166570][ T911] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 302.198054][ T5917] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 302.697097][ T30] audit: type=1400 audit(2000000233.302:783): avc: denied { ioctl } for pid=9636 comm="syz.3.900" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 302.728530][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.738207][ T911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 302.780578][ T5917] usb 1-1: Product: syz [ 302.800001][ T911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 302.877757][ T5917] usb 1-1: Manufacturer: syz [ 302.883004][ T5917] usb 1-1: SerialNumber: syz [ 302.891124][ T5917] usb 1-1: config 0 descriptor?? [ 302.905055][ T911] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 302.924972][ T5917] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 302.943528][ T911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.011955][ T911] usb 2-1: Product: syz [ 303.027620][ T911] usb 2-1: Manufacturer: syz [ 303.051848][ T911] usb 2-1: SerialNumber: syz [ 303.143019][ T911] usb 2-1: config 0 descriptor?? [ 303.182655][ T911] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 303.229574][ T30] audit: type=1400 audit(2000000234.593:784): avc: denied { bind } for pid=9651 comm="syz.5.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 303.269583][ T871] usb 1-1: USB disconnect, device number 43 [ 303.371648][ T911] usb 2-1: USB disconnect, device number 65 [ 303.443868][ T9660] afs: Unknown parameter 'èà¨}' [ 303.628971][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'. [ 303.639067][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'. [ 303.743066][ T9665] delete_channel: no stack [ 303.897003][ T9669] 9pnet_fd: Insufficient options for proto=fd [ 304.133318][ T5894] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 305.073008][ T9686] Cannot find add_set index 0 as target [ 305.122163][ T5894] usb 4-1: device descriptor read/64, error -71 [ 305.354368][ T30] audit: type=1400 audit(2000000236.723:785): avc: denied { name_bind } for pid=9692 comm="syz.5.915" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 305.381306][ T5894] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 305.531850][ T5894] usb 4-1: device descriptor read/64, error -71 [ 305.791480][ T5894] usb usb4-port1: attempt power cycle [ 306.083607][ T9713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.919'. [ 306.151260][ T5894] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 306.191476][ T5894] usb 4-1: device descriptor read/8, error -71 [ 306.203657][ T30] audit: type=1400 audit(2000000237.563:786): avc: denied { connect } for pid=9714 comm="syz.2.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 306.788121][ T9723] syz.3.922: attempt to access beyond end of device [ 306.788121][ T9723] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 306.821350][ T871] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 307.950028][ T871] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 307.988897][ T5830] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 307.999011][ T5830] Bluetooth: hci2: Injecting HCI hardware error event [ 308.009378][ T871] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 308.020541][ T871] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.060640][ T871] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 308.070752][ T871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.094299][ T871] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.103809][ T871] usb 3-1: invalid MIDI out EP 0 [ 308.229207][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 308.238510][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 308.283031][ T9735] delete_channel: no stack [ 308.550264][ T9737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.690251][ T871] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 308.723351][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 308.738993][ T5823] Bluetooth: hci2: hardware error 0x00 [ 308.784500][ T30] audit: type=1400 audit(2000000240.153:787): avc: denied { load_policy } for pid=9714 comm="syz.2.920" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 308.790052][ T9718] SELinux: failed to load policy [ 308.868790][ T9718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.910917][ T5894] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 309.001604][ T9718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.022063][ T9718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.034897][ T9718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.160715][ T5894] usb 4-1: device descriptor read/64, error -71 [ 309.247594][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 309.262731][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 309.303320][ T30] audit: type=1400 audit(2000000240.663:788): avc: denied { write } for pid=9714 comm="syz.2.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 309.369868][ T9750] delete_channel: no stack [ 309.711840][ T5894] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 309.857176][ T9758] delete_channel: no stack [ 309.997966][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 310.008226][ T9759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=9759 comm=syz.0.933 [ 310.051669][ T5894] usb 4-1: device descriptor read/64, error -71 [ 310.292252][ T5894] usb usb4-port1: attempt power cycle [ 310.321493][ T871] usb 3-1: USB disconnect, device number 47 [ 310.330518][ T974] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 310.470854][ T974] usb 2-1: device descriptor read/64, error -71 [ 310.640748][ T5894] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 310.657608][ T9771] overlayfs: invalid origin (0000) [ 310.664754][ T5894] usb 4-1: device descriptor read/8, error -71 [ 310.715189][ T9771] vivid-000: disconnect [ 310.724189][ T9770] vivid-000: reconnect [ 310.770484][ T974] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 310.810597][ T5823] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 310.918340][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.938'. [ 310.927394][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.938'. [ 310.936528][ T5894] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 310.944283][ T974] usb 2-1: device descriptor read/64, error -71 [ 310.979441][ T9778] delete_channel: no stack [ 310.992202][ T5894] usb 4-1: device descriptor read/8, error -71 [ 311.084822][ T974] usb usb2-port1: attempt power cycle [ 311.203944][ T5894] usb usb4-port1: unable to enumerate USB device [ 311.499593][ T9788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.509806][ T871] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 311.560616][ T974] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 311.580853][ T974] usb 2-1: device descriptor read/8, error -71 [ 311.650444][ T5917] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 311.684869][ T871] usb 6-1: device descriptor read/64, error -71 [ 311.812109][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.824817][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 384, setting to 64 [ 311.830290][ T974] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 311.838225][ T5917] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 311.853377][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.861451][ T5917] usb 4-1: Product: syz [ 311.865735][ T5917] usb 4-1: Manufacturer: syz [ 311.870408][ T5917] usb 4-1: SerialNumber: syz [ 311.875601][ T974] usb 2-1: device descriptor read/8, error -71 [ 311.883677][ T5917] usb 4-1: config 0 descriptor?? [ 311.889801][ T9780] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 311.940350][ T5917] rc_core: IR keymap rc-streamzap not found [ 311.940658][ T871] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 311.946420][ T5917] Registered IR keymap rc-empty [ 311.959784][ T5917] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 311.973103][ T5917] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23 [ 311.991922][ T974] usb usb2-port1: unable to enumerate USB device [ 312.080799][ T871] usb 6-1: device descriptor read/64, error -71 [ 312.106604][ T974] usb 4-1: USB disconnect, device number 56 [ 312.190863][ T871] usb usb6-port1: attempt power cycle [ 312.402072][ T30] audit: type=1400 audit(2000000243.774:789): avc: denied { name_bind } for pid=9794 comm="syz.0.944" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 312.542907][ T871] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 312.650392][ T911] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 312.694817][ T871] usb 6-1: device descriptor read/8, error -71 [ 312.828687][ T911] usb 1-1: config 252 has an invalid interface number: 191 but max is 0 [ 312.851621][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 312.870184][ T911] usb 1-1: config 252 has no interface number 0 [ 312.899670][ T911] usb 1-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=6d.6f [ 312.915478][ T911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.926988][ T911] usb 1-1: Product: syz [ 312.940543][ T911] usb 1-1: Manufacturer: syz [ 312.950165][ T871] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 312.950562][ T911] usb 1-1: SerialNumber: syz [ 312.993196][ T911] usb-storage 1-1:252.191: USB Mass Storage device detected [ 313.011438][ T871] usb 6-1: device descriptor read/8, error -71 [ 313.013512][ T911] usb-storage 1-1:252.191: Quirks match for vid 054c pid 0069: 1 [ 313.133272][ T871] usb usb6-port1: unable to enumerate USB device [ 313.271829][ T9820] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 313.334258][ T9820] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 