last executing test programs: 3.58989622s ago: executing program 4 (id=455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1008, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 3.19596611s ago: executing program 4 (id=459): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 3.004052617s ago: executing program 4 (id=462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b6800000cc9", 0x26, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xb, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.839291259s ago: executing program 4 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) 2.69449406s ago: executing program 4 (id=464): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.337040891s ago: executing program 1 (id=469): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[], 0x1a000}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.302226112s ago: executing program 1 (id=470): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e640000"], 0x3c}}, 0x4800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000110001002bbd7000fbdbdf2500000000", @ANYRES32=r2], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 1.923151752s ago: executing program 1 (id=473): open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000340)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r0 = open(&(0x7f0000000140)='.\x00', 0x20000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.819768437s ago: executing program 1 (id=475): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, r1, 0x5}, 0x10) 1.758347331s ago: executing program 1 (id=477): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) readv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x9) 1.742988203s ago: executing program 3 (id=478): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$qrtr(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1, 0x0, 0x0, 0x1}, 0x38, 0x40) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x48041}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@delneigh={0x1c, 0x1d, 0x400, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x0, 0x20, 0x64, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000814) 1.648857156s ago: executing program 2 (id=479): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 1.625698254s ago: executing program 0 (id=489): setrlimit(0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) setuid(0xee01) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001500)="b2", 0x1}], 0x1}}], 0x1, 0x4000090) 1.598358002s ago: executing program 3 (id=480): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r1 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x18}, @val={0x3, 0x4, 0x3, 0x7, 0xc5, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x1, 0x7, 0xd7, 0x68, 0x0, 0x5, 0x2f, 0x0, @empty=0x400300, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0xde, 0x1, 0x1, 0x1, 0x2, 0x4}, 0x1, {0x100}}}, {0x8, 0x22eb, 0x2, {{0xc, 0x2, 0x42, 0x0, 0x0, 0x1, 0x0, 0x81}, 0x2, {0x40, 0x200, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "c60a1891ee42184d6c69e305b7a82a3dc45a42e2df696a257241df4db187b59d0874adc6fb98f42729216e060dfdcd871da0abfa54faec83519f0646824d1b5a00d94d50e271907d6c9e61c5749b41dd2a7b85358dd8eca78f465505de1668b82968537985b5dc566f9e2256b0374f1f588a8443e824b9f2ca99fe25b89503"}}}}, 0xe5) 1.593256283s ago: executing program 2 (id=481): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getpid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x4, 0x29a13e, 0x1058a}) 1.548578957s ago: executing program 0 (id=482): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x820, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 1.53564821s ago: executing program 2 (id=483): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) fadvise64(r1, 0x3, 0x7, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) 1.507858851s ago: executing program 1 (id=484): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0xd17, 0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) recvmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000060, 0x0) 1.480629213s ago: executing program 0 (id=485): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.407352652s ago: executing program 3 (id=486): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$mouse(0x0, 0x0, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x43, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) 905.765668ms ago: executing program 3 (id=487): syz_open_dev$vbi(0x0, 0x0, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 904.609752ms ago: executing program 0 (id=498): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xe8df) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000940)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 737.704804ms ago: executing program 3 (id=488): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@code={0xa, 0x65, {"663e0f38f1355a3b0000460f01c90f2081b805000000b9002000000f01c1450f01cf410f005812420f216fb9800000c00f3235000800000f3048b87abccaf1000000000f23c00f21f83500000e000f23f8430f09"}}], 0x65}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x4c831, 0xffffffffffffffff, 0x1000000) 673.132801ms ago: executing program 0 (id=490): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x4000) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 574.462085ms ago: executing program 2 (id=491): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000540), 0x200080, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 350.073733ms ago: executing program 2 (id=492): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b", 0x4c}, {&(0x7f0000000a40)="6e1be7cad520a0841d111ea6e5331394badbf041eb1ff738c4cdc2518094edf6fb75990e5de4c5465ea2bb07dfb97fe0b2ea473e7db53d9719facd8dc99d1484be1803ed2d3aea2a3e80262113bf835e96682018a4a5aede22d0febc6347ee2c7c52313f8a7ad65f002e37c09736574e6bea88f9c8f7eb8bed4ed9ec49661e806d92ba5c0ba5c533c391bcc6b1f7980992806a80fab3fbd0e88c3ae46e60ca4e966f7358f198243a012f76b9706aaef378891b965e758afb2986f07f277431ce8eef068f0be7cd8d059784764685575beb44ee91494e1e6da2f322a3736c13894927de0bd5009f2cdc", 0xe9}, {&(0x7f0000000b40)="5051a8c0982b3b2dde64310aa3c76b31d1807add88136c7893922aa2aa40f1e81d2b13012b09bfceb3c97c458382f6bfe1a8c4e8309e32a6938bdf171cca83729eaf4fd561b352b1b4a456c168a3b4dd4d542388717f53f228eb78d512236cef90ef3a3f5d04988103c4e72f8d4ebfaf3c1e40e8b1e93db62285", 0x7a}, {&(0x7f0000000bc0)="05859a90752395d69c69e05a460931b3296c9f0e7bae5ca3bceb496491e5b49e2bf9e4134d2b1082af07c96d1456dc3ddd83f7e553f53b0aa1466a18b3d50ae74a17091fa8c74fc4ab3dd2390f95aeaac9573404ec941427c9c8d9d21b225dc218fcbf67f3e0490a27af620f2b51d92643d3c9", 0x73}], 0x4}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="9bb6070844984ef2b734ee2b740e32647974b7cfb8150605a2c635efcbc832fa56569acc96052ed730ec4473a0af21e1f7881620a9062897d734a7dac3c85d6973f29880e626e5e231b1b4edd98b9363876048487f344b980de2c6f0806915a8bb26e264035f0a378fe6662cfd45296d1cc391c761c06d689dd572f822269ffc2625c6d2a6d4228a91b303f6b9d8b45a6a9f8c7b49ec5bc49acd786101e2308bbaee6d51d8c582fe4bfedd220cae98dc1a86cbe3b3d03636b5c1c2951d9b0f18503ac03e3f52a34b9be308d86ced9df5c42e152849ff5ad87e599f2fd3af561520a835d3222667cb80625d2058ea5dcec77b644cb4927e43838cb632b09b823885e5729f163bdc6ab9725aa575d034c67d1985e0d1ac60f597a2747c3d6d6a366b9ab1f791d0ef4196371671865ad407d3d21586847479d116ebcd97848f0d846b4995eeb5aeed68a3b391c9b3005d6ab1ba83b799a7b1fc0cfbd5f17b87636f1fb152d26fd6e587c346ec7328af785abb3c79900f200031c65c088747256aa4", 0x180}], 0x1}}], 0x2, 0x42054) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0) 330.566568ms ago: executing program 0 (id=493): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 330.288009ms ago: executing program 2 (id=494): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c0400904000001030000000921090000012289"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x104, 0x8080) read$hiddev(r2, &(0x7f0000001140)=""/126, 0x7e) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)="10") 320.095363ms ago: executing program 3 (id=495): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0xffffffffffffff6b, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x1a0, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 0s ago: executing program 4 (id=496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe80000000ff000000000000000000aaff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. [ 45.226110][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 45.226124][ T29] audit: type=1400 audit(1782142067.566:129): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 45.255225][ T29] audit: type=1400 audit(1782142067.596:130): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 45.256510][ T5594] cgroup: Unknown subsys name 'net' [ 45.283725][ T29] audit: type=1400 audit(1782142067.626:131): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 45.421208][ T5594] cgroup: Unknown subsys name 'cpuset' [ 45.427862][ T5594] cgroup: Unknown subsys name 'rlimit' [ 45.542257][ T29] audit: type=1400 audit(1782142067.886:132): avc: denied { setattr } for pid=5594 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.569874][ T29] audit: type=1400 audit(1782142067.886:133): avc: denied { create } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.591202][ T29] audit: type=1400 audit(1782142067.886:134): avc: denied { write } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.614624][ T29] audit: type=1400 audit(1782142067.886:135): avc: denied { read } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.637991][ T29] audit: type=1400 audit(1782142067.886:136): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 45.638071][ T5596] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 45.663063][ T29] audit: type=1400 audit(1782142067.886:137): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 45.694773][ T29] audit: type=1400 audit(1782142068.016:138): avc: denied { relabelto } for pid=5596 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 46.534532][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.163126][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.165220][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.177764][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.184805][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.192018][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.198989][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.206297][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.213444][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.213640][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.220603][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.228941][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.241729][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.242343][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.248765][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.261988][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.269843][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.269972][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.277608][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.284459][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.291320][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.305331][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 48.312838][ T4927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 48.320920][ T4927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 48.328335][ T4927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 48.337475][ T4927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 48.837457][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.844727][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.852268][ T5616] bridge_slave_0: entered allmulticast mode [ 48.858603][ T5616] bridge_slave_0: entered promiscuous mode [ 48.871485][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.878582][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.885683][ T5616] bridge_slave_1: entered allmulticast mode [ 48.892027][ T5616] bridge_slave_1: entered promiscuous mode [ 48.930102][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.948125][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.965762][ T5616] team0: Port device team_slave_0 added [ 48.975607][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.982885][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.989991][ T5613] bridge_slave_0: entered allmulticast mode [ 48.996199][ T5613] bridge_slave_0: entered promiscuous mode [ 49.007412][ T5616] team0: Port device team_slave_1 added [ 49.013372][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.020595][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.027666][ T5613] bridge_slave_1: entered allmulticast mode [ 49.034001][ T5613] bridge_slave_1: entered promiscuous mode [ 49.064147][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.071211][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.097288][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.111395][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.124665][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.131696][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.157621][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.171059][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.222175][ T5613] team0: Port device team_slave_0 added [ 49.243763][ T5616] hsr_slave_0: entered promiscuous mode [ 49.250109][ T5616] hsr_slave_1: entered promiscuous mode [ 49.256783][ T5613] team0: Port device team_slave_1 added [ 49.314381][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.321794][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.347837][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.367043][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.374101][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.400153][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.441978][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.449081][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.456267][ T5606] bridge_slave_0: entered allmulticast mode [ 49.462603][ T5606] bridge_slave_0: entered promiscuous mode [ 49.472576][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.479648][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.486796][ T5609] bridge_slave_0: entered allmulticast mode [ 49.493090][ T5609] bridge_slave_0: entered promiscuous mode [ 49.503651][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.510749][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.517854][ T5606] bridge_slave_1: entered allmulticast mode [ 49.524264][ T5606] bridge_slave_1: entered promiscuous mode [ 49.533612][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.540776][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.547960][ T5609] bridge_slave_1: entered allmulticast mode [ 49.554518][ T5609] bridge_slave_1: entered promiscuous mode [ 49.584998][ T5613] hsr_slave_0: entered promiscuous mode [ 49.590875][ T5613] hsr_slave_1: entered promiscuous mode [ 49.596633][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 49.602376][ T5613] Cannot create hsr debugfs directory [ 49.617279][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.627646][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.637613][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.650376][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.657458][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.664826][ T5620] bridge_slave_0: entered allmulticast mode [ 49.671255][ T5620] bridge_slave_0: entered promiscuous mode [ 49.681817][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.697455][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.704601][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.711723][ T5620] bridge_slave_1: entered allmulticast mode [ 49.717962][ T5620] bridge_slave_1: entered promiscuous mode [ 49.740644][ T5606] team0: Port device team_slave_0 added [ 49.758174][ T5606] team0: Port device team_slave_1 added [ 49.764728][ T5609] team0: Port device team_slave_0 added [ 