last executing test programs: 7.929919759s ago: executing program 3 (id=1283): syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=ANY=[]}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) unshare(0x22020600) r0 = fsopen(&(0x7f0000000280)='befs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001e00210000000000100000000700000005000000000000000a000200"], 0x28}}, 0x0) syz_pidfd_open(r3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x0) r7 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r9, 0x1009}], 0x1, 0x8000007) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff9, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6.446595807s ago: executing program 1 (id=1294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0505350, &(0x7f0000000340)={{0x0, 0xfc}, 'port1\x00', 0xe, 0x100201, 0x2, 0xfffffff8, 0x3, 0x0, 0x2, 0x0, 0x3, 0xf3}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x81, 0x101102) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="0e269abe6abef5e85d7646f4749dd624a9ee3d296b2c5fee7d8eeb86a955b708333dd3d9ddd4ca9b4c16d835b799d6142098ae01550a64b8acdc8f3a0091255495b98477ea6b982bbdc0c053faab948ab645f7d7949092b51ad1c7c2d7b59abf2da8abdd8511f42108b35d7ceebbd33ee7eda00f01ce218a18fc6be0711cf7cb8cf966f77abcde1a9e07680b5971cd990f1a42f6412c904a390f98a4aeed5fc26f883a33badc01efee06397e4a7d0d7978d57d893e2998ab2fbc9dab51ee0aee2af955143d9c3a8218c85921e8520b06c9", @ANYRES64=r3, @ANYRES8=r3, @ANYRES32], 0x70}}, 0x800) 6.413570048s ago: executing program 1 (id=1296): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x15) 6.288912943s ago: executing program 1 (id=1297): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r0, 0x0, 0x200, 0x0) (async) splice(r1, 0x0, r0, 0x0, 0x200, 0x0) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0x72}, {&(0x7f0000002c40)="9478c03da986c8917ac188d57dfe2d81772faa04b076834e076131c31c48decbb84f4ae61fbdad0adfeebf690cd98e00dc4e09c31e1acd29123eda33867ac2db2b06749b5348c785985c17947b08349d385f1b31c0edce31faf4adc2f1d39ab252210c6b35f7ea67d525044c20326e328fdd28f3d3a04dd3a7e4ad6ec9db6b78cb28dcecadc27f7765ebfcf3214fdef0dd672e4942d2d51365fd1bd724428c2453a82dc24b9b5ea2650267dc772aeed140331e388393821011521cf33cec66130398a2143ee088f0099a460d383c2dfd842e7e5b05fe2fb08f2746aa4183e7d94c7998fa198c30b1d5a156e191be8d194e645c6e1add171913b7e1e9af5d65d618c0da6878cce85538b78cc30b53befbc9c3b746f3b6f1990a512de078a8729cd2916cbede4b48cbdc31d6c4eb0fc384533a4b27b54d1a242bb4b3b0e9ab668915e46a4aedf19c363e6365c935d8a3b3f1d8c4ee8686ad954b62e9a083f9b0cb391d44f6e638b2c3688897fef4a2cceabe2c24540c0816ce7ad05cf3d22822f275c8c5960ccad8a044d6297c810869", 0x18f}], 0x2, 0xa) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, 0x0, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, 0x0, 0x0, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x2f, &(0x7f0000000040)=ANY=[], 0x0) 4.661121128s ago: executing program 3 (id=1304): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r1, 0x0) 4.580237424s ago: executing program 3 (id=1305): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x31) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000002540)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x10) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES8=r0, @ANYRESHEX=r4]) 4.122723943s ago: executing program 0 (id=1312): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500054006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee0ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac02781245bd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="740000000a06"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x486, 0x1000, {}, {0x77359400}, {0x2, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "e05ad60a92c50497"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000003c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="080005000b000000"], 0x24}}, 0x0) 3.118173265s ago: executing program 2 (id=1314): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x2b34, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000200)={0x10, 0xfffffffffffffffe}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000180)='./bus\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r7, &(0x7f0000000240)='./bus/file0\x00', r7, &(0x7f00000001c0)='./file0\x00', 0x2) sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r8, 0x400454ce, 0xee01) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2b}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) madvise(&(0x7f0000980000/0x3000)=nil, 0x3000, 0xe) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x4, 0x3, 0x8, 0xc0800000, 0x1ff, 0x3, 0x2}, 0x1c) 3.030704585s ago: executing program 1 (id=1315): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)={0x40, 0x5, 0xc, "e358558413cf710e873eb521"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x970a40, 0x6ab858183a7ef6ba) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) syz_usb_connect(0x3, 0x34, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0) 2.942413808s ago: executing program 2 (id=1316): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000c600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701c1ffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080007"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x1, 0x64, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x2, 0x80, 0xe, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x8, 0x24, 0x6, 0x0, 0x0, "b4091c"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0x6, 0x5}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x3a}, @acm={0x4, 0x24, 0x2, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x2, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x7, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xd, 0x8, 0x1}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xe3, 0x7, 0x7, 0x0, 0x3}, 0x4f, &(0x7f0000000180)={0x5, 0xf, 0x4f, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x56, "ca148821ba89675a9f11eeb7fca78d42"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "0d837654f2caacd27899491f98820900"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x4, 0xf, 0x2, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x74, "f13e2aa72f5180a093735037b6e15703"}, @ptm_cap={0x3}]}, 0x3, [{0x26, &(0x7f0000000200)=@string={0x26, 0x3, "ee345d74d7d03535f922a1194099ca90fc6e5cde2a7edfde91ecf5bb728bac384d827745"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc2e}}, {0x3b, &(0x7f0000000280)=@string={0x3b, 0x3, "48487cfb4e45b64a8f0312fb5aa0558aea1e2b5f2856be633e6f6abd87b899820203c0a548d627ff18f1ab25bcb88d6c1b7a0e4eca6e57d86f"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000340)={0x0, 0x12, 0x1, "93"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.821336988s ago: executing program 0 (id=1317): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x18) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x83, &(0x7f0000000140)={r4}, 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{}, {0x94}]}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01015300010203010902980003010000000904a10000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYRES8=r6], 0x0) 2.595499505s ago: executing program 3 (id=1318): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) (fail_nth: 3) 2.247193325s ago: executing program 3 (id=1319): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000980)=[{&(0x7f0000000000)="305a3854edecd937e0c077cd6e0e6184e4907c595b29e3eebdc90a643c6b71bb4f446dc5be6be94b7d296704e11925844ab0825b480dfdcc47f3e5955fb0", 0x3e}, {0x0}, {&(0x7f0000000500)="917121060e81ee039f73e27888594f4ba8df5ee4bb9480424ee9c3345f969460ce290d23414888c052f01d12c5285ce031444ecbc12736e341b725a53db8822000e6997bf715265154c508473873bb181a900d0c4421b6d0b866f1d4b5aa16cfc152923d6dfbc3f186937fa941080dd9790d5e45e07b28a1041a28291d562296c613aee7b2ad155a476920", 0x8b}, {&(0x7f00000005c0)="f5a4b1a2e0373cdd4394b9e433a23f2b6670dc056340163262aa4270588918b1c7395cc946b24103c5311a0da91f0cae40ce055dac475390a01214801aaa6ed7267eee20206ee0c97a4b05faf3168b9c192552db9cee50ca2641d667d2d95c2c576add642015f1e5fde1e61805c3f301ef19355559743e409985f864cf2e8f81b415b9126c45140b412b7d780cbfff39e9", 0x91}, {&(0x7f0000000680)="ab439bdeb3aea30ddd1031e3452a51575460472bfee849c5858214ea1fa0893a2b2196ae04330d431656ef10025fb5d79c67373661acb90a512082e02b10b85ece3d667d76a4bc919ed1952c7885dd22d777cde9551f1b6a823d724c6c4a45ebc8ae894e40e70cee66a652845a04afeb97f99835095e68443667320327545483c1992f6dad66fd", 0x87}, {&(0x7f00000003c0)="caff6b7c9a71beec4e23ccfeb41949607ff9877da9e9d1434c530b8eca9a784b5af47c7728e9a834c611", 0x2a}, {&(0x7f0000000180)="b14e084a117e6052defb", 0xa}, {&(0x7f0000000780)="e1a79dc01cb8bfed19a1880b6ca31c94c88e8a7278eef650601523c12347d9d70c53488c245a69c83996d186fc40abe25ba1d19e728a919d574cee8a62f11e2ca8f9b0297e2d77ae508dce3eb05b7cfc7c67f68891e5b4ff826afdb883009f3650a8fbf41956ca773e989bf5262e843893a62b7d63", 0x75}, {&(0x7f0000000800)="48dd78321e749c94d0d6ddabe9263a00209c82da7ad22cd4f0174289d1e6c0c48d7fc5fd68298d46afea4618bf56aaa70f397c4765ce2d9e8f94b68ad5c031829e3294a45fd5a45beb49678f0ebe865e23718c6edaee1b41e4618f06bae53d65cdee74d6cee1ce0f765f3b21150d51068c0726eaf1df1dc6606ad4ab15a1ed5f0fa5a0463fcbca8c", 0x88}, {&(0x7f0000000240)="a053058a90ea8b84d6e3b5dd343d0eb03f07e9242e129ca51d72f65d61896f0c4cc96790f2f8797ca943a35adaca81cfd819564752b7", 0x36}], 0xa, 0x2000, 0x0, 0x0) 2.245395614s ago: executing program 3 (id=1320): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000d80)='s\x87urce\x81\xa5z\xfe\xf1\xef\xe1\xde\xc1.\vQ\x9d\f#Q}1%\xd96\xa2\x0fg\x18PS\x91\x1d\n\xc3\xe4bw\x15ol-\xcbm6O\x81\x16\xc5\xdc\xb7\xb0\x1d\xff\x84IC9\xf9-@C&\'\xf2\xfa\x88\xea\x9f\xcd\'\xb6\x8d\x96\xe2\xe8L\xac8\xe7\x85\x19\xd8\xccP\xba\xeb=J\xa3\xd4\xb3\xa8Kb*\xe3\x05\xb60\xec\xbd\xfa\x0fZ\xb0-\xb0\xaa\x9ea!\x8e\xf6\xe4Cq\x05\x1d\"\xc9\xac\x88w^\xd7i\x1aC\xb6c=\xcd\xa8I\x85\xd4QYlY\xc4c\xe1F\x1a\x04\xd2:\x95\xb7+\xd1\x93w\x14\x85-\x7fDt\x1b\x1c\x88c6\xc7\xbdm\\I\x9a\xc5\'8\xd9\x1bP\xe5b#N\xed\xa8m\x97\xcc\xc5\x82X\xe7\xa4`\x8f\xb2\r\x0f\xee\xd0{)\xdbq \x8fy\xb7\x05\xf1\xe5\xed\x00\x06\xf9\xe0\xc3B\xfd@\x95\xc1(\x02\x16\xdb\xb7\xe8Y\"\x14d\xa6y\xf3\x8a\f\xdb\x9a\v;\xaa\x06\xa1X\x94\x93\x8b>\xd3\xbc\xa09\x03\xed\n\xa0\\HP\xe6v\xb6\xfc\xa6%\x03D\xd4\x95tJ\xd8\xec\x1d\xf7\xa14z\xefO\x8e\xd4\xd7\x98\xc0\x7f\xc2uc\xbd\xf5&m\x8f\xbaR\t\b\xac\xe64Z>\xc9d\xba\x13\xd3\xf8y\'\xd6\xebc\xa0\xfd\xe3\xceF\xcc\x1ec\x00\xb7\x97\xc6\xec\x95\xe2\xc4x>\xa6\x04\xf4\x9f\xd8\x8e\x8e#\xa8\x7f\x87\xb3\xfas\x82;\xca\x9a\xaa\xfc\xd2\xcc\xbf:\x82\xedZYf\x132V\xdb\xa7\xc2\x95\xf3\xf7\x8c;\xf7\x91\xb4p\xf2ug\xc6(\xf9P\x11e\xbe,\xfb\xdf\xeb\x01Uy\x80_\xb3\xdd\xfb\xc6::D\x92\xa3T\x02\xa4\xeb\xd7i\x86\xdc\xdf\x93p\xb2\x8c\xe8\x18\xf1l\x82\xb1B\xefR\xe7\xf7D\xd5\x89O\x1f\xc3\xb4\xb3{\x8e\xf9\xc9@L\xdb7pN\xbd\x11\xd9\xc1\xbda;{V\x1e\xfc\xb6\xc6\x1d(\xd8\xa0\xb5I\x98Im\x95\xafds\x8a\xed\x01\xa3V\xe4\xb1\xbeU8\xc9:Y\xcc\xe2\n\x1d\xa2\x11\xc9<\\\xc7\x05\xac\x0f\xd8cO5\x18\x8e\x89dS\xd51\xf2\x87\v\xed\x03\xdcR\xb4\x1bHw\xf8n\xf1\x83\xd8g\x84\x93X\xc3\'\x9f6\xc6T\xa4\a\xec\xc2f\x820j2\x90pU\x1e\x01\xa3\x91I$\x13`\x99=\xdf\x8b(\xfb\x16\xb3\x81]\x95\xaf(\xe4\xfc\x7f\x1a\xa2K\t4\x12\xc5\xe7Z\x06\x97\x19n\xf1\x9b\xef\xf2\x98\xdc\x85|P\n(\xe4\xf6X\xc6&\xefT\x1bq\"jE\xc4\xde\xa5\xbeEcj\xaa\x91\x81\xbf\x13\xde\xe3', &(0x7f0000000100)='::,:/', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffff23, 0x0, 0x100, {0x2, 0x0, 0x4, 0x3, 0x4000, 0x0, {0x3, 0x40, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x81, 0x6000, 0x0, r4, r5, 0x7fe, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000001240)={0x50, 0xffffffffffffffda, r3, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r6, 0x1277, &(0x7f0000000000)) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="747296e3b2f626f83eb9fe052f549576cb01000000000000003abb190b28a0c700000000000000000000006aa42a360a9144f529187f5f06dbf2f8ff39b226dbbea7c913e1a32672a8f099a88d758ae245653839263b898f68401b068e8f5d3499f4e583"]) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g') r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000033c0)={'ip6gretap0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x7}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r9) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000009c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="75babe634515079a646cf0a669173fb342ebce57563d8d37c0c65f"], 0x14}, 0x1, 0x0, 0x0, 0x44844}, 0x20008010) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES8=r5, @ANYRES32=r8], 0x30}}, 0x4) ioctl$F2FS_IOC_GET_FEATURES(r12, 0x8004f50c, &(0x7f00000000c0)) 2.102816845s ago: executing program 2 (id=1321): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200080000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000106000340000200000800074000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200080000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000106000340000200000800074000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x2007}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x6c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfd}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x23}}, 0x0) 2.085159448s ago: executing program 2 (id=1322): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x458002, 0x55) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x10, [{}, {0x0, 0x100000000000000}]}, 0x60) syz_usb_connect(0x5, 0x27, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) syz_usb_connect$uac1(0x1, 0xc7, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0x7f, 0x60, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x7}, [@mixer_unit={0x6, 0x24, 0x4, 0x4, 0x1, "cf"}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x6, 0x1, "e1"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x4, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xce, 0x3, 0x4, 0x5e, "af"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8a, 0x3, "", "a577"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x2, 0x4, 0x10, "e304"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x10, 0x1, 0x97, "d418e95074c5eb2d"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xd1a, 0x9, 0x7c, "50bd8ad5d43c002d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x50, 0x0, 0x2, 0x6, {0x7, 0x25, 0x1, 0x80, 0x93, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x600, 0x1, 0x6, 0x8, {0x7, 0x25, 0x1, 0x82, 0xff}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0xfd, 0x9, 0x8, 0x50, 0x2}, 0x1a, &(0x7f0000000380)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x41, 0x7, 0x9, 0x4, 0x91}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0xcc, 0x5b1}]}, 0x1, [{0x100, &(0x7f00000003c0)=@string={0x100, 0x3, "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"}}]}) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x408, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0xfef4, 0x1, 0x1000}]}]}, 0x24}}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwrite64(r4, 0x0, 0x0, 0x4f) 1.925078806s ago: executing program 0 (id=1323): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002a80)={&(0x7f0000001680)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x30}, 0x3}, 0x1c, &(0x7f00000029c0)=[{&(0x7f00000016c0)="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", 0xfa}, {&(0x7f00000017c0)="db15a1230c5b01656a106c92d093348126f421db9a1094fcc295d6423e1ce5038f35b2d6fe1837ae8e511febb2c11507ba8b0fe0047876d4ff8664eb63f10dad915865207f418b9e72c01fedff9b986d2d6bc851a356efeb893da7fb4dc7f451e537a777688cf7aa1890c4281a1ebcd26079b2d97938b18564ef45e9a87abb8884b6c7eedef0fcccf3b51494b146cc567dbe501ab6d59e1761c52839be4e8e120b15d1e0fc8fae3915a1", 0xaa}, {&(0x7f0000000000)="2aba12e13ecf64e8c7568ac59599fe57c1cd92114b7193ebdf60b4b3a42b194452f01a59909a580577c6cd01a044b4e2c5a867c86f40bce94b5313db9410ed7b6077bd13f30a5e780fdbad70886676f36ffe86635e05bb19cc09cb738b26b85b925a0ad1b4d9", 0x66}, {&(0x7f0000001900)="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", 0x383}], 0x4, &(0x7f0000000080)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2c}}}], 0x18}, 0x40004) 1.825851449s ago: executing program 0 (id=1324): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4605, &(0x7f0000000040)={0x0, 0x20000000}) (async, rerun: 64) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='cmdline\x00') (async, rerun: 64) sigaltstack(&(0x7f0000003e80)={0x0, 0x3}, 0x0) (async, rerun: 64) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) (async, rerun: 64) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) (async, rerun: 64) r4 = socket$inet(0x2, 0x3, 0x6) (rerun: 64) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @private=0xa010101}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f1e, {0x2, 0x0, @loopback}}) signalfd4(r2, &(0x7f0000000000), 0x8, 0x800) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) r5 = syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000001700)={0x84, &(0x7f0000001300)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x10, 0x3, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') modify_ldt$write2(0x11, &(0x7f0000000680)={0x8, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r7 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) (async) ptrace$setregs(0xd, r7, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") (async) ptrace$setregset(0x4205, r7, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55035cc0ea76f2e4229349ee5d", 0x44}) (async, rerun: 32) chmod(&(0x7f0000000100)='./file0\x00', 0x38c) (async, rerun: 32) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000240)={0x10003, 0x0, 0xd7c3, 0xfffffff9}, 0x10) (async, rerun: 32) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) (async, rerun: 32) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x10, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000280)="18", 0x1}], 0x1}}], 0x1, 0x44) 1.812108988s ago: executing program 0 (id=1325): syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) write$binfmt_register(r1, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\x94l\\\xec\xd1\xcb\x9a}\xab7\x1f\xde\xb5\x83>\fG\\x00', 0x3a, '/dev\x14bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x1, 0x0, 0x9}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0xa}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r4, &(0x7f00000072c0)=[{{&(0x7f0000000300)=@xdp={0x2c, 0x6, r5, 0x34}, 0x80, 0x0, 0x0, &(0x7f0000002800)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x18}}], 0x1, 0x8840) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) capset(0x0, &(0x7f0000000140)={0x0, 0xfffffffd, 0x0, 0x85, 0xfffffff9}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x4003) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r8, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x22}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r9 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) getsockname$inet(r9, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) 913.673683ms ago: executing program 0 (id=1326): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x2, 0x6000, 0x0, r1, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904", @ANYRES16], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="a01302"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000002440)={0x84, &(0x7f0000001f80)=ANY=[@ANYBLOB="2003110000003904f6625fe4aa9a0a59592ac28b74b175"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r4, 0x29, 0x15, 0x1b, 0xfffffffb, 0x20, @mcast1, @rand_addr=' \x01\x00', 0x20, 0x80, 0x2, 0x800}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "87f824ddfb091e3922ba3b10ff3174505f1e3befee028a65a72b34dac9f1bfef", "0b5f57a8bfaaf1a650589b6e518470734ff0ab151c6c76068144ab7a52f3b1c0", "191708af475d4b9b07fa69af8e784fed91c0929043aab4abc7cccd8c8342c7dd", "f5666f74246fedea5c50a62e58e749e73b49b0070be75967c7ba6bd1ce539197", "85b68d82818f51982d5c739ed70130e117f82cca46ceb6521b4a12fb663b66a6", "d5491d19e74dab3c2d4d5d6d", 0x3, 0x3, 0x99c8, 0x40, 0x52}}) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', r4, 0x0, 0x6, 0x8, 0x2, 0x16, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7c6a736082b2de78, 0x40, 0x9, 0x5}}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/icmp\x00') sendto$packet(r9, &(0x7f0000000140)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0x1a, 0x400010c4, &(0x7f0000000300)={0x11, 0x19, r8, 0x1, 0xf6, 0x6, @local}, 0x14) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r13 = dup(r12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r13, 0xdaad2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$TIPC_NL_BEARER_ADD(r10, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="78010000", @ANYRES16=r11, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4000084}, 0x20040090) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000000)={0x0, 0x2}) 574.460802ms ago: executing program 1 (id=1327): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async) r2 = socket$inet(0xa, 0x801, 0x84) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x2, 0x4) (async) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x44, "28bfe0be9a24eea32f015fbafa7e0ea5d6d5e528cfbbce2cf2ef08aa96c325bb3b9ac1f8492b2a5dc554e4c52edec4819dbc7d2d9c3a1d400b28bd585311ca1b3cea48a5"}, &(0x7f0000000380)=0x68) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000009c0)={{r1}, r3, 0x0, @inherit={0x70, &(0x7f0000000100)={0x1, 0x5, 0xd4a4, 0x2, {0x8, 0xd, 0x4, 0x200000000000a, 0x4}, [0x7f3, 0x5, 0x80000001, 0xf4b, 0xfffffffffffff001]}}, @name="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"}) r4 = pidfd_getfd(r1, r1, 0x0) setns(r4, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000140)={&(0x7f0000000000)=[{0x0, 0x0, 0x7c2df982af85bd3c, &(0x7f0000000240)="7f1e850baf7ae3abd1a3ce3c15a99b8b25f6072cfb815847d67aec6a026954f29d7e17d474e4a76c1f1e10b1384bfc7b4bf38eb3b4ab7b1fb6a0bf45381ae37779a8d37291fedb39061be7a1469caba98d82a538cd0a38937cd291577d71d8f139a3ead4029211b848f6a989d1b4bb79b7fdfcda2ff53f7c4b782125bfbb747577cc97713a2502a6895c8583b784f8f56293192fe07fdef4669f8aa1e99129"}], 0x1}) (async) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ptrace$ARCH_MAP_VDSO_X32(0x1e, r6, 0x6e, 0x2001) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000150001030000000000e400000b"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 142.506189ms ago: executing program 2 (id=1328): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x38, @mcast2, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e574da93883e8c628a60eb17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1, 0x0, 0x0, 0xffffff7f}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x28}}], 0x2, 0x40084) 78.694158ms ago: executing program 2 (id=1329): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0xc9, {0xc9, 0x11, "2487b477dd620998056e261aa8322a2632735f39e341b386399adc44741b479140a34c73934e8c01c4a761658bd477c83351c7df87696ab1d28832373ad656a9ef57abcb705cf8a8eacd3972b9777ac54ca28aaa153804ab578154f0070c058a589edebe3218787b9c2b33a4708af39be1686253c51f73c1f3c5a304d3f49f51eb321b8eb0eb3266a87af6b5f28aae191df9b9be957fa03c5a52a769fc614f33c6c2f10f6caa29a343d013c974392fecb5898cc48dad2997adb610b7d413c0621574459b3e6274"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x40, 0x1c, 0x41, "a162a3c50b8e6577eb7dda1f8dc31c2bb69c0556a9f3d75413aa162c12c16fbc59237624a751d58965294d26a751972b9f4a5e2b172667345ccaa177bba0749f00"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x2, 0x8, 0x67b3be5d, 0x6a, 0x4, 0xc52, 0xfd6, 0x2, 0xb7dc, 0x4, 0x4, 0xfc01}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0xe}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0}) 0s ago: executing program 1 (id=1330): syz_usb_connect(0x5, 0x885, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/2182], 0x0) kernel console output (not intermixed with test programs): 25647][ T8505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.934960][ T8505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.972677][ T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 276.991080][ T5868] glorious 0003:258A:0036.0023: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.2-1/input0 [ 277.009894][ T24] usb 4-1: USB disconnect, device number 81 [ 277.169533][ T778] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 277.180871][ T5868] usb 3-1: USB disconnect, device number 100 [ 277.338445][ T778] usb 2-1: Using ep0 maxpacket: 32 [ 277.345653][ T778] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 277.356109][ T778] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 277.368329][ T778] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 277.379485][ T778] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 277.395456][ T778] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 277.404590][ T778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.412600][ T778] usb 2-1: Product: syz [ 277.416821][ T778] usb 2-1: Manufacturer: syz [ 277.421430][ T778] usb 2-1: SerialNumber: syz [ 277.433811][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 277.442463][ T778] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input22 [ 277.659204][ T778] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 277.667536][ T778] (id 0x00) [ 277.712732][ T778] rc_core: IR keymap rc-imon-pad not found [ 277.719562][ T778] Registered IR keymap rc-empty [ 277.727892][ T778] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 277.743321][ T778] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 277.831469][ T9] usb 4-1: new low-speed USB device number 82 using dummy_hcd [ 277.861927][ T8515] binder: 8514:8515 ioctl c0046209 0 returned -22 [ 277.875054][ T778] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 277.892806][ T778] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input23 [ 277.922269][ T778] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:82> initialized [ 278.036518][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 278.085924][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 278.101115][ T8507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.960'. [ 278.108354][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.126199][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 278.207317][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 278.252700][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 278.265852][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 278.273505][ T8526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.296031][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.301026][ T8526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.324892][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 278.352629][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 278.408975][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 278.416446][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 278.436821][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.455474][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 278.469212][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 278.485811][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.487399][ T9] usb 4-1: string descriptor 0 read error: -22 [ 278.498212][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.500746][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 278.517810][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.537612][ T9] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux2 [ 278.728618][ T778] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 278.752332][ T8510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.761198][ T8510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.770906][ T5868] usb 4-1: USB disconnect, device number 82 [ 278.867778][ T778] usb 3-1: device descriptor read/64, error -71 [ 279.124690][ T778] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 279.215510][ T8540] binder: 8539:8540 ioctl c0046209 0 returned -22 [ 279.263802][ T778] usb 3-1: device descriptor read/64, error -71 [ 279.347348][ T8543] binder: 8542:8543 ioctl c0046209 0 returned -22 [ 279.387019][ T778] usb usb3-port1: attempt power cycle [ 279.465865][ T8548] FAULT_INJECTION: forcing a failure. [ 279.465865][ T8548] name failslab, interval 1, probability 0, space 0, times 0 [ 279.480270][ T8548] CPU: 1 UID: 0 PID: 8548 Comm: syz.0.974 Not tainted syzkaller #0 PREEMPT(full) [ 279.480286][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.480293][ T8548] Call Trace: [ 279.480298][ T8548] [ 279.480302][ T8548] dump_stack_lvl+0x189/0x250 [ 279.480318][ T8548] ? __pfx____ratelimit+0x10/0x10 [ 279.480334][ T8548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.480345][ T8548] ? __pfx__printk+0x10/0x10 [ 279.480360][ T8548] ? __pfx___might_resched+0x10/0x10 [ 279.480374][ T8548] should_fail_ex+0x414/0x560 [ 279.480391][ T8548] should_failslab+0xa8/0x100 [ 279.480407][ T8548] kmem_cache_alloc_noprof+0x88/0x700 [ 279.480419][ T8548] ? ptlock_alloc+0x20/0x70 [ 279.480433][ T8548] ptlock_alloc+0x20/0x70 [ 279.480444][ T8548] pte_alloc_one+0x7a/0x370 [ 279.480455][ T8548] ? __pte_alloc+0x1d/0x1a0 [ 279.480469][ T8548] __pte_alloc+0x25/0x1a0 [ 279.480483][ T8548] walk_pgd_range+0xfb8/0x1d30 [ 279.480506][ T8548] ? __pfx_guard_install_set_pte+0x10/0x10 [ 279.480519][ T8548] ? __pfx_guard_install_set_pte+0x10/0x10 [ 279.480532][ T8548] ? __pfx_guard_install_set_pte+0x10/0x10 [ 279.480544][ T8548] ? __pfx_guard_install_set_pte+0x10/0x10 [ 279.480562][ T8548] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 279.480576][ T8548] ? __pfx_walk_pgd_range+0x10/0x10 [ 279.480592][ T8548] __walk_page_range+0x14c/0x710 [ 279.480605][ T8548] ? find_vma+0xe7/0x160 [ 279.480616][ T8548] ? __pfx_find_vma+0x10/0x10 [ 279.480632][ T8548] walk_page_range_mm+0x454/0x660 [ 279.480647][ T8548] ? __pfx_walk_page_range_mm+0x10/0x10 [ 279.480660][ T8548] ? process_measurement+0x1640/0x1a40 [ 279.480678][ T8548] madvise_vma_behavior+0x1274/0x3980 [ 279.480695][ T8548] ? __pfx_process_measurement+0x10/0x10 [ 279.480708][ T8548] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 279.480731][ T8548] ? __lock_acquire+0xab9/0xd20 [ 279.480747][ T8548] ? __lock_acquire+0xab9/0xd20 [ 279.480769][ T8548] ? mas_prev_slot+0xb31/0xbb0 [ 279.480789][ T8548] ? find_vma_prev+0xe3/0x150 [ 279.480799][ T8548] ? __pfx_find_vma_prev+0x10/0x10 [ 279.480813][ T8548] ? __might_fault+0xb0/0x130 [ 279.480825][ T8548] ? _parse_integer_limit+0x1ae/0x1f0 [ 279.480841][ T8548] madvise_walk_vmas+0x51c/0xa30 [ 279.480860][ T8548] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 279.480876][ T8548] ? blk_start_plug+0x6f/0x1b0 [ 279.480890][ T8548] madvise_do_behavior+0x38e/0x550 [ 279.480906][ T8548] ? __pfx_madvise_do_behavior+0x10/0x10 [ 279.480924][ T8548] ? down_read+0x1ad/0x2e0 [ 279.480942][ T8548] do_madvise+0x1bc/0x270 [ 279.480956][ T8548] ? __pfx_do_madvise+0x10/0x10 [ 279.480980][ T8548] ? ksys_write+0x22a/0x250 [ 279.480991][ T8548] ? __pfx_ksys_write+0x10/0x10 [ 279.481002][ T8548] __x64_sys_madvise+0xa7/0xc0 [ 279.481016][ T8548] do_syscall_64+0xfa/0xfa0 [ 279.481029][ T8548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.481039][ T8548] ? clear_bhb_loop+0x60/0xb0 [ 279.481050][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.481060][ T8548] RIP: 0033:0x7f149c18f6c9 [ 279.481076][ T8548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.481085][ T8548] RSP: 002b:00007f149d0a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 279.481096][ T8548] RAX: ffffffffffffffda RBX: 00007f149c3e6090 RCX: 00007f149c18f6c9 [ 279.481103][ T8548] RDX: 0000000000000066 RSI: 0000000000600000 RDI: 0000200000000000 [ 279.481110][ T8548] RBP: 00007f149d0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 279.481116][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.481122][ T8548] R13: 00007f149c3e6128 R14: 00007f149c3e6090 R15: 00007ffd2d957e38 [ 279.481139][ T8548] [ 279.905493][ T778] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 279.913873][ T5868] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 279.928719][ T778] usb 3-1: device descriptor read/8, error -71 [ 280.052757][ T8552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.061958][ T8552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.072510][ T8552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.083020][ T8552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.099406][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 280.110502][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.120455][ T5868] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 280.130015][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.141719][ T5868] usb 4-1: config 0 descriptor?? [ 280.204846][ T778] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 280.218146][ T43] usb 2-1: USB disconnect, device number 82 [ 280.226714][ T778] usb 3-1: device descriptor read/8, error -71 [ 280.354283][ T778] usb usb3-port1: unable to enumerate USB device [ 280.460462][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.493554][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.632201][ T43] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 280.720735][ T8558] Bluetooth: MGMT ver 1.23 [ 280.731648][ T8558] Invalid ELF header magic: != ELF [ 280.776276][ T5868] elan 0003:04F3:0755.0024: failed to start in urb: -90 [ 280.791616][ T5868] elan 0003:04F3:0755.0024: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 280.858450][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.872344][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.882809][ T5837] Bluetooth: hci3: unexpected event 0x2c length: 3 < 17 [ 280.890065][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.903914][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.913215][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.934214][ T43] usb 2-1: config 0 descriptor?? [ 280.980325][ T8564] loop5: detected capacity change from 0 to 7 [ 280.990905][ T5835] Dev loop5: unable to read RDB block 7 [ 280.996713][ T5835] loop5: unable to read partition table [ 281.003578][ T5835] loop5: partition table beyond EOD, truncated [ 281.012729][ T8564] Dev loop5: unable to read RDB block 7 [ 281.018638][ T8564] loop5: unable to read partition table [ 281.024552][ T8564] loop5: partition table beyond EOD, truncated [ 281.031143][ T8564] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 281.072432][ T5907] usb 4-1: USB disconnect, device number 83 [ 281.128175][ T8566] netlink: 20 bytes leftover after parsing attributes in process `syz.0.982'. [ 281.149542][ T8566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.982'. [ 281.161745][ T8566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.171808][ T8566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.444744][ C1] hrtimer: interrupt took 36485 ns [ 281.590915][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 281.597132][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 281.607534][ T43] usb 2-1: USB disconnect, device number 83 [ 281.677407][ T8568] binder: 8567:8568 ioctl c0046209 0 returned -22 [ 282.089961][ T8589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.106941][ T8589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.225556][ T43] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 282.238303][ T8593] FAULT_INJECTION: forcing a failure. [ 282.238303][ T8593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.252658][ T8593] CPU: 0 UID: 0 PID: 8593 Comm: syz.1.992 Not tainted syzkaller #0 PREEMPT(full) [ 282.252684][ T8593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 282.252696][ T8593] Call Trace: [ 282.252703][ T8593] [ 282.252711][ T8593] dump_stack_lvl+0x189/0x250 [ 282.252736][ T8593] ? __pfx____ratelimit+0x10/0x10 [ 282.252759][ T8593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.252779][ T8593] ? __pfx__printk+0x10/0x10 [ 282.252812][ T8593] should_fail_ex+0x414/0x560 [ 282.252841][ T8593] _copy_to_user+0x31/0xb0 [ 282.252864][ T8593] cp_new_stat+0x391/0x4f0 [ 282.252890][ T8593] ? __pfx_cp_new_stat+0x10/0x10 [ 282.252924][ T8593] ? nr_processes+0xe8/0x130 [ 282.252944][ T8593] ? proc_root_getattr+0x77/0xc0 [ 282.252971][ T8593] __x64_sys_newfstat+0x171/0x200 [ 282.252992][ T8593] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 282.253023][ T8593] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 282.253064][ T8593] ? __pfx_ksys_write+0x10/0x10 [ 282.253084][ T8593] ? do_syscall_64+0xbe/0xfa0 [ 282.253110][ T8593] do_syscall_64+0xfa/0xfa0 [ 282.253133][ T8593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.253150][ T8593] ? clear_bhb_loop+0x60/0xb0 [ 282.253171][ T8593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.253188][ T8593] RIP: 0033:0x7f3340d8f6c9 [ 282.253204][ T8593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.253219][ T8593] RSP: 002b:00007f3341cad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 282.253238][ T8593] RAX: ffffffffffffffda RBX: 00007f3340fe5fa0 RCX: 00007f3340d8f6c9 [ 282.253252][ T8593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 282.253262][ T8593] RBP: 00007f3341cad090 R08: 0000000000000000 R09: 0000000000000000 [ 282.253272][ T8593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.253283][ T8593] R13: 00007f3340fe6038 R14: 00007f3340fe5fa0 R15: 00007ffe3238f808 [ 282.253315][ T8593] [ 282.453235][ T43] usb 3-1: device descriptor read/64, error -71 [ 282.473757][ T8595] binder: 8594:8595 ioctl c0046209 0 returned -22 [ 282.749488][ T43] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 282.815326][ T5907] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 282.888493][ T43] usb 3-1: device descriptor read/64, error -71 [ 282.899703][ T9] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 282.921813][ T8606] FAULT_INJECTION: forcing a failure. [ 282.921813][ T8606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.935860][ T8606] CPU: 0 UID: 0 PID: 8606 Comm: syz.0.998 Not tainted syzkaller #0 PREEMPT(full) [ 282.935877][ T8606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 282.935884][ T8606] Call Trace: [ 282.935888][ T8606] [ 282.935893][ T8606] dump_stack_lvl+0x189/0x250 [ 282.935909][ T8606] ? __pfx____ratelimit+0x10/0x10 [ 282.935922][ T8606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.935934][ T8606] ? __pfx__printk+0x10/0x10 [ 282.935945][ T8606] ? __might_fault+0xb0/0x130 [ 282.935964][ T8606] should_fail_ex+0x414/0x560 [ 282.935982][ T8606] _copy_from_user+0x2d/0xb0 [ 282.935994][ T8606] restore_altstack+0x9d/0x4b0 [ 282.936006][ T8606] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 282.936020][ T8606] ? __pfx_restore_altstack+0x10/0x10 [ 282.936034][ T8606] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.936045][ T8606] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.936059][ T8606] __ia32_sys_rt_sigreturn+0x281/0x860 [ 282.936078][ T8606] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 282.936094][ T8606] ? __lock_acquire+0xab9/0xd20 [ 282.936115][ T8606] ? __task_pid_nr_ns+0x28/0x490 [ 282.936130][ T8606] ? do_syscall_64+0xbe/0xfa0 [ 282.936144][ T8606] do_syscall_64+0xfa/0xfa0 [ 282.936156][ T8606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.936166][ T8606] ? clear_bhb_loop+0x60/0xb0 [ 282.936178][ T8606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.936187][ T8606] RIP: 0033:0x7f149c12b779 [ 282.936198][ T8606] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 282.936206][ T8606] RSP: 002b:00007f149d0c1a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 282.936217][ T8606] RAX: ffffffffffffffda RBX: 00007f149c3e5fa0 RCX: 00007f149c12b779 [ 282.936225][ T8606] RDX: 00007f149d0c1a80 RSI: 00007f149d0c1bb0 RDI: 0000000000000021 [ 282.936231][ T8606] RBP: 00007f149d0c2090 R08: 0000000000000000 R09: 0000000000000000 [ 282.936237][ T8606] R10: 1000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 282.936244][ T8606] R13: 00007f149c3e6038 R14: 00007f149c3e5fa0 R15: 00007ffd2d957e38 [ 282.936260][ T8606] [ 283.149459][ T43] usb usb3-port1: attempt power cycle [ 283.180158][ T8608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.182539][ T5907] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 283.189079][ T8608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.200518][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.214748][ T5907] usb 4-1: Product: syz [ 283.218982][ T5907] usb 4-1: Manufacturer: syz [ 283.223947][ T5907] usb 4-1: SerialNumber: syz [ 283.235724][ T5907] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 283.245673][ T9] usb 2-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 283.257381][ T9] usb 2-1: config 64 has 0 interfaces, different from the descriptor's value: 18 [ 283.266717][ T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 283.275890][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.308709][ T5906] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 283.519509][ T43] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 283.552193][ T43] usb 3-1: device descriptor read/8, error -71 [ 283.793990][ T8610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.803875][ T8610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.812417][ T43] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 283.815892][ T8610] FAULT_INJECTION: forcing a failure. [ 283.815892][ T8610] name failslab, interval 1, probability 0, space 0, times 0 [ 283.835390][ T8610] CPU: 1 UID: 0 PID: 8610 Comm: syz.0.1000 Not tainted syzkaller #0 PREEMPT(full) [ 283.835414][ T8610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.835425][ T8610] Call Trace: [ 283.835433][ T8610] [ 283.835440][ T8610] dump_stack_lvl+0x189/0x250 [ 283.835465][ T8610] ? __pfx____ratelimit+0x10/0x10 [ 283.835487][ T8610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.835509][ T8610] ? __pfx__printk+0x10/0x10 [ 283.835529][ T8610] ? __pfx___might_resched+0x10/0x10 [ 283.835547][ T8610] ? fs_reclaim_acquire+0x7d/0x100 [ 283.835576][ T8610] should_fail_ex+0x414/0x560 [ 283.835607][ T8610] should_failslab+0xa8/0x100 [ 283.835632][ T8610] __kmalloc_cache_noprof+0x84/0x700 [ 283.835650][ T8610] ? __pfx___mutex_lock+0x10/0x10 [ 283.835663][ T8610] ? handle_mm_fault+0x2c15/0x32a0 [ 283.835674][ T8610] ? usb_control_msg+0x73/0x3e0 [ 283.835691][ T8610] usb_control_msg+0x73/0x3e0 [ 283.835711][ T8610] m920x_i2c_xfer+0x1fc/0x840 [ 283.835752][ T8610] __i2c_transfer+0x874/0x21a0 [ 283.835779][ T8610] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.835813][ T8610] ? __pfx___i2c_transfer+0x10/0x10 [ 283.835828][ T8610] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 283.835837][ T8610] ? i2c_transfer+0x120/0x3a0 [ 283.835851][ T8610] i2c_transfer+0x25b/0x3a0 [ 283.835863][ T8610] ? rcu_is_watching+0x15/0xb0 [ 283.835876][ T8610] ? __pfx_i2c_transfer+0x10/0x10 [ 283.835898][ T8610] ? exc_page_fault+0xab/0x100 [ 283.835928][ T8610] i2c_transfer_buffer_flags+0x105/0x190 [ 283.835956][ T8610] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 283.835985][ T8610] ? _copy_from_user+0x94/0xb0 [ 283.835998][ T8610] i2cdev_write+0x113/0x1e0 [ 283.836013][ T8610] vfs_writev+0x4b6/0x960 [ 283.836026][ T8610] ? __pfx_i2cdev_write+0x10/0x10 [ 283.836040][ T8610] ? __pfx_vfs_writev+0x10/0x10 [ 283.836074][ T8610] ? __fget_files+0x2a/0x420 [ 283.836098][ T8610] ? __fget_files+0x3a0/0x420 [ 283.836116][ T8610] ? __fget_files+0x2a/0x420 [ 283.836145][ T8610] __x64_sys_pwritev+0x197/0x2a0 [ 283.836162][ T8610] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 283.836174][ T8610] ? do_syscall_64+0xbe/0xfa0 [ 283.836189][ T8610] do_syscall_64+0xfa/0xfa0 [ 283.836201][ T8610] ? irqentry_exit+0x10f/0x640 [ 283.836212][ T8610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.836229][ T8610] ? clear_bhb_loop+0x60/0xb0 [ 283.836250][ T8610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.836268][ T8610] RIP: 0033:0x7f149c18f6c9 [ 283.836284][ T8610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.836299][ T8610] RSP: 002b:00007f149d0c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 283.836318][ T8610] RAX: ffffffffffffffda RBX: 00007f149c3e5fa0 RCX: 00007f149c18f6c9 [ 283.836328][ T8610] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000004 [ 283.836334][ T8610] RBP: 00007f149d0c2090 R08: 00000000000000b2 R09: 0000000000000000 [ 283.836341][ T8610] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 283.836346][ T8610] R13: 00007f149c3e6038 R14: 00007f149c3e5fa0 R15: 00007ffd2d957e38 [ 283.836363][ T8610] [ 284.149737][ T43] usb 3-1: device descriptor read/8, error -71 [ 284.190175][ T5907] usb 4-1: USB disconnect, device number 84 [ 284.268781][ T43] usb usb3-port1: unable to enumerate USB device [ 284.653216][ T5906] usb 4-1: Service connection timeout for: 256 [ 284.665123][ T5906] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 284.675437][ T5906] ath9k_htc: Failed to initialize the device [ 284.682957][ T5907] usb 4-1: ath9k_htc: USB layer deinitialized [ 285.144886][ T5907] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 285.198205][ T8618] binder: 8617:8618 ioctl c0046209 0 returned -22 [ 285.277610][ T8621] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 285.286416][ T8621] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 285.293163][ T8621] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 285.310632][ T8621] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 285.317925][ T8621] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 285.324899][ T8621] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 285.332683][ T8621] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 285.337374][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 285.342277][ T8621] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 285.354058][ T5907] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 285.364133][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.372860][ T5907] usb 4-1: Product: syz [ 285.377272][ T5907] usb 4-1: Manufacturer: syz [ 285.385877][ T5907] usb 4-1: SerialNumber: syz [ 285.405656][ T5907] usb 4-1: config 0 descriptor?? [ 285.422666][ T5907] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 285.635182][ T5907] gspca_ov534_9: reg_w failed -71 [ 285.748427][ T8631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.757261][ T8631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.807463][ T5830] usb 2-1: USB disconnect, device number 84 [ 285.844641][ T8633] mmap: syz.1.1009 (8633): VmData 37466112 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 285.868411][ T8633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1009'. [ 285.912874][ T8635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1010'. [ 285.936926][ T5868] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 285.962105][ T8637] Unsupported ieee802154 address type: 0 [ 286.001708][ T8639] binder: 8638:8639 ioctl c0046209 0 returned -22 [ 286.098093][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.108449][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.118399][ T5907] gspca_ov534_9: Unknown sensor 0000 [ 286.121806][ T5907] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 286.123289][ T5868] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 286.137018][ T5907] usb 4-1: USB disconnect, device number 85 [ 286.144909][ T5868] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 286.159472][ T5868] usb 3-1: Manufacturer: syz [ 286.173529][ T5868] usb 3-1: config 0 descriptor?? [ 286.187706][ T5868] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 286.299883][ T43] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 286.460495][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 286.467930][ T5906] usb 3-1: USB disconnect, device number 109 [ 286.476385][ T43] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 286.485994][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.494106][ T43] usb 2-1: Product: syz [ 286.498365][ T43] usb 2-1: Manufacturer: syz [ 286.503190][ T43] usb 2-1: SerialNumber: syz [ 286.509848][ T43] usb 2-1: config 0 descriptor?? [ 286.732971][ T43] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 287.078775][ T8660] binder: 8659:8660 ioctl c0046209 0 returned -22 [ 287.142522][ T5906] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 287.152019][ T8662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1022'. [ 287.316134][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 287.328414][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.351305][ T5906] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 287.363024][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.372272][ T5906] usb 4-1: Product: syz [ 287.376459][ T5906] usb 4-1: Manufacturer: syz [ 287.381211][ T5906] usb 4-1: SerialNumber: syz [ 287.388789][ T5906] usb 4-1: config 0 descriptor?? [ 287.443679][ T8668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.452940][ T8668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.478682][ T778] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 287.649666][ T778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.660704][ T778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.670527][ T778] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.684104][ T778] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.688575][ T5906] kaweth 4-1:0.0: Firmware present in device. [ 287.693210][ T778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.698165][ T778] usb 3-1: config 0 descriptor?? [ 287.816911][ T43] gspca_sunplus: reg_w_riv err -71 [ 287.822582][ T43] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 287.838126][ T43] usb 2-1: USB disconnect, device number 85 [ 287.894121][ T5906] kaweth 4-1:0.0: Statistics collection: 0 [ 287.901453][ T5906] kaweth 4-1:0.0: Multicast filter limit: 0 [ 287.910065][ T5906] kaweth 4-1:0.0: MTU: 0 [ 287.914651][ T5906] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 288.153949][ T778] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 288.161958][ T778] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 288.169445][ T778] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 288.177457][ T778] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 288.185626][ T778] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 288.193444][ T778] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 288.200869][ T778] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 288.209514][ T778] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 288.218153][ T778] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 288.226868][ T778] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 288.250797][ T778] plantronics 0003:047F:FFFF.0025: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 288.399005][ T778] usb 3-1: USB disconnect, device number 110 [ 288.496049][ T5906] kaweth 4-1:0.0: Error setting SOFS wait [ 288.535137][ T5906] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 288.553779][ T5906] usb 4-1: USB disconnect, device number 86 [ 288.720654][ T8689] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 288.768575][ T8689] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 288.782760][ T8689] overlayfs: failed to look up (tracing) for ino (-66) [ 288.786925][ T8692] binder: 8691:8692 ioctl c0046209 0 returned -22 [ 289.379749][ T8699] FAULT_INJECTION: forcing a failure. [ 289.379749][ T8699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.422254][ T8699] CPU: 0 UID: 0 PID: 8699 Comm: syz.1.1034 Not tainted syzkaller #0 PREEMPT(full) [ 289.422282][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.422296][ T8699] Call Trace: [ 289.422304][ T8699] [ 289.422311][ T8699] dump_stack_lvl+0x189/0x250 [ 289.422337][ T8699] ? __pfx____ratelimit+0x10/0x10 [ 289.422369][ T8699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.422390][ T8699] ? __pfx__printk+0x10/0x10 [ 289.422411][ T8699] ? __might_fault+0xb0/0x130 [ 289.422443][ T8699] should_fail_ex+0x414/0x560 [ 289.422472][ T8699] _copy_to_iter+0x404/0x1790 [ 289.422506][ T8699] ? __pfx__copy_to_iter+0x10/0x10 [ 289.422523][ T8699] ? single_next+0xd/0x40 [ 289.422537][ T8699] ? single_stop+0x9/0x10 [ 289.422550][ T8699] ? traverse+0x544/0x580 [ 289.422584][ T8699] seq_read_iter+0x2e9/0xe20 [ 289.422613][ T8699] ? __lock_acquire+0xab9/0xd20 [ 289.422633][ T8699] ? __asan_memset+0x22/0x50 [ 289.422660][ T8699] seq_read+0x369/0x480 [ 289.422693][ T8699] ? __pfx_seq_read+0x10/0x10 [ 289.422729][ T8699] ? rw_verify_area+0x2a6/0x4d0 [ 289.422753][ T8699] ? __lock_acquire+0xab9/0xd20 [ 289.422768][ T8699] ? __pfx_seq_read+0x10/0x10 [ 289.422793][ T8699] vfs_read+0x200/0xa30 [ 289.422827][ T8699] ? __pfx_vfs_read+0x10/0x10 [ 289.422853][ T8699] ? __fget_files+0x2a/0x420 [ 289.422875][ T8699] ? __fget_files+0x2a/0x420 [ 289.422893][ T8699] ? __fget_files+0x3a0/0x420 [ 289.422909][ T8699] ? __fget_files+0x2a/0x420 [ 289.422937][ T8699] __x64_sys_pread64+0x193/0x220 [ 289.422958][ T8699] ? __pfx___x64_sys_pread64+0x10/0x10 [ 289.422981][ T8699] ? do_syscall_64+0xbe/0xfa0 [ 289.423007][ T8699] do_syscall_64+0xfa/0xfa0 [ 289.423030][ T8699] ? irqentry_exit+0x10f/0x640 [ 289.423050][ T8699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.423068][ T8699] ? clear_bhb_loop+0x60/0xb0 [ 289.423090][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.423105][ T8699] RIP: 0033:0x7f3340d8f6c9 [ 289.423122][ T8699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.423137][ T8699] RSP: 002b:00007f3341cad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 289.423156][ T8699] RAX: ffffffffffffffda RBX: 00007f3340fe5fa0 RCX: 00007f3340d8f6c9 [ 289.423169][ T8699] RDX: 0000000000000016 RSI: 00002000000000c0 RDI: 0000000000000004 [ 289.423181][ T8699] RBP: 00007f3341cad090 R08: 0000000000000000 R09: 0000000000000000 [ 289.423192][ T8699] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 289.423203][ T8699] R13: 00007f3340fe6038 R14: 00007f3340fe5fa0 R15: 00007ffe3238f808 [ 289.423236][ T8699] [ 289.699634][ T8730] binder: 8727:8730 ioctl c0046209 0 returned -22 [ 289.896872][ T8736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.907248][ T8736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.915741][ T8736] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1047'. [ 290.033813][ T8738] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1048'. [ 290.053857][ T24] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 290.102054][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1050'. [ 290.228953][ T24] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 290.240136][ T24] usb 3-1: config 0 has no interface number 0 [ 290.247006][ T24] usb 3-1: config 0 interface 41 has no altsetting 0 [ 290.256399][ T24] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 290.266807][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.274917][ T24] usb 3-1: Product: syz [ 290.281552][ T24] usb 3-1: Manufacturer: syz [ 290.286190][ T24] usb 3-1: SerialNumber: syz [ 290.295921][ T24] usb 3-1: config 0 descriptor?? [ 290.407549][ T43] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 290.491815][ T5868] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 290.579457][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.601744][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.625117][ T43] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 290.642520][ T43] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 290.651167][ T43] usb 2-1: Manufacturer: syz [ 290.657504][ T8751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.668464][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 290.676113][ T8751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.686773][ T5868] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 290.696471][ T43] usb 2-1: config 0 descriptor?? [ 290.701722][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.713980][ T43] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 290.722320][ T5868] usb 4-1: Product: syz [ 290.726565][ T5868] usb 4-1: Manufacturer: syz [ 290.734236][ T5868] usb 4-1: SerialNumber: syz [ 290.753624][ T5868] usb 4-1: config 0 descriptor?? [ 291.033254][ T43] usb 2-1: USB disconnect, device number 86 [ 291.173109][ T24] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 291.187159][ T24] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 291.200852][ T5868] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 291.210215][ T24] usb 3-1: USB disconnect, device number 111 [ 291.221876][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 291.235206][ T5868] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 291.244377][ T5868] usb 4-1: media controller created [ 291.265192][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.350106][ T8754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.358983][ T8754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.370878][ T8754] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1055'. [ 291.381843][ T8754] netlink: 'syz.0.1055': attribute type 10 has an invalid length. [ 291.400013][ T8754] team0: Port device dummy0 added [ 291.407949][ T8754] netlink: 'syz.0.1055': attribute type 10 has an invalid length. [ 291.415129][ T8749] FAULT_INJECTION: forcing a failure. [ 291.415129][ T8749] name failslab, interval 1, probability 0, space 0, times 0 [ 291.428744][ T8749] CPU: 0 UID: 0 PID: 8749 Comm: syz.3.1053 Not tainted syzkaller #0 PREEMPT(full) [ 291.428766][ T8749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 291.428776][ T8749] Call Trace: [ 291.428781][ T8749] [ 291.428787][ T8749] dump_stack_lvl+0x189/0x250 [ 291.428808][ T8749] ? __pfx____ratelimit+0x10/0x10 [ 291.428825][ T8749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.428841][ T8749] ? __pfx__printk+0x10/0x10 [ 291.428866][ T8749] ? __pfx___might_resched+0x10/0x10 [ 291.428882][ T8749] ? fs_reclaim_acquire+0x7d/0x100 [ 291.428909][ T8749] should_fail_ex+0x414/0x560 [ 291.428939][ T8749] should_failslab+0xa8/0x100 [ 291.428973][ T8749] __kmalloc_noprof+0xdf/0x800 [ 291.428992][ T8749] ? tomoyo_encode+0x28b/0x550 [ 291.429018][ T8749] tomoyo_encode+0x28b/0x550 [ 291.429044][ T8749] tomoyo_realpath_from_path+0x58d/0x5d0 [ 291.429076][ T8749] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 291.429094][ T8749] tomoyo_path_number_perm+0x1e8/0x5a0 [ 291.429115][ T8749] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 291.429172][ T8749] ? __fget_files+0x2a/0x420 [ 291.429197][ T8749] ? __fget_files+0x3a0/0x420 [ 291.429214][ T8749] ? __fget_files+0x2a/0x420 [ 291.429237][ T8749] security_file_ioctl+0xcb/0x2d0 [ 291.429265][ T8749] __se_sys_ioctl+0x47/0x170 [ 291.429291][ T8749] do_syscall_64+0xfa/0xfa0 [ 291.429314][ T8749] ? irqentry_exit+0x10f/0x640 [ 291.429334][ T8749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.429352][ T8749] ? clear_bhb_loop+0x60/0xb0 [ 291.429373][ T8749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.429389][ T8749] RIP: 0033:0x7fbd6918f6c9 [ 291.429406][ T8749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.429421][ T8749] RSP: 002b:00007fbd69fcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.429438][ T8749] RAX: ffffffffffffffda RBX: 00007fbd693e5fa0 RCX: 00007fbd6918f6c9 [ 291.429449][ T8749] RDX: 00002000000002c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 291.429459][ T8749] RBP: 00007fbd69fcd090 R08: 0000000000000000 R09: 0000000000000000 [ 291.429468][ T8749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.429477][ T8749] R13: 00007fbd693e6038 R14: 00007fbd693e5fa0 R15: 00007ffce3c107b8 [ 291.429504][ T8749] [ 291.429523][ T8749] ERROR: Out of memory at tomoyo_realpath_from_path. [ 291.430031][ T8754] team0: Port device dummy0 removed [ 291.671864][ T5868] zl10353_read_register: readreg error (reg=127, ret==0) [ 291.679066][ T5868] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 291.679255][ T8754] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 291.686989][ T5868] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 291.695417][ T5868] usb 4-1: USB disconnect, device number 87 [ 291.806006][ T5868] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 292.114970][ T8777] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1062'. [ 292.197809][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1063'. [ 292.245225][ T5837] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 292.245724][ T5837] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 292.332190][ T8785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.341154][ T8785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.524093][ T9] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 292.697923][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 292.704697][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 292.715747][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 292.725412][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.735295][ T9] usb 3-1: config 0 descriptor?? [ 292.844658][ T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 292.904120][ T30] audit: type=1326 audit(1762514526.473:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6918f6c9 code=0x7ff00000 [ 292.934154][ T8792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.944549][ T30] audit: type=1326 audit(1762514526.501:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fbd6918f6c9 code=0x7ff00000 [ 292.948505][ T8792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.967327][ T30] audit: type=1326 audit(1762514526.501:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6918f6c9 code=0x7ff00000 [ 292.979628][ T8779] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 292.997294][ T30] audit: type=1326 audit(1762514526.501:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6918f6c9 code=0x7ff00000 [ 293.055447][ T30] audit: type=1326 audit(1762514526.501:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6918f6c9 code=0x7ff00000 [ 293.060324][ T8779] CIFS mount error: No usable UNC path provided in device string! [ 293.060324][ T8779] [ 293.078733][ T30] audit: type=1326 audit(1762514526.501:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6918f6c9 code=0x7ff00000 [ 293.088051][ T8789] orangefs: client-core tried to read wrong size [ 293.112057][ T30] audit: type=1326 audit(1762514526.501:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6918f6c9 code=0x7ff00000 [ 293.118014][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 293.149372][ T8796] QAT: Device 253 not found [ 293.155393][ T8779] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 293.176239][ T30] audit: type=1326 audit(1762514526.501:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6918f6c9 code=0x7ff00000 [ 293.176394][ T24] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 293.207706][ T30] audit: type=1326 audit(1762514526.501:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6918f6c9 code=0x7ff00000 [ 293.237251][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.248909][ T24] usb 2-1: Product: syz [ 293.253351][ T24] usb 2-1: Manufacturer: syz [ 293.253672][ T9] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 293.258060][ T30] audit: type=1326 audit(1762514526.501:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8788 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6918f6c9 code=0x7ff00000 [ 293.291673][ T8796] can: request_module (can-proto-0) failed. [ 293.301186][ T24] usb 2-1: SerialNumber: syz [ 293.315957][ T24] usb 2-1: config 0 descriptor?? [ 293.593155][ T9] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 293.732091][ T9] usb 4-1: device descriptor read/64, error -71 [ 293.755369][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 293.766433][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 293.776354][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 293.784298][ T24] usb 2-1: media controller created [ 293.798064][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.973968][ T8787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.983277][ T8787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.988685][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 294.005026][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 294.015697][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 294.024540][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 294.043025][ T24] usb 2-1: USB disconnect, device number 87 [ 294.082968][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 294.138836][ T9] usb 4-1: device descriptor read/64, error -71 [ 294.267703][ T9] usb usb4-port1: attempt power cycle [ 294.630318][ T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 294.652902][ T9] usb 4-1: device descriptor read/8, error -71 [ 294.913565][ T9] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 294.953427][ T9] usb 4-1: device descriptor read/8, error -71 [ 295.069198][ T9] usb usb4-port1: unable to enumerate USB device [ 295.293469][ T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 295.417266][ T43] usb 3-1: USB disconnect, device number 112 [ 295.476960][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 295.493578][ T24] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 295.513150][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.521925][ T24] usb 2-1: Product: syz [ 295.526169][ T24] usb 2-1: Manufacturer: syz [ 295.531195][ T24] usb 2-1: SerialNumber: syz [ 295.540664][ T24] usb 2-1: config 0 descriptor?? [ 295.559455][ T8828] syz.0.1082 (8828): drop_caches: 2 [ 295.771957][ T8837] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1085'. [ 295.828021][ T43] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 295.984819][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 295.994282][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.007142][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 296.016519][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.026977][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 296.035142][ T24] usb 2-1: media controller created [ 296.042335][ T43] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 296.051390][ T43] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 296.066154][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.074616][ T43] usb 3-1: Manufacturer: syz [ 296.081193][ T43] usb 3-1: config 0 descriptor?? [ 296.201143][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 296.209553][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 296.217580][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 296.231144][ T24] usb 2-1: USB disconnect, device number 88 [ 296.272789][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 296.401834][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 296.408065][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 296.418602][ T43] usb 3-1: USB disconnect, device number 113 [ 296.738133][ T8850] binder: 8849:8850 ioctl c0046209 0 returned -22 [ 296.928284][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.937212][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.057801][ T1165] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 297.176737][ T8865] syz.3.1096 (8865): drop_caches: 2 [ 297.225682][ T1165] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.249311][ T1165] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.273326][ T1165] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 297.293101][ T1165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 297.301219][ T1165] usb 2-1: SerialNumber: syz [ 297.546193][ T8878] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 297.552900][ T1165] usb 2-1: 0:2 : does not exist [ 297.590711][ T1165] usb 2-1: USB disconnect, device number 89 [ 297.656151][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.891930][ T43] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 297.915129][ T8890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.925641][ T8890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.021300][ T8893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1105'. [ 298.034233][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1105'. [ 298.073838][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 298.083188][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.144449][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.171257][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 298.202439][ T43] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 298.224102][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.248989][ T43] usb 4-1: config 0 descriptor?? [ 298.427066][ T9] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 298.578143][ T9] usb 3-1: device descriptor read/64, error -71 [ 298.856630][ T9] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 298.865063][ T24] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 299.014788][ T9] usb 3-1: device descriptor read/64, error -71 [ 299.028535][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 299.038412][ T24] usb 2-1: config 1 has an invalid interface number: 61 but max is 0 [ 299.046541][ T24] usb 2-1: config 1 has no interface number 0 [ 299.055856][ T24] usb 2-1: config 1 interface 61 has no altsetting 0 [ 299.067216][ T24] usb 2-1: string descriptor 0 read error: -22 [ 299.075428][ T24] usb 2-1: New USB device found, idVendor=12d1, idProduct=3605, bcdDevice=e4.b0 [ 299.087357][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.122811][ T24] huawei_cdc_ncm 2-1:1.61: CDC Union missing and no IAD found [ 299.133097][ T9] usb usb3-port1: attempt power cycle [ 299.142239][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 299.153265][ T24] huawei_cdc_ncm 2-1:1.61: bind() failure [ 299.162052][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 299.191561][ T43] usb 4-1: USB disconnect, device number 92 [ 299.337173][ T8907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.346872][ T8907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.517448][ T9] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 299.540928][ T9] usb 3-1: device descriptor read/8, error -71 [ 299.574699][ T8907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.587897][ T8907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.599151][ T8907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.608680][ T8907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.621959][ T8907] netlink: 2816 bytes leftover after parsing attributes in process `syz.1.1108'. [ 299.732177][ T8910] netlink: 'syz.3.1109': attribute type 15 has an invalid length. [ 299.795508][ T9] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 299.829555][ T9] usb 3-1: device descriptor read/8, error -71 [ 299.946673][ T9] usb usb3-port1: unable to enumerate USB device [ 300.041382][ T24] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 300.203773][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.215210][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.228855][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 300.240311][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 300.248667][ T24] usb 4-1: Manufacturer: syz [ 300.258695][ T24] usb 4-1: config 0 descriptor?? [ 300.519067][ T8912] FAULT_INJECTION: forcing a failure. [ 300.519067][ T8912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.535748][ T8912] CPU: 1 UID: 0 PID: 8912 Comm: syz.3.1110 Not tainted syzkaller #0 PREEMPT(full) [ 300.535775][ T8912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 300.535791][ T8912] Call Trace: [ 300.535800][ T8912] [ 300.535808][ T8912] dump_stack_lvl+0x189/0x250 [ 300.535836][ T8912] ? __pfx____ratelimit+0x10/0x10 [ 300.535860][ T8912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.535882][ T8912] ? __pfx__printk+0x10/0x10 [ 300.535919][ T8912] should_fail_ex+0x414/0x560 [ 300.535944][ T8912] __kvm_read_guest_page+0x18d/0x240 [ 300.535961][ T8912] kvm_fetch_guest_virt+0x12b/0x170 [ 300.535975][ T8912] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 300.535986][ T8912] __do_insn_fetch_bytes+0x2fc/0x6d0 [ 300.536012][ T8912] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 300.536039][ T8912] ? try_to_wake_up+0xa70/0x12b0 [ 300.536072][ T8912] x86_decode_insn+0x31d/0x5470 [ 300.536092][ T8912] ? finish_task_switch+0x266/0x960 [ 300.536114][ T8912] ? finish_task_switch+0x266/0x960 [ 300.536140][ T8912] ? __pfx_x86_decode_insn+0x10/0x10 [ 300.536161][ T8912] ? css_rstat_updated+0x23a/0x4f0 [ 300.536203][ T8912] ? __asan_memset+0x22/0x50 [ 300.536225][ T8912] ? init_decode_cache+0x78/0x90 [ 300.536243][ T8912] ? init_emulate_ctxt+0x4d6/0x660 [ 300.536256][ T8912] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 300.536274][ T8912] x86_emulate_instruction+0x61b/0x1f90 [ 300.536289][ T8912] ? __pfx_rcu_qs+0x10/0x10 [ 300.536303][ T8912] ? rcu_is_watching+0x15/0xb0 [ 300.536324][ T8912] ? __switch_to+0xdc8/0x1690 [ 300.536351][ T8912] ? trace_rcu_utilization+0x47/0x1d0 [ 300.536377][ T8912] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 300.536394][ T8912] ? finish_task_switch+0x18b/0x960 [ 300.536416][ T8912] handle_ud+0x142/0x590 [ 300.536427][ T8912] ? clear_bhb_loop+0x60/0xb0 [ 300.536437][ T8912] ? clear_bhb_loop+0x60/0xb0 [ 300.536450][ T8912] ? __pfx_handle_ud+0x10/0x10 [ 300.536468][ T8912] ? vmx_handle_exit_irqoff+0x61e/0x940 [ 300.536497][ T8912] ? __lock_acquire+0xab9/0xd20 [ 300.536520][ T8912] ? __pfx_handle_exception_nmi+0x10/0x10 [ 300.536538][ T8912] vmx_handle_exit+0xf23/0x1690 [ 300.536549][ T8912] ? vcpu_run+0x364e/0x7760 [ 300.536570][ T8912] vcpu_run+0x4cfd/0x7760 [ 300.536590][ T8912] ? vcpu_run+0x364e/0x7760 [ 300.536678][ T8912] ? __pfx_vcpu_run+0x10/0x10 [ 300.536694][ T8912] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 300.536707][ T8912] ? complete_emulated_mmio+0x18e/0x7a0 [ 300.536720][ T8912] ? __asan_memcpy+0x40/0x70 [ 300.536731][ T8912] ? complete_emulated_mmio+0x4d2/0x7a0 [ 300.536757][ T8912] kvm_arch_vcpu_ioctl_run+0x116c/0x1cb0 [ 300.536791][ T8912] ? __mutex_trylock_common+0x153/0x260 [ 300.536817][ T8912] ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0 [ 300.536837][ T8912] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 300.536852][ T8912] ? rcu_is_watching+0x15/0xb0 [ 300.536863][ T8912] ? trace_contention_end+0x39/0x120 [ 300.536875][ T8912] ? __mutex_lock+0x335/0x1350 [ 300.536896][ T8912] ? kasan_quarantine_put+0xdd/0x220 [ 300.536918][ T8912] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.536941][ T8912] ? kvm_vcpu_ioctl+0x269/0xed0 [ 300.536968][ T8912] ? __pfx___mutex_lock+0x10/0x10 [ 300.536986][ T8912] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 300.536999][ T8912] ? do_vfs_ioctl+0xbe8/0x1430 [ 300.537012][ T8912] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 300.537022][ T8912] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 300.537038][ T8912] kvm_vcpu_ioctl+0x99a/0xed0 [ 300.537066][ T8912] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 300.537118][ T8912] ? __fget_files+0x2a/0x420 [ 300.537142][ T8912] ? __fget_files+0x3a0/0x420 [ 300.537152][ T8912] ? __fget_files+0x2a/0x420 [ 300.537164][ T8912] ? bpf_lsm_file_ioctl+0x9/0x20 [ 300.537179][ T8912] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 300.537194][ T8912] __se_sys_ioctl+0xfc/0x170 [ 300.537221][ T8912] do_syscall_64+0xfa/0xfa0 [ 300.537245][ T8912] ? irqentry_exit+0x10f/0x640 [ 300.537266][ T8912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.537281][ T8912] ? clear_bhb_loop+0x60/0xb0 [ 300.537293][ T8912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.537303][ T8912] RIP: 0033:0x7fbd6918f6c9 [ 300.537314][ T8912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.537323][ T8912] RSP: 002b:00007fbd69fcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.537334][ T8912] RAX: ffffffffffffffda RBX: 00007fbd693e5fa0 RCX: 00007fbd6918f6c9 [ 300.537346][ T8912] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 300.537357][ T8912] RBP: 00007fbd69fcd090 R08: 0000000000000000 R09: 0000000000000000 [ 300.537369][ T8912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.537380][ T8912] R13: 00007fbd693e6038 R14: 00007fbd693e5fa0 R15: 00007ffce3c107b8 [ 300.537415][ T8912] [ 301.102238][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 301.110923][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 301.124872][ T24] usb 4-1: USB disconnect, device number 93 [ 301.297736][ T8921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.306956][ T8921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.674261][ T8925] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 301.687008][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1116'. [ 301.804645][ T24] usb 2-1: USB disconnect, device number 90 [ 302.181664][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.196750][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.210606][ T8956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.225889][ T8956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.245660][ T5907] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 302.287876][ T1165] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 302.419687][ T5907] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 302.427927][ T5907] usb 4-1: can't read configurations, error -22 [ 302.448607][ T1165] usb 3-1: Using ep0 maxpacket: 16 [ 302.455720][ T1165] usb 3-1: config 0 has no interfaces? [ 302.463483][ T1165] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 302.473143][ T1165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.481242][ T1165] usb 3-1: Product: syz [ 302.485403][ T1165] usb 3-1: Manufacturer: syz [ 302.489985][ T1165] usb 3-1: SerialNumber: syz [ 302.496358][ T1165] usb 3-1: config 0 descriptor?? [ 302.565190][ T5907] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 302.684513][ T5868] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 302.723137][ T24] usb 3-1: USB disconnect, device number 118 [ 302.738311][ T5907] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 302.746316][ T5907] usb 4-1: can't read configurations, error -22 [ 302.753933][ T5907] usb usb4-port1: attempt power cycle [ 302.856106][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 302.863096][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 302.875215][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 302.888942][ T5868] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 302.900756][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.910284][ T5868] usb 2-1: Product: syz [ 302.914533][ T5868] usb 2-1: Manufacturer: syz [ 302.922143][ T5868] usb 2-1: SerialNumber: syz [ 302.940076][ T5868] usb 2-1: config 0 descriptor?? [ 302.951101][ T5868] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 302.960510][ T5868] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 303.132640][ T5907] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 303.156837][ T5907] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 303.164960][ T5907] usb 4-1: can't read configurations, error -22 [ 303.303081][ T5907] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 303.337837][ T5907] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 303.347749][ T5907] usb 4-1: can't read configurations, error -22 [ 303.354569][ T5907] usb usb4-port1: unable to enumerate USB device [ 303.392353][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 303.392371][ T30] audit: type=1326 audit(1762514536.282:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3340d8f6c9 code=0x7ffc0000 [ 303.421810][ T30] audit: type=1326 audit(1762514536.282:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3340d8f6c9 code=0x7ffc0000 [ 303.454186][ T30] audit: type=1326 audit(1762514536.282:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3340d8f6c9 code=0x7ffc0000 [ 303.496104][ T30] audit: type=1326 audit(1762514536.338:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3340d8f6c9 code=0x7ffc0000 [ 303.548991][ T30] audit: type=1326 audit(1762514536.338:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3340d8f6c9 code=0x7ffc0000 [ 303.581306][ T43] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 303.615617][ T30] audit: type=1326 audit(1762514536.357:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3340d8f6c9 code=0x7ffc0000 [ 303.641238][ T30] audit: type=1326 audit(1762514536.357:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3340d2b779 code=0x7ffc0000 [ 303.664349][ T30] audit: type=1326 audit(1762514536.357:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3340d2b779 code=0x7ffc0000 [ 303.690466][ T30] audit: type=1326 audit(1762514536.357:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3340d2b779 code=0x7ffc0000 [ 303.715447][ T30] audit: type=1326 audit(1762514536.357:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3340d2b779 code=0x7ffc0000 [ 303.775126][ T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 303.785378][ T43] usb 3-1: config 0 has no interface number 0 [ 303.792030][ T43] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 303.810372][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.830027][ T43] usb 3-1: config 0 descriptor?? [ 303.845133][ T43] cp210x 3-1:0.1: cp210x converter detected [ 303.853097][ T5868] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 303.879982][ T5868] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 303.888994][ T5868] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 303.905109][ T5868] em28xx 2-1:0.0: No AC97 audio processor [ 303.929299][ T5868] usb 2-1: USB disconnect, device number 91 [ 303.972818][ T5868] em28xx 2-1:0.0: Disconnecting em28xx [ 303.986562][ T5868] em28xx 2-1:0.0: Freeing device [ 304.482870][ T5868] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 304.664091][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.676815][ T5868] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 304.686581][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.723190][ T5868] usb 2-1: config 0 descriptor?? [ 304.744430][ T5868] pwc: Askey VC010 type 2 USB webcam detected. [ 305.168983][ T5868] pwc: recv_control_msg error -32 req 02 val 2b00 [ 305.177496][ T5868] pwc: recv_control_msg error -32 req 02 val 2700 [ 305.188438][ T5868] pwc: recv_control_msg error -32 req 02 val 2c00 [ 305.197071][ T5868] pwc: recv_control_msg error -32 req 04 val 1000 [ 305.207651][ T5868] pwc: recv_control_msg error -32 req 04 val 1300 [ 305.221172][ T5868] pwc: recv_control_msg error -32 req 04 val 1400 [ 305.243962][ T5868] pwc: recv_control_msg error -32 req 02 val 2000 [ 305.262415][ T5868] pwc: recv_control_msg error -32 req 02 val 2100 [ 305.283573][ T5868] pwc: recv_control_msg error -32 req 04 val 1500 [ 305.316389][ T8989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.329892][ T8989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.518110][ T5868] pwc: recv_control_msg error -71 req 02 val 2400 [ 305.525694][ T5868] pwc: recv_control_msg error -71 req 02 val 2600 [ 305.533454][ T5868] pwc: recv_control_msg error -71 req 02 val 2900 [ 305.541123][ T5868] pwc: recv_control_msg error -71 req 02 val 2800 [ 305.548262][ T5868] pwc: recv_control_msg error -71 req 04 val 1100 [ 305.555867][ T5868] pwc: recv_control_msg error -71 req 04 val 1200 [ 305.564039][ T5868] pwc: Registered as video103. [ 305.571850][ T5868] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 305.614532][ T5868] usb 2-1: USB disconnect, device number 92 [ 305.655665][ T5907] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 305.826720][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 305.832914][ T5907] usb 4-1: no configurations [ 305.837720][ T5907] usb 4-1: can't read configurations, error -22 [ 305.921141][ T8994] syzkaller1: entered promiscuous mode [ 305.927096][ T8994] syzkaller1: entered allmulticast mode [ 305.935880][ T8994] FAULT_INJECTION: forcing a failure. [ 305.935880][ T8994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.949036][ T8994] CPU: 1 UID: 0 PID: 8994 Comm: syz.0.1143 Not tainted syzkaller #0 PREEMPT(full) [ 305.949053][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 305.949063][ T8994] Call Trace: [ 305.949072][ T8994] [ 305.949078][ T8994] dump_stack_lvl+0x189/0x250 [ 305.949095][ T8994] ? __pfx____ratelimit+0x10/0x10 [ 305.949109][ T8994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.949124][ T8994] ? __pfx__printk+0x10/0x10 [ 305.949136][ T8994] ? __might_fault+0xb0/0x130 [ 305.949154][ T8994] should_fail_ex+0x414/0x560 [ 305.949171][ T8994] _copy_from_iter+0x1de/0x1790 [ 305.949182][ T8994] ? skb_set_owner_w+0x26c/0x3e0 [ 305.949198][ T8994] ? sock_alloc_send_pskb+0x86b/0x980 [ 305.949214][ T8994] ? __pfx__copy_from_iter+0x10/0x10 [ 305.949229][ T8994] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 305.949244][ T8994] skb_copy_datagram_from_iter+0xf5/0x720 [ 305.949259][ T8994] ? __lock_acquire+0xab9/0xd20 [ 305.949270][ T8994] ? skb_put+0x11b/0x210 [ 305.949283][ T8994] tun_get_user+0x1691/0x3e90 [ 305.949303][ T8994] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 305.949316][ T8994] ? aa_file_perm+0x44c/0x1540 [ 305.949328][ T8994] ? __pfx_tun_get_user+0x10/0x10 [ 305.949342][ T8994] ? save_netdev_trace_buffer+0x4a0/0x5a0 [ 305.949359][ T8994] ? ref_tracker_alloc+0x318/0x460 [ 305.949372][ T8994] ? tun_get+0x157/0x2f0 [ 305.949381][ T8994] ? tun_chr_write_iter+0x60/0x210 [ 305.949391][ T8994] ? ksys_write+0x145/0x250 [ 305.949400][ T8994] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 305.949417][ T8994] ? tun_get+0x1c/0x2f0 [ 305.949429][ T8994] ? tun_get+0x1c/0x2f0 [ 305.949439][ T8994] ? tun_get+0x1c/0x2f0 [ 305.949451][ T8994] tun_chr_write_iter+0x113/0x210 [ 305.949463][ T8994] vfs_write+0x5c9/0xb30 [ 305.949475][ T8994] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 305.949486][ T8994] ? __pfx_vfs_write+0x10/0x10 [ 305.949506][ T8994] ? __fget_files+0x2a/0x420 [ 305.949522][ T8994] ksys_write+0x145/0x250 [ 305.949533][ T8994] ? __pfx_ksys_write+0x10/0x10 [ 305.949543][ T8994] ? do_syscall_64+0xbe/0xfa0 [ 305.949562][ T8994] do_syscall_64+0xfa/0xfa0 [ 305.949575][ T8994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.949585][ T8994] ? clear_bhb_loop+0x60/0xb0 [ 305.949597][ T8994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.949607][ T8994] RIP: 0033:0x7f149c18f6c9 [ 305.949617][ T8994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.949626][ T8994] RSP: 002b:00007f149d0c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 305.949638][ T8994] RAX: ffffffffffffffda RBX: 00007f149c3e5fa0 RCX: 00007f149c18f6c9 [ 305.949646][ T8994] RDX: 0000000000000022 RSI: 0000200000000840 RDI: 0000000000000003 [ 305.949652][ T8994] RBP: 00007f149d0c2090 R08: 0000000000000000 R09: 0000000000000000 [ 305.949659][ T8994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.949665][ T8994] R13: 00007f149c3e6038 R14: 00007f149c3e5fa0 R15: 00007ffd2d957e38 [ 305.949681][ T8994] [ 305.976525][ T5907] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 306.365169][ T9001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.374064][ T9001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.425864][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 306.432802][ T5907] usb 4-1: no configurations [ 306.437574][ T5907] usb 4-1: can't read configurations, error -22 [ 306.444270][ T5907] usb usb4-port1: attempt power cycle [ 306.521870][ T778] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 306.583114][ T43] cp210x 3-1:0.1: failed to get vendor val 0x000e size 3: -71 [ 306.593769][ T43] cp210x 3-1:0.1: failed to get vendor val 0x3711 size 2: -71 [ 306.603008][ T43] cp210x 3-1:0.1: GPIO initialisation failed: -71 [ 306.613925][ T43] usb 3-1: cp210x converter now attached to ttyUSB0 [ 306.630103][ T43] usb 3-1: USB disconnect, device number 119 [ 306.653397][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 306.676248][ T43] cp210x 3-1:0.1: device disconnected [ 306.691056][ T778] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 306.707030][ T778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.719129][ T778] usb 2-1: Product: syz [ 306.723329][ T778] usb 2-1: Manufacturer: syz [ 306.728571][ T778] usb 2-1: SerialNumber: syz [ 306.743819][ T778] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 306.764474][ T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 306.810762][ T5907] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 306.832671][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 306.849382][ T5907] usb 4-1: no configurations [ 306.857794][ T5907] usb 4-1: can't read configurations, error -22 [ 307.013753][ T5907] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 307.035794][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 307.041755][ T5907] usb 4-1: no configurations [ 307.046471][ T5907] usb 4-1: can't read configurations, error -22 [ 307.053243][ T5907] usb usb4-port1: unable to enumerate USB device [ 307.616374][ T9020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.626055][ T9020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.759808][ T43] usb 2-1: USB disconnect, device number 93 [ 307.997583][ T5830] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 308.136656][ T5830] usb 3-1: device descriptor read/64, error -71 [ 308.352231][ T24] usb 2-1: Service connection timeout for: 257 [ 308.359630][ T24] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 308.368465][ T24] ath9k_htc: Failed to initialize the device [ 308.375300][ T43] usb 2-1: ath9k_htc: USB layer deinitialized [ 308.404192][ T5830] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 308.418386][ T9029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.429197][ T9029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.554426][ T5830] usb 3-1: device descriptor read/64, error -71 [ 308.672490][ T5830] usb usb3-port1: attempt power cycle [ 308.703940][ T43] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 308.877053][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 308.885784][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.899716][ T43] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 308.915176][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.925912][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 308.934668][ T43] usb 2-1: SerialNumber: syz [ 308.949176][ T43] hub 2-1:1.0: bad descriptor, ignoring hub [ 308.962419][ T43] hub 2-1:1.0: probe with driver hub failed with error -5 [ 308.971378][ T43] usb 2-1: bad CDC descriptors [ 309.066970][ T5830] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 309.088985][ T5830] usb 3-1: device descriptor read/8, error -71 [ 309.293305][ T24] usb 2-1: USB disconnect, device number 94 [ 309.355699][ T5830] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 309.399115][ T5830] usb 3-1: device descriptor read/8, error -71 [ 309.517049][ T5830] usb usb3-port1: unable to enumerate USB device [ 309.748938][ T9045] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 309.756079][ T9045] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 309.763300][ T9045] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 309.770008][ T9045] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 309.777346][ T9045] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 309.784161][ T9045] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 309.790875][ T9045] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 309.833690][ T9045] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 309.858882][ T9045] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 309.876481][ T9045] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 309.893730][ T9045] comedi comedi3: 8255: I/O port conflict (0xd4,4) [ 309.905156][ T9045] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 310.411832][ T9062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1166'. [ 310.500019][ T24] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 310.671080][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 310.680149][ T24] usb 4-1: no configurations [ 310.687906][ T24] usb 4-1: can't read configurations, error -22 [ 310.846512][ T24] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 311.023393][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 311.029673][ T24] usb 4-1: no configurations [ 311.036915][ T24] usb 4-1: can't read configurations, error -22 [ 311.047393][ T24] usb usb4-port1: attempt power cycle [ 311.098814][ T5830] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 311.261068][ T5830] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 311.269691][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.284664][ T5830] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 311.294292][ T5830] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 311.305024][ T5830] usb 2-1: Manufacturer: syz [ 311.313596][ T5830] usb 2-1: config 0 descriptor?? [ 311.399984][ T5830] rc_core: IR keymap rc-hauppauge not found [ 311.406099][ T5830] Registered IR keymap rc-empty [ 311.411406][ T5907] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 311.419849][ T24] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 311.421143][ T5830] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 311.448417][ T5830] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26 [ 311.463063][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 311.506580][ T24] usb 4-1: no configurations [ 311.511316][ T24] usb 4-1: can't read configurations, error -22 [ 311.554809][ T5830] usb 2-1: USB disconnect, device number 95 [ 311.612089][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 311.626586][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 311.655956][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 311.671938][ T5907] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 311.683112][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.692432][ T5907] usb 3-1: Product: syz [ 311.696950][ T5907] usb 3-1: Manufacturer: syz [ 311.701907][ T5907] usb 3-1: SerialNumber: syz [ 311.718186][ T5907] usb 3-1: config 0 descriptor?? [ 311.727132][ T5907] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 311.737303][ T5907] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 311.784181][ T24] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 311.805004][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 311.810678][ T24] usb 4-1: no configurations [ 311.816320][ T24] usb 4-1: can't read configurations, error -22 [ 311.823038][ T24] usb usb4-port1: unable to enumerate USB device [ 311.864039][ T9086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.872996][ T9086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.388120][ T5907] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 312.390083][ T9073] netlink: 'syz.2.1171': attribute type 21 has an invalid length. [ 312.403561][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'. [ 312.416857][ T5907] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 312.463221][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.471962][ T5830] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 312.473304][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.640779][ T5830] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 312.652578][ T5830] usb 2-1: config 0 interface 0 has no altsetting 0 [ 312.659387][ T5830] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 312.669064][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.679456][ T5830] usb 2-1: config 0 descriptor?? [ 312.685474][ T9092] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 313.071360][ T5907] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 313.078994][ T5907] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 313.141666][ T5830] logitech 0003:046D:C50C.0026: hidraw0: USB HID v1.01 Device [HID 046d:c50c] on usb-dummy_hcd.1-1/input0 [ 313.142502][ T9099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.164651][ T9099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.350815][ T9092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.363783][ T9092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.376582][ T5830] usb 2-1: USB disconnect, device number 96 [ 313.879198][ T24] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 314.233022][ T24] usb 4-1: device descriptor read/64, error -71 [ 314.279127][ T5907] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 314.294590][ T5907] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 314.302485][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.311572][ T5907] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 314.328074][ T5907] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 314.328826][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.496413][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.510471][ T24] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 314.518332][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.671155][ T24] usb 4-1: device descriptor read/64, error -71 [ 314.981278][ T24] usb usb4-port1: attempt power cycle [ 315.365731][ T24] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 315.397422][ T24] usb 4-1: device descriptor read/8, error -71 [ 315.419115][ T778] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 315.569021][ T778] usb 2-1: device descriptor read/64, error -71 [ 315.675971][ T24] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 315.706261][ T9125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.718668][ T9125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.730261][ T24] usb 4-1: device descriptor read/8, error -71 [ 315.825462][ T778] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 315.847768][ T24] usb usb4-port1: unable to enumerate USB device [ 315.967897][ T778] usb 2-1: device descriptor read/64, error -71 [ 316.083520][ T778] usb usb2-port1: attempt power cycle [ 316.423482][ T9129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.437387][ T9129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.445774][ T778] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 316.479883][ T778] usb 2-1: device descriptor read/8, error -71 [ 316.548535][ T9133] FAULT_INJECTION: forcing a failure. [ 316.548535][ T9133] name failslab, interval 1, probability 0, space 0, times 0 [ 316.561509][ T9133] CPU: 0 UID: 0 PID: 9133 Comm: syz.0.1191 Not tainted syzkaller #0 PREEMPT(full) [ 316.561526][ T9133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 316.561539][ T9133] Call Trace: [ 316.561547][ T9133] [ 316.561553][ T9133] dump_stack_lvl+0x189/0x250 [ 316.561570][ T9133] ? __pfx____ratelimit+0x10/0x10 [ 316.561584][ T9133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.561596][ T9133] ? __pfx__printk+0x10/0x10 [ 316.561611][ T9133] ? __pfx___might_resched+0x10/0x10 [ 316.561625][ T9133] should_fail_ex+0x414/0x560 [ 316.561642][ T9133] should_failslab+0xa8/0x100 [ 316.561657][ T9133] kmem_cache_alloc_noprof+0x88/0x700 [ 316.561671][ T9133] ? ptlock_alloc+0x20/0x70 [ 316.561685][ T9133] ptlock_alloc+0x20/0x70 [ 316.561696][ T9133] pte_alloc_one+0x7a/0x370 [ 316.561707][ T9133] ? __pte_alloc+0x1d/0x1a0 [ 316.561721][ T9133] __pte_alloc+0x25/0x1a0 [ 316.561737][ T9133] walk_pgd_range+0xfb8/0x1d30 [ 316.561760][ T9133] ? __pfx_guard_install_set_pte+0x10/0x10 [ 316.561774][ T9133] ? __pfx_guard_install_set_pte+0x10/0x10 [ 316.561790][ T9133] ? __pfx_guard_install_set_pte+0x10/0x10 [ 316.561803][ T9133] ? __pfx_guard_install_set_pte+0x10/0x10 [ 316.561820][ T9133] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 316.561834][ T9133] ? __pfx_walk_pgd_range+0x10/0x10 [ 316.561851][ T9133] __walk_page_range+0x14c/0x710 [ 316.561864][ T9133] ? find_vma+0xe7/0x160 [ 316.561876][ T9133] ? __pfx_find_vma+0x10/0x10 [ 316.561892][ T9133] walk_page_range_mm+0x454/0x660 [ 316.561901][ T9133] ? irqentry_exit+0x5ba/0x640 [ 316.561919][ T9133] ? __pfx_walk_page_range_mm+0x10/0x10 [ 316.561938][ T9133] madvise_vma_behavior+0x1274/0x3980 [ 316.561956][ T9133] ? __pfx_process_measurement+0x10/0x10 [ 316.561971][ T9133] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 316.561994][ T9133] ? __lock_acquire+0xab9/0xd20 [ 316.562013][ T9133] ? __lock_acquire+0xab9/0xd20 [ 316.562051][ T9133] ? mas_prev_slot+0xb31/0xbb0 [ 316.562074][ T9133] ? find_vma_prev+0xe3/0x150 [ 316.562085][ T9133] ? __pfx_find_vma_prev+0x10/0x10 [ 316.562101][ T9133] ? __sanitizer_cov_trace_switch+0x37/0x130 [ 316.562113][ T9133] ? _parse_integer_limit+0x1ae/0x1f0 [ 316.562131][ T9133] madvise_walk_vmas+0x51c/0xa30 [ 316.562151][ T9133] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 316.562174][ T9133] ? blk_start_plug+0x6f/0x1b0 [ 316.562189][ T9133] madvise_do_behavior+0x38e/0x550 [ 316.562206][ T9133] ? __pfx_madvise_do_behavior+0x10/0x10 [ 316.562224][ T9133] ? down_read+0x1ad/0x2e0 [ 316.562242][ T9133] do_madvise+0x1bc/0x270 [ 316.562256][ T9133] ? __pfx_do_madvise+0x10/0x10 [ 316.562281][ T9133] ? ksys_write+0x22a/0x250 [ 316.562292][ T9133] ? __pfx_ksys_write+0x10/0x10 [ 316.562304][ T9133] __x64_sys_madvise+0xa7/0xc0 [ 316.562318][ T9133] do_syscall_64+0xfa/0xfa0 [ 316.562332][ T9133] ? irqentry_exit+0x10f/0x640 [ 316.562343][ T9133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.562353][ T9133] ? clear_bhb_loop+0x60/0xb0 [ 316.562365][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.562375][ T9133] RIP: 0033:0x7f149c18f6c9 [ 316.562385][ T9133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.562394][ T9133] RSP: 002b:00007f149d0a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 316.562406][ T9133] RAX: ffffffffffffffda RBX: 00007f149c3e6090 RCX: 00007f149c18f6c9 [ 316.562414][ T9133] RDX: 0000000000000066 RSI: 0000000000600000 RDI: 0000200000000000 [ 316.562420][ T9133] RBP: 00007f149d0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 316.562427][ T9133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.562434][ T9133] R13: 00007f149c3e6128 R14: 00007f149c3e6090 R15: 00007ffd2d957e38 [ 316.562459][ T9133] [ 316.928047][ T778] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 316.949018][ T778] usb 2-1: device descriptor read/8, error -71 [ 317.021406][ T9138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.032074][ T9138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.066251][ T778] usb usb2-port1: unable to enumerate USB device [ 317.527260][ T9147] syzkaller1: entered promiscuous mode [ 317.532758][ T9147] syzkaller1: entered allmulticast mode [ 317.767640][ T9156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.802684][ T9156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.857383][ T9156] netlink: 'syz.2.1198': attribute type 1 has an invalid length. [ 317.865186][ T9156] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1198'. [ 317.958861][ T9168] FAULT_INJECTION: forcing a failure. [ 317.958861][ T9168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.984891][ T9168] CPU: 1 UID: 0 PID: 9168 Comm: syz.1.1202 Not tainted syzkaller #0 PREEMPT(full) [ 317.984912][ T9168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.984921][ T9168] Call Trace: [ 317.984926][ T9168] [ 317.984933][ T9168] dump_stack_lvl+0x189/0x250 [ 317.984954][ T9168] ? __pfx____ratelimit+0x10/0x10 [ 317.984972][ T9168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.984989][ T9168] ? __pfx__printk+0x10/0x10 [ 317.985004][ T9168] ? __might_fault+0xb0/0x130 [ 317.985030][ T9168] should_fail_ex+0x414/0x560 [ 317.985056][ T9168] _copy_from_iter+0x1de/0x1790 [ 317.985076][ T9168] ? policy_nodemask+0x27c/0x720 [ 317.985100][ T9168] ? __pfx__copy_from_iter+0x10/0x10 [ 317.985112][ T9168] ? __sk_mem_raise_allocated+0x708/0x1280 [ 317.985133][ T9168] ? set_page_refcounted+0xa0/0x1e0 [ 317.985156][ T9168] ? __sk_mem_schedule+0x7f/0xf0 [ 317.985173][ T9168] ? skb_page_frag_refill+0x199/0x320 [ 317.985196][ T9168] mptcp_sendmsg+0xd79/0x19b0 [ 317.985240][ T9168] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 317.985258][ T9168] ? sock_rps_record_flow+0x19/0x410 [ 317.985278][ T9168] ? inet_sendmsg+0x2f4/0x370 [ 317.985294][ T9168] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 317.985314][ T9168] __sock_sendmsg+0x19c/0x270 [ 317.985330][ T9168] sock_write_iter+0x279/0x360 [ 317.985353][ T9168] ? __pfx_sock_write_iter+0x10/0x10 [ 317.985392][ T9168] do_iter_readv_writev+0x623/0x8c0 [ 317.985414][ T9168] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 317.985426][ T9168] ? common_file_perm+0x1b5/0x230 [ 317.985447][ T9168] ? bpf_lsm_file_permission+0x9/0x20 [ 317.985468][ T9168] ? security_file_permission+0x75/0x290 [ 317.985491][ T9168] ? rw_verify_area+0x255/0x4d0 [ 317.985517][ T9168] vfs_writev+0x31a/0x960 [ 317.985537][ T9168] ? __lock_acquire+0xab9/0xd20 [ 317.985554][ T9168] ? __pfx_vfs_writev+0x10/0x10 [ 317.985583][ T9168] ? __fget_files+0x2a/0x420 [ 317.985602][ T9168] ? __fget_files+0x3a0/0x420 [ 317.985616][ T9168] ? __fget_files+0x2a/0x420 [ 317.985638][ T9168] do_writev+0x14d/0x2d0 [ 317.985657][ T9168] ? __pfx_do_writev+0x10/0x10 [ 317.985679][ T9168] ? do_syscall_64+0xbe/0xfa0 [ 317.985700][ T9168] do_syscall_64+0xfa/0xfa0 [ 317.985729][ T9168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.985745][ T9168] ? clear_bhb_loop+0x60/0xb0 [ 317.985765][ T9168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.985782][ T9168] RIP: 0033:0x7f3340d8f6c9 [ 317.985797][ T9168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.985810][ T9168] RSP: 