last executing test programs: 16.031159392s ago: executing program 0 (id=282): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) 15.980997872s ago: executing program 0 (id=283): mkdir(&(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/kmsg\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x405, 0x6, 0x1}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x806, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x4, 0x6, 0x7, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x10000002, 0x0, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x1000, 0x7fff, 0x401c000, 0x3fe, 0x403, 0x200006, 0x3, 0x9, 0x5, 0x7, 0x5f31, 0x2d, 0x4e4, 0x2, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x9, 0x8200, 0x1, 0xfe000000, 0x8, 0xe, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x100005, 0x3fffffe, 0x1ed, 0x6, 0x8, 0x86, 0x1, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x10043, 0x8000008, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x9f, 0x4005, 0x6, 0x6, 0xcc, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x0, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x2, 0x6, 0x2, 0x14c, 0x60a7, 0x2000006, 0xacd, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d3, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 15.980835721s ago: executing program 0 (id=284): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/210) 14.570619838s ago: executing program 0 (id=286): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 14.565914599s ago: executing program 0 (id=288): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1}, 0x120) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40481f1) sendto$packet(r1, 0x0, 0x0, 0x736e2cea60a71bf8, &(0x7f0000000440)={0x11, 0x17, 0x0, 0x1, 0x5, 0x6, @multicast}, 0x14) 14.228490594s ago: executing program 0 (id=289): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) syz_genetlink_get_family_id$devlink(&(0x7f0000001240), r2) syz_genetlink_get_family_id$tipc(&(0x7f00000013c0), r2) recvmsg$unix(r0, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x30140) 14.129094258s ago: executing program 32 (id=289): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) syz_genetlink_get_family_id$devlink(&(0x7f0000001240), r2) syz_genetlink_get_family_id$tipc(&(0x7f00000013c0), r2) recvmsg$unix(r0, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x30140) 4.611030964s ago: executing program 1 (id=369): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x7f, 0x0) 4.610656409s ago: executing program 1 (id=370): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0xc100092e) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x8) 3.720728999s ago: executing program 1 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa241, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x161, 0x17, "00020000f7fd00"}) r2 = syz_open_pts(r1, 0xc0000) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000004c0)) 2.8745461s ago: executing program 1 (id=393): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000000)=""/3, 0x2}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1, r0}, 0xc) 2.810352585s ago: executing program 1 (id=395): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000037000000080003", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fddbdf253800000008000300", @ANYRES32=r2, @ANYBLOB="0c00580001"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4040000) 2.757289693s ago: executing program 1 (id=399): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x42, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb6") 2.139845411s ago: executing program 4 (id=411): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 2.0697039s ago: executing program 4 (id=412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000ec0)=@vmx={0x0, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff, {0x1}, 0x0, 0x5}}) 1.920834073s ago: executing program 4 (id=413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000518000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.741001895s ago: executing program 4 (id=416): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe6}, {0x1, 0x9}, {0x6, 0xb}}}, 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x28}}, 0x0) 1.679130338s ago: executing program 2 (id=419): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001540)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "bdc6f5", 0x0, 0x6c, 0xff, @private1, @mcast2}}}}, 0x0) 1.678844044s ago: executing program 4 (id=420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x980, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) 1.606224451s ago: executing program 2 (id=421): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000040)={[{@dyn}]}) lseek(r0, 0x10001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[@cpuid={0x64, 0x18, {0xc0000000, 0x2000000}}], 0x18}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000080)={0x42, 0x0, [{0xc0000000, 0x10, 0x7, 0x1, 0xcc7, 0x80000001, 0x7}, {0xc0000000, 0x9, 0x1, 0xa, 0x98, 0xfffffffe, 0x5}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x4, &(0x7f00000004c0)={[{@redirect_dir_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_follow}, {@xino_on}, {@index_on}], [{@euid_eq={'euid', 0x3d, r7}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'user\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/kvm\x00'}}]}) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0", 0x2, 0xfffffffffffffffe) clock_getres(0x17, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r8, 0xf) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r8, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x4a8e) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000900)="9bae17bf", 0x4}], 0x1) read$FUSE(r1, &(0x7f00000030c0)={0x2020}, 0x2020) 1.326365532s ago: executing program 2 (id=423): r0 = socket$inet6(0xa, 0x1, 0x100) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5c}, @NL80211_ATTR_AP_ISOLATE={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.071223157s ago: executing program 3 (id=426): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) (fail_nth: 1) 941.027107ms ago: executing program 3 (id=427): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) (async) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x40) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000002c0)={0x1, 0x7, 0x8, &(0x7f0000000180)={0x5, "1d27f0db2e1f25eff995475188afe0ebe9bab69516a5e88a718dca33021b22b650"}}) 861.184212ms ago: executing program 3 (id=428): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fddbdf253800000008000300", @ANYRES32=r2, @ANYBLOB="0c00580001"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4040000) 170.614853ms ago: executing program 3 (id=429): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @win={{0x6, 0x1, 0x1ff, 0x3}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) 170.174357ms ago: executing program 2 (id=430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), 0xffffffffffffffff) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x15) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x2, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x464f}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002403000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000018e808116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 170.072279ms ago: executing program 3 (id=431): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0xfffff24a, 0x10001, 0x0, 0x4, 0x898, 0x8, 0x1}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f0000000180)={0x20, r2, 0x1, 0x0, &(0x7f0000000600)=[{}]}) r3 = syz_io_uring_complete(0x0, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x3d) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) 110.1052ms ago: executing program 3 (id=432): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) socket$can_j1939(0x1d, 0x2, 0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX], &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x7}, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40, 0x105) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) mount_setattr(r1, &(0x7f0000000100)='./my_configfs/usb_gadget/g1\x00', 0x9000, &(0x7f0000000180)={0x71, 0x70, 0x120000, {r2}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='streaming/header/h\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') fchdir(r3) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001f00)='usbip-vudc.0', 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES16=r0, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x2810) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19253a9c0bf4f203f2000200"/28, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r6}, &(0x7f0000001a40), &(0x7f0000001bc0)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r6, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 109.900372ms ago: executing program 4 (id=433): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_ublk_setup_io_uring(0x210b, &(0x7f0000000340)={0x0, 0x8ee5, 0x0, 0x0, 0x254}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000540)=[@ioring_restriction_sqe_flags_required={0x3, 0x21}, @ioring_restriction_register_op={0x0, 0x9}, @ioring_restriction_register_op={0x0, 0x14}, @ioring_restriction_register_op={0x0, 0x15}, @ioring_restriction_sqe_flags_required={0x3, 0xe}, @ioring_restriction_sqe_flags_allowed={0x2, 0x16}, @ioring_restriction_sqe_flags_required={0x3, 0x1d}, @ioring_restriction_sqe_op={0x1, 0x10}, @ioring_restriction_sqe_flags_required={0x3, 0x1b}], 0x9) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, &(0x7f00000003c0)={0x0, 0x0, 0x0, @raw}) 90.173909ms ago: executing program 2 (id=434): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0x88102, 0x0) write$binfmt_script(r1, &(0x7f00000109c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x6ae0}) getrandom(&(0x7f0000000540)=""/196, 0xc4, 0x2) 0s ago: executing program 2 (id=435): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x100000001, 0x2) ppoll(&(0x7f0000000180)=[{r0, 0x260}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000240)=[0x80, 0xfffc, 0x115], &(0x7f0000000280)=[0x1, 0x2, 0x1, 0x1000, 0x200, 0x37ac, 0x401, 0x5, 0x7], &(0x7f0000000380)=[0xa], &(0x7f00000003c0)=[0x3, 0x0, 0xc5, 0xfff5, 0x7fff, 0x2]}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000020, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,timeout=0x0000000000000006,access=', @ANYRESDEC=r4, @ANYBLOB=',cache=mmap,f\x00\x00ache,timeout=0x0000000000000007,afid=0x00000000000000e8,timeout=0x0000000000000002,sq=0x0000000000000000,sq=0x0000000000000005,hash,\x00']) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1c5}]}) kernel console output (not intermixed with test programs): =1 [ 52.666847][ T43] audit: type=1400 audit(1785239710.058:231): avc: denied { open } for pid=5953 comm="syz.1.26" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 52.674282][ T43] audit: type=1400 audit(1785239710.068:232): avc: denied { ioctl } for pid=5953 comm="syz.1.26" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 52.694161][ T5955] warning: `syz.2.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 52.726677][ T5954] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 52.731803][ T5954] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 52.800718][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.804348][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 52.807687][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 52.814203][ T29] usb 8-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 52.818602][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.826764][ T29] usb 8-1: config 0 descriptor?? [ 52.849755][ T29] appledisplay 8-1:0.0: Could not find int-in endpoint [ 52.856554][ T29] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 53.210231][ T5845] usb 8-1: USB disconnect, device number 2 [ 53.285601][ T42] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 53.435612][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 53.439858][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.444161][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 53.448981][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 53.453203][ T42] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 53.457309][ T42] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.463914][ T42] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 53.468714][ T42] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 53.472130][ T42] usb 6-1: Manufacturer: syz [ 53.476964][ T42] usb 6-1: config 0 descriptor?? [ 53.665611][ T5754] Bluetooth: hci1: command tx timeout [ 53.725602][ T42] rc_core: IR keymap rc-hauppauge not found [ 53.727832][ T42] Registered IR keymap rc-empty [ 53.731274][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 53.745657][ T5754] Bluetooth: hci3: command tx timeout [ 53.747019][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 53.747444][ T5754] Bluetooth: hci0: command tx timeout [ 53.747598][ T5750] Bluetooth: hci2: command tx timeout [ 53.767090][ T42] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 53.778317][ T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input6 [ 53.790270][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 53.805641][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 53.828251][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 53.845604][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 53.865629][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 53.885895][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 53.907231][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 53.925619][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 53.945627][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 53.965638][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 53.988229][ T42] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 53.994292][ T42] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 54.006319][ T42] usb 6-1: USB disconnect, device number 3 [ 54.048600][ T10] usb 5-1: No union descriptors [ 54.061189][ T10] usb 5-1: USB disconnect, device number 2 [ 54.084520][ T5972] syz_tun: entered allmulticast mode [ 54.133621][ T5972] dvmrp8: entered allmulticast mode [ 54.353402][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 54.752764][ T5982] ipip0: entered promiscuous mode [ 54.755308][ T5982] ipip0: entered allmulticast mode [ 54.782528][ T5982] netlink: 84 bytes leftover after parsing attributes in process `syz.1.35'. [ 54.800419][ T5967] syz_tun: left allmulticast mode [ 54.805045][ T5982] netlink: 68 bytes leftover after parsing attributes in process `syz.1.35'. [ 55.205744][ T5817] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 55.358543][ T5817] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 55.361829][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.364493][ T5817] usb 5-1: Product: syz [ 55.365965][ T5817] usb 5-1: Manufacturer: syz [ 55.367485][ T5817] usb 5-1: SerialNumber: syz [ 55.412236][ T5817] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 55.623265][ T5986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.633862][ T5986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.660058][ T41] usb 5-1: USB disconnect, device number 3 [ 55.755606][ T5754] Bluetooth: hci1: command tx timeout [ 55.775847][ T42] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 55.822545][ T5997] kAFS: unable to lookup cell 'ÿ' [ 55.825563][ T5754] Bluetooth: hci0: command tx timeout [ 55.826294][ T5754] Bluetooth: hci2: command tx timeout [ 55.826318][ T5754] Bluetooth: hci3: command tx timeout [ 55.836826][ T5997] kAFS: unable to lookup cell '(,c¾Ð' [ 55.956933][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 55.963941][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.970181][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 55.975375][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 55.981302][ T42] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 55.984380][ T42] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.992232][ T42] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 55.995301][ T42] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 55.997999][ T42] usb 6-1: Manufacturer: syz [ 56.001957][ T42] usb 6-1: config 0 descriptor?? [ 56.235564][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.275592][ T42] rc_core: IR keymap rc-hauppauge not found [ 56.278137][ T42] Registered IR keymap rc-empty [ 56.280368][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 56.295614][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 56.316520][ T42] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 56.322374][ T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 56.327984][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 56.346138][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 56.365645][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 56.395867][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 56.399601][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.403847][ T10] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 56.410791][ T10] usb 8-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 56.414661][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 56.415660][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 56.417209][ T10] usb 8-1: Product: syz [ 56.420897][ T10] usb 8-1: Manufacturer: syz [ 56.435899][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 56.466146][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 56.466331][ T5817] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 56.471850][ T5817] ath9k_htc: Failed to initialize the device [ 56.475798][ T41] usb 5-1: ath9k_htc: USB layer deinitialized [ 56.486116][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 56.505624][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 56.525607][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 56.546738][ T42] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 56.549324][ T42] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 56.554219][ T42] usb 6-1: USB disconnect, device number 4 [ 56.631598][ T10] speedtch 8-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 56.634352][ T10] speedtch 8-1:1.0: usbatm_usb_probe: bind failed: -71! [ 56.637282][ T10] speedtch 8-1:1.0: probe with driver speedtch failed with error -71 [ 56.644460][ T10] speedtch 8-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 56.649816][ T10] speedtch 8-1:1.1: usbatm_usb_probe: bind failed: -71! [ 56.652006][ T10] speedtch 8-1:1.1: probe with driver speedtch failed with error -71 [ 56.658190][ T10] usb 8-1: USB disconnect, device number 3 [ 56.749243][ T6013] syz.1.47 uses obsolete (PF_INET,SOCK_PACKET) [ 56.765620][ T1044] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.766120][ T41] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 56.917423][ T1044] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 56.920878][ T1044] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 56.925038][ T1044] usb 7-1: config 0 has no interface number 0 [ 56.929795][ T1044] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 56.933696][ T1044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.937112][ T1044] usb 7-1: Product: syz [ 56.938858][ T1044] usb 7-1: Manufacturer: syz [ 56.940779][ T1044] usb 7-1: SerialNumber: syz [ 56.944969][ T1044] usb 7-1: config 0 descriptor?? [ 56.945589][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 56.950970][ T41] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 56.958777][ T41] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 56.962573][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.965988][ T41] usb 5-1: Product: syz [ 56.967748][ T41] usb 5-1: Manufacturer: syz [ 56.969725][ T41] usb 5-1: SerialNumber: syz [ 56.974156][ T41] usb 5-1: config 0 descriptor?? [ 56.980551][ T41] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 57.445160][ T1044] uvcvideo 7-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 57.447624][ T1044] uvcvideo 7-1:0.64: No valid video chain found. [ 57.450624][ T1044] usb 7-1: USB disconnect, device number 2 [ 57.456784][ T5746] udevd[5746]: setting mode of /dev/bus/usb/007/002 to 020664 failed: No such file or directory [ 57.461014][ T5746] udevd[5746]: setting owner of /dev/bus/usb/007/002 to uid=0, gid=0 failed: No such file or directory [ 57.715714][ T847] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 57.867665][ T847] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.871842][ T847] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 57.879144][ T847] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.883770][ T847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.887336][ T847] usb 8-1: Product: syz [ 57.889034][ T847] usb 8-1: Manufacturer: syz [ 57.891134][ T847] usb 8-1: SerialNumber: syz [ 58.100139][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.103683][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.113450][ T847] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 58.123238][ T847] usb 8-1: USB disconnect, device number 4 [ 58.182022][ T41] gspca_zc3xx: reg_w_i err -71 [ 58.335676][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 58.387020][ T43] kauditd_printk_skb: 34 callbacks suppressed [ 58.387035][ T43] audit: type=1400 audit(1785239715.778:267): avc: denied { ioctl } for pid=6005 comm="syz.0.45" path="/dev/vbi1" dev="devtmpfs" ino=979 ioctlcmd=0x5668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 58.485560][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 58.488710][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.491858][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 58.495243][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 58.498708][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 58.502194][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.507557][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 58.510528][ T24] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 58.513237][ T24] usb 7-1: Manufacturer: syz [ 58.516484][ T24] usb 7-1: config 0 descriptor?? [ 58.566109][ T1044] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 58.624017][ T6038] overlayfs: option "workdir=/18" is useless in a non-upper mount, ignore [ 58.627270][ T6038] overlayfs: missing 'lowerdir' [ 58.715590][ T1044] usb 8-1: Using ep0 maxpacket: 8 [ 58.719409][ T1044] usb 8-1: config index 0 descriptor too short (expected 301, got 72) [ 58.722294][ T1044] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 58.722836][ C2] raw-gadget.3 gadget.2: ignoring, device is not running [ 58.725385][ T1044] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 58.730970][ T1044] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 58.734430][ T1044] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 58.737866][ T1044] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.741325][ T1044] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 58.744179][ T1044] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.775580][ T24] rc_core: IR keymap rc-hauppauge not found [ 58.777949][ T24] Registered IR keymap rc-empty [ 58.780280][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 58.785873][ T41] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 58.788468][ T41] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 58.796348][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 58.799584][ T41] usb 5-1: USB disconnect, device number 4 [ 58.817699][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 58.822628][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input8 [ 58.830294][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 58.846408][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 58.865733][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 58.885909][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 58.906361][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 58.925978][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 58.945663][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 58.954060][ T1044] usb 8-1: GET_CAPABILITIES returned 0 [ 58.955915][ T1044] usbtmc 8-1:16.0: can't read capabilities [ 58.965778][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 58.986835][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 59.005981][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 59.027654][ T24] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 59.030873][ T24] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 59.037265][ T24] usb 7-1: USB disconnect, device number 3 [ 59.159439][ T1360] usb 8-1: USB disconnect, device number 5 [ 59.174257][ T43] audit: type=1400 audit(1785239716.568:268): avc: denied { create } for pid=6047 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 59.215742][ T41] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 59.266187][ T43] audit: type=1400 audit(1785239716.668:269): avc: denied { read write } for pid=6053 comm="syz.2.60" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.277850][ T43] audit: type=1400 audit(1785239716.668:270): avc: denied { open } for pid=6053 comm="syz.2.60" path="/dev/ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.291362][ T43] audit: type=1400 audit(1785239716.668:271): avc: denied { ioctl } for pid=6053 comm="syz.2.60" path="/dev/ppp" dev="devtmpfs" ino=731 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.367486][ T41] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 59.370959][ T41] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 59.374067][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.383990][ T41] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 59.630661][ T6044] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 59.636797][ T43] audit: type=1400 audit(1785239717.038:272): avc: denied { create } for pid=6043 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 59.650073][ T43] audit: type=1400 audit(1785239717.038:273): avc: denied { bind } for pid=6043 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 59.657269][ T43] audit: type=1400 audit(1785239717.038:274): avc: denied { setopt } for pid=6043 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 59.911246][ T43] audit: type=1400 audit(1785239717.308:275): avc: denied { create } for pid=6075 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 59.918401][ T43] audit: type=1400 audit(1785239717.308:276): avc: denied { append } for pid=6075 comm="syz.3.66" name="001" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 60.466432][ T41] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 60.635848][ T6084] syz.2.67 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 60.670984][ T41] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 60.679031][ T41] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 60.690663][ T41] usb 5-1: USB disconnect, device number 5 [ 60.946451][ T1044] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 60.948330][ T5750] Bluetooth: hci0: unexpected event 0x1c length: 7 > 5 [ 61.105801][ T1044] usb 8-1: Using ep0 maxpacket: 16 [ 61.111433][ T1044] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.114572][ T1044] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 61.117946][ T1044] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 61.120874][ T1044] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 61.123818][ T1044] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.129750][ T1044] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 61.132660][ T1044] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 61.135231][ T1044] usb 8-1: Manufacturer: syz [ 61.139487][ T1044] usb 8-1: config 0 descriptor?? [ 61.255629][ T29] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 61.350368][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 61.353114][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 61.405626][ T1044] rc_core: IR keymap rc-hauppauge not found [ 61.407698][ T1044] Registered IR keymap rc-empty [ 61.409493][ T1044] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 61.417311][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 61.421058][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.424223][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 61.426030][ T1044] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 61.428279][ T29] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 61.433048][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.437217][ T29] usb 7-1: config 0 descriptor?? [ 61.451835][ T1044] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 61.461687][ T1044] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input9 [ 61.467893][ T1044] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 61.485681][ T1044] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 61.505689][ T1044] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 61.525776][ T1044] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 61.545655][ T1044] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 61.565622][ T1044] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 61.590763][ T1044] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 61.605724][ T1044] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 61.615998][ T41] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 61.625723][ T1044] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 61.646014][ T1044] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 61.669307][ T1044] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 61.672663][ T1044] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 61.682471][ T1044] usb 8-1: USB disconnect, device number 6 [ 61.765945][ T41] usb 5-1: Using ep0 maxpacket: 16 [ 61.770298][ T41] usb 5-1: config 1 interface 0 altsetting 254 bulk endpoint 0x1 has invalid maxpacket 1023 [ 61.773732][ T41] usb 5-1: config 1 interface 0 has no altsetting 0 [ 61.777878][ T41] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 61.781366][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.784004][ T41] usb 5-1: Manufacturer: ç„€å¬‹ï½²äª¢å¥ˆë¿æ¡´ê¤”簇⎵â¸é‰á†¦æ½°ï¡­â€ŒäŒ‘順㒅駬嵤ê³ç–¥ï¤€î¡—䃛æªâ„»æ¶”㴺뤬㿽ˆè¤å§«î©šë´ã¢ è€Ü­íœ¹å‘îšî‰„鼚᭜à½î–“ï±ì„‡ì±†é¯å½•à°‘çŽœê ¥æ˜ªì¹±å²·è¯€ï ƒè©™çŽ‹ëŒ•ëŸ¬ï©©ì½§ç²æ’šì­–㭼 [ 61.791945][ T41] usb 5-1: SerialNumber: â ‰ [ 61.796159][ T6101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 61.853550][ T29] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 61.856984][ T29] hid-multitouch 0003:0457:07DA.0002: ignoring exceeding usage max [ 61.860960][ T29] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 61.863407][ T29] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 61.866541][ T29] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 61.877682][ T29] hid-multitouch 0003:0457:07DA.0002: hidraw1: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 62.031131][ T41] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 254 proto 3 vid 0x04B8 pid 0x0202 [ 62.037405][ T41] usb 5-1: USB disconnect, device number 6 [ 62.042449][ T41] usblp0: removed [ 62.050699][ T29] usb 7-1: USB disconnect, device number 4 [ 62.805605][ T5817] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 62.895772][ T1360] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 62.915670][ T10] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 62.979358][ T5817] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 62.983353][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.987080][ T5817] usb 6-1: Product: syz [ 62.988884][ T5817] usb 6-1: Manufacturer: syz [ 62.991794][ T5817] usb 6-1: SerialNumber: syz [ 63.046121][ T1360] usb 8-1: Using ep0 maxpacket: 32 [ 63.049464][ T1360] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 63.052778][ T1360] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 63.057114][ T1360] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 63.060836][ T1360] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 63.068008][ T1360] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 63.070867][ T1360] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.073456][ T1360] usb 8-1: Product: syz [ 63.075256][ T1360] usb 8-1: Manufacturer: syz [ 63.077337][ T1360] usb 8-1: SerialNumber: syz [ 63.078457][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 63.083876][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 63.087464][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 63.090148][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 63.090470][ T1360] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input10 [ 63.094792][ T10] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 63.094808][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.096535][ T10] usb 7-1: config 0 descriptor?? [ 63.109367][ T6117] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 63.295589][ T1360] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 63.298575][ T1360] (id 0x00) [ 63.308028][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 63.346524][ T1360] rc_core: IR keymap rc-imon-pad not found [ 63.349354][ T1360] Registered IR keymap rc-empty [ 63.351186][ T1360] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 63.354485][ T1360] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 63.403891][ T5817] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 63.408587][ T5817] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 63.455548][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 63.460149][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.464981][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 63.470200][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 63.474326][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 63.478322][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.484837][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 63.488782][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 63.492331][ T9] usb 5-1: Manufacturer: syz [ 63.496772][ T9] usb 5-1: config 0 descriptor?? [ 63.500557][ T1360] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 63.509464][ T1360] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input11 [ 63.518879][ T1360] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:7> initialized [ 63.519490][ T10] corsair-psu 0003:1B1C:1C1F.0003: unknown main item tag 0x6 [ 63.524976][ T10] corsair-psu 0003:1B1C:1C1F.0003: item fetching failed at offset 24/40 [ 63.528095][ T10] corsair-psu 0003:1B1C:1C1F.0003: probe with driver corsair-psu failed with error -22 [ 63.686152][ T5838] usb 8-1: USB disconnect, device number 7 [ 63.718228][ T41] usb 7-1: USB disconnect, device number 5 [ 63.745673][ T9] rc_core: IR keymap rc-hauppauge not found [ 63.747466][ T9] Registered IR keymap rc-empty [ 63.749008][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.766745][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.786285][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 63.791652][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 63.796940][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.815614][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.835770][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.855688][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.875588][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.895645][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.915843][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.935639][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.955590][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.975620][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.996512][ T9] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 63.999723][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 64.004153][ T9] usb 5-1: USB disconnect, device number 7 [ 64.257879][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 64.257890][ T43] audit: type=1400 audit(1785239721.658:285): avc: denied { getopt } for pid=6138 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.404885][ T43] audit: type=1400 audit(1785239721.798:286): avc: denied { mount } for pid=6144 comm="syz.2.90" name="/" dev="ramfs" ino=11424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 64.422392][ T43] audit: type=1400 audit(1785239721.818:287): avc: denied { map_read map_write } for pid=6144 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.566864][ T6147] qrtr: Invalid version 0 [ 64.569804][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.91'. [ 64.666091][ T5838] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 64.774886][ T6155] syz_tun: entered allmulticast mode [ 64.815662][ T5838] usb 7-1: Using ep0 maxpacket: 8 [ 64.818739][ T5838] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 64.820856][ T5817] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 64.827840][ T5838] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 64.832124][ T5838] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 64.837849][ T5838] usb 7-1: Product: syz [ 64.840570][ T5838] usb 7-1: Manufacturer: syz [ 64.842328][ T5838] usb 7-1: SerialNumber: syz [ 64.872121][ T6112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.876481][ T6112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.883049][ T6112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.888219][ T6112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.896587][ T5817] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 64.903173][ T5817] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 64.907381][ T5817] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 64.910839][ T5817] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 64.916061][ T5817] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 64.921712][ T5817] usb 6-1: USB disconnect, device number 5 [ 64.925893][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 65.052305][ T5838] usb 7-1: Invalid connection information received from device [ 65.098480][ T10] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 65.103531][ T10] usb 5-1: config 1 has no interface number 0 [ 65.107375][ T10] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 65.113318][ T10] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 65.116824][ T10] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.127424][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 65.131924][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.136626][ T10] usb 5-1: Product: syz [ 65.139134][ T10] usb 5-1: Manufacturer: syz [ 65.142489][ T10] usb 5-1: SerialNumber: syz [ 65.151606][ T6153] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 65.255533][ T43] audit: type=1400 audit(1785239722.648:288): avc: denied { remount } for pid=6144 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 65.255562][ T6145] ======================================================= [ 65.255562][ T6145] WARNING: The mand mount option has been deprecated and [ 65.255562][ T6145] and is ignored by this kernel. Remove the mand [ 65.255562][ T6145] option from the mount to silence this warning. [ 65.255562][ T6145] ======================================================= [ 65.275030][ T43] audit: type=1400 audit(1785239722.658:289): avc: denied { read } for pid=6144 comm="syz.2.90" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.283332][ T43] audit: type=1400 audit(1785239722.658:290): avc: denied { open } for pid=6144 comm="syz.2.90" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.291695][ T43] audit: type=1400 audit(1785239722.658:291): avc: denied { ioctl } for pid=6144 comm="syz.2.90" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.308784][ T43] audit: type=1400 audit(1785239722.708:292): avc: denied { write } for pid=6144 comm="syz.2.90" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 65.359410][ T6153] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 65.361719][ T5838] usb 7-1: USB disconnect, device number 6 [ 65.508901][ T6150] syz_tun: left allmulticast mode [ 65.573712][ T10] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 65.665712][ T5817] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 65.785613][ T1360] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 65.815589][ T5817] usb 6-1: Using ep0 maxpacket: 8 [ 65.819508][ T5817] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 65.823174][ T5817] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 65.828106][ T5817] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 65.832178][ T5817] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 65.836874][ T5817] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 65.841528][ T5817] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.847611][ T5817] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 65.851336][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.945637][ T1360] usb 8-1: Using ep0 maxpacket: 16 [ 65.949847][ T1360] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.954337][ T1360] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 65.959788][ T1360] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 65.963735][ T1360] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 65.967924][ T1360] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.968497][ T10] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 65.976202][ T10] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 65.976704][ T1360] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 65.980635][ T10] usb 5-1: USB disconnect, device number 8 [ 65.982217][ T1360] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 65.986332][ T10] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 65.987123][ T1360] usb 8-1: Manufacturer: syz [ 65.995005][ T1360] usb 8-1: config 0 descriptor?? [ 66.037283][ T10] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 66.062470][ T5817] usb 6-1: GET_CAPABILITIES returned 0 [ 66.064272][ T5817] usbtmc 6-1:16.0: can't read capabilities [ 66.255630][ T1360] rc_core: IR keymap rc-hauppauge not found [ 66.258272][ T1360] Registered IR keymap rc-empty [ 66.261130][ T1360] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 66.268126][ T10] usb 6-1: USB disconnect, device number 6 [ 66.275618][ T1360] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 66.296806][ T1360] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 66.303441][ T1360] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input13 [ 66.312933][ T1360] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 66.335759][ T1360] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 66.355638][ T1360] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 66.375729][ T1360] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 66.395606][ T1360] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 66.415703][ T1360] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 66.435767][ T1360] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 66.455887][ T1360] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 66.475692][ T1360] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 66.495670][ T1360] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 66.517129][ T1360] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 66.520711][ T1360] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 66.526623][ T1360] usb 8-1: USB disconnect, device number 8 [ 66.590916][ T43] audit: type=1400 audit(1785239723.988:293): avc: denied { read write } for pid=6176 comm="syz.0.103" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 66.602454][ T43] audit: type=1400 