49.777263][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.790308][ T5609] team0: Port device team_slave_1 added [ 49.802889][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.815917][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.823063][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.849011][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.870411][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.877341][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.903341][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.914359][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.921580][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.947659][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.958767][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.965752][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.991701][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.008895][ T5620] team0: Port device team_slave_0 added [ 50.024695][ T5620] team0: Port device team_slave_1 added [ 50.049932][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.056899][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.082991][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.104726][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.111704][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.137572][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.154979][ T5606] hsr_slave_0: entered promiscuous mode [ 50.160948][ T5606] hsr_slave_1: entered promiscuous mode [ 50.166674][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 50.172412][ T5606] Cannot create hsr debugfs directory [ 50.179762][ T5609] hsr_slave_0: entered promiscuous mode [ 50.185948][ T5609] hsr_slave_1: entered promiscuous mode [ 50.191771][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 50.197478][ T5609] Cannot create hsr debugfs directory [ 50.212717][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.220722][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.233759][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.242170][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.251485][ T5620] hsr_slave_0: entered promiscuous mode [ 50.257337][ T5620] hsr_slave_1: entered promiscuous mode [ 50.263153][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 50.268851][ T5620] Cannot create hsr debugfs directory [ 50.280583][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.289163][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.296750][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.304539][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.329954][ T4927] Bluetooth: hci3: command tx timeout [ 50.329967][ T5611] Bluetooth: hci2: command tx timeout [ 50.364513][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.372459][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.390114][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.397880][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.412574][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.419932][ T4927] Bluetooth: hci1: command tx timeout [ 50.419976][ T5611] Bluetooth: hci4: command tx timeout [ 50.425317][ T5617] Bluetooth: hci0: command tx timeout [ 50.431863][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.454262][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.462160][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.530577][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.538348][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.546143][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.553949][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.561939][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.569726][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.577490][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.585356][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.623072][ T5606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.632835][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.645669][ T5606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.654550][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.662843][ T5606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.670920][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.679139][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.688840][ T5606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.697508][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.721290][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.736476][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.745283][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.758140][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.766663][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.774174][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.781987][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.789380][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.797183][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.806034][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.824811][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.833260][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.840334][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.848598][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.855668][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.886331][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.893414][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.908634][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.915724][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.927582][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.971019][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.994540][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.001654][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.020646][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.027778][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.051002][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.094117][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.127077][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.138505][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.145629][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.171722][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.178819][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.226537][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.251191][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.258302][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.286445][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.293675][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.319483][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.363895][ T5620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.423625][ T5616] veth0_vlan: entered promiscuous mode [ 51.451976][ T5616] veth1_vlan: entered promiscuous mode [ 51.489332][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.542218][ T5616] veth0_macvtap: entered promiscuous mode [ 51.562696][ T5616] veth1_macvtap: entered promiscuous mode [ 51.593506][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.606630][ T5613] veth0_vlan: entered promiscuous mode [ 51.620731][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.630989][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.647954][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.679959][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.697040][ T5613] veth1_vlan: entered promiscuous mode [ 51.707272][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.718401][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.729471][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.773265][ T5613] veth0_macvtap: entered promiscuous mode [ 51.805146][ T5613] veth1_macvtap: entered promiscuous mode [ 