313.361108][ T9823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.364891][ T911] usb 1-1: USB disconnect, device number 44 [ 313.508917][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.956'. [ 313.656867][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.956'. [ 313.964178][ T9826] delete_channel: no stack [ 314.092172][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.957'. [ 314.101761][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.957'. [ 314.150915][ T9833] delete_channel: no stack [ 314.230721][ T911] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 314.539997][ T911] usb 4-1: device descriptor read/64, error -71 [ 314.570019][ T9836] delete_channel: no stack [ 314.651038][ T5865] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 314.790329][ T5865] usb 6-1: device descriptor read/64, error -71 [ 314.796735][ T911] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 314.864063][ T9847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.962'. [ 314.920154][ T911] usb 4-1: device descriptor read/64, error -71 [ 314.940143][ T5817] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 315.061099][ T911] usb usb4-port1: attempt power cycle [ 315.107074][ T9844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.961'. [ 315.124576][ T5817] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 315.141783][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 384, setting to 64 [ 315.177447][ T5817] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 315.186864][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.200135][ T5817] usb 2-1: Product: syz [ 315.205157][ T5817] usb 2-1: Manufacturer: syz [ 315.209889][ T5865] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 315.210263][ T5817] usb 2-1: SerialNumber: syz [ 315.789889][ T911] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 316.122026][ T5817] usb 2-1: config 0 descriptor?? [ 316.129476][ T9840] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 316.137597][ T911] usb 4-1: device descriptor read/8, error -71 [ 316.190063][ T5865] usb 6-1: device descriptor read/64, error -71 [ 316.300050][ T5865] usb usb6-port1: attempt power cycle [ 317.024905][ T9828] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 317.232182][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.238560][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.359200][ T5817] rc_core: IR keymap rc-streamzap not found [ 317.444494][ T911] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 317.477490][ T5817] Registered IR keymap rc-empty [ 317.486284][ T5817] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 317.552969][ T9864] FAULT_INJECTION: forcing a failure. [ 317.552969][ T9864] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 317.566906][ T9864] CPU: 1 UID: 0 PID: 9864 Comm: syz.5.965 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 317.566930][ T9864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 317.566939][ T9864] Call Trace: [ 317.566945][ T9864] [ 317.566952][ T9864] dump_stack_lvl+0x16c/0x1f0 [ 317.566983][ T9864] should_fail_ex+0x512/0x640 [ 317.567007][ T9864] should_fail_alloc_page+0xe7/0x130 [ 317.567027][ T9864] prepare_alloc_pages+0x3c2/0x610 [ 317.567048][ T9864] ? find_held_lock+0x2b/0x80 [ 317.567071][ T9864] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 317.567097][ T9864] ? rcu_is_watching+0x12/0xc0 [ 317.567116][ T9864] ? finish_task_switch.isra.0+0x221/0xc10 [ 317.567136][ T9864] ? lockdep_hardirqs_on+0x7c/0x110 [ 317.567154][ T9864] ? finish_task_switch.isra.0+0x221/0xc10 [ 317.567174][ T9864] ? rcu_is_watching+0x12/0xc0 [ 317.567192][ T9864] ? trace_sched_exit_tp+0xde/0x130 [ 317.567215][ T9864] ? __schedule+0x1186/0x5de0 [ 317.567231][ T9864] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 317.567258][ T9864] ? lock_acquire+0x170/0x350 [ 317.567291][ T9864] ? __pfx___schedule+0x10/0x10 [ 317.567305][ T9864] ? finish_task_switch.isra.0+0x221/0xc10 [ 317.567330][ T9864] ? rcu_is_watching+0x12/0xc0 [ 317.567347][ T9864] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 317.567374][ T9864] ? policy_nodemask+0xea/0x4e0 [ 317.567393][ T9864] alloc_pages_mpol+0x1fb/0x550 [ 317.567411][ T9864] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 317.567435][ T9864] alloc_pages_noprof+0x131/0x390 [ 317.567452][ T9864] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 317.567474][ T9864] get_free_pages_noprof+0xc/0x40 [ 317.567491][ T9864] kasan_populate_vmalloc_pte+0x2d/0x160 [ 317.567515][ T9864] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 317.567538][ T9864] __apply_to_page_range+0x617/0xd60 [ 317.567562][ T9864] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 317.567589][ T9864] ? __pfx___apply_to_page_range+0x10/0x10 [ 317.567610][ T9864] ? alloc_vmap_area+0x872/0x2970 [ 317.567641][ T9864] alloc_vmap_area+0x919/0x2970 [ 317.567673][ T9864] ? __pfx_alloc_vmap_area+0x10/0x10 [ 317.567701][ T9864] __get_vm_area_node+0x1a7/0x300 [ 317.567727][ T9864] __vmalloc_node_range_noprof+0x277/0x1540 [ 317.567750][ T9864] ? kernel_clone+0xfc/0x960 [ 317.567777][ T9864] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 317.567805][ T9864] ? kernel_clone+0xfc/0x960 [ 317.567832][ T9864] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 317.567862][ T9864] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 317.567886][ T9864] ? rcu_is_watching+0x12/0xc0 [ 317.567906][ T9864] ? kernel_clone+0xfc/0x960 [ 317.567926][ T9864] __vmalloc_node_noprof+0x74/0xa0 [ 317.567949][ T9864] ? kernel_clone+0xfc/0x960 [ 317.567976][ T9864] copy_process+0x2ead/0x91a0 [ 317.568002][ T9864] ? rcu_is_watching+0x12/0xc0 [ 317.568025][ T9864] ? __lock_acquire+0xaa4/0x1ba0 [ 317.568056][ T9864] ? __pfx_copy_process+0x10/0x10 [ 317.568078][ T9864] ? lock_acquire+0x179/0x350 [ 317.568106][ T9864] ? find_held_lock+0x2b/0x80 [ 317.568125][ T9864] ? finish_task_switch.isra.0+0x21c/0xc10 [ 317.568146][ T9864] ? rcu_is_watching+0x12/0xc0 [ 317.568164][ T9864] ? finish_task_switch.isra.0+0x221/0xc10 [ 317.568183][ T9864] ? lockdep_hardirqs_on+0x7c/0x110 [ 317.568203][ T9864] ? rcu_is_watching+0x12/0xc0 [ 317.568221][ T9864] ? trace_sched_exit_tp+0xde/0x130 [ 317.568247][ T9864] kernel_clone+0xfc/0x960 [ 317.568270][ T9864] ? __pfx_kernel_clone+0x10/0x10 [ 317.568297][ T9864] ? __pfx___schedule+0x10/0x10 [ 317.568314][ T9864] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 317.568337][ T9864] __do_sys_clone+0xce/0x120 [ 317.568359][ T9864] ? __pfx___do_sys_clone+0x10/0x10 [ 317.568405][ T9864] do_syscall_64+0xcd/0x260 [ 317.568427][ T9864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.568444][ T9864] RIP: 0033:0x7f5368b8e969 [ 317.568458][ T9864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.568474][ T9864] RSP: 002b:00007f5369a64fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 317.568490][ T9864] RAX: ffffffffffffffda RBX: 00007f5368db6160 RCX: 00007f5368b8e969 [ 317.568502][ T9864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 317.568511][ T9864] RBP: 00007f5369a65090 R08: 0000000000000000 R09: 0000000000000000 [ 317.568521][ T9864] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 317.568531][ T9864] R13: 0000000000000000 R14: 00007f5368db6160 R15: 00007ffe45557028 [ 317.568554][ T9864] [ 317.568866][ T9864] syz.5.965: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 318.022976][ T9864] CPU: 0 UID: 0 PID: 9864 Comm: syz.5.965 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 318.022993][ T9864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 318.023000][ T9864] Call Trace: [ 318.023003][ T9864] [ 318.023007][ T9864] dump_stack_lvl+0x16c/0x1f0 [ 318.023024][ T9864] warn_alloc+0x248/0x3a0 [ 318.023042][ T9864] ? __pfx_warn_alloc+0x10/0x10 [ 318.023059][ T9864] ? lockdep_hardirqs_on+0x7c/0x110 [ 318.023074][ T9864] ? do_syscall_64+0xcd/0x260 [ 318.023087][ T9864] ? __vmalloc_node_range_noprof+0xd05/0x1540 [ 318.023105][ T9864] __vmalloc_node_range_noprof+0xd31/0x1540 [ 318.023122][ T9864] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 318.023144][ T9864] ? kernel_clone+0xfc/0x960 [ 318.023170][ T9864] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 318.023191][ T9864] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 318.023208][ T9864] ? rcu_is_watching+0x12/0xc0 [ 318.023221][ T9864] ? kernel_clone+0xfc/0x960 [ 318.023241][ T9864] __vmalloc_node_noprof+0x74/0xa0 [ 318.023257][ T9864] ? kernel_clone+0xfc/0x960 [ 318.023271][ T9864] copy_process+0x2ead/0x91a0 [ 318.023286][ T9864] ? rcu_is_watching+0x12/0xc0 [ 318.023300][ T9864] ? __lock_acquire+0xaa4/0x1ba0 [ 318.023321][ T9864] ? __pfx_copy_process+0x10/0x10 [ 318.023335][ T9864] ? lock_acquire+0x179/0x350 [ 318.023351][ T9864] ? find_held_lock+0x2b/0x80 [ 318.023363][ T9864] ? finish_task_switch.isra.0+0x21c/0xc10 [ 318.023377][ T9864] ? rcu_is_watching+0x12/0xc0 [ 318.023388][ T9864] ? finish_task_switch.isra.0+0x221/0xc10 [ 318.023401][ T9864] ? lockdep_hardirqs_on+0x7c/0x110 [ 318.023413][ T9864] ? rcu_is_watching+0x12/0xc0 [ 318.023425][ T9864] ? trace_sched_exit_tp+0xde/0x130 [ 318.023442][ T9864] kernel_clone+0xfc/0x960 [ 318.023457][ T9864] ? __pfx_kernel_clone+0x10/0x10 [ 318.023474][ T9864] ? __pfx___schedule+0x10/0x10 [ 318.023486][ T9864] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 318.023500][ T9864] __do_sys_clone+0xce/0x120 [ 318.023514][ T9864] ? __pfx___do_sys_clone+0x10/0x10 [ 318.023539][ T9864] do_syscall_64+0xcd/0x260 [ 318.023552][ T9864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.023564][ T9864] RIP: 0033:0x7f5368b8e969 [ 318.023573][ T9864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.023583][ T9864] RSP: 