audit(1785239723.988:294): avc: denied { open } for pid=6176 comm="syz.0.103" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 66.666995][ T6183] syzkaller0: entered promiscuous mode [ 66.668799][ T6183] syzkaller0: entered allmulticast mode [ 67.385648][ T1360] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 67.545590][ T1360] usb 7-1: Using ep0 maxpacket: 16 [ 67.549529][ T1360] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.552546][ T1360] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.557975][ T1360] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 67.561093][ T1360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.563764][ T1360] usb 7-1: Product: syz [ 67.564995][ T1360] usb 7-1: Manufacturer: syz [ 67.566456][ T1360] usb 7-1: SerialNumber: syz [ 67.573885][ T1360] usb 7-1: 0:2 : does not exist [ 67.745652][ T6036] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 67.775643][ T847] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 67.778238][ T1360] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 67.804757][ T1360] usb 7-1: USB disconnect, device number 7 [ 67.824939][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 67.897350][ T6036] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.901229][ T6036] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 67.905882][ T6036] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 67.910953][ T6036] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 67.915159][ T6036] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.922553][ T6220] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 67.935586][ T847] usb 5-1: Using ep0 maxpacket: 32 [ 67.939516][ T847] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 67.943282][ T847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.949158][ T847] usb 5-1: config 0 descriptor?? [ 67.954829][ T847] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 68.345595][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 68.515601][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 68.519176][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.522468][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.525966][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 68.529600][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 68.533931][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.538922][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 68.541914][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 68.544386][ T10] usb 6-1: Manufacturer: syz [ 68.547291][ T10] usb 6-1: config 0 descriptor?? [ 68.575621][ T1360] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 68.727247][ T1360] usb 7-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 68.730865][ T1360] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 68.737066][ T1360] usb 7-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 68.740874][ T1360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.744189][ T1360] usb 7-1: Product: syz [ 68.746166][ T1360] usb 7-1: Manufacturer: syz [ 68.748225][ T1360] usb 7-1: SerialNumber: syz [ 68.753283][ T1360] usb 7-1: config 0 descriptor?? [ 68.795688][ T10] rc_core: IR keymap rc-hauppauge not found [ 68.797865][ T10] Registered IR keymap rc-empty [ 68.799569][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 68.817526][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 68.836093][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 68.840571][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input15 [ 68.846494][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 68.878625][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 68.905685][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 68.935573][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 68.955755][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 68.975611][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 68.995635][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 69.015749][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 69.035998][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 69.056041][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 69.076628][ T10] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 69.079600][ T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 69.086510][ T10] usb 6-1: USB disconnect, device number 7 [ 69.162402][ T847] gspca_vc032x: reg_w err -71 [ 69.164172][ T847] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.166266][ T847] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.168100][ T847] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.169844][ T847] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.171514][ T847] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.173147][ T847] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.174792][ T847] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.176558][ T847] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.178335][ T847] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.180134][ T847] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.181912][ T847] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.183628][ T847] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.185256][ T847] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.187142][ T847] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.188760][ T847] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.190383][ T847] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.192007][ T847] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.193693][ T847] gspca_vc032x: I2c Bus Busy Wait 00 [ 69.195383][ T847] gspca_vc032x: Unknown sensor... [ 69.197094][ T847] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 69.200538][ T847] usb 5-1: USB disconnect, device number 9 [ 69.361892][ T1360] mos7840 7-1:0.0: required endpoints missing [ 69.367308][ T1360] usb 7-1: USB disconnect, device number 8 [ 69.493355][ T6236] syzkaller0: entered promiscuous mode [ 69.496731][ T6236] syzkaller0: entered allmulticast mode [ 69.845937][ T6036] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 69.849272][ T6036] input: Aiptek as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:17.0/input/input14 [ 69.867989][ T6036] usb 8-1: USB disconnect, device number 9 [ 69.870491][ C2] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 70.465626][ T1360] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 70.485565][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 70.625706][ T1360] usb 8-1: Using ep0 maxpacket: 32 [ 70.634719][ T1360] usb 8-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 70.637232][ T10] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 70.641923][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 70.642136][ T1360] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.644896][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.651126][ T1360] usb 8-1: Product: syz [ 70.653439][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 70.654707][ T1360] usb 8-1: Manufacturer: syz [ 70.657483][ T1360] usb 8-1: SerialNumber: syz [ 70.665907][ T1360] usb 8-1: config 0 descriptor?? [ 70.672615][ T1360] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 70.677429][ T1360] dvb-usb: bulk message failed: -22 (4/0) [ 70.683058][ T1360] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 70.689615][ T1360] dvb-usb: bulk message failed: -22 (5/0) [ 70.691641][ T1360] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 70.710686][ T1360] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 70.726398][ T1360] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 70.729378][ T1360] usb 8-1: media controller created [ 70.737159][ T1360] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 70.752153][ T1360] usb 8-1: selecting invalid altsetting 3 [ 70.754025][ T1360] ttusb2: set interface to alts=3 failed [ 70.781575][ T1360] DVB: Unable to find symbol tda10086_attach() [ 70.783679][ T1360] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 70.787207][ T1360] dvb-usb: bulk message failed: -22 (4/0) [ 70.788982][ T1360] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 70.792062][ T1360] dvb-usb: bulk message failed: -22 (5/0) [ 70.793842][ T1360] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 70.797066][ T1360] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 70.851614][ T6264] netlink: 'syz.2.134': attribute type 2 has an invalid length. [ 70.854521][ T6264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.875001][ T6036] usb 8-1: USB disconnect, device number 10 [ 70.897053][ T6036] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 71.001771][ T6268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.135'. [ 71.005747][ T1044] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 71.011357][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'. [ 71.155668][ T1044] usb 5-1: Using ep0 maxpacket: 16 [ 71.159572][ T1044] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.163941][ T1044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 71.169181][ T1044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 71.173532][ T1044] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 71.178028][ T1044] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.185410][ T1044] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 71.189967][ T1044] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 71.193452][ T1044] usb 5-1: Manufacturer: syz [ 71.198830][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.201823][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.203248][ T1044] usb 5-1: config 0 descriptor?? [ 71.433227][ T6271] macvlan2: entered allmulticast mode [ 71.435126][ T6271] veth0: entered promiscuous mode [ 71.440694][ T6271] veth0: entered allmulticast mode [ 71.445420][ T6271] team0: Port device macvlan2 added [ 71.455592][ T1044] rc_core: IR keymap rc-hauppauge not found [ 71.458495][ T1044] Registered IR keymap rc-empty [ 71.461105][ T1044] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 71.487594][ T1044] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 71.506515][ T1044] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 71.515218][ T1044] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 71.524054][ T1044] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 71.545732][ T1044] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 71.565578][ T1044] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 71.585620][ T1044] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 71.606050][ T1044] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 71.625836][ T1044] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 71.646297][ T1044] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 71.667178][ T1044] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 71.670674][ T10] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 71.685843][ T1044] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 71.705634][ T1044] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 71.726866][ T1044] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 71.733501][ T1044] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 71.737743][ T5845] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 71.746729][ T1044] usb 5-1: USB disconnect, device number 10 [ 71.867170][ T5845] usb 8-1: device descriptor read/64, error -71 [ 71.874544][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 71.880377][ T10] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 71.887280][ T10] usb 6-1: USB disconnect, device number 8 [ 72.125561][ T5845] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 72.265973][ T5845] usb 8-1: device descriptor read/64, error -71 [ 72.376434][ T5845] usb usb8-port1: attempt power cycle [ 72.405854][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 72.476082][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 72.476093][ T43] audit: type=1400 audit(1785239729.878:300): avc: denied { read } for pid=6288 comm="syz.2.144" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.485368][ T43] audit: type=1400 audit(1785239729.878:301): avc: denied { open } for pid=6288 comm="syz.2.144" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.496137][ T43] audit: type=1400 audit(1785239729.878:302): avc: denied { ioctl } for pid=6288 comm="syz.2.144" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.508738][ T43] audit: type=1400 audit(1785239729.878:303): avc: denied { set_context_mgr } for pid=6288 comm="syz.2.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 72.514869][ T43] audit: type=1400 audit(1785239729.888:304): avc: denied { map } for pid=6288 comm="syz.2.144" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.522382][ T43] audit: type=1400 audit(1785239729.888:305): avc: denied { call } for pid=6288 comm="syz.2.