51.815570][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.828967][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.848492][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.865263][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.879839][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.894105][ T5606] veth0_vlan: entered promiscuous mode [ 51.899829][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.914778][ T5606] veth1_vlan: entered promiscuous mode [ 51.923692][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.924175][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 51.924185][ T29] audit: type=1400 audit(1782142074.266:152): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/root/syzkaller.GwM5BS/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 51.968970][ T29] audit: type=1400 audit(1782142074.306:153): avc: denied { mount } for pid=5616 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.987349][ T5620] veth0_vlan: entered promiscuous mode [ 51.992715][ T29] audit: type=1400 audit(1782142074.306:154): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/root/syzkaller.GwM5BS/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 52.030083][ T29] audit: type=1400 audit(1782142074.306:155): avc: denied { mount } for pid=5616 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 52.032708][ T147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.052510][ T29] audit: type=1400 audit(1782142074.306:156): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/root/syzkaller.GwM5BS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 52.063140][ T147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.090879][ T29] audit: type=1400 audit(1782142074.306:157): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/root/syzkaller.GwM5BS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 52.127621][ T29] audit: type=1400 audit(1782142074.306:158): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.128049][ T5616] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.148174][ T29] audit: type=1400 audit(1782142074.366:159): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 52.185289][ T29] audit: type=1400 audit(1782142074.366:160): avc: denied { mount } for pid=5616 comm="syz-executor" name="/" dev="gadgetfs" ino=7552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 52.192061][ T5620] veth1_vlan: entered promiscuous mode [ 52.210072][ T29] audit: type=1400 audit(1782142074.366:161): avc: denied { mount } for pid=5616 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 52.240046][ T147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.249042][ T147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.273238][ T5606] veth0_macvtap: entered promiscuous mode [ 52.282060][ T5606] veth1_macvtap: entered promiscuous mode [ 52.293868][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.309053][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.334361][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.357514][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.363529][ T5609] veth0_vlan: entered promiscuous mode [ 52.381422][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.390608][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.410327][ T4927] Bluetooth: hci3: command tx timeout [ 52.415834][ T5617] Bluetooth: hci2: command tx timeout [ 52.422570][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.431474][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.453508][ T5620] veth0_macvtap: entered promiscuous mode [ 52.467690][ T5609] veth1_vlan: entered promiscuous mode [ 52.476974][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.486752][ T5620] veth1_macvtap: entered promiscuous mode [ 52.490091][ T5617] Bluetooth: hci0: command tx timeout [ 52.493515][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.497863][ T4927] Bluetooth: hci1: command tx timeout [ 52.506436][ T5611] Bluetooth: hci4: command tx timeout [ 52.567432][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.593745][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.603930][ T5609] veth0_macvtap: entered promiscuous mode [ 52.611099][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.624320][ T5609] veth1_macvtap: entered promiscuous mode [ 52.637304][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.645468][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.675318][ T147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.682886][ T5802] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 52.690506][ T5802] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.697830][ T147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.701961][ T5802] vhci_hcd vhci_hcd.0: Device attached [ 52.720621][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.741266][ T147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.751027][ T147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.764739][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.772852][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.781599][ T147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.802773][ T147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.813967][ T147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.826948][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.838348][ T147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.841253][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.874222][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.893582][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.930776][ T9] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 52.947498][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.966420][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.980277][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 53.000961][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.018833][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.150175][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 53.158547][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 53.169838][ T5803] vhci_hcd: connection closed [ 53.170159][ T10] usb 4-1: no configurations [ 53.171263][ T48] vhci_hcd vhci_hcd.3: stop threads [ 53.178032][ T10] usb 4-1: can't read configurations, error -22 [ 53.186605][ T48] vhci_hcd vhci_hcd.3: release socket [ 53.215235][ T48] vhci_hcd vhci_hcd.3: disconnect device [ 53.240287][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 53.930061][ T5805] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 53.979978][ T5706] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 54.103505][ T5805] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.120119][ T5805] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 54.140644][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.151535][ T5805] usb 2-1: config 0 descriptor?? [ 54.165228][ T5805] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 54.181822][ T5706] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 54.194712][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.206551][ T5706] usb 1-1: config 0 descriptor?? [ 54.215165][ T5706] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 54.301883][ T5866] netlink: 7 bytes leftover after parsing attributes in process `syz.3.28'. [ 54.438557][ T5834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.449680][ T5834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.463419][ T5705] usb 2-1: USB disconnect, device number 2 [ 54.490019][ T5617] Bluetooth: hci3: command tx timeout [ 54.496645][ T5611] Bluetooth: hci2: command tx timeout [ 54.571931][ T5611] Bluetooth: hci1: command tx timeout [ 54.577404][ T5617] Bluetooth: hci4: command tx timeout [ 54.577428][ T4927] Bluetooth: hci0: command tx timeout [ 54.908633][ T5887] netlink: 'syz.4.36': attribute type 10 has an invalid length. [ 54.925585][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.942967][ T5887] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 54.964933][ T5887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.978665][ T5887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.999628][ T5887] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 55.014802][ T5887] bond0 (unregistering): Released all slaves [ 55.035816][ T5706] usb 1-1: USB disconnect, device number 2 [ 55.117745][ T5893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.39'. [ 55.189934][ T5705] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 55.212499][ T5897] syz.4.41 uses obsolete (PF_INET,SOCK_PACKET) [ 55.351409][ T5705] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 55.361439][ T5705] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 55.374709][ T5705] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 55.398235][ T5705] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 55.420157][ T5705] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 55.435904][ T5705] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 55.464468][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 55.478127][ T5705] usb 3-1: Product: syz [ 55.484543][ T5705] usb 3-1: Manufacturer: syz [ 55.507181][ T5900] netlink: 'syz.3.42': attribute type 4 has an invalid length. [ 55.518672][ T5705] cdc_wdm 3-1:1.0: skipping garbage [ 55.524753][ T5705] cdc_wdm 3-1:1.0: skipping garbage [ 55.553371][ T5705] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 55.560047][ T5705] cdc_wdm 3-1:1.0: Unknown control protocol [ 55.563817][ T5900] netlink: 'syz.3.42': attribute type 4 has an invalid length. [ 55.649338][ T5705] IPVS: starting estimator thread 0... [ 55.665179][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.672513][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.740389][ T5903] IPVS: using max 72 ests per chain, 172800 per kthread [ 55.802878][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.832702][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.861783][ T2168] usb 3-1: USB disconnect, device number 2 [ 55.982887][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.001263][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.020795][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.035402][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.120013][ T5705] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 56.181905][ T5922] process 'syz.2.50' launched './file1' with NULL argv: empty string added [ 56.290325][ T5705] usb 1-1: Using ep0 maxpacket: 8 [ 56.301099][ T5705] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 56.319531][ T5705] usb 1-1: config 179 has no interface number 0 [ 56.327393][ T5705] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 56.351667][ T5705] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 56.373380][ T5705] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 56.396214][ T5705] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 56.417807][ T5705] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 56.444537][ T5705] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 56.463001][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.482505][ T5912] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 56.570192][ T4927] Bluetooth: hci2: command tx timeout [ 56.570567][ T5611] Bluetooth: hci3: command tx timeout [ 56.651095][ T5611] Bluetooth: hci1: command tx timeout [ 56.651143][ T4927] Bluetooth: hci4: command tx timeout [ 56.656539][ T5617] Bluetooth: hci0: command tx timeout [ 56.837919][ T5705] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 56.998061][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 56.998077][ T29] audit: type=1400 audit(1782142079.336:233): avc: denied { name_connect } for pid=5933 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 57.083906][ T5912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.115287][ T5912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.133769][ T29] audit: type=1400 audit(1782142079.476:234): avc: denied { read } for pid=5935 comm="syz.4.55" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.219518][ T29] audit: type=1400 audit(1782142079.506:235): avc: denied { open } for pid=5935 comm="syz.4.55" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.282816][ T29] audit: type=1400 audit(1782142079.616:236): avc: denied { append } for pid=5937 comm="syz.4.56" name="001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 57.371806][ T5938] Zero length message leads to an empty skb [ 57.427806][ T5726] usb 1-1: USB disconnect, device number 3 [ 57.433736][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 57.433775][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 57.679909][ T29] audit: type=1400 audit(1782142080.016:237): avc: denied { read } for pid=5942 comm="syz.3.59" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.691069][ T5705] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 57.715879][ T29] audit: type=1400 audit(1782142080.016:238): avc: denied { open } for pid=5942 comm="syz.3.59" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.740177][ T29] audit: type=1400 audit(1782142080.056:239): avc: denied { ioctl } for pid=5942 comm="syz.3.59" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.765394][ T29] audit: type=1400 audit(1782142080.056:240): avc: denied { set_context_mgr } for pid=5942 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 57.859865][ T5705] usb 2-1: Using ep0 maxpacket: 8 [ 57.894935][ T5705] usb 2-1: unable to get BOS descriptor or descriptor too short [ 57.906887][ T5705] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 57.921847][ T5705] usb 2-1: can't read configurations, error -71 [ 58.019807][ T29] audit: type=1400 audit(1782142080.356:241): avc: denied { read } for pid=5952 comm="syz.0.61" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 58.064390][ T29] audit: type=1400 audit(1782142080.356:242): avc: denied { open } for pid=5952 comm="syz.0.61" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 58.752869][ T5964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.819039][ T5964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.685498][ T5996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.77'. [ 59.720216][ T5719] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 60.091367][ T5719] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 60.825850][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.839465][ T5719] usb 4-1: config 0 descriptor?? [ 61.074072][ T5719] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 61.098376][ T5719] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 61.115625][ T5719] [drm] Initialized udl on minor 2 [ 61.289925][ T5726] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 61.451097][ T5726] usb 2-1: config 0 has no interfaces? [ 61.459215][ T5726] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 61.474249][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.490303][ T5719] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 61.492666][ T5726] usb 2-1: Product: syz [ 61.503206][ T5719] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 61.512651][ T5726] usb 2-1: Manufacturer: syz [ 61.522005][ T5719] usb 4-1: USB disconnect, device number 4 [ 61.522086][ T5726] usb 2-1: SerialNumber: syz [ 61.529501][ T5706] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 61.554040][ T5706] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 61.554743][ T5726] usb 2-1: config 0 descriptor?? [ 62.034460][ T24] usb 2-1: USB disconnect, device number 5 [ 62.268182][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 62.268199][ T29] audit: type=1400 audit(1782142084.606:270): avc: denied { mount } for pid=6048 comm="syz.2.96" name="/" dev="ramfs" ino=10384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 62.363944][ T6051] overlay: filesystem on ./file0 not supported [ 62.370399][ T29] audit: type=1400 audit(1782142084.706:271): avc: denied { mount } for pid=6050 comm="syz.2.97" name="/" dev="autofs" ino=10133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 62.414348][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.98'. [ 62.424742][ T29] audit: type=1400 audit(1782142084.706:272): avc: denied { mounton } for