002b:00007f5369a64fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 318.023593][ T9864] RAX: ffffffffffffffda RBX: 00007f5368db6160 RCX: 00007f5368b8e969 [ 318.023600][ T9864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 318.023606][ T9864] RBP: 00007f5369a65090 R08: 0000000000000000 R09: 0000000000000000 [ 318.023612][ T9864] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 318.023618][ T9864] R13: 0000000000000000 R14: 00007f5368db6160 R15: 00007ffe45557028 [ 318.023631][ T9864] [ 318.023635][ T9864] Mem-Info: [ 318.309949][ T9864] active_anon:9453 inactive_anon:0 isolated_anon:0 [ 318.309949][ T9864] active_file:10122 inactive_file:48998 isolated_file:0 [ 318.309949][ T9864] unevictable:770 dirty:1249 writeback:0 [ 318.309949][ T9864] slab_reclaimable:11866 slab_unreclaimable:104409 [ 318.309949][ T9864] mapped:34697 shmem:4278 pagetables:1401 [ 318.309949][ T9864] sec_pagetables:0 bounce:0 [ 318.309949][ T9864] kernel_misc_reclaimable:0 [ 318.309949][ T9864] free:1299598 free_pcp:7672 free_cma:0 [ 318.355733][ T9864] Node 0 active_anon:37812kB inactive_anon:0kB active_file:40488kB inactive_file:195916kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:138788kB dirty:4996kB writeback:0kB shmem:15576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11784kB pagetables:5604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 318.389473][ T9864] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 318.420742][ T9864] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.459256][ T9864] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 318.465327][ T9864] Node 0 DMA32 free:1274152kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:37796kB inactive_anon:0kB active_file:40488kB inactive_file:194076kB unevictable:1544kB writepending:4996kB present:3129332kB managed:2543964kB mlocked:8kB bounce:0kB free_pcp:26440kB local_pcp:25404kB free_cma:0kB [ 318.580437][ T9864] lowmem_reserve[]: 0 0 1 1 1 [ 318.585175][ T9864] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 318.612564][ T9864] lowmem_reserve[]: 0 0 0 0 0 [ 318.617249][ T9864] Node 1 Normal free:3908704kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4096kB local_pcp:0kB free_cma:0kB [ 318.646413][ T9864] lowmem_reserve[]: 0 0 0 0 0 [ 318.651105][ T9864] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 318.663671][ T9864] Node 0 DMA32: 1*4kB (M) 6*8kB (UME) 3*16kB (E) 21*32kB (UE) 168*64kB (UME) 34*128kB (UME) 28*256kB (UME) 14*512kB (UME) 6*1024kB (UME) 7*2048kB (UME) 295*4096kB (UM) = 1259012kB [ 318.681483][ T9864] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 318.693779][ T9864] Node 1 Normal: 186*4kB (U) 63*8kB (UME) 38*16kB (UME) 187*32kB (UME) 109*64kB (UME) 31*128kB (UME) 21*256kB (UME) 9*512kB (UME) 1*1024kB (M) 4*2048kB (UE) 945*4096kB (M) = 3908704kB [ 318.711954][ T9864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 318.721499][ T9864] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 318.730770][ T9864] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 318.740422][ T9864] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 318.749703][ T9864] 66268 total pagecache pages [ 318.754349][ T9864] 0 pages in swap cache [ 318.758483][ T9864] Free swap = 124996kB [ 318.762630][ T9864] Total swap = 124996kB [ 318.766756][ T9864] 2097051 pages RAM [ 318.770566][ T9864] 0 pages HighMem/MovableOnly [ 318.775222][ T9864] 428954 pages reserved [ 318.779344][ T9864] 0 pages cma reserved [ 318.846921][ T911] usb 4-1: device descriptor read/8, error -71 [ 318.855163][ T5817] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input24 [ 318.896035][ T5817] usb 2-1: USB disconnect, device number 70 [ 318.962764][ T911] usb usb4-port1: unable to enumerate USB device [ 319.022371][ T30] audit: type=1400 audit(2000000250.394:790): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 319.102853][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'. [ 319.112265][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'. [ 319.190777][ T9875] delete_channel: no stack [ 319.509695][ T5894] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 320.159552][ T5894] usb 3-1: device descriptor read/64, error -71 [ 320.537413][ T9895] netlink: 16 bytes leftover after parsing attributes in process `syz.5.973'. [ 320.849627][ T5894] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 320.894995][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 320.969054][ T9904] delete_channel: no stack [ 321.269429][ T5894] usb 3-1: device descriptor read/64, error -71 [ 321.359396][ T871] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 321.809593][ T5894] usb usb3-port1: attempt power cycle [ 321.829091][ T871] usb 2-1: device descriptor read/64, error -71 [ 322.065263][ T30] audit: type=1400 audit(2000000253.415:791): avc: denied { mount } for pid=9910 comm="syz.0.979" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 322.499466][ T871] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 322.651338][ T871] usb 2-1: device descriptor read/64, error -71 [ 322.709312][ T5894] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 322.741124][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.769367][ T871] usb usb2-port1: attempt power cycle [ 322.780496][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 384, setting to 64 [ 323.042078][ T5894] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 323.052248][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.060734][ T5894] usb 3-1: Product: syz [ 323.065077][ T5894] usb 3-1: Manufacturer: syz [ 323.070151][ T5894] usb 3-1: SerialNumber: syz [ 323.077106][ T5894] usb 3-1: config 0 descriptor?? [ 323.083809][ T9919] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 323.130323][ T5894] rc_core: IR keymap rc-streamzap not found [ 323.136795][ T5894] Registered IR keymap rc-empty [ 323.144751][ T5894] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 323.159949][ T5894] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input25 [ 323.269069][ T9915] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 323.305893][ T5917] usb 3-1: USB disconnect, device number 50 [ 323.369275][ T871] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 323.389594][ T871] usb 2-1: device descriptor read/8, error -71 [ 323.441496][ T9915] usb 1-1: Using ep0 maxpacket: 8 [ 323.447847][ T9915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.460032][ T9915] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x16, changing to 0x6 [ 323.474421][ T9915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 323.539509][ T9915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 323.574687][ T9915] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.719022][ T871] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 323.735855][ T9915] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 323.819420][ T9915] usb 1-1: New USB device strings: Mfr=80, Product=2, SerialNumber=3 [ 323.827836][ T9915] usb 1-1: Product: syz [ 323.836537][ T9915] usb 1-1: Manufacturer: syz [ 323.846184][ T9915] usb 1-1: SerialNumber: syz [ 323.861233][ T871] usb 2-1: device descriptor read/8, error -71 [ 323.878990][ T9915] usb 1-1: config 0 descriptor?? [ 323.894292][ T9915] ati_remote 1-1:0.0: ati_remote_probe: Unexpected endpoint_in [ 323.969296][ T871] usb usb2-port1: unable to enumerate USB device [ 324.096825][ T911] usb 1-1: USB disconnect, device number 45 [ 325.614125][ T30] audit: type=1400 audit(2000000256.985:792): avc: denied { setattr } for pid=9950 comm="syz.3.989" name="file0" dev="fuse" ino=18446744073709551615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 325.768966][ T5817] Process accounting resumed [ 326.455274][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.997'. [ 326.464485][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.997'. [ 326.506328][ T9977] delete_channel: no stack [ 326.808503][ T9915] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 328.328751][ T9915] usb 6-1: device descriptor read/64, error -71 [ 328.546028][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 328.555306][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 328.881591][ T9915] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 329.458471][ T9915] usb 6-1: device descriptor read/64, error -71 [ 329.677240][ T9915] usb usb6-port1: attempt power cycle [ 329.814422][T10014] delete_channel: no stack [ 330.840340][T10033] delete_channel: no stack [ 331.469313][T10039] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1012'. [ 331.503470][T10039] pim6reg: entered allmulticast mode [ 332.392795][T10045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1014'. [ 332.614394][T10042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.842444][T10050] kernel profiling enabled (shift: 7) [ 332.979393][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 332.989450][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 333.026541][T10056] delete_channel: no stack [ 333.482182][ T871] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 333.545583][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1016'. [ 333.554499][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1016'. [ 333.581646][T10052] delete_channel: no stack [ 333.598735][ T30] audit: type=1400 audit(2000000264.956:793): avc: denied { ioctl } for pid=10051 comm="syz.1.1016" path="socket:[26707]" dev="sockfs" ino=26707 ioctlcmd=0x3b70 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 333.630422][ T871] usb 4-1: device descriptor read/64, error -71 [ 334.067906][ T871] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 334.197597][ T871] usb 4-1: device descriptor read/64, error -71 [ 334.227815][ T5866] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 335.066481][ T871] usb usb4-port1: attempt power cycle [ 335.297599][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 335.313379][ T5866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.324517][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x16, changing to 0x6 [ 335.567591][ T871] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 335.824556][T10087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.112917][ T871] usb 4-1: device descriptor read/8, error -71 [ 336.346295][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 336.357121][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 336.368444][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.656111][ T5866] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 336.665948][ T30] audit: type=1400 audit(2000000268.027:794): avc: denied { accept } for pid=10057 comm="syz.5.