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 72.565652][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 72.569905][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.574700][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.579325][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 72.585111][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 72.588189][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.591947][ T10] usb 5-1: config 0 descriptor?? [ 72.735620][ T5845] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 72.756044][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 72.766500][ T5845] usb 8-1: device descriptor read/8, error -71 [ 72.815638][ T41] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 72.907271][ T9] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 72.910202][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.913601][ T9] usb 7-1: config 0 has no interface number 0 [ 72.915691][ T9] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 72.919145][ T9] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 72.923158][ T9] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.929477][ T9] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 72.932565][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.935436][ T9] usb 7-1: Product: syz [ 72.936993][ T9] usb 7-1: Manufacturer: syz [ 72.938557][ T9] usb 7-1: SerialNumber: syz [ 72.942883][ T9] usb 7-1: config 0 descriptor?? [ 72.965615][ T41] usb 6-1: Using ep0 maxpacket: 16 [ 72.969719][ T41] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.974089][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.978820][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 72.982968][ T41] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 72.987230][ T41] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.993727][ T41] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 72.997555][ T41] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 73.000927][ T41] usb 6-1: Manufacturer: syz [ 73.005122][ T41] usb 6-1: config 0 descriptor?? [ 73.005695][ T5845] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 73.011555][ T10] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 73.015125][ T10] microsoft 0003:045E:07DA.0004: unsupported Resolution Multiplier 0 [ 73.019104][ T10] microsoft 0003:045E:07DA.0004: implement() called with n (152) > 32! (kworker/0:1) [ 73.036268][ T5845] usb 8-1: device descriptor read/8, error -71 [ 73.156834][ T5845] usb usb8-port1: unable to enumerate USB device [ 73.199894][ T10] microsoft 0003:045E:07DA.0004: unsupported Resolution Multiplier 0 [ 73.204011][ T10] microsoft 0003:045E:07DA.0004: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 73.207663][ T10] microsoft 0003:045E:07DA.0004: no inputs found [ 73.209679][ T10] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 73.255579][ T41] rc_core: IR keymap rc-hauppauge not found [ 73.257471][ T41] Registered IR keymap rc-empty [ 73.259136][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 73.275692][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 73.296405][ T41] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 73.301829][ T41] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input18 [ 73.308112][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 73.326055][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 73.345683][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 73.365627][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 73.385630][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 73.405392][ T6036] usb 5-1: USB disconnect, device number 11 [ 73.408765][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 73.426174][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 73.445711][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 73.465925][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 73.486877][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 73.508977][ T41] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 73.512432][ T41] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 73.517108][ T41] usb 6-1: USB disconnect, device number 9 [ 74.275636][ T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 74.305593][ T847] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 74.427195][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 74.431340][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.436041][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 74.438820][ T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 74.441578][ T9] usb 5-1: Product: syz [ 74.442886][ T9] usb 5-1: Manufacturer: syz [ 74.448505][ T9] hub 5-1:4.0: USB hub found [ 74.455618][ T847] usb 6-1: Using ep0 maxpacket: 16 [ 74.459453][ T847] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 74.463933][ T847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.468492][ T847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.472430][ T847] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 74.478181][ T847] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 74.482360][ T847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.489345][ T847] usb 6-1: config 0 descriptor?? [ 74.581778][ T43] audit: type=1400 audit(1785239731.978:306): avc: denied { read } for pid=6315 comm="syz.3.153" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 74.591136][ T43] audit: type=1400 audit(1785239731.978:307): avc: denied { open } for pid=6315 comm="syz.3.153" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 74.634757][ T43] audit: type=1400 audit(1785239732.028:308): avc: denied { mounton } for pid=6315 comm="syz.3.153" path="/32/file0" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 74.654111][ T9] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 74.701376][ T43] audit: type=1400 audit(1785239732.098:309): avc: denied { create } for pid=6315 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.701975][ T6316] netlink: 'syz.3.153': attribute type 21 has an invalid length. [ 74.955533][ T5838] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 74.956068][ T9] usb 5-1: USB disconnect, device number 12 [ 75.105500][ T5838] usb 8-1: Using ep0 maxpacket: 16 [ 75.110138][ T5838] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.113871][ T5838] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.119400][ T5838] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.122194][ T5838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.124754][ T5838] usb 8-1: Product: syz [ 75.126202][ T5838] usb 8-1: Manufacturer: syz [ 75.127750][ T5838] usb 8-1: SerialNumber: syz [ 75.136915][ T5838] usb 8-1: 0:2 : does not exist [ 75.438596][ T10] usb 7-1: USB disconnect, device number 9 [ 75.735740][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 75.775642][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 75.889352][ T9] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 75.893210][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.896555][ T9] usb 5-1: Product: syz [ 75.898500][ T9] usb 5-1: Manufacturer: syz [ 75.900547][ T9] usb 5-1: SerialNumber: syz [ 75.907183][ T9] ums-karma 5-1:1.0: USB Mass Storage device detected [ 75.914768][ T9] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 75.914768][ T9] Please send a copy of this message to and [ 75.945588][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 75.949935][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.954042][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.958433][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 75.962195][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 75.966640][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.972878][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 75.976661][ T10] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 75.979902][ T10] usb 7-1: Manufacturer: syz [ 75.985016][ T10] usb 7-1: config 0 descriptor?? [ 76.083914][ T847] usbhid 6-1:0.0: can't add hid device: -71 [ 76.087750][ T847] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 76.093653][ T847] usb 6-1: USB disconnect, device number 10 [ 76.255536][ T10] rc_core: IR keymap rc-hauppauge not found [ 76.257396][ T10] Registered IR keymap rc-empty [ 76.258989][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 76.285531][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 76.316031][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 76.320493][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input19 [ 76.325284][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 76.355580][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 76.371911][ T9] ums-karma 5-1:1.0: probe with driver ums-karma failed with error -5 [ 76.375686][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 76.406315][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 76.426241][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 76.455597][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 76.485621][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 76.516456][ T847] usb 5-1: USB disconnect, device number 13 [ 76.517754][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 76.536524][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 76.565759][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 76.596801][ T10] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 76.600398][ T10] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 76.604971][ T10] usb 7-1: USB disconnect, device number 10 [ 77.099708][ T6349] kvm: user requested TSC rate below hardware speed [ 77.155627][ T1360] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 77.305539][ T1360] usb 7-1: Using ep0 maxpacket: 16 [ 77.310009][ T1360] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 77.312546][ T1360] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 77.316238][ T1360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.316253][ T1360] usb 7-1: Product: syz [ 77.316261][ T1360] usb 7-1: Manufacturer: syz [ 77.316269][ T1360] usb 7-1: SerialNumber: syz [ 77.317827][ T1360] usb 7-1: config 0 descriptor?? [ 77.329059][ T1360] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 77.332495][ T1360] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 77.452139][ T6353] syzkaller0: entered promiscuous mode [ 77.454383][ T6353] syzkaller0: entered allmulticast mode [ 77.708175][ T5838] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 77.733800][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 77.733815][ T43] audit: type=1400 audit(1785239735.128:320): avc: denied { unmount } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 77.754192][ T5838] usb 8-1: USB disconnect, device number 15 [ 77.842952][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.954356][ T1360] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 78.417685][ T1360] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 78.421885][ T1360] em28xx 7-1:0.0: board has no eeprom [ 78.573630][ T43] audit: type=1400 audit(1785239735.968:321): avc: denied { read } for pid=6358 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.680992][ T43] audit: type=1400 audit(1785239736.078:322): avc: denied { bind } for pid=6358 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.691476][ T43] audit: type=1400 audit(1785239736.088:323): avc: denied { write } for pid=6358 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.726816][ T43] audit: type=1400 audit(1785239736.128:324): avc: denied { mount } for pid=6371 comm="syz.1.174" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 78.785527][ T1360] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 78.788386][ T1360] em28xx 7-1:0.0: dvb set to bulk mode. [ 78.790596][ T6123] em28xx 7-1:0.0: Binding DVB extension [ 78.841609][ T5838] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 78.905583][ T6345] em28xx 7-1:0.0: write to i2c device at 0xe failed with unknown error (status=1) [ 79.035526][ T5838] usb 8-1: Using ep0 maxpacket: 16 [ 79.038912][ T5838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.042029][ T5838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.045261][ T5838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 79.048503][ T5838] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 79.051730][ T5838] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.058279][ T5838] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 79.061219][ T5838] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 79.063703][ T5838] usb 8-1: Manufacturer: syz [ 79.073197][ T5838] usb 8-1: config 0 descriptor?? [ 79.096151][ T1360] usb 7-1: USB disconnect, device number 11 [ 79.104227][ T1360] em28xx 7-1:0.0: Disconnecting em28xx [ 79.136914][ T6123] em28xx 7-1:0.0: Registering input extension [ 79.140000][ T1360] em28xx 7-1:0.0: Closing input extension [ 79.158233][ T1360] em28xx 7-1:0.0: Freeing device [ 79.232309][ T6389] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 79.242771][ T6389] Cannot find set identified by id 1 to match [ 79.315548][ T5838] rc_core: IR keymap rc-hauppauge not found [ 79.317532][ T5838] Registered IR keymap rc-empty [ 79.319156][ T5838] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 79.335618][ T5838] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 79.356082][ T5838] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 79.361134][ T5838] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input21 [ 79.366909][ T5838] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 79.385550][ T5838] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 79.415939][ T5838] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 79.435753][ T5838] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 79.465541][ T5838] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 79.485571][ T5838] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 79.507404][ T5838] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 79.525580][ T5838] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 79.545574][ T5838] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 79.565628][ T5838] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 79.600238][ T5838] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 79.615632][ T5838] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 79.633032][ T43] audit: type=1400 audit(1785239737.028:325): avc: denied { write } for pid=6394 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 79.644164][ T5838] usb 8-1: USB disconnect, device number 16 [ 79.647696][ T43] audit: type=1400 audit(1785239737.028:326): avc: denied { mount } for pid=6394 comm="syz.0.181" name="/" dev="configfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 79.654970][ T43] audit: type=1400 audit(1785239737.028:327): avc: denied { read } for pid=6394 comm="syz.0.181" name="/" dev="configfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.662300][ T43] audit: type=1400 audit(1785239737.028:328): avc: denied { open } for pid=6394 comm="syz.0.181" path="/36/config" dev="configfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.672910][ T43] audit: type=1400 audit(1785239737.028:329): avc: denied { search } for pid=6394 comm="syz.0.181" name="/" dev="configfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.734117][ T6399] capability: warning: `syz.0.183' uses deprecated v2 capabilities in a way that may be insecure [ 79.747343][ T6402] kvm: user requested TSC rate below hardware speed [ 80.475589][ T41] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 80.602834][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 80.635661][ T41] usb 6-1: Using ep0 maxpacket: 16 [ 80.639909][ T41] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.644485][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.648589][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 80.651533][ T41] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 80.654418][ T41] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.659436][ T41] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 80.663249][ T41] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 80.665621][ T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 