pid=6050 comm="syz.2.97" path="/file0" dev="autofs" ino=10134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 62.476384][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.98'. [ 62.486902][ T29] audit: type=1400 audit(1782142084.826:273): avc: denied { setopt } for pid=6054 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.519928][ T29] audit: type=1400 audit(1782142084.826:274): avc: denied { write } for pid=6054 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.704749][ T29] audit: type=1400 audit(1782142085.046:275): avc: denied { name_bind } for pid=6061 comm="syz.1.103" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 62.737366][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 62.759227][ T29] audit: type=1400 audit(1782142085.066:276): avc: denied { bind } for pid=6061 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.803737][ T29] audit: type=1400 audit(1782142085.126:277): avc: denied { name_connect } for pid=6061 comm="syz.1.103" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 62.939831][ T5726] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.042301][ T29] audit: type=1400 audit(1782142085.386:278): avc: denied { create } for pid=6066 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.082430][ T29] audit: type=1400 audit(1782142085.406:279): avc: denied { ioctl } for pid=6066 comm="syz.1.104" path="socket:[10176]" dev="sockfs" ino=10176 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.112947][ T5726] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.128667][ T5726] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 63.143530][ T5726] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 63.159255][ T5726] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 63.172184][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.186094][ T6064] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 63.799455][ T6094] netlink: 'syz.0.116': attribute type 1 has an invalid length. [ 64.433859][ T6108] netlink: 'syz.1.122': attribute type 1 has an invalid length. [ 64.467003][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'. [ 64.481394][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.123'. [ 64.556876][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'. [ 64.578975][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.124'. [ 64.655778][ T6121] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 64.698667][ T6121] bond1: entered promiscuous mode [ 64.713457][ T6121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.737612][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'. [ 64.747062][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'. [ 64.748757][ T6127] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 64.822928][ T6121] bond1: (slave bridge3): making interface the new active one [ 64.832018][ T6121] bridge3: entered promiscuous mode [ 64.848260][ T6121] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 65.323279][ T5726] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 65.337300][ T5726] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input6 [ 65.371982][ T5726] usb 5-1: USB disconnect, device number 2 [ 65.377876][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 65.543354][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.139'. [ 65.553983][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'. [ 65.774954][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.783234][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.804842][ T6170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.145'. [ 66.190827][ T5705] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 66.259919][ T6195] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 66.289852][ T5726] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 66.399427][ T5705] usb 2-1: unable to get BOS descriptor or descriptor too short [ 66.419348][ T5705] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 66.438378][ T5705] usb 2-1: can't read configurations, error -71 [ 66.459835][ T5726] usb 3-1: Using ep0 maxpacket: 8 [ 66.471364][ T5726] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 66.486556][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.496867][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.159'. [ 66.506120][ T5726] usb 3-1: Product: syz [ 66.511814][ T5726] usb 3-1: Manufacturer: syz [ 66.520469][ T5726] usb 3-1: SerialNumber: syz [ 66.531144][ T5726] usb 3-1: config 0 descriptor?? [ 66.746651][ T5726] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 66.900617][ T24] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 67.061057][ T24] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 67.072469][ T24] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 67.083806][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 67.092010][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 67.101179][ T24] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 67.109355][ T24] usb 1-1: Product: syz [ 67.114052][ T24] usb 1-1: Manufacturer: syz [ 67.118660][ T24] usb 1-1: SerialNumber: syz [ 67.127288][ T24] usb 1-1: config 0 descriptor?? [ 67.133741][ T6209] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 67.154211][ T24] usb 1-1: selecting invalid altsetting 0 [ 67.335115][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 67.335129][ T29] audit: type=1400 audit(1782142089.676:312): avc: denied { mount } for pid=6231 comm="syz.3.171" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 67.368673][ T6232] xt_hashlimit: max too large, truncated to 1048576 [ 67.389715][ T29] audit: type=1400 audit(1782142089.726:313): avc: denied { read write } for pid=5613 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.418534][ T6209] usb 1-1: BOGUS urb xfer, pipe 0 != type 1 [ 67.432946][ T29] audit: type=1400 audit(1782142089.726:314): avc: denied { open } for pid=5613 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.458524][ T29] audit: type=1400 audit(1782142089.736:315): avc: denied { ioctl } for pid=5613 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.505904][ T29] audit: type=1400 audit(1782142089.756:316): avc: denied { read append } for pid=6236 comm="syz.3.173" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.535060][ T29] audit: type=1400 audit(1782142089.756:317): avc: denied { open } for pid=6236 comm="syz.3.173" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.589591][ T5706] usb 1-1: USB disconnect, device number 4 [ 67.589599][ C1] usb 1-1: Unable to submit urb #1: -19 at snd_usb_queue_pending_output_urbs [ 67.605032][ T6209] usb 1-1: cannot submit urb 0, error -19: no device [ 67.630584][ T29] audit: type=1400 audit(1782142089.756:318): avc: denied { map } for pid=6236 comm="syz.3.173" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.723208][ T5705] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 67.751267][ T29] audit: type=1400 audit(1782142089.756:319): avc: denied { execute } for pid=6236 comm="syz.3.173" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.784297][ T29] audit: type=1400 audit(1782142089.826:320): avc: denied { read write } for pid=6208 comm="syz.0.163" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.809852][ T29] audit: type=1400 audit(1782142089.826:321): avc: denied { open } for pid=6208 comm="syz.0.163" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.900872][ T5705] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 67.911359][ T5705] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 67.923132][ T5705] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 67.936143][ T5705] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 67.946561][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.954822][ T5705] usb 2-1: Product: syz [ 67.959330][ T5705] usb 2-1: Manufacturer: syz [ 67.964301][ T5705] usb 2-1: SerialNumber: syz [ 67.971607][ T5705] usb 2-1: config 0 descriptor?? [ 67.977026][ T6235] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 67.984660][ T6235] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 