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 336.685767][ T5866] usb 3-1: New USB device strings: Mfr=80, Product=2, SerialNumber=3 [ 336.694748][T10090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1026'. [ 336.696927][ T5866] usb 3-1: Product: syz [ 336.712286][ T5866] usb 3-1: Manufacturer: syz [ 336.718456][ T5866] usb 3-1: SerialNumber: syz [ 336.889994][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 336.899245][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 336.950086][T10093] delete_channel: no stack [ 337.156906][ T5866] usb 3-1: config 0 descriptor?? [ 337.173286][ T5866] usb 3-1: can't set config #0, error -71 [ 337.529938][ T5866] usb 3-1: USB disconnect, device number 51 [ 338.678809][T10106] bond0: (slave gre0): Error: Device type is different from other slaves [ 338.745441][T10120] overlayfs: statfs failed on './file0' [ 338.777505][ T5866] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 339.066412][T10131] delete_channel: no stack [ 339.195998][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 339.289206][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 339.437451][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 339.459204][ T5866] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 339.490130][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.503154][ T5866] usb 3-1: Product: syz [ 339.509730][ T5866] usb 3-1: Manufacturer: syz [ 339.514426][ T5866] usb 3-1: SerialNumber: syz [ 339.528237][ T5866] usb 3-1: config 0 descriptor?? [ 339.551421][T10101] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 339.557942][T10138] sctp: [Deprecated]: syz.0.1038 (pid 10138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.557942][T10138] Use struct sctp_sack_info instead [ 339.563638][T10136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.583845][T10101] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 339.604681][ T5866] usb 3-1: ucan: probing device on interface #0 [ 339.833724][ T30] audit: type=1400 audit(2000000271.057:795): avc: denied { read } for pid=10137 comm="syz.0.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 339.928511][ T5866] usb 3-1: ucan: could not read protocol version, ret=-32 [ 339.958838][ T5866] usb 3-1: ucan: probe failed; try to update the device firmware [ 340.025358][T10145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1040'. [ 340.145597][T10148] 9pnet_fd: Insufficient options for proto=fd [ 341.079065][T10153] bond0: (slave bond_slave_0): Releasing backup interface [ 341.120869][T10153] bond0: (slave bond_slave_1): Releasing backup interface [ 341.133214][T10154] netlink: 'syz.5.1043': attribute type 10 has an invalid length. [ 341.165298][T10153] team0: Port device team_slave_0 removed [ 341.186470][T10153] team0: Port device team_slave_1 removed [ 341.193878][T10153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.205244][T10153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.219274][T10153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.226922][T10153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.300441][T10154] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 341.340835][ T911] Process accounting resumed [ 341.592440][T10153] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.602614][T10153] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.615911][T10153] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.634530][T10153] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.763634][T10172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1047'. [ 341.886870][ T5817] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 342.061025][ T911] usb 3-1: USB disconnect, device number 52 [ 342.082573][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 342.109341][ T5817] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 342.125990][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 342.152482][ T5817] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 342.164497][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.179594][ T5817] usb 2-1: Product: syz [ 342.198660][T10179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.210740][ T5817] usb 2-1: Manufacturer: syz [ 342.215364][ T5817] usb 2-1: SerialNumber: syz [ 342.353570][ T5817] usb 2-1: config 0 descriptor?? [ 342.367375][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'. [ 342.376293][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'. [ 342.376883][T10168] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 342.432564][T10180] delete_channel: no stack [ 342.435306][ T5817] usb 2-1: ucan: probing device on interface #0 [ 342.554410][ T5817] usb 2-1: ucan: invalid in_ep MaxPacketSize [ 342.564871][ T5817] usb 2-1: ucan: probe failed; try to update the device firmware [ 344.253485][ T5917] Process accounting resumed [ 344.293587][T10210] 9pnet_fd: Insufficient options for proto=fd [ 344.322881][ T5832] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 344.776946][ T5866] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 345.020761][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 345.039875][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 345.052442][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 345.066532][ T5866] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 345.076366][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.084956][ T5866] usb 4-1: Product: syz [ 345.089410][ T5866] usb 4-1: Manufacturer: syz [ 345.094018][ T5866] usb 4-1: SerialNumber: syz [ 345.303133][ T5866] usb 4-1: config 0 descriptor?? [ 345.347022][T10219] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 345.405947][T10219] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 345.431540][ T5866] usb 4-1: ucan: probing device on interface #0 [ 345.613695][ T9915] usb 2-1: USB disconnect, device number 75 [ 346.570587][ T5866] usb 4-1: ucan: could not read protocol version, ret=-110 [ 346.595822][ T5866] usb 4-1: ucan: probe failed; try to update the device firmware [ 346.708239][T10249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1069'. [ 347.188628][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1070'. [ 347.200064][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1070'. [ 347.475600][T10251] delete_channel: no stack [ 347.485577][T10259] Cannot find add_set index 0 as target [ 348.213016][ T5866] usb 4-1: USB disconnect, device number 65 [ 348.214631][T10270] 9pnet_fd: Insufficient options for proto=fd [ 348.240251][ T5832] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 348.410098][ T5832] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 348.418807][ T5832] Bluetooth: hci4: Injecting HCI hardware error event [ 348.427883][ T5832] Bluetooth: hci4: hardware error 0x00 [ 349.326341][ T5866] Process accounting resumed [ 349.357756][T10292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.000044][T10305] Cannot find add_set index 0 as target [ 350.476021][ T5832] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 350.680393][T10316] delete_channel: no stack [ 350.689647][ T5866] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 351.004848][T10320] delete_channel: no stack [ 351.085773][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.153123][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 384, setting to 64 [ 351.179152][ T5866] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 351.190823][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.201674][ T5866] usb 2-1: Product: syz [ 351.205977][ T9915] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 351.217712][ T5866] usb 2-1: Manufacturer: syz [ 351.225427][ T5866] usb 2-1: SerialNumber: syz [ 351.238853][ T5866] usb 2-1: config 0 descriptor?? [ 351.250553][T10307] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 351.315615][ T5866] rc_core: IR keymap rc-streamzap not found [ 351.323253][ T5866] Registered IR keymap rc-empty [ 351.337042][ T5866] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 351.356007][ T9915] usb 6-1: device descriptor read/64, error -71 [ 351.377582][ T5866] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26 [ 351.395882][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 351.412178][T10326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.625676][ T10] usb 3-1: device descriptor read/64, error -71 [ 351.684808][ T5866] usb 2-1: USB disconnect, device number 76 [ 351.748703][ T9915] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 351.916832][ T9915] usb 6-1: device descriptor read/64, error -71 [ 351.997071][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 352.062607][T10340] Cannot find add_set index 0 as target [ 352.105575][ T5894] Process accounting resumed [ 