80.666615][ T41] usb 6-1: Manufacturer: syz [ 80.672700][ T41] usb 6-1: config 0 descriptor?? [ 80.757163][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.761374][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.765072][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.770058][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.773516][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.778920][ T10] usb 7-1: config 0 descriptor?? [ 80.827371][ T9] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 80.830316][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.834443][ T9] usb 8-1: config 0 descriptor?? [ 80.925629][ T41] rc_core: IR keymap rc-hauppauge not found [ 80.927983][ T41] Registered IR keymap rc-empty [ 80.930661][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 80.946216][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 80.994462][ T41] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 80.999201][ T41] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input22 [ 81.005808][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 81.026336][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 81.047381][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 81.065629][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 81.071571][ T6444] block device autoloading is deprecated and will be removed. [ 81.085745][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 81.105853][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 81.125827][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 81.145571][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 81.165589][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 81.185575][ T41] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 81.206462][ T41] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 81.209818][ T41] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 81.214509][ T41] usb 6-1: USB disconnect, device number 11 [ 81.224132][ T10] plantronics 0003:047F:FFFF.0005: item fetching failed at offset 14/15 [ 81.473201][ T10] plantronics 0003:047F:FFFF.0005: parse failed [ 81.473822][ T59] cfg80211: failed to load regulatory.db [ 81.476319][ T9] usb 8-1: Cannot set autoneg [ 81.478923][ T10] plantronics 0003:047F:FFFF.0005: probe with driver plantronics failed with error -22 [ 81.481858][ T9] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 81.489451][ T10] usb 7-1: USB disconnect, device number 12 [ 81.497442][ T9] usb 8-1: USB disconnect, device number 17 [ 82.346005][ T59] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 82.515548][ T59] usb 8-1: Using ep0 maxpacket: 16 [ 82.519946][ T59] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.524238][ T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.528794][ T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 82.532584][ T59] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 82.536680][ T59] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.543088][ T59] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 82.546980][ T59] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 82.550247][ T59] usb 8-1: Manufacturer: syz [ 82.554511][ T59] usb 8-1: config 0 descriptor?? [ 82.749770][ T43] kauditd_printk_skb: 23 callbacks suppressed [ 82.749783][ T43] audit: type=1400 audit(1785239740.148:353): avc: denied { accept } for pid=6477 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.758438][ T43] audit: type=1400 audit(1785239740.148:354): avc: denied { write } for pid=6477 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.774448][ T43] audit: type=1400 audit(1785239740.148:355): avc: denied { read } for pid=6477 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.825707][ T59] rc_core: IR keymap rc-hauppauge not found [ 82.828413][ T59] Registered IR keymap rc-empty [ 82.830356][ T59] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 83.004393][ T59] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 83.036508][ T59] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 83.047216][ T59] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input23 [ 83.060072][ T59] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 83.075785][ T59] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 83.095891][ T59] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 83.125613][ T59] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 83.146074][ T59] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 83.147600][ T43] audit: type=1400 audit(1785239740.548:356): avc: denied { search } for pid=6493 comm="syz.0.222" name="/" dev="configfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.157080][ T43] audit: type=1400 audit(1785239740.558:357): avc: denied { search } for pid=6493 comm="syz.0.222" name="usb_gadget" dev="configfs" ino=5785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.175610][ T59] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 83.196117][ T41] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 83.205652][ T59] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 83.235863][ T59] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 83.255668][ T59] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 83.275663][ T59] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 83.297635][ T59] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 83.300728][ T59] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 83.305870][ T59] usb 8-1: USB disconnect, device number 18 [ 83.325568][ T41] usb 7-1: device descriptor read/64, error -71 [ 83.575704][ T41] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 83.715580][ T41] usb 7-1: device descriptor read/64, error -71 [ 83.837228][ T41] usb usb7-port1: attempt power cycle [ 84.159532][ T43] audit: type=1400 audit(1785239741.558:358): avc: denied { create } for pid=6505 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.166734][ T43] audit: type=1400 audit(1785239741.558:359): avc: denied { setopt } for pid=6505 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.175623][ T41] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 84.196737][ T41] usb 7-1: device descriptor read/8, error -71 [ 84.202099][ T43] audit: type=1400 audit(1785239741.598:360): avc: denied { getopt } for pid=6507 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.230475][ T6510] kvm: user requested TSC rate below hardware speed [ 84.281562][ T43] audit: type=1400 audit(1785239741.678:361): avc: denied { sys_module } for pid=6513 comm="syz.1.230" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 84.389519][ T43] audit: type=1400 audit(1785239741.788:362): avc: denied { mount } for pid=6521 comm="syz.0.234" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 84.438300][ T41] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 84.453656][ T6526] Bluetooth: MGMT ver 1.23 [ 84.456248][ T41] usb 7-1: device descriptor read/8, error -71 [ 84.457627][ T6526] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 84.566303][ T41] usb usb7-port1: unable to enumerate USB device [ 84.625629][ T6036] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 84.776503][ T6036] usb 5-1: not running at top speed; connect to a high speed hub [ 84.780271][ T6036] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 84.783989][ T6036] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 84.789581][ T6036] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 84.793300][ T6036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.796854][ T6036] usb 5-1: Product: syz [ 84.798934][ T6036] usb 5-1: Manufacturer: syz [ 84.801521][ T6036] usb 5-1: SerialNumber: syz [ 84.808594][ T6036] oti6858 5-1:1.0: oti6858 converter detected [ 84.814549][ T6036] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 85.117568][ T6522] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 85.124014][ T42] usb 5-1: USB disconnect, device number 14 [ 85.134233][ T42] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 85.138843][ T42] oti6858 5-1:1.0: device disconnected [ 85.544632][ T6552] xt_hashlimit: size too large, truncated to 1048576 [ 85.975620][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 86.004605][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 86.465748][ T41] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 86.595565][ T41] usb 7-1: device descriptor read/64, error -71 [ 86.668168][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 86.678654][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 86.681651][ T9] usb 6-1: can't read configurations, error -71 [ 86.695595][ T5838] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 86.704404][ T6597] input: syz0 as /devices/virtual/input/input24 [ 86.835673][ T41] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 86.845658][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 86.853339][ T5838] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 86.858829][ T5838] usb 5-1: config 0 has no interface number 0 [ 86.861057][ T5838] usb 5-1: config 0 interface 184 has no altsetting 0 [ 86.865570][ T5838] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 86.868647][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.871280][ T5838] usb 5-1: Product: syz [ 86.872892][ T5838] usb 5-1: Manufacturer: syz [ 86.874548][ T5838] usb 5-1: SerialNumber: syz [ 86.878630][ T5838] usb 5-1: config 0 descriptor?? [ 86.965640][ T41] usb 7-1: device descriptor read/64, error -71 [ 87.075846][ T41] usb usb7-port1: attempt power cycle [ 87.109008][ T6602] kvm: pic: level sensitive irq not supported [ 87.119117][ T6602] kvm: pic: level sensitive irq not supported [ 87.129476][ T6602] kvm: pic: single mode not supported [ 87.137336][ T6602] kvm: pic: level sensitive irq not supported [ 87.141273][ T6602] kvm: pic: single mode not supported [ 87.143195][ T6602] kvm: pic: level sensitive irq not supported [ 87.415674][ T41] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 87.437312][ T41] usb 7-1: device descriptor read/8, error -71 [ 87.695405][ T5838] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 87.701670][ T5838] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 87.705015][ T5838] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 87.708496][ T5838] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 87.711359][ T5838] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 87.714443][ T5838] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 87.718160][ T5838] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 87.727181][ T5838] usb 5-1: USB disconnect, device number 15 [ 87.985942][ T41] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 88.006012][ T41] usb 7-1: device descriptor read/8, error -71 [ 88.116231][ T41] usb usb7-port1: unable to enumerate USB device [ 88.259617][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 88.259631][ T43] audit: type=1400 audit(1785239745.658:373): avc: denied { watch watch_reads } for pid=6626 comm="syz.0.277" path="/64/file1" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.325054][ T43] audit: type=1400 audit(1785239745.718:374): avc: denied { ioctl } for pid=6630 comm="syz.0.279" path="socket:[13651]" dev="sockfs" ino=13651 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.335930][ T6631] bridge_slave_0: left allmulticast mode [ 88.337597][ T6631] bridge_slave_0: left promiscuous mode [ 88.341819][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.356685][ T6631] bridge_slave_1: left allmulticast mode [ 88.358925][ T6631] bridge_slave_1: left promiscuous mode [ 88.361360][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.375369][ T6631] bond0: (slave bond_slave_0): Releasing backup interface [ 88.385979][ T6631] bond0: (slave bond_slave_1): Releasing backup interface [ 88.406133][ T6631] team0: Port device team_slave_0 removed [ 88.413181][ T6631] team0: Port device team_slave_1 removed [ 88.417716][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.420599][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.425197][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.428885][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.434196][ T6631] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 88.695672][ T6331] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 88.785619][ T42] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 88.865600][ T6331] usb 8-1: Using ep0 maxpacket: 32 [ 88.870220][ T6331] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.874015][ T6331] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.877107][ T6331] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.879852][ T6331] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.883747][ T6331] usb 8-1: config 0 descriptor?? [ 88.887752][ T6331] hub 8-1:0.0: USB hub found [ 88.935676][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 88.939816][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.944619][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.949401][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 88.953393][ T42] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 88.957739][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.964756][ T42] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 88.968634][ T42] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 88.971974][ T42] usb 5-1: Manufacturer: syz [ 88.976472][ T42] usb 5-1: config 0 descriptor?? [ 89.091332][ T6331] hub 8-1:0.0: 1 port detected [ 89.245600][ T42] rc_core: IR keymap rc-hauppauge not found [ 89.248014][ T42] Registered IR keymap rc-empty [ 89.249724][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 89.265605][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 89.287489][ T42] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 89.292387][ T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 89.297820][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 89.325868][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 89.346057][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 89.365600][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 89.385793][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 89.405621][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 89.425963][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 89.445775][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 89.465796][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 89.485617][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 89.509430][ T42] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 