67.993905][ T5705] usb 2-1: ucan: probing device on interface #0 [ 68.279859][ T804] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 68.431308][ T804] usb 4-1: unable to get BOS descriptor or descriptor too short [ 68.439352][ T804] usb 4-1: not running at top speed; connect to a high speed hub [ 68.447897][ T804] usb 4-1: config 174 has an invalid interface number: 117 but max is 0 [ 68.456518][ T804] usb 4-1: config 174 has an invalid descriptor of length 0, skipping remainder of the config [ 68.458392][ T1168] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 68.466864][ T804] usb 4-1: config 174 has no interface number 0 [ 68.466895][ T804] usb 4-1: config 174 interface 117 altsetting 184 endpoint 0xF has an invalid bInterval 67, changing to 4 [ 68.491199][ T804] usb 4-1: config 174 interface 117 altsetting 184 endpoint 0xF has invalid maxpacket 22877, setting to 1023 [ 68.502791][ T804] usb 4-1: config 174 interface 117 altsetting 184 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 68.516141][ T804] usb 4-1: config 174 interface 117 has no altsetting 0 [ 68.525831][ T804] usb 4-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=19.6d [ 68.535030][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.543103][ T804] usb 4-1: Product: syz [ 68.547316][ T804] usb 4-1: Manufacturer: syz [ 68.551960][ T804] usb 4-1: SerialNumber: syz [ 68.600051][ T5726] usb write operation failed. (-71) [ 68.607643][ T5726] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 68.618712][ T5705] ucan 2-1:0.0 can0: registered device [ 68.624368][ T5726] dvbdev: DVB: registering new adapter (Terratec H7) [ 68.631175][ T5726] usb 3-1: media controller created [ 68.636606][ T5726] usb read operation failed. (-71) [ 68.642048][ T5726] usb write operation failed. (-71) [ 68.648423][ T5726] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 68.659703][ T5726] usb 3-1: USB disconnect, device number 3 [ 68.768106][ T804] rtl8150 4-1:174.117: couldn't find required endpoints [ 68.775718][ T804] rtl8150 4-1:174.117: probe with driver rtl8150 failed with error -5 [ 68.786540][ T804] usb 4-1: USB disconnect, device number 5 [ 68.856089][ T5705] ucan 2-1:0.0 can0: firmware string: unknown [ 68.864401][ T5705] usb 2-1: USB disconnect, device number 8 [ 68.994379][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.002700][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.010473][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.017897][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.367378][ T6294] ======================================================= [ 70.367378][ T6294] WARNING: The mand mount option has been deprecated and [ 70.367378][ T6294] and is ignored by this kernel. Remove the mand [ 70.367378][ T6294] option from the mount to silence this warning. [ 70.367378][ T6294] ======================================================= [ 70.548545][ T6303] kvm: kvm [6302]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 70.599854][ T804] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 70.760717][ T804] usb 2-1: Using ep0 maxpacket: 32 [ 70.767355][ T804] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 70.775777][ T804] usb 2-1: config 0 has no interface number 0 [ 70.782052][ T6312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.200'. [ 70.791226][ T804] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 70.811170][ T804] usb 2-1: config 0 interface 196 has no altsetting 0 [ 70.820560][ T804] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 70.827762][ T6312] netlink: 128 bytes leftover after parsing attributes in process `syz.4.200'. [ 70.829828][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.847050][ T804] usb 2-1: Product: syz [ 70.851932][ T804] usb 2-1: Manufacturer: syz [ 70.856658][ T804] usb 2-1: SerialNumber: syz [ 70.867201][ T804] usb 2-1: config 0 descriptor?? [ 70.874690][ T6295] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.894729][ T42] cfg80211: failed to load regulatory.db [ 71.314251][ T804] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 71.332259][ T804] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 71.362524][ T804] usb 2-1: USB disconnect, device number 9 [ 71.402141][ T6264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 71.520311][ T6348] io-wq is not configured for unbound workers [ 72.346966][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 72.346983][ T29] audit: type=1400 audit(1782142094.686:362): avc: denied { read append } for pid=6415 comm="syz.1.226" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.401907][ T1174] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 72.415825][ T29] audit: type=1400 audit(1782142094.726:363): avc: denied { open } for pid=6415 comm="syz.1.226" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.239453][ T6448] warning: `syz.0.240' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.310038][ T5726] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 74.315816][ T5726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.328003][ T5726] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 74.337108][ T5726] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 74.346189][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.367480][ T5726] usb 2-1: config 0 descriptor?? [ 74.426493][ T29] audit: type=1400 audit(1782142096.766:364): avc: denied { read write } for pid=6459 comm="syz.0.247" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 74.462912][ T29] audit: type=1400 audit(1782142096.766:365): avc: denied { open } for pid=6459 comm="syz.0.247" path="/53/file0/file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 74.521972][ T29] audit: type=1400 audit(1782142096.866:366): avc: denied { read write } for pid=6470 comm="syz.3.251" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.582957][ T29] audit: type=1400 audit(1782142096.866:367): avc: denied { open } for pid=6470 comm="syz.3.251" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.656956][ T29] audit: type=1400 audit(1782142096.966:368): avc: denied { read } for pid=6473 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.694716][ T5726] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 74.712722][ T5726] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.100489][ T6490] kvm: MONITOR instruction emulated as NOP! [ 75.176733][ T6493] kvm: kvm [6492]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x1 [ 75.228301][ T29] audit: type=1400 audit(1782142097.566:369): avc: denied { write } for pid=6470 comm="syz.3.251" name="hidraw0" dev="devtmpfs" ino=2847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 75.569841][ T5726] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 75.645889][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 75.655154][ T6514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.673758][ T6514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.688060][ T29] audit: type=1400 audit(1782142098.026:370): avc: denied { bind } for pid=6515 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.734121][ T5726] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 75.749993][ T5726] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.765959][ T5726] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 75.794442][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.268'. [ 75.800651][ T5726] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.823115][ T5726] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.832631][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.833427][ T6520] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 75.850086][ T5726] usb 1-1: Product: syz [ 75.854406][ T5726] usb 1-1: Manufacturer: syz [ 75.863413][ T5726] cdc_wdm 1-1:1.0: skipping garbage [ 75.864877][ T6520] batman_adv: batadv0: Adding interface: gretap1 [ 75.869898][ T5726] cdc_wdm 1-1:1.0: skipping garbage [ 75.875286][ T6520] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.890571][ T5726] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 75.906543][ T6520] batman_adv: batadv0: Interface activated: gretap1 [ 75.911660][ T5726] cdc_wdm 1-1:1.0: Unknown control protocol [ 76.060857][ T29] audit: type=1400 audit(1782142098.396:371): avc: denied { mounton } for pid=6527 comm="syz.3.272" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 76.067849][ T5726] usb 2-1: USB disconnect, device number 10 [ 76.130574][ T6528] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 76.209166][ T6533] netlink: 36 bytes leftover after parsing attributes in process `syz.3.274'. [ 76.909833][ T5726] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 77.060923][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.072347][ T5726] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 77.082557][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.092645][ T5726] usb 4-1: config 0 descriptor?? [ 77.304901][ T5726] usbhid 4-1:0.0: can't add hid device: -71 [ 77.311835][ T5726] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 77.321883][ T5726] usb 4-1: USB disconnect, device number 6 [ 77.530264][ T804] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 77.680944][ T804] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.689624][ T804] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 77.699972][ T804] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.708983][ T804] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 77.720009][ T804] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 77.732191][ T804] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.741360][ T804] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.749362][ T804] usb 3-1: Product: syz [ 77.753564][ T804] usb 3-1: Manufacturer: syz [ 77.760278][ T2168] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 77.769816][ T804] cdc_wdm 3-1:1.0: skipping garbage [ 77.775369][ T804] cdc_wdm 3-1:1.0: skipping garbage [ 77.781207][ T804] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 77.787108][ T804] cdc_wdm 3-1:1.0: Unknown control protocol [ 77.931318][ T2168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.942280][ T2168] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 77.951331][ T2168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.960361][ T2168] usb 4-1: config 0 descriptor?? [ 77.982841][ T804] usb 3-1: USB disconnect, device number 4 [ 78.094880][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 78.094896][ T29] audit: type=1400 audit(1782142100.436:382): avc: denied { read } for pid=6566 comm="syz.1.289" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 78.102373][ T6568] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.123275][ T29] audit: type=1400 audit(1782142100.436:383): avc: denied { open } for pid=6566 comm="syz.1.289" path="/49/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 78.156494][ T6568] block device autoloading is deprecated and will be removed. [ 78.190228][ T29] audit: type=1400 audit(1782142100.536:384): avc: denied { read write } for pid=6562 comm="syz.2.287" name="event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.221209][ T29] audit: type=1400 audit(1782142100.536:385): avc: denied { open } for pid=6562 comm="syz.2.287" path="/dev/input/event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.307896][ T42] usb 1-1: USB disconnect, device number 5 [ 78.572749][ T6554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.584094][ T6554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.591645][ T6591] syz.0.299 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 78.600828][ T29] audit: type=1400 audit(1782142100.926:386): avc: denied { getopt } for pid=6590 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.689846][ T5719] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 78.718549][ T29] audit: type=1400 audit(1782142101.056:387): avc: denied { setopt } for pid=6595 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.719233][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 78.749625][ T6593] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 78.780601][ T2168] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 78.789534][ T2168] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 78.805068][ T29] audit: type=1400 audit(1782142101.146:388): avc: denied { mmap_zero } for pid=6597 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 78.841161][ T5719] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 78.854433][ T5719] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 78.865314][ T5719] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 78.874744][ T5719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 78.885888][ T5719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 78.917617][ T5719] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 78.939119][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 78.948464][ T5719] usb 3-1: Product: syz [ 78.952742][ T29] audit: type=1400 audit(1782142101.286:389): avc: denied { read } for pid=6601 comm="syz.1.304" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.975369][ T5719] usb 3-1: Manufacturer: syz [ 78.992999][ T5719] cdc_wdm 3-1:1.0: skipping garbage [ 78.998991][ T5719] cdc_wdm 3-1:1.0: skipping garbage [ 79.005953][ T5719] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 79.012202][ T29] audit: type=1400 audit(1782142101.286:390): avc: denied { open } for pid=6601 comm="syz.1.304" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.035235][ T5719] cdc_wdm 3-1:1.0: Unknown control protocol [ 79.044150][ T29] audit: type=1400 audit(1782142101.296:391): avc: denied { ioctl } for pid=6601 comm="syz.1.304" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.255607][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.261288][ C1] cdc_wdm 3-1:1.0: Cannot schedule work [ 79.267038][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.272835][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.278627][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.284414][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.290201][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.295991][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.301776][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.305473][ T5719] usb 4-1: USB disconnect, device number 7 [ 79.305507][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 79.307791][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.321858][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.333062][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.338854][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.344621][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.350432][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.350603][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.350630][ C1] cdc_wdm 3-1:1.0: Cannot schedule work [ 79.350800][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.350968][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.351134][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.351301][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.351468][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.351634][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 79.351666][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.351829][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.351852][ C1] cdc_wdm 3-1:1.0: Cannot schedule work [ 79.352016][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.352188][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.352381][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.352406][ C1] cdc_wdm 3-1:1.0: Cannot schedule work [ 79.352574][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.352599][ C1] cdc_wdm 3-1:1.0: Cannot schedule work [ 79.352770][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.352792][ C1] cdc_wdm 3-1:1.0: Cannot schedule work [ 79.352973][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.352994][ C1] cdc_wdm 3-1:1.0: Cannot schedule work [ 79.353158][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.353179][