352.144367][T10344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.175672][ T9915] usb usb6-port1: attempt power cycle [ 352.205461][ T10] usb 3-1: device descriptor read/64, error -71 [ 352.236843][ T5832] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 352.245262][ T5832] Bluetooth: hci1: Injecting HCI hardware error event [ 352.256027][ T5823] Bluetooth: hci1: hardware error 0x00 [ 352.319402][ T10] usb usb3-port1: attempt power cycle [ 352.515373][ T9915] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 352.547796][ T9915] usb 6-1: device descriptor read/8, error -71 [ 352.665405][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 352.685862][ T10] usb 3-1: device descriptor read/8, error -71 [ 352.795847][ T9915] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 352.825817][ T9915] usb 6-1: device descriptor read/8, error -71 [ 352.925596][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 352.935602][ T9915] usb usb6-port1: unable to enumerate USB device [ 352.948176][ T10] usb 3-1: device descriptor read/8, error -71 [ 353.102669][ T10] usb usb3-port1: unable to enumerate USB device [ 353.126712][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1105'. [ 353.138206][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1105'. [ 353.345778][T10358] delete_channel: no stack [ 353.918990][T10375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.075721][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 354.335405][ T5823] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 354.583540][ T5864] Process accounting resumed [ 354.617524][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 354.635975][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.651221][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x16, changing to 0x6 [ 354.672370][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 354.682879][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 354.708394][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1116'. [ 354.718314][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.798658][ T10] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 354.811214][ T10] usb 4-1: New USB device strings: Mfr=80, Product=2, SerialNumber=3 [ 354.839166][ T10] usb 4-1: Product: syz [ 354.846232][ T10] usb 4-1: Manufacturer: syz [ 354.850943][ T10] usb 4-1: SerialNumber: syz [ 354.862404][ T10] usb 4-1: config 0 descriptor?? [ 354.934509][ T10] ati_remote 4-1:0.0: ati_remote_probe: Unexpected endpoint_in [ 355.129549][ T5817] usb 4-1: USB disconnect, device number 66 [ 355.315382][ T10] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 355.497580][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 355.511220][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 355.525438][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 355.590063][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 355.601043][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 355.629983][T10410] delete_channel: no stack [ 355.654847][ T10] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 355.675533][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.747710][ T10] usb 3-1: Product: syz [ 355.854964][ T10] usb 3-1: Manufacturer: syz [ 355.860794][T10410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.867829][ T10] usb 3-1: SerialNumber: syz [ 355.871715][T10412] Cannot find add_set index 0 as target [ 355.889506][ T10] usb 3-1: config 0 descriptor?? [ 355.899971][T10406] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 355.930937][T10406] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 355.947907][ T10] usb 3-1: ucan: probing device on interface #0 [ 356.721194][ T10] usb 3-1: ucan: could not read protocol version, ret=-32 [ 356.828165][T10426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1123'. [ 357.077579][ T10] usb 3-1: ucan: probe failed; try to update the device firmware [ 358.148827][T10445] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1129'. [ 358.214142][ T5894] Process accounting resumed [ 358.232444][T10449] 9pnet_fd: Insufficient options for proto=fd [ 358.258048][ T5817] usb 3-1: USB disconnect, device number 57 [ 358.606452][T10460] delete_channel: no stack [ 358.645302][T10460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.846605][T10466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.436545][T10470] delete_channel: no stack [ 359.514232][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1139'. [ 359.523549][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1139'. [ 359.768111][ T5817] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 359.821353][T10472] delete_channel: no stack [ 360.097108][ T5817] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 360.143143][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 384, setting to 64 [ 360.292686][ T5817] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 360.375961][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.458278][ T5817] usb 3-1: Product: syz [ 360.485713][ T5817] usb 3-1: Manufacturer: syz [ 360.521497][ T5817] usb 3-1: SerialNumber: syz [ 360.544179][ T5817] usb 3-1: config 0 descriptor?? [ 360.565497][T10476] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 360.635326][ T10] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 360.670194][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1147'. [ 360.675293][ T5817] rc_core: IR keymap rc-streamzap not found [ 360.688199][ T5817] Registered IR keymap rc-empty [ 360.698159][ T5817] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 360.717227][ T5817] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 360.796295][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 360.834571][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'. [ 360.843677][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'. [ 360.900020][T10502] delete_channel: no stack [ 360.979606][T10502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.104702][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 361.154769][ T5817] usb 3-1: USB disconnect, device number 58 [ 361.157558][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 361.191538][ T5866] Process accounting resumed [ 361.228078][ T10] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 361.244496][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.259957][ T10] usb 6-1: Product: syz [ 361.264367][ T10] usb 6-1: Manufacturer: syz [ 361.269017][ T10] usb 6-1: SerialNumber: syz [ 361.286103][ T10] usb 6-1: config 0 descriptor?? [ 361.296856][T10484] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 361.304342][T10484] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 361.313396][ T10] usb 6-1: ucan: probing device on interface #0 [ 361.328236][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 361.339723][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1152'. [ 361.476434][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1154'. [ 361.480567][ T30] audit: type=1326 audit(2000000292.850:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10512 comm="syz.0.1153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5b458e969 code=0x0 [ 361.504241][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1154'. [ 361.565512][ T10] usb 6-1: ucan: could not read protocol version, ret=0 [ 361.589269][ T10] usb 6-1: ucan: probe failed; try to update the device firmware [ 363.150264][ T5864] usb 6-1: USB disconnect, device number 44 [ 363.213817][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1159'. [ 363.270026][T10534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.304953][T10534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.318481][T10534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.350338][T10534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.616928][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1160'. [ 364.018342][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 364.027466][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 364.065002][T10553] delete_channel: no stack [ 364.111612][T10553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.325203][ T30] audit: type=1400 audit(2000000295.700:797): avc: denied { create } for pid=10546 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 364.419749][T10555] overlayfs: failed to resolve './file1': -2 [ 365.779017][T10582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.003911][ T10] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 366.178904][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 366.392593][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 366.798289][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 366.907807][ T10] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 366.945116][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.133590][ T10] usb 1-1: Product: syz [ 367.141985][ T10] usb 1-1: Manufacturer: syz [ 367.176680][ T10] usb 1-1: SerialNumber: syz [ 367.215204][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1177'. [ 367.589995][ T10] usb 1-1: config 0 descriptor?? [ 367.694831][T10580] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 367.704193][T10580] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 367.712521][ T10] usb 1-1: ucan: probing device on interface #0 [ 367.984970][ T10] usb 1-1: ucan: could not read protocol version, ret=0 [ 367.992035][ T10] usb 1-1: ucan: probe failed; try to update the device firmware [ 368.205316][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1178'. [ 368.215273][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1178'. [ 368.247254][T10610] delete_channel: no stack [ 368.277273][T10610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 