89.514130][ T42] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 89.521113][ T42] usb 5-1: USB disconnect, device number 16 [ 89.635682][ T6123] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 89.699790][ T6331] hub 8-1:0.0: activate --> -90 [ 89.785592][ T6123] usb 7-1: Using ep0 maxpacket: 32 [ 89.790004][ T6123] usb 7-1: unable to get BOS descriptor or descriptor too short [ 89.794916][ T6123] usb 7-1: config 1 has an invalid interface number: 221 but max is 2 [ 89.798543][ T6123] usb 7-1: config 1 has an invalid interface number: 44 but max is 2 [ 89.801877][ T6123] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.806223][ T6123] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 89.810437][ T6123] usb 7-1: config 1 has no interface number 0 [ 89.813619][ T6123] usb 7-1: config 1 has no interface number 1 [ 89.816291][ T6123] usb 7-1: config 1 interface 44 has no altsetting 0 [ 89.821442][ T6123] usb 7-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 89.825394][ T6123] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.829243][ T6123] usb 7-1: Product: syz [ 89.831157][ T6123] usb 7-1: Manufacturer: syz [ 89.833539][ T6123] usb 7-1: SerialNumber: syz [ 90.106446][ T6331] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 90.111054][ T59] usb 8-1: USB disconnect, device number 19 [ 90.118844][ T6331] usb 8-1-port1: connect-debounce failed [ 90.159437][ T6123] usb 7-1: USB disconnect, device number 21 [ 90.185068][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.281600][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.368612][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.390579][ T43] audit: type=1400 audit(1785239747.788:375): avc: denied { execute } for pid=6652 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 90.401878][ T43] audit: type=1400 audit(1785239747.788:376): avc: denied { execute_no_trans } for pid=6652 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 90.458794][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.515165][ T5754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.520113][ T5754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.524893][ T5754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.529834][ T5754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.533842][ T5754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.597087][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.611054][ T6658] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input26 [ 90.805779][ T43] audit: type=1400 audit(1785239748.188:377): avc: denied { read write } for pid=6668 comm="syz.3.293" name="control" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 90.823089][ T43] audit: type=1400 audit(1785239748.188:378): avc: denied { open } for pid=6668 comm="syz.3.293" path="/dev/mapper/control" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 90.976886][ T41] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 90.994705][ T12] bond0 (unregistering): Released all slaves [ 91.010971][ T43] audit: type=1400 audit(1785239748.408:379): avc: denied { search } for pid=5451 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.023394][ T43] audit: type=1400 audit(1785239748.408:380): avc: denied { search } for pid=5451 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.037295][ T43] audit: type=1400 audit(1785239748.408:381): avc: denied { search } for pid=5451 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.146760][ T41] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 91.154998][ T41] usb 7-1: config 0 has no interface number 0 [ 91.161465][ T41] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 91.182757][ T41] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 91.189282][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.200823][ T41] usb 7-1: config 0 descriptor?? [ 91.292553][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2 [ 91.411764][ T1360] usb 7-1: USB disconnect, device number 22 [ 91.449943][ T12] hsr_slave_0: left promiscuous mode [ 91.453228][ T12] hsr_slave_1: left promiscuous mode [ 91.468669][ T12] veth1_macvtap: left promiscuous mode [ 91.471279][ T12] veth0_macvtap: left promiscuous mode [ 91.473157][ T12] veth1_vlan: left promiscuous mode [ 91.476105][ T12] veth0_vlan: left promiscuous mode [ 91.718788][ T5451] 8021q: adding VLAN 0 to HW filter on device eth3 [ 91.763069][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.765730][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.768064][ T6653] bridge_slave_0: entered allmulticast mode [ 91.771400][ T6653] bridge_slave_0: entered promiscuous mode [ 91.780134][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.785822][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.789257][ T6653] bridge_slave_1: entered allmulticast mode [ 91.792387][ T6653] bridge_slave_1: entered promiscuous mode [ 91.835005][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.844187][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.876478][ T6653] team0: Port device team_slave_0 added [ 91.880688][ T6653] team0: Port device team_slave_1 added [ 91.899075][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.901826][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.913517][ T6653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.920219][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.923206][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.934567][ T6653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.975328][ T6653] hsr_slave_0: entered promiscuous mode [ 91.978708][ T6653] hsr_slave_1: entered promiscuous mode [ 91.982005][ T6653] debugfs: 'hsr0' already exists in 'hsr' [ 91.984809][ T6653] Cannot create hsr debugfs directory [ 92.019566][ T5451] 8021q: adding VLAN 0 to HW filter on device eth4 [ 92.122677][ T6731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'. [ 92.526312][ T5451] 8021q: adding VLAN 0 to HW filter on device eth5 [ 92.567264][ T6653] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.583257][ T6653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.589744][ T6653] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.596858][ T6653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.607520][ T6653] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.614889][ T6653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.625918][ T5750] Bluetooth: hci1: command tx timeout [ 92.629490][ T6653] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.634987][ T6653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.695569][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.710820][ T6653] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.720339][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.723784][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.739865][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.742254][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.100366][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.300400][ T6653] veth0_vlan: entered promiscuous mode [ 93.310790][ T6653] veth1_vlan: entered promiscuous mode [ 93.339206][ T6653] veth0_macvtap: entered promiscuous mode [ 93.345788][ T41] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 93.347081][ T6653] veth1_macvtap: entered promiscuous mode [ 93.363321][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.374588][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.387186][ T5846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.396473][ T5846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.406340][ T5846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.407387][ T6808] mmap: syz.1.323 (6808) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.419919][ T5846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.464432][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.467248][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.505607][ T41] usb 8-1: Using ep0 maxpacket: 16 [ 93.510013][ T41] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.513266][ T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.516931][ T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 93.519186][ T174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.520029][ T41] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 93.524498][ T174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.527032][ T41] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.535981][ T41] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 93.538927][ T41] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.541943][ T41] usb 8-1: Manufacturer: syz [ 93.545100][ T41] usb 8-1: config 0 descriptor?? [ 93.815599][ T41] rc_core: IR keymap rc-hauppauge not found [ 93.817995][ T41] Registered IR keymap rc-empty [ 93.820258][ T41] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 93.836137][ T41] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 93.860901][ T41] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 93.868561][ T41] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input27 [ 93.890341][ T41] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 93.907838][ T41] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 93.935548][ T6036] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 93.938804][ T41] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 93.965659][ T41] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 93.995837][ T41] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 94.017653][ T41] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 94.045808][ T41] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 94.067164][ T41] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 94.085549][ T6036] usb 9-1: device descriptor read/64, error -71 [ 94.095696][ T41] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 94.117298][ T41] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 94.149389][ T41] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 94.153589][ T41] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 94.166029][ T41] usb 8-1: USB disconnect, device number 20 [ 94.301594][ T43] kauditd_printk_skb: 25 callbacks suppressed [ 94.301609][ T43] audit: type=1326 audit(1785239751.698:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.2.331" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42c239de99 code=0x0 [ 94.345537][ T6036] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 94.476059][ T6036] usb 9-1: device descriptor read/64, error -71 [ 94.499883][ T43] audit: type=1400 audit(1785239751.898:408): avc: denied { setopt } for pid=6840 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.510365][ T43] audit: type=1400 audit(1785239751.898:409): avc: denied { bind } for pid=6840 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.585767][ T6036] usb usb9-port1: attempt power cycle [ 94.705751][ T5750] Bluetooth: hci1: command tx timeout [ 94.796141][ T43] audit: type=1400 audit(1785239752.188:410): avc: denied { prog_run } for pid=6842 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 94.938245][ T6036] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 94.967977][ T6036] usb 9-1: device descriptor read/8, error -71 [ 95.316765][ T6036] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 95.336631][ T6036] usb 9-1: device descriptor read/8, error -71 [ 95.456514][ T6036] usb usb9-port1: unable to enumerate USB device [ 95.471710][ T43] audit: type=1400 audit(1785239752.868:411): avc: denied { read } for pid=6864 comm="syz.2.342" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.483129][ T43] audit: type=1400 audit(1785239752.868:412): avc: denied { open } for pid=6864 comm="syz.2.342" path="/dev/rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.494719][ T43] audit: type=1400 audit(1785239752.868:413): avc: denied { ioctl } for pid=6864 comm="syz.2.342" path="/dev/rtc0" dev="devtmpfs" ino=945 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.595408][ T43] audit: type=1400 audit(1785239752.988:414): avc: denied { create } for pid=6869 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 95.602523][ T43] audit: type=1400 audit(1785239752.988:415): avc: denied { write } for pid=6869 comm="syz.1.344" path="socket:[16604]" dev="sockfs" ino=16604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 95.633200][ T43] audit: type=1400 audit(1785239753.028:416): avc: denied { getopt } for pid=6873 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.915659][ T42] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 95.919391][ T1360] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 96.075747][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 96.080856][ T1360] usb 7-1: unable to get BOS descriptor or descriptor too short [ 96.085969][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.091372][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.096186][ T1360] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 142, changing to 7 [ 96.100631][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 96.104873][ T42] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 96.111182][ T42] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.118587][ T1360] usb 7-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 96.122689][ T42] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 96.127077][ T1360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.130863][ T42] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 96.134557][ T1360] usb 7-1: Product: syz [ 96.136569][ T1360] usb 7-1: Manufacturer: syz [ 96.138524][ T42] usb 6-1: Manufacturer: syz [ 96.141570][ T1360] usb 7-1: SerialNumber: syz [ 96.146574][ T42] usb 6-1: config 0 descriptor?? [ 96.360335][ T1360] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 96.364226][ T1360] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 96.386294][ T1360] usb 7-1: USB disconnect, device number 23 [ 96.405122][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.405660][ T42] rc_core: IR keymap rc-hauppauge not found [ 96.412412][ T42] Registered IR keymap rc-empty [ 96.413968][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 96.437523][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 96.457222][ T42] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 96.463645][ T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input28 [ 96.471096][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 96.485679][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 