002b:00007f3341cad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 317.985831][ T9168] RAX: ffffffffffffffda RBX: 00007f3340fe5fa0 RCX: 00007f3340d8f6c9 [ 317.985844][ T9168] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003 [ 317.985856][ T9168] RBP: 00007f3341cad090 R08: 0000000000000000 R09: 0000000000000000 [ 317.985867][ T9168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.985878][ T9168] R13: 00007f3340fe6038 R14: 00007f3340fe5fa0 R15: 00007ffe3238f808 [ 317.985910][ T9168] [ 318.552390][ T5907] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 318.591314][ T9185] kvm: emulating exchange as write [ 318.654809][ T9189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.668057][ T9189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.704229][ T5907] usb 4-1: device descriptor read/64, error -71 [ 318.750118][ T9193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.758936][ T9193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.980160][ T5907] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 318.989584][ T9193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.999842][ T9193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.045502][ T9196] FAULT_INJECTION: forcing a failure. [ 319.045502][ T9196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.058958][ T9196] CPU: 0 UID: 0 PID: 9196 Comm: syz.1.1212 Not tainted syzkaller #0 PREEMPT(full) [ 319.058985][ T9196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.058997][ T9196] Call Trace: [ 319.059006][ T9196] [ 319.059015][ T9196] dump_stack_lvl+0x189/0x250 [ 319.059042][ T9196] ? __pfx____ratelimit+0x10/0x10 [ 319.059064][ T9196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.059086][ T9196] ? __pfx__printk+0x10/0x10 [ 319.059105][ T9196] ? __might_fault+0xb0/0x130 [ 319.059137][ T9196] should_fail_ex+0x414/0x560 [ 319.059165][ T9196] _copy_from_user+0x2d/0xb0 [ 319.059187][ T9196] __ia32_sys_rt_sigreturn+0x314/0x860 [ 319.059220][ T9196] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 319.059273][ T9196] ? __task_pid_nr_ns+0x28/0x490 [ 319.059306][ T9196] ? do_syscall_64+0xbe/0xfa0 [ 319.059333][ T9196] do_syscall_64+0xfa/0xfa0 [ 319.059357][ T9196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.059375][ T9196] ? clear_bhb_loop+0x60/0xb0 [ 319.059397][ T9196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.059414][ T9196] RIP: 0033:0x7f3340d2b779 [ 319.059431][ T9196] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 319.059447][ T9196] RSP: 002b:00007f3341caca80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 319.059467][ T9196] RAX: ffffffffffffffda RBX: 00007f3340fe5fa0 RCX: 00007f3340d2b779 [ 319.059481][ T9196] RDX: 00007f3341caca80 RSI: 00007f3341cacbb0 RDI: 0000000000000021 [ 319.059493][ T9196] RBP: 00007f3341cad090 R08: 0000000000000000 R09: 0000000000000000 [ 319.059505][ T9196] R10: 1000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 319.059517][ T9196] R13: 00007f3340fe6038 R14: 00007f3340fe5fa0 R15: 00007ffe3238f808 [ 319.059546][ T9196] [ 319.289550][ T9200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1214'. [ 319.302369][ T5907] usb 4-1: device descriptor read/64, error -71 [ 319.419033][ T5907] usb usb4-port1: attempt power cycle [ 319.463070][ T30] kauditd_printk_skb: 217 callbacks suppressed [ 319.463089][ T30] audit: type=1804 audit(1762514551.310:308): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1215" name="/newroot/268/file0" dev="fuse" ino=1 res=1 errno=0 [ 319.463891][ T9205] FAULT_INJECTION: forcing a failure. [ 319.463891][ T9205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.505828][ T9205] CPU: 0 UID: 0 PID: 9205 Comm: syz.2.1215 Not tainted syzkaller #0 PREEMPT(full) [ 319.505854][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.505865][ T9205] Call Trace: [ 319.505873][ T9205] [ 319.505882][ T9205] dump_stack_lvl+0x189/0x250 [ 319.505909][ T9205] ? __pfx____ratelimit+0x10/0x10 [ 319.505932][ T9205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.505955][ T9205] ? __pfx__printk+0x10/0x10 [ 319.505985][ T9205] should_fail_ex+0x414/0x560 [ 319.506015][ T9205] _copy_to_user+0x31/0xb0 [ 319.506039][ T9205] simple_read_from_buffer+0xe1/0x170 [ 319.506064][ T9205] proc_fail_nth_read+0x1b3/0x220 [ 319.506093][ T9205] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.506122][ T9205] ? rw_verify_area+0x2a6/0x4d0 [ 319.506145][ T9205] ? __lock_acquire+0xab9/0xd20 [ 319.506163][ T9205] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.506189][ T9205] vfs_read+0x200/0xa30 [ 319.506212][ T9205] ? fdget_pos+0x247/0x320 [ 319.506236][ T9205] ? __pfx___mutex_lock+0x10/0x10 [ 319.506259][ T9205] ? __pfx_vfs_read+0x10/0x10 [ 319.506286][ T9205] ? __fget_files+0x2a/0x420 [ 319.506310][ T9205] ? __fget_files+0x3a0/0x420 [ 319.506329][ T9205] ? __fget_files+0x2a/0x420 [ 319.506353][ T9205] ksys_read+0x145/0x250 [ 319.506367][ T9205] ? __fget_files+0x2a/0x420 [ 319.506387][ T9205] ? __pfx_ksys_read+0x10/0x10 [ 319.506403][ T9205] ? __secure_computing+0xe2/0x2a0 [ 319.506435][ T9205] do_syscall_64+0xfa/0xfa0 [ 319.506460][ T9205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.506477][ T9205] ? clear_bhb_loop+0x60/0xb0 [ 319.506499][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.506521][ T9205] RIP: 0033:0x7efeb2d8e0dc [ 319.506537][ T9205] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 319.506552][ T9205] RSP: 002b:00007efeb3c54030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.506569][ T9205] RAX: ffffffffffffffda RBX: 00007efeb2fe5fa0 RCX: 00007efeb2d8e0dc [ 319.506582][ T9205] RDX: 000000000000000f RSI: 00007efeb3c540a0 RDI: 0000000000000001 [ 319.506595][ T9205] RBP: 00007efeb3c54090 R08: 0000000000000000 R09: 0000000000000000 [ 319.506607][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.506616][ T9205] R13: 00007efeb2fe6038 R14: 00007efeb2fe5fa0 R15: 00007ffcca56d3a8 [ 319.506638][ T9205] [ 319.776499][ T5830] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 319.814334][ T5907] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 319.818222][ T9208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.834327][ T9208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.837773][ T9210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.850696][ T5907] usb 4-1: device descriptor read/8, error -71 [ 319.852815][ T9210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.869439][ T9210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.879432][ T9210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.890160][ T9210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.899030][ T9210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.944915][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 319.955998][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.966377][ T5830] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 319.975613][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.986454][ T5830] usb 2-1: config 0 descriptor?? [ 320.113709][ T5907] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 320.135823][ T5907] usb 4-1: device descriptor read/8, error -71 [ 320.233852][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.241730][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.253895][ T5907] usb usb4-port1: unable to enumerate USB device [ 320.310584][ T5830] usbhid 2-1:0.0: can't add hid device: -71 [ 320.317856][ T5830] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 320.328236][ T5830] usb 2-1: USB disconnect, device number 101 [ 320.519039][ T9218] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1220'. [ 320.582269][ T9220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.598026][ T9220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.711585][ T9223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.721358][ T9223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.903914][ T9226] can: request_module (can-proto-3) failed. [ 320.936236][ T9226] can: request_module (can-proto-3) failed. [ 321.215395][ T9240] ALSA: seq fatal error: cannot create timer (-19) [ 321.291656][ T9243] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 321.322290][ T5907] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 321.484805][ T5907] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 321.493460][ T5907] usb 2-1: config 0 has no interface number 0 [ 321.499882][ T5907] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 321.510338][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.531576][ T5907] usb 2-1: config 0 descriptor?? [ 321.544106][ T5907] cp210x 2-1:0.1: cp210x converter detected [ 321.719025][ T9255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.727970][ T9255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.931718][ T24] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 322.110569][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 322.125116][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.137213][ T24] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 322.149151][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.162745][ T24] usb 4-1: config 0 descriptor?? [ 322.207374][ T9265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.218211][ T9265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.330555][ T9267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.340368][ T9267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.545188][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.563568][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.431131][ T9279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.448827][ T9279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.471886][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 323.485902][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 323.501295][ T9279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1240'. [ 323.527523][ T24] usb 4-1: USB disconnect, device number 114 [ 323.586738][ T9283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1240'. [ 323.709015][ T5835] udevd[5835]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 324.237842][ T9305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.246965][ T9305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.321132][ T5907] cp210x 2-1:0.1: failed to get vendor val 0x370b size 1: -71 [ 324.359085][ T5907] cp210x 2-1:0.1: querying part number failed [ 324.379689][ T5907] usb 2-1: cp210x converter now attached to ttyUSB0 [ 324.390454][ T5907] usb 2-1: USB disconnect, device number 102 [ 324.410320][ T5907] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 324.421531][ T5907] cp210x 2-1:0.1: device disconnected [ 324.427231][ T5830] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 324.439759][ T1165] kernel read not supported for file /vcs (pid: 1165 comm: kworker/0:2) [ 324.480146][ T9311] FAULT_INJECTION: forcing a failure. [ 324.480146][ T9311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.494008][ T1165] IPVS: starting estimator thread 0... [ 324.505772][ T9311] CPU: 0 UID: 0 PID: 9311 Comm: syz.0.1248 Not tainted syzkaller #0 PREEMPT(full) [ 324.505800][ T9311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 324.505811][ T9311] Call Trace: [ 324.505820][ T9311] [ 324.505828][ T9311] dump_stack_lvl+0x189/0x250 [ 324.505857][ T9311] ? __pfx____ratelimit+0x10/0x10 [ 324.505881][ T9311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.505903][ T9311] ? __pfx__printk+0x10/0x10 [ 324.505925][ T9311] ? __might_fault+0xb0/0x130 [ 324.505957][ T9311] should_fail_ex+0x414/0x560 [ 324.505988][ T9311] _copy_from_iter+0x1de/0x1790 [ 324.506013][ T9311] ? rcu_is_watching+0x15/0xb0 [ 324.506042][ T9311] ? __pfx__copy_from_iter+0x10/0x10 [ 324.506071][ T9311] ? __build_skb_around+0x262/0x3f0 [ 324.506097][ T9311] ? netlink_sendmsg+0x642/0xb30 [ 324.506119][ T9311] ? skb_put+0x11b/0x210 [ 324.506145][ T9311] netlink_sendmsg+0x6b2/0xb30 [ 324.506177][ T9311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.506204][ T9311] ? aa_sock_msg_perm+0xf1/0x1d0 [ 324.506228][ T9311] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 324.506252][ T9311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.506276][ T9311] __sock_sendmsg+0x21c/0x270 [ 324.506299][ T9311] ____sys_sendmsg+0x505/0x830 [ 324.506328][ T9311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 324.506362][ T9311] ? import_iovec+0x74/0xa0 [ 324.506386][ T9311] ___sys_sendmsg+0x21f/0x2a0 [ 324.506413][ T9311] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.506473][ T9311] ? __fget_files+0x2a/0x420 [ 324.506492][ T9311] ? __fget_files+0x3a0/0x420 [ 324.506522][ T9311] __x64_sys_sendmsg+0x19b/0x260 [ 324.506548][ T9311] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 324.506581][ T9311] ? __pfx_ksys_write+0x10/0x10 [ 324.506603][ T9311] ? do_syscall_64+0xbe/0xfa0 [ 324.506630][ T9311] do_syscall_64+0xfa/0xfa0 [ 324.506654][ T9311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.506672][ T9311] ? clear_bhb_loop+0x60/0xb0 [ 324.506694][ T9311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.506712][ T9311] RIP: 0033:0x7f149c18f6c9 [ 324.506730][ T9311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.506745][ T9311] RSP: 002b:00007f149d0c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.506765][ T9311] RAX: ffffffffffffffda RBX: 00007f149c3e5fa0 RCX: 00007f149c18f6c9 [ 324.506780][ T9311] RDX: 9590f6cc3ea31502 RSI: 0000200000000000 RDI: 0000000000000004 [ 324.506793][ T9311] RBP: 00007f149d0c2090 R08: 0000000000000000 R09: 0000000000000000 [ 324.506805][ T9311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.506817][ T9311] R13: 00007f149c3e6038 R14: 00007f149c3e5fa0 R15: 00007ffd2d957e38 [ 324.506847][ T9311] [ 324.835411][ T9316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.841353][ T9312] IPVS: using max 34 ests per chain, 81600 per kthread [ 324.848972][ T9316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.874233][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 324.883530][ T5830] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 324.891919][ T5830] usb 4-1: config 179 has no interface number 0 [ 324.898428][ T5830] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 324.910120][ T5830] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 324.923001][ T5830] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 324.934275][ T5830] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 324.945831][ T5830] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 324.959494][ T5830] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 324.968606][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.988783][ T9303] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 325.047038][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.240445][ T5830] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input27 [ 325.249281][ T9330] syz.2.1255 (9330): /proc/9329/oom_adj is deprecated, please use /proc/9329/oom_score_adj instead. [ 325.593873][ T24] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 325.653134][ T5875] usb 4-1: USB disconnect, device number 115 [ 325.653155][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 325.668156][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 325.749575][ T24] usb 2-1: device descriptor read/64, error -71 [ 325.828411][ T9343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.841609][ T9343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.859075][ T9343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.868253][ T9343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.005952][ T24] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 326.085941][ T9356] FAT-fs (nullb0): bogus number of reserved sectors [ 326.094265][ T9356] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 326.105604][ T9356] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1262'. [ 326.155817][ T24] usb 2-1: device descriptor read/64, error -71 [ 326.273859][ T24] usb usb2-port1: attempt power cycle [ 326.487199][ T5830] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 326.647811][ T24] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 326.658435][ T5830] usb 4-1: Using ep0 maxpacket: 32 [ 326.667703][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.670669][ T24] usb 2-1: device descriptor read/8, error -71 [ 326.679051][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.697000][ T5830] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 326.709648][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.721897][ T5830] usb 4-1: config 0 descriptor?? [ 326.734930][ T9369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.737195][ T5830] hub 4-1:0.0: USB hub found [ 326.748551][ T9369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.950394][ T24] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 326.969145][ T5830] hub 4-1:0.0: 1 port detected [ 326.983512][ T24] usb 2-1: device descriptor read/8, error -71 [ 327.007181][ T9371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.016549][ T9371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.061712][ T9371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.072560][ T9371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.107964][ T24] usb usb2-port1: unable to enumerate USB device [ 327.362327][ T9374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.371623][ T9374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.386311][ T9374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.395255][ T9374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.630310][ T5830] hub 4-1:0.0: activate --> -90 [ 327.667193][ T9376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.680136][ T9376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.980745][ T9378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.990075][ T9378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.278668][ T5830] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 328.287508][ T5830] usb 4-1-port1: connect-debounce failed [ 328.554517][ T1165] usb 4-1: USB disconnect, device number 116 [ 328.568150][ T9390] netlink: 'syz.1.1276': attribute type 4 has an invalid length. [ 328.589892][ T9390] netlink: 'syz.1.1276': attribute type 27 has an invalid length. [ 328.600761][ T9390] netlink: 'syz.1.1276': attribute type 1 has an invalid length. [ 328.610000][ T9390] netlink: 3577 bytes leftover after parsing attributes in process `syz.1.1276'. [ 328.683033][ T5830] hid_parser_main: 5 callbacks suppressed [ 328.683058][ T5830] hid-generic 0006:0004:00A3.0027: unknown main item tag 0x0 [ 328.712026][ T5830] hid-generic 0006:0004:00A3.0027: unknown main item tag 0x0 [ 328.720001][ T5830] hid-generic 0006:0004:00A3.0027: unknown main item tag 0x0 [ 328.727792][ T5830] hid-generic 0006:0004:00A3.0027: unknown main item tag 0x0 [ 328.738466][ T5830] hid-generic 0006:0004:00A3.0027: unknown main item tag 0x0 [ 328.754384][ T5830] hid-generic 0006:0004:00A3.0027: unknown main item tag 0x0 [ 328.762049][ T5830] hid-generic 0006:0004:00A3.0027: unknown main item tag 0x0 [ 328.781150][ T5830] hid-generic 0006:0004:00A3.0027: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 328.866136][ T9401] fido_id[9401]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 328.977292][ T5830] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 329.146500][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 329.168886][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.193231][ T5830] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 329.215743][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.236190][ T5830] usb 2-1: config 0 descriptor?? [ 329.451494][ T24] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 329.455285][ T9420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.470367][ T9420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.547040][ T5830] usbhid 2-1:0.0: can't add hid device: -71 [ 329.553335][ T5830] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 329.576309][ T5830] usb 2-1: USB disconnect, device number 107 [ 329.624320][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 329.633652][ T24] usb 4-1: config 0 has no interface number 0 [ 329.639873][ T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 329.650558][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.660763][ T24] usb 4-1: config 0 descriptor?? [ 329.668872][ T24] cp210x 4-1:0.1: cp210x converter detected [ 330.787145][ T9455] syz.1.1296 (9455): drop_caches: 2 [ 330.955995][ T9464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.966715][ T9464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.192520][ T5875] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 331.331590][ T5875] usb 2-1: device descriptor read/64, error -71 [ 331.588164][ T5875] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 331.727428][ T5875] usb 2-1: device descriptor read/64, error -71 [ 331.741069][ T9469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.754992][ T9469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.767882][ T9469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.777745][ T9469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.787184][ T9469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.796261][ T9469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.866597][ T5875] usb usb2-port1: attempt power cycle [ 332.093133][ T9473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.102313][ T9473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.229804][ T5875] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 332.251818][ T5875] usb 2-1: device descriptor read/8, error -71 [ 332.426348][ T24] cp210x 4-1:0.1: failed to get vendor val 0x370b size 1: -71 [ 332.435749][ T24] cp210x 4-1:0.1: querying part number failed [ 332.458553][ T24] usb 4-1: cp210x converter now attached to ttyUSB0 [ 332.472096][ T24] usb 4-1: USB disconnect, device number 117 [ 332.492589][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 332.502471][ T24] cp210x 4-1:0.1: device disconnected [ 332.509368][ T5875] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 332.534227][ T5875] usb 2-1: device descriptor read/8, error -71 [ 332.612132][ T9480] netlink: 239 bytes leftover after parsing attributes in process `syz.2.1306'. [ 332.658170][ T5875] usb usb2-port1: unable to enumerate USB device [ 332.894102][ T24] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 332.950117][ T9494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1310'. [ 332.973760][ T9493] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 333.002809][ T9496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.011615][ T9496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.110788][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 333.178747][ T24] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 333.186971][ T24] usb 4-1: config 0 has no interface number 0 [ 333.198543][ T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 333.208606][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.216768][ T24] usb 4-1: Product: syz [ 333.220996][ T24] usb 4-1: Manufacturer: syz [ 333.225844][ T24] usb 4-1: SerialNumber: syz [ 333.233511][ T24] usb 4-1: config 0 descriptor?? [ 333.244624][ T24] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 333.473425][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 333.509760][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 333.685396][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 333.907163][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 333.908893][ T5830] usb 4-1: USB disconnect, device number 118 [ 333.937177][ T5830] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 333.959024][ T5830] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 333.979565][ T5830] quatech2 4-1:0.51: device disconnected [ 334.148459][ T9507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.159594][ T9507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.183038][ T9507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.195889][ T9507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.318588][ T9509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.331156][ T9509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.528976][ T5830] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 334.532532][ T9511] FAULT_INJECTION: forcing a failure. [ 334.532532][ T9511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.553218][ T9511] CPU: 0 UID: 0 PID: 9511 Comm: syz.3.1318 Not tainted syzkaller #0 PREEMPT(full) [ 334.553241][ T9511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 334.553251][ T9511] Call Trace: [ 334.553258][ T9511] [ 334.553265][ T9511] dump_stack_lvl+0x189/0x250 [ 334.553288][ T9511] ? __pfx____ratelimit+0x10/0x10 [ 334.553307][ T9511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.553325][ T9511] ? __pfx__printk+0x10/0x10 [ 334.553343][ T9511] ? __might_fault+0xb0/0x130 [ 334.553369][ T9511] should_fail_ex+0x414/0x560 [ 334.553395][ T9511] _copy_from_iter+0x1de/0x1790 [ 334.553416][ T9511] ? rcu_is_watching+0x15/0xb0 [ 334.553439][ T9511] ? __pfx__copy_from_iter+0x10/0x10 [ 334.553455][ T9511] ? __build_skb_around+0x262/0x3f0 [ 334.553476][ T9511] ? netlink_sendmsg+0x642/0xb30 [ 334.553493][ T9511] ? skb_put+0x11b/0x210 [ 334.553513][ T9511] netlink_sendmsg+0x6b2/0xb30 [ 334.553551][ T9511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.553571][ T9511] ? __lock_acquire+0xab9/0xd20 [ 334.553584][ T9511] ? aa_sock_msg_perm+0xf1/0x1d0 [ 334.553603][ T9511] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 334.553622][ T9511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.553640][ T9511] __sock_sendmsg+0x21c/0x270 [ 334.553657][ T9511] sock_write_iter+0x279/0x360 [ 334.553679][ T9511] ? __pfx_sock_write_iter+0x10/0x10 [ 334.553707][ T9511] ? bpf_lsm_file_permission+0x9/0x20 [ 334.553725][ T9511] ? security_file_permission+0x75/0x290 [ 334.553753][ T9511] vfs_write+0x5c9/0xb30 [ 334.553770][ T9511] ? __pfx_sock_write_iter+0x10/0x10 [ 334.553790][ T9511] ? __pfx_vfs_write+0x10/0x10 [ 334.553819][ T9511] ? __fget_files+0x2a/0x420 [ 334.553842][ T9511] ksys_write+0x145/0x250 [ 334.553865][ T9511] ? __pfx_ksys_write+0x10/0x10 [ 334.553881][ T9511] ? do_syscall_64+0xbe/0xfa0 [ 334.553903][ T9511] do_syscall_64+0xfa/0xfa0 [ 334.553921][ T9511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.553936][ T9511] ? clear_bhb_loop+0x60/0xb0 [ 334.553953][ T9511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.553966][ T9511] RIP: 0033:0x7fbd6918f6c9 [ 334.553981][ T9511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.553994][ T9511] RSP: 002b:00007fbd69fcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 334.554010][ T9511] RAX: ffffffffffffffda RBX: 00007fbd693e5fa0 RCX: 00007fbd6918f6c9 [ 334.554021][ T9511] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 334.554030][ T9511] RBP: 00007fbd69fcd090 R08: 0000000000000000 R09: 0000000000000000 [ 334.554040][ T9511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.554048][ T9511] R13: 00007fbd693e6038 R14: 00007fbd693e5fa0 R15: 00007ffce3c107b8 [ 334.554072][ T9511] [ 334.928390][ T5830] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 334.938055][ T5830] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 334.946417][ T5830] usb 2-1: Product: syz [ 334.950592][ T5830] usb 2-1: Manufacturer: syz [ 334.955192][ T5830] usb 2-1: SerialNumber: syz [ 334.963443][ T5830] usb 2-1: config 0 descriptor?? [ 334.984963][ T5830] ch341 2-1:0.0: ch341-uart converter detected [ 335.082861][ T9520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.095035][ T9520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.149241][ T24] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 335.320426][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 335.332939][ T24] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.356540][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 335.363480][ T24] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 335.374332][ T9530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.383333][ T9530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.391488][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.402352][ T24] usb 4-1: config 0 descriptor?? [ 335.856935][ T9505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.869497][ T9505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.881722][ T5830] usb 2-1: failed to send control message: -71 [ 335.895471][ T5830] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 335.910263][ T5830] usb 2-1: USB disconnect, device number 112 [ 335.929065][ T5830] ch341 2-1:0.0: device disconnected [ 336.294247][ T9538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.325569][ T9538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.348756][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 336.354798][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 336.393437][ T24] usb 4-1: USB disconnect, device number 119 [ 337.072024][ T5907] ------------[ cut here ]------------ [ 337.077988][ T5907] WARNING: ./include/linux/ns_common.h:255 at destroy_super_work+0x15c/0x1a0, CPU#0: kworker/0:5/5907 [ 337.087902][ T9554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.089052][ T5907] Modules linked in: [ 337.101531][ T5907] CPU: 0 UID: 0 PID: 5907 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 337.111393][ T5907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 337.112258][ T9554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.121718][ T5907] Workqueue: events destroy_super_work [ 337.135585][ T5907] RIP: 0010:destroy_super_work+0x15c/0x1a0 [ 337.141527][ T5907] Code: 2c 63 ff 48 81 c3 a8 fc ff ff 48 89 df e8 fc 2b 63 ff 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3a 6b e1 ff e8 c5 ab 86 ff 90 <0f> 0b 90 e9 6d ff ff ff e8 b7 ab 86 ff 4c 89 e7 be 03 00 00 00 e8 [ 337.161770][ T5907] RSP: 0018:ffffc90004ccfa48 EFLAGS: 00010293 [ 337.167940][ T5907] RAX: ffffffff823b246b RBX: ffff88801e7e6898 RCX: ffff888034c21e80 [ 337.176017][ T5907] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 337.185071][ T5907] RBP: 0000000000000004 R08: ffff88805ae605bb R09: 1ffff1100b5cc0b7 [ 337.193127][ T5907] R10: dffffc0000000000 R11: ffffed100b5cc0b8 R12: ffff88805ae605b8 [ 337.201121][ T5907] R13: dffffc0000000000 R14: ffff88801e7e6000 R15: ffff88805ae60428 [ 337.209256][ T5907] FS: 0000000000000000(0000) GS:ffff888125a79000(0000) knlGS:0000000000000000 [ 337.218372][ T5907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.225126][ T5907] CR2: 00007f3341c6af98 CR3: 000000007695c000 CR4: 00000000003526f0 [ 337.233303][ T5907] Call Trace: [ 337.236654][ T5907] [ 337.239606][ T5907] ? process_one_work+0x868/0x15d0 [ 337.244825][ T5907] process_one_work+0x94a/0x15d0 [ 337.249878][ T5907] ? __lock_acquire+0xab9/0xd20 [ 337.254772][ T5907] ? __pfx_process_one_work+0x10/0x10 [ 337.260257][ T5907] ? assign_work+0x3a1/0x410 [ 337.265140][ T5907] worker_thread+0x9b0/0xee0 [ 337.269956][ T5907] kthread+0x711/0x8a0 [ 337.274069][ T5907] ? __pfx_worker_thread+0x10/0x10 [ 337.279229][ T5907] ? __pfx_kthread+0x10/0x10 [ 337.283849][ T5907] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.289581][ T5907] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.294799][ T5907] ? __pfx_kthread+0x10/0x10 [ 337.300012][ T5907] ret_from_fork+0x599/0xb30 [ 337.304678][ T5907] ? __pfx_ret_from_fork+0x10/0x10 [ 337.309912][ T5907] ? __switch_to_asm+0x39/0x70 [ 337.314709][ T5907] ? __switch_to_asm+0x33/0x70 [ 337.319497][ T5907] ? __pfx_kthread+0x10/0x10 [ 337.324169][ T5907] ret_from_fork_asm+0x1a/0x30 [ 337.328966][ T5907] [ 337.332061][ T5907] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 337.339357][ T5907] CPU: 0 UID: 0 PID: 5907 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 337.348730][ T5907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 337.358783][ T5907] Workqueue: events destroy_super_work [ 337.364285][ T5907] Call Trace: [ 337.367575][ T5907] [ 337.370520][ T5907] dump_stack_lvl+0x99/0x250 [ 337.375119][ T5907] ? __asan_memcpy+0x40/0x70 [ 337.379743][ T5907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.384939][ T5907] ? __pfx__printk+0x10/0x10 [ 337.389542][ T5907] vpanic+0x237/0x6d0 [ 337.393525][ T5907] ? __pfx_vpanic+0x10/0x10 [ 337.398024][ T5907] ? is_bpf_text_address+0x292/0x2b0 [ 337.403328][ T5907] ? is_bpf_text_address+0x26/0x2b0 [ 337.408537][ T5907] panic+0xb9/0xc0 [ 337.412280][ T5907] ? __pfx_panic+0x10/0x10 [ 337.416702][ T5907] ? ret_from_fork_asm+0x1a/0x30 [ 337.421643][ T5907] __warn+0x334/0x4c0 [ 337.425623][ T5907] ? destroy_super_work+0x15c/0x1a0 [ 337.430880][ T5907] ? destroy_super_work+0x15c/0x1a0 [ 337.436074][ T5907] report_bug+0x2be/0x4f0 [ 337.440406][ T5907] ? destroy_super_work+0x15c/0x1a0 [ 337.445609][ T5907] ? destroy_super_work+0x15c/0x1a0 [ 337.451019][ T5907] ? destroy_super_work+0x15e/0x1a0 [ 337.456228][ T5907] handle_bug+0x84/0x160 [ 337.460585][ T5907] exc_invalid_op+0x1a/0x50 [ 337.465104][ T5907] asm_exc_invalid_op+0x1a/0x20 [ 337.469972][ T5907] RIP: 0010:destroy_super_work+0x15c/0x1a0 [ 337.475772][ T5907] Code: 2c 63 ff 48 81 c3 a8 fc ff ff 48 89 df e8 fc 2b 63 ff 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3a 6b e1 ff e8 c5 ab 86 ff 90 <0f> 0b 90 e9 6d ff ff ff e8 b7 ab 86 ff 4c 89 e7 be 03 00 00 00 e8 [ 337.495379][ T5907] RSP: 0018:ffffc90004ccfa48 EFLAGS: 00010293 [ 337.501446][ T5907] RAX: ffffffff823b246b RBX: ffff88801e7e6898 RCX: ffff888034c21e80 [ 337.509413][ T5907] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 337.517380][ T5907] RBP: 0000000000000004 R08: ffff88805ae605bb R09: 1ffff1100b5cc0b7 [ 337.525348][ T5907] R10: dffffc0000000000 R11: ffffed100b5cc0b8 R12: ffff88805ae605b8 [ 337.533312][ T5907] R13: dffffc0000000000 R14: ffff88801e7e6000 R15: ffff88805ae60428 [ 337.541294][ T5907] ? destroy_super_work+0x15b/0x1a0 [ 337.546494][ T5907] ? destroy_super_work+0x15b/0x1a0 [ 337.551689][ T5907] ? process_one_work+0x868/0x15d0 [ 337.556795][ T5907] process_one_work+0x94a/0x15d0 [ 337.561725][ T5907] ? __lock_acquire+0xab9/0xd20 [ 337.566581][ T5907] ? __pfx_process_one_work+0x10/0x10 [ 337.571985][ T5907] ? assign_work+0x3a1/0x410 [ 337.576567][ T5907] worker_thread+0x9b0/0xee0 [ 337.581177][ T5907] kthread+0x711/0x8a0 [ 337.585244][ T5907] ? __pfx_worker_thread+0x10/0x10 [ 337.590344][ T5907] ? __pfx_kthread+0x10/0x10 [ 337.594927][ T5907] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.600118][ T5907] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.605311][ T5907] ? __pfx_kthread+0x10/0x10 [ 337.609894][ T5907] ret_from_fork+0x599/0xb30 [ 337.614475][ T5907] ? __pfx_ret_from_fork+0x10/0x10 [ 337.619584][ T5907] ? __switch_to_asm+0x39/0x70 [ 337.624353][ T5907] ? __switch_to_asm+0x33/0x70 [ 337.629111][ T5907] ? __pfx_kthread+0x10/0x10 [ 337.633701][ T5907] ret_from_fork_asm+0x1a/0x30 [ 337.638479][ T5907] [ 337.641796][ T5907] Kernel Offset: disabled [ 337.646110][ T5907] Rebooting in 86400 seconds..