369.581047][ T871] usb 1-1: USB disconnect, device number 46 [ 369.683401][T10625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1183'. [ 369.975764][T10628] Cannot find add_set index 0 as target [ 370.007243][T10630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.941508][T10644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.713585][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 371.761913][T10651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1188'. [ 372.168357][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 372.288344][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 372.306701][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1192'. [ 372.316961][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1192'. [ 372.429976][ T30] audit: type=1400 audit(2000000303.701:798): avc: denied { map } for pid=10658 comm="syz.1.1191" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 372.444828][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 372.473406][ T30] audit: type=1400 audit(2000000303.701:799): avc: denied { execute } for pid=10658 comm="syz.1.1191" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 372.526270][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 372.585914][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 372.742464][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.753805][T10660] delete_channel: no stack [ 372.767057][T10660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.810314][ T10] usb 1-1: config 0 descriptor?? [ 372.927954][T10659] team0 (unregistering): Port device team_slave_0 removed [ 372.939917][T10659] team0 (unregistering): Port device team_slave_1 removed [ 373.025369][ T5917] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 373.122554][T10679] Cannot find add_set index 0 as target [ 373.194777][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 373.213685][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 373.252901][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 373.284829][ T5917] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 373.301841][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.324117][ T10] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 373.345038][ T5917] usb 2-1: Product: syz [ 373.345076][ T10] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 373.349220][ T5917] usb 2-1: Manufacturer: syz [ 373.374338][ T5917] usb 2-1: SerialNumber: syz [ 373.391716][ T5917] usb 2-1: config 0 descriptor?? [ 373.399309][T10668] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 373.407282][T10668] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 373.417337][ T5917] usb 2-1: ucan: probing device on interface #0 [ 373.545123][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1201'. [ 373.554724][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1201'. [ 373.626295][T10690] delete_channel: no stack [ 373.627613][ T5917] usb 2-1: ucan: could not read protocol version, ret=0 [ 373.715217][ T5917] usb 2-1: ucan: probe failed; try to update the device firmware [ 373.880836][ T30] audit: type=1326 audit(2000000305.241:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10686 comm="syz.3.1200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae6218e969 code=0x0 [ 373.962145][T10642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.971045][T10642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.075317][T10699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.098709][ T871] usb 1-1: USB disconnect, device number 47 [ 375.239649][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 375.249072][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 375.299515][T10712] delete_channel: no stack [ 375.349624][T10712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.664074][T10722] Cannot find add_set index 0 as target [ 376.173908][ T5871] usb 2-1: USB disconnect, device number 77 [ 376.476828][T10730] team0 (unregistering): Port device team_slave_0 removed [ 376.495812][T10730] team0 (unregistering): Port device team_slave_1 removed [ 376.636671][T10747] overlayfs: failed to resolve './file1': -2 [ 376.662003][T10747] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 376.665459][ T30] audit: type=1400 audit(2000000308.041:801): avc: denied { create } for pid=10744 comm="syz.5.1216" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 376.702577][ T5871] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 376.756750][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.860052][ T30] audit: type=1400 audit(2000000308.061:802): avc: denied { associate } for pid=10744 comm="syz.5.1216" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 376.862328][ T30] audit: type=1400 audit(2000000308.061:803): avc: denied { read write open } for pid=10744 comm="syz.5.1216" path="/166/bus/file0" dev="tmpfs" ino=898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 376.956956][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.048394][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.084950][T10747] sp0: Synchronizing with TNC [ 377.832331][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 377.840243][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.856574][ T5871] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 377.920280][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.940716][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1218'. [ 377.949771][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1218'. [ 378.161685][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.182068][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.213447][ T5871] usb 1-1: config 0 descriptor?? [ 378.621176][T10772] FAULT_INJECTION: forcing a failure. [ 378.621176][T10772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.634610][T10772] CPU: 1 UID: 0 PID: 10772 Comm: syz.2.1220 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 378.634634][T10772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 378.634643][T10772] Call Trace: [ 378.634649][T10772] [ 378.634655][T10772] dump_stack_lvl+0x16c/0x1f0 [ 378.634684][T10772] should_fail_ex+0x512/0x640 [ 378.634709][T10772] _copy_from_user+0x2e/0xd0 [ 378.634733][T10772] get_user_ifreq+0xf1/0x250 [ 378.634751][T10772] sock_do_ioctl+0x16b/0x280 [ 378.634770][T10772] ? __pfx_sock_do_ioctl+0x10/0x10 [ 378.634794][T10772] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 378.634819][T10772] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 378.634845][T10772] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 378.634874][T10772] sock_ioctl+0x227/0x6b0 [ 378.634894][T10772] ? __pfx_sock_ioctl+0x10/0x10 [ 378.634911][T10772] ? hook_file_ioctl_common+0x145/0x410 [ 378.634943][T10772] ? selinux_file_ioctl+0x180/0x270 [ 378.634966][T10772] ? selinux_file_ioctl+0xb4/0x270 [ 378.634990][T10772] ? __pfx_sock_ioctl+0x10/0x10 [ 378.635011][T10772] __x64_sys_ioctl+0x190/0x200 [ 378.635035][T10772] do_syscall_64+0xcd/0x260 [ 378.635057][T10772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.635075][T10772] RIP: 0033:0x7effdd78e969 [ 378.635088][T10772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.635104][T10772] RSP: 002b:00007effdb5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.635121][T10772] RAX: ffffffffffffffda RBX: 00007effdd9b6160 RCX: 00007effdd78e969 [ 378.635132][T10772] RDX: 00002000000000c0 RSI: 0000000000008914 RDI: 000000000000000b [ 378.635142][T10772] RBP: 00007effdb5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 378.635152][T10772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.635161][T10772] R13: 0000000000000000 R14: 00007effdd9b6160 R15: 00007ffce5886808 [ 378.635184][T10772] [ 378.774622][ T30] audit: type=1400 audit(2000000309.932:804): avc: denied { unlink } for pid=7639 comm="syz-executor" name="file0" dev="tmpfs" ino=898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 378.933297][T10775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.181226][ T5871] usbhid 1-1:0.0: can't add hid device: -71 [ 379.199883][ T5871] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 379.225700][T10778] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 379.232438][ T5871] usb 1-1: USB disconnect, device number 48 [ 379.251612][T10780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1224'. [ 379.376126][T10783] netlink: 'syz.5.1223': attribute type 1 has an invalid length. [ 379.598932][T10783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 379.645793][T10785] bond1: (slave dummy0): making interface the new active one [ 379.768927][T10785] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 379.808384][T10793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.865154][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1225'. [ 379.874138][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1225'. [ 379.897533][T10796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.986871][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'. [ 379.996160][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'. [ 381.909545][ T30] audit: type=1326 audit(2000000312.967:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10821 comm="syz.5.1235" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5368b8e969 code=0x0 [ 382.789736][ T30] audit: type=1400 audit(2000000313.847:806): avc: denied { connect } for pid=10834 comm="syz.1.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 382.809229][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.131579][ T30] audit: type=1400 audit(2000000315.507:807): avc: denied { ioctl } for pid=10849 comm="syz.0.1242" path="socket:[29999]" dev="sockfs" ino=29999 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 384.224597][ T30] audit: type=1400 audit(2000000315.537:808): avc: denied { bind } for pid=10858 comm="syz.1.