96.507185][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 96.525742][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 96.546920][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 96.565708][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 96.585860][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 96.605643][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 96.625718][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 96.645639][ T42] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 96.668419][ T42] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 96.677503][ T42] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 96.698830][ T42] usb 6-1: USB disconnect, device number 14 [ 96.795780][ T5750] Bluetooth: hci1: command tx timeout [ 97.349960][ T6036] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 97.496373][ T6036] usb 7-1: device descriptor read/64, error -71 [ 97.605630][ T1044] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 97.765566][ T6036] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 97.777896][ T1044] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.781377][ T1044] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.788089][ T1044] usb 6-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.40 [ 97.793035][ T1044] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.796515][ T1044] usb 6-1: Product: syz [ 97.798045][ T1044] usb 6-1: Manufacturer: syz [ 97.799978][ T1044] usb 6-1: SerialNumber: syz [ 98.168741][ T1044] usb 6-1: MBOX3: Invalid descriptor size=58. [ 98.176424][ T6036] usb 7-1: device descriptor read/64, error -71 [ 98.180354][ T1044] usb 6-1: USB disconnect, device number 15 [ 98.296329][ T6036] usb usb7-port1: attempt power cycle [ 98.667740][ T6036] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 98.688657][ T6036] usb 7-1: device descriptor read/8, error -71 [ 98.795618][ T1044] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 98.875708][ T5750] Bluetooth: hci1: command tx timeout [ 98.935594][ T6036] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 98.945720][ T1044] usb 8-1: device descriptor read/64, error -71 [ 98.945931][ T1360] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 98.956600][ T6036] usb 7-1: device descriptor read/8, error -71 [ 99.035946][ T41] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 99.075950][ T6036] usb usb7-port1: unable to enumerate USB device [ 99.095666][ T1360] usb 6-1: Using ep0 maxpacket: 8 [ 99.099230][ T1360] usb 6-1: unable to get BOS descriptor or descriptor too short [ 99.102580][ T1360] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.106349][ T1360] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 0 [ 99.110407][ T1360] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.115915][ T1360] usb 6-1: config 1 interface 0 has no altsetting 0 [ 99.120330][ T1360] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.124030][ T1360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.127566][ T1360] usb 6-1: Product: syz [ 99.129280][ T1360] usb 6-1: Manufacturer: syz [ 99.131223][ T1360] usb 6-1: SerialNumber: syz [ 99.196100][ T1044] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 99.197033][ T41] usb 9-1: config 127 has an invalid interface number: 57 but max is 0 [ 99.201917][ T41] usb 9-1: config 127 has no interface number 0 [ 99.205900][ T41] usb 9-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 99.208916][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.211334][ T41] usb 9-1: Product: syz [ 99.212679][ T41] usb 9-1: Manufacturer: syz [ 99.214150][ T41] usb 9-1: SerialNumber: syz [ 99.335672][ T1044] usb 8-1: device descriptor read/64, error -71 [ 99.345083][ T1360] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 99.352423][ T1360] usb 6-1: USB disconnect, device number 16 [ 99.426702][ T41] asix 9-1:127.57: probe with driver asix failed with error -22 [ 99.434499][ T41] usb 9-1: USB disconnect, device number 6 [ 99.456059][ T1044] usb usb8-port1: attempt power cycle [ 99.795828][ T1044] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 99.816174][ T1044] usb 8-1: device descriptor read/8, error -71 [ 99.910438][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 99.910450][ T43] audit: type=1400 audit(1785239757.308:420): avc: denied { watch } for pid=6936 comm="syz.1.370" path="/122" dev="tmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 100.014517][ T43] audit: type=1400 audit(1785239757.408:421): avc: denied { mount } for pid=6940 comm="syz.2.372" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 100.065699][ T1044] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 100.086488][ T1044] usb 8-1: device descriptor read/8, error -71 [ 100.206013][ T1044] usb usb8-port1: unable to enumerate USB device [ 100.355618][ T43] audit: type=1400 audit(1785239757.758:422): avc: denied { audit_read } for pid=6959 comm="syz.4.380" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.768728][ T6978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6978 comm=syz.1.388 [ 101.701722][ T5750] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 101.731018][ T6998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.395'. [ 102.011868][ T43] audit: type=1400 audit(1785239759.408:423): avc: denied { create } for pid=7014 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.025627][ T1044] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 102.157076][ T1044] usb 6-1: device descriptor read/64, error -71 [ 102.191931][ T43] audit: type=1400 audit(1785239759.588:424): avc: denied { mounton } for pid=7024 comm="syz.3.408" path="/proc/216/task" dev="proc" ino=16867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 102.211095][ T43] audit: type=1400 audit(1785239759.608:425): avc: denied { associate } for pid=7026 comm="syz.3.408" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 102.406868][ T1044] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 102.535550][ T1044] usb 6-1: device descriptor read/64, error -71 [ 102.646310][ T1044] usb usb6-port1: attempt power cycle [ 102.706622][ T43] audit: type=1400 audit(1785239760.108:426): avc: denied { setopt } for pid=7040 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.741457][ T43] audit: type=1400 audit(1785239760.138:427): avc: denied { shutdown } for pid=7042 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.776076][ T7045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.416'. [ 102.799424][ T7045] ksmbd: Unknown IPC event: 0, ignore. [ 102.866704][ T7053] syzkaller0: entered promiscuous mode [ 102.868562][ T7053] syzkaller0: entered allmulticast mode qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 102.900973][ T43] audit: type=1400 audit(1785239760.298:428): avc: denied { write } for pid=7054 comm="syz.2.421" name="/" dev="9p" ino=78395229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.911331][ T43] audit: type=1400 audit(1785239760.298:429): avc: denied { add_name } for pid=7054 comm="syz.2.421" name="blkio.throttle.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.985750][ T1044] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 103.004639][ T7056] overlay: ./file0 is not a directory [ 103.006105][ T1044] usb 6-1: device descriptor read/8, error -71 [ 103.246650][ T1044] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 103.266942][ T1044] usb 6-1: device descriptor read/8, error -71 [ 103.375736][ T1044] usb usb6-port1: unable to enumerate USB device [ 103.417029][ T7064] FAULT_INJECTION: forcing a failure. [ 103.417029][ T7064] name failslab, interval 1, probability 0, space 0, times 1 [ 103.421094][ T7064] CPU: 1 UID: 0 PID: 7064 Comm: syz.3.426 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.421113][ T7064] Tainted: [L]=SOFTLOCKUP [ 103.421117][ T7064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.421123][ T7064] Call Trace: [ 103.421128][ T7064] [ 103.421133][ T7064] dump_stack_lvl+0x100/0x190 [ 103.421165][ T7064] should_fail_ex.cold+0x5/0xa [ 103.421180][ T7064] should_failslab+0xc2/0x120 [ 103.421195][ T7064] __kmalloc_noprof+0xfc/0x820 [ 103.421208][ T7064] ? rcu_is_watching+0x12/0xc0 [ 103.421226][ T7064] ? tomoyo_realpath_from_path+0xb6/0x690 [ 103.421245][ T7064] tomoyo_realpath_from_path+0xb6/0x690 [ 103.421259][ T7064] tomoyo_path_number_perm+0x23c/0x580 [ 103.421275][ T7064] ? tomoyo_path_number_perm+0x22e/0x580 [ 103.421294][ T7064] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 103.421324][ T7064] ? find_held_lock+0x2b/0x80 [ 103.421342][ T7064] ? __fget_files+0x215/0x3d0 [ 103.421352][ T7064] ? hook_file_ioctl_common+0x140/0x440 [ 103.421365][ T7064] ? __fget_files+0x215/0x3d0 [ 103.421378][ T7064] ? __fget_files+0x21f/0x3d0 [ 103.421392][ T7064] security_file_ioctl+0xd3/0x230 [ 103.421410][ T7064] __x64_sys_ioctl+0xb7/0x210 [ 103.421428][ T7064] do_syscall_64+0x115/0x870 [ 103.421445][ T7064] ? clear_bhb_loop+0x40/0x90 [ 103.421459][ T7064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.421471][ T7064] RIP: 0033:0x7fb3a379de99 [ 103.421481][ T7064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.421492][ T7064] RSP: 002b:00007fb3a459f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.421503][ T7064] RAX: ffffffffffffffda RBX: 00007fb3a3a25fa0 RCX: 00007fb3a379de99 [ 103.421510][ T7064] RDX: 0000200000000540 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 103.421517][ T7064] RBP: 00007fb3a459f090 R08: 0000000000000000 R09: 0000000000000000 [ 103.421524][ T7064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.421530][ T7064] R13: 00007fb3a3a26038 R14: 00007fb3a3a25fa0 R15: 00007ffc4ba6be18 [ 103.421544][ T7064] [ 103.421549][ T7064] ERROR: Out of memory at tomoyo_realpath_from_path. [ 104.352942][ T7081] xt_l2tp: invalid flags combination: 8 [ 104.458220][ T7084] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 104.519486][ T7084] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 104.522989][ T7084] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 104.526131][ T7084] CPU: 2 UID: 0 PID: 7084 Comm: syz.3.432 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.529469][ T7084] Tainted: [L]=SOFTLOCKUP [ 104.530850][ T7084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.533884][ T7084] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 104.535760][ T7084] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 104.543413][ T7084] RSP: 0018:ffffc90003737830 EFLAGS: 00010202 [ 104.545373][ T7084] RAX: dffffc0000000000 RBX: ffff88803f98c158 RCX: ffffc90007252000 [ 104.547654][ T7084] RDX: 00000000000000e6 RSI: ffffffff87e7a866 RDI: ffff88803f98c128 [ 104.550206][ T7084] RBP: ffff88803f98c150 R08: 0000000000000001 R09: 0000000000000000 [ 104.552753][ T7084] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000020 [ 104.555363][ T7084] R13: ffff88803f98c128 R14: ffff8880342d3120 R15: ffff88803f98c000 [ 104.557859][ T7084] FS: 00007fb3a459f6c0(0000) GS:ffff8880d5fdc000(0000) knlGS:0000000000000000 [ 104.560523][ T7084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.562487][ T7084] CR2: 0000001b33723ffc CR3: 000000003c9cd000 CR4: 0000000000352ef0 [ 104.564913][ T7084] Call Trace: [ 104.565953][ T7084] [ 104.566874][ T7084] ? f_midi2_unbind+0x146/0x800 [ 104.568341][ T7084] f_midi2_unbind+0x265/0x800 [ 104.569778][ T7084] ? __pfx_f_midi2_unbind+0x10/0x10 [ 104.571351][ T7084] purge_configs_funcs+0x285/0x510 [ 104.572867][ T7084] configfs_composite_bind+0xf2c/0x1960 [ 104.574575][ T7084] ? kernfs_create_link+0x1bd/0x240 [ 104.576144][ T7084] gadget_bind_driver+0x28c/0xbf0 [ 104.577728][ T7084] ? __pfx_gadget_bind_driver+0x10/0x10 [ 104.579576][ T7084] really_probe+0x241/0xa60 [ 104.581006][ T7084] __driver_probe_device+0x20e/0x450 [ 104.582653][ T7084] driver_probe_device+0x4a/0x140 [ 104.584243][ T7084] __driver_attach+0x21f/0x5b0 [ 104.585720][ T7084] ? __pfx___driver_attach+0x10/0x10 [ 104.587268][ T7084] bus_for_each_dev+0x13e/0x1d0 [ 104.588678][ T7084] ? __pfx_bus_for_each_dev+0x10/0x10 [ 104.590250][ T7084] ? bus_add_driver+0x2b5/0x5b0 [ 104.591709][ T7084] bus_add_driver+0x305/0x5b0 [ 104.593090][ T7084] driver_register+0x1e2/0x360 [ 104.594569][ T7084] usb_gadget_register_driver_owner+0x132/0x210 [ 104.596429][ T7084] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 104.598164][ T7084] configfs_write_iter+0x302/0x4e0 [ 104.599714][ T7084] vfs_write+0x6ac/0x1050 [ 104.601179][ T7084] ? __pfx_configfs_write_iter+0x10/0x10 [ 104.603149][ T7084] ? __pfx_vfs_write+0x10/0x10 [ 104.604774][ T7084] ksys_write+0x12a/0x250 [ 104.606203][ T7084] ? __pfx_ksys_write+0x10/0x10 [ 104.607729][ T7084] do_syscall_64+0x115/0x870 [ 104.609166][ T7084] ? clear_bhb_loop+0x40/0x90 [ 104.610643][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.612463][ T7084] RIP: 0033:0x7fb3a379de99 [ 104.613869][ T7084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.619799][ T7084] RSP: 002b:00007fb3a459f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.622442][ T7084] RAX: ffffffffffffffda RBX: 00007fb3a3a25fa0 RCX: 00007fb3a379de99 [ 104.625029][ T7084] RDX: 000000000000000c RSI: 0000200000001f00 RDI: 0000000000000007 [ 104.627346][ T7084] RBP: 00007fb3a3833eaf R08: 0000000000000000 R09: 0000000000000000 [ 104.629662][ T7084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.631978][ T7084] R13: 00007fb3a3a26038 R14: 00007fb3a3a25fa0 R15: 00007ffc4ba6be18 [ 104.634370][ T7084] [ 104.635370][ T7084] Modules linked in: [ 104.637196][ T7084] ---[ end trace 0000000000000000 ]--- [ 104.639172][ T7084] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 104.640978][ T7084] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 104.647019][ T7084] RSP: 0018:ffffc90003737830 EFLAGS: 00010202 [ 104.648863][ T7084] RAX: dffffc0000000000 RBX: ffff88803f98c158 RCX: ffffc90007252000 [ 104.651295][ T7084] RDX: 00000000000000e6 RSI: ffffffff87e7a866 RDI: ffff88803f98c128 [ 104.653671][ T7084] RBP: ffff88803f98c150 R08: 0000000000000001 R09: 0000000000000000 [ 104.656571][ T7084] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000020 [ 104.659058][ T7084] R13: ffff88803f98c128 R14: ffff8880342d3120 R15: ffff88803f98c000 [ 104.661870][ T7084] FS: 00007fb3a459f6c0(0000) GS:ffff8880d5fdc000(0000) knlGS:0000000000000000 [ 104.664746][ T7084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.667985][ T7084] CR2: 0000001b33723ffc CR3: 000000003c9cd000 CR4: 0000000000352ef0 [ 104.670685][ T7084] Kernel panic - not syncing: Fatal exception [ 104.673370][ T7084] Kernel Offset: disabled [ 104.674789][ T7084] Rebooting in 86400 seconds..