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 384.557605][ T30] audit: type=1400 audit(2000000315.547:809): avc: denied { read } for pid=10858 comm="syz.1.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 387.981945][ T30] audit: type=1400 audit(2000000317.787:810): avc: denied { write } for pid=10890 comm="syz.1.1256" path="socket:[30042]" dev="sockfs" ino=30042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 389.848693][T10931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.064157][ T30] audit: type=1400 audit(2000000321.447:811): avc: denied { read write } for pid=10935 comm="syz.5.1272" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 390.089777][ T30] audit: type=1400 audit(2000000321.447:812): avc: denied { open } for pid=10935 comm="syz.5.1272" path="/178/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 390.173976][T10940] Cannot find add_set index 0 as target [ 392.213020][T10973] netlink: 'syz.0.1282': attribute type 1 has an invalid length. [ 392.495643][T10986] lo speed is unknown, defaulting to 1000 [ 392.501989][T10986] lo speed is unknown, defaulting to 1000 [ 392.516415][T10986] lo speed is unknown, defaulting to 1000 [ 392.544495][T10986] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 392.588296][T10986] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 392.677385][T10986] lo speed is unknown, defaulting to 1000 [ 392.691640][T10986] lo speed is unknown, defaulting to 1000 [ 392.703426][T10986] lo speed is unknown, defaulting to 1000 [ 392.716876][T10986] lo speed is unknown, defaulting to 1000 [ 392.730160][T10986] lo speed is unknown, defaulting to 1000 [ 393.057071][T10990] trusted_key: encrypted_key: insufficient parameters specified [ 393.513780][T10995] program syz.1.1283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.714432][ T30] audit: type=1400 audit(2000000325.097:813): avc: denied { ioctl } for pid=10997 comm="syz.3.1290" path="socket:[30846]" dev="sockfs" ino=30846 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 393.772103][ T5864] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 393.778925][T10998] syz_tun: entered promiscuous mode [ 393.942161][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 393.996317][ T5864] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 394.639949][ T5864] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 394.651581][ T5864] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 394.663179][ T5864] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 394.684502][ T5864] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 394.741950][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.012128][ T5864] usb 1-1: GET_CAPABILITIES returned 0 [ 396.017663][ T5864] usbtmc 1-1:16.0: can't read capabilities [ 397.090828][ T9915] usb 1-1: USB disconnect, device number 49 [ 397.314844][T11038] syz.0.1302: attempt to access beyond end of device [ 397.314844][T11038] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 397.329444][T11038] XFS (nbd0): SB validate failed with error -5. [ 397.652025][ T911] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 397.803304][ T911] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 397.822890][ T911] usb 1-1: config 7 has no interface number 0 [ 397.857688][ T911] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 397.877287][ T911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.890630][ T911] usb 1-1: Product: syz [ 397.898426][ T911] usb 1-1: Manufacturer: syz [ 397.905587][ T911] usb 1-1: SerialNumber: syz [ 398.485147][ T911] as10x_usb: device has been detected [ 398.497324][ T911] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 398.517646][ T911] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 398.681767][T11051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.700066][T11051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.967622][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 398.976217][ T30] audit: type=1400 audit(2000000330.347:814): avc: denied { firmware_load } for pid=911 comm="kworker/1:2" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=271 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 399.010296][ T911] as10x_usb: error during firmware upload part1 [ 399.020942][ T911] Registered device Elgato EyeTV DTT Deluxe [ 399.030822][ T911] usb 1-1: USB disconnect, device number 50 [ 399.065826][ T911] Unregistered device Elgato EyeTV DTT Deluxe [ 399.067180][ T911] as10x_usb: device has been disconnected [ 399.163500][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 399.188503][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 399.291501][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 399.307307][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 399.317883][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 399.327747][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.346682][ T10] usb 4-1: config 0 descriptor?? [ 400.153372][ T10] hdpvr 4-1:0.0: firmware version 0xc7 dated [ 400.159879][ T10] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 401.723045][ T9915] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 401.821411][ T10] hdpvr 4-1:0.0: Could not setup controls [ 401.836954][ T10] hdpvr 4-1:0.0: registering videodev failed [ 401.875197][ T10] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 401.890069][ T9915] usb 2-1: Using ep0 maxpacket: 32 [ 402.001290][ T9915] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 402.016044][ T10] usb 4-1: USB disconnect, device number 67 [ 402.024497][ T9915] usb 2-1: config 0 has no interface number 0 [ 402.984639][ T9915] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 403.000951][ T9915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.009871][ T9915] usb 2-1: Product: syz [ 403.062777][ T9915] usb 2-1: Manufacturer: syz [ 403.078535][ T9915] usb 2-1: SerialNumber: syz [ 403.107700][ T9915] usb 2-1: config 0 descriptor?? [ 403.126647][ T9915] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 403.146458][ T9915] usb 2-1: selecting invalid altsetting 1 [ 403.155420][ T9915] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 403.172835][ T9915] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 403.186401][ T9915] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 403.214512][ T9915] usb 2-1: media controller created [ 404.082956][T11124] overlayfs: missing 'lowerdir' [ 404.337732][ T9915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 404.964486][ T9915] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 405.621759][ T9915] usb 2-1: USB disconnect, device number 78 [ 405.691474][T11145] xt_socket: unknown flags 0xc [ 405.790720][ T30] audit: type=1326 audit(2000000337.147:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.5.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5368b85927 code=0x7ffc0000 [ 405.846373][ T30] audit: type=1326 audit(2000000337.147:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.5.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5368b2ab39 code=0x7ffc0000 [ 405.869770][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.879341][ T30] audit: type=1326 audit(2000000337.147:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.5.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5368b85927 code=0x7ffc0000 [ 405.902636][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.933290][ T30] audit: type=1326 audit(2000000337.147:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.5.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5368b2ab39 code=0x7ffc0000 [ 405.956584][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.966008][ T30] audit: type=1326 audit(2000000337.167:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.5.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5368b8e969 code=0x7ffc0000 [ 405.989407][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.007080][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1340'. [ 406.077291][ T30] audit: type=1326 audit(2000000337.167:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.5.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5368b85927 code=0x7ffc0000 [ 406.105838][ T30] audit: type=1326 audit(2000000337.167:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.5.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5368b2ab39 code=0x7ffc0000 [ 406.589765][ T30] audit: type=1326 audit(2000000337.167:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.5.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5368b8e969 code=0x7ffc0000 [ 406.614472][ T30] audit: type=1326 audit(2000000337.197:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.5.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5368b85927 code=0x7ffc0000 [ 406.637761][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.644704][ T30] audit: type=1326 audit(2000000337.197:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.5.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5368b2ab39 code=0x7ffc0000 [ 406.675461][T11164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.329816][T11188] usb usb8: usbfs: process 11188 (syz.3.1350) did not claim interface 2 before use [ 409.430613][T11213] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1359'. [ 410.722755][T11231] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 411.347462][ T5866] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 411.572326][ T9915] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 411.626475][ T5866] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.644761][ T5866] usb 2-1: config 0 has no interface number 0 [ 411.661451][ T5866] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.697218][ T5866] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.734215][ T5866] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 411.782147][ T9915] usb 4-1: Using ep0 maxpacket: 16 [ 411.822126][T11247] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.850187][ T9915] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 411.903335][ T9915] usb 4-1: config 252 has no interface number 0 [ 411.970134][ T9915] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 411.991930][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.061907][ T9915] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 412.090920][ T5866] usb 2-1: config 0 descriptor?? [ 412.098858][T11247] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.119034][ T9915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.135798][ T5817] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 412.139516][ T9915] usb 4-1: Product: syz [ 412.149605][ T9915] usb 4-1: Manufacturer: syz [ 412.154617][ T9915] usb 4-1: SerialNumber: syz [ 412.166397][ T5817] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 412.194954][ T5817] hid-generic 0000:0003:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 412.208064][ T9915] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 412.219032][T11247] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.326671][T11247] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.421420][ T1106] usb 4-1: Failed to submit usb control message: -71 [ 412.428872][ T5817] usb 4-1: USB disconnect, device number 68 [ 412.443031][ T1106] usb 4-1: unable to send the bmi data to the device: -71 [ 412.457429][ T1106] usb 4-1: unable to get target info from device [ 412.472430][ T1106] usb 4-1: could not get target info (-71) [ 412.472491][ T1106] usb 4-1: could not probe fw (-71) [ 412.495411][T11247] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.551356][T11247] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.341317][T11247] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.482374][ T5866] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.000D/input/input30 [ 413.547672][T11247] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.916480][T11277] [ 413.918852][T11277] ====================================================== [ 413.925860][T11277] WARNING: possible circular locking dependency detected [ 413.932866][T11277] 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 Not tainted [ 413.939962][T11277] ------------------------------------------------------ [ 413.946967][T11277] syz.2.1379/11277 is trying to acquire lock: [ 413.953019][T11277] ffff888032493c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 413.962350][T11277] [ 413.962350][T11277] but task is already holding lock: [ 413.969701][T11277] ffff888076adb068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 413.977976][T11277] [ 413.977976][T11277] which lock already depends on the new lock. [ 413.977976][T11277] [ 413.988366][T11277] [ 413.988366][T11277] the existing dependency chain (in reverse order) is: [ 413.997367][T11277] [ 413.997367][T11277] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 414.004743][T11277] __mutex_lock+0x199/0xb90 [ 414.009746][T11277] anon_pipe_write+0x15d/0x1a70 [ 414.015091][T11277] __kernel_write_iter+0x71d/0xa90 [ 414.020703][T11277] __kernel_write+0xf5/0x140 [ 414.025790][T11277] autofs_notify_daemon+0x4db/0xd60 [ 414.031492][T11277] autofs_wait+0x10ca/0x1a70 [ 414.036586][T11277] autofs_mount_wait+0x132/0x380 [ 414.042023][T11277] autofs_d_automount+0x390/0x7f0 [ 414.047545][T11277] __traverse_mounts+0x192/0x790 [ 414.052977][T11277] step_into+0x5aa/0x2270 [ 414.057805][T11277] path_openat+0x749/0x2d40 [ 414.062825][T11277] do_filp_open+0x20b/0x470 [ 414.067829][T11277] do_sys_openat2+0x11b/0x1d0 [ 414.073000][T11277] __x64_sys_openat+0x174/0x210 [ 414.078345][T11277] do_syscall_64+0xcd/0x260 [ 414.083345][T11277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.089733][T11277] [ 414.089733][T11277] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 414.097432][T11277] __mutex_lock+0x199/0xb90 [ 414.102430][T11277] autofs_notify_daemon+0x4a6/0xd60 [ 414.108120][T11277] autofs_wait+0x10ca/0x1a70 [ 414.113206][T11277] autofs_mount_wait+0x132/0x380 [ 414.118642][T11277] autofs_d_automount+0x390/0x7f0 [ 414.124166][T11277] __traverse_mounts+0x192/0x790 [ 414.129598][T11277] step_into+0x5aa/0x2270 [ 414.134434][T11277] walk_component+0xfc/0x5b0 [ 414.139522][T11277] path_lookupat+0x17e/0x780 [ 414.144618][T11277] filename_lookup+0x224/0x5f0 [ 414.149877][T11277] kern_path+0x35/0x50 [ 414.154444][T11277] lookup_bdev+0xd8/0x280 [ 414.159266][T11277] resume_store+0x1d6/0x460 [ 414.164263][T11277] kobj_attr_store+0x55/0x80 [ 414.169347][T11277] sysfs_kf_write+0xef/0x150 [ 414.174434][T11277] kernfs_fop_write_iter+0x351/0x510 [ 414.180215][T11277] vfs_write+0x5ba/0x1180 [ 414.185043][T11277] ksys_write+0x12a/0x240 [ 414.189875][T11277] do_syscall_64+0xcd/0x260 [ 414.194873][T11277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.201269][T11277] [ 414.201269][T11277] -> #0 (&of->mutex){+.+.}-{4:4}: [ 414.208448][T11277] __lock_acquire+0x1173/0x1ba0 [ 414.213799][T11277] lock_acquire+0x179/0x350 [ 414.218799][T11277] __mutex_lock+0x199/0xb90 [ 414.223809][T11277] kernfs_fop_write_iter+0x28f/0x510 [ 414.229597][T11277] iter_file_splice_write+0x91c/0x1150 [ 414.235552][T11277] do_splice+0x1475/0x1fc0 [ 414.240467][T11277] __do_splice+0x32a/0x360 [ 414.245382][T11277] __x64_sys_splice+0x187/0x250 [ 414.250731][T11277] do_syscall_64+0xcd/0x260 [ 414.255728][T11277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.262115][T11277] [ 414.262115][T11277] other info that might help us debug this: [ 414.262115][T11277] [ 414.272334][T11277] Chain exists of: [ 414.272334][T11277] &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex [ 414.272334][T11277] [ 414.284738][T11277] Possible unsafe locking scenario: [ 414.284738][T11277] [ 414.292163][T11277] CPU0 CPU1 [ 414.297500][T11277] ---- ---- [ 414.302834][T11277] lock(&pipe->mutex); [ 414.306963][T11277] lock(&sbi->pipe_mutex); [ 414.313958][T11277] lock(&pipe->mutex); [ 414.320608][T11277] lock(&of->mutex); [ 414.324573][T11277] [ 414.324573][T11277] *** DEADLOCK *** [ 414.324573][T11277] [ 414.332688][T11277] 2 locks held by syz.2.1379/11277: [ 414.337857][T11277] #0: ffff888030e74420 (sb_writers#8){.+.+}-{0:0}, at: __do_splice+0x32a/0x360 [ 414.346893][T11277] #1: ffff888076adb068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 414.355568][T11277] [ 414.355568][T11277] stack backtrace: [ 414.361429][T11277] CPU: 0 UID: 0 PID: 11277 Comm: syz.2.1379 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 414.361443][T11277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 414.361449][T11277] Call Trace: [ 414.361453][T11277] [ 414.361458][T11277] dump_stack_lvl+0x116/0x1f0 [ 414.361472][T11277] print_circular_bug+0x275/0x350 [ 414.361488][T11277] check_noncircular+0x14c/0x170 [ 414.361504][T11277] __lock_acquire+0x1173/0x1ba0 [ 414.361521][T11277] lock_acquire+0x179/0x350 [ 414.361537][T11277] ? kernfs_fop_write_iter+0x28f/0x510 [ 414.361552][T11277] ? __pfx___might_resched+0x10/0x10 [ 414.361567][T11277] __mutex_lock+0x199/0xb90 [ 414.361579][T11277] ? kernfs_fop_write_iter+0x28f/0x510 [ 414.361593][T11277] ? kernfs_fop_write_iter+0x28f/0x510 [ 414.361607][T11277] ? __pfx___mutex_lock+0x10/0x10 [ 414.361619][T11277] ? __pfx__copy_from_iter+0x10/0x10 [ 414.361634][T11277] ? rcu_is_watching+0x12/0xc0 [ 414.361646][T11277] ? trace_kmalloc+0x2b/0xd0 [ 414.361658][T11277] ? __kmalloc_noprof+0x242/0x510 [ 414.361675][T11277] ? kernfs_fop_write_iter+0x28f/0x510 [ 414.361688][T11277] kernfs_fop_write_iter+0x28f/0x510 [ 414.361703][T11277] iter_file_splice_write+0x91c/0x1150 [ 414.361722][T11277] ? __pfx_iter_file_splice_write+0x10/0x10 [ 414.361742][T11277] ? __pfx_iter_file_splice_write+0x10/0x10 [ 414.361758][T11277] do_splice+0x1475/0x1fc0 [ 414.361774][T11277] ? rcu_is_watching+0x12/0xc0 [ 414.361785][T11277] ? lockdep_hardirqs_on+0x7c/0x110 [ 414.361797][T11277] ? __pfx_do_splice+0x10/0x10 [ 414.361812][T11277] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 414.361826][T11277] ? __do_splice+0xc0/0x360 [ 414.361842][T11277] __do_splice+0x32a/0x360 [ 414.361859][T11277] ? __pfx___do_splice+0x10/0x10 [ 414.361884][T11277] __x64_sys_splice+0x187/0x250 [ 414.361907][T11277] do_syscall_64+0xcd/0x260 [ 414.361920][T11277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.361931][T11277] RIP: 0033:0x7effdd78e969 [ 414.361940][T11277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.361951][T11277] RSP: 002b:00007effdb1d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 414.361961][T11277] RAX: ffffffffffffffda RBX: 00007effdd9b6240 RCX: 00007effdd78e969 [ 414.361968][T11277] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 414.361974][T11277] RBP: 00007effdd810ab1 R08: 0000000000000002 R09: 0000000000000000 [ 414.361980][T11277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.361986][T11277] R13: 0000000000000001 R14: 00007effdd9b6240 R15: 00007ffce5886808 [ 414.362000][T11277] [ 414.874166][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 414.874182][ T30] audit: type=1400 audit(2000000346.067:883): avc: denied { getopt } for pid=11271 comm="syz.3.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 414.925002][ T5866] holtek_kbd 0003:04D9:A055.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 414.939617][ T5866] usb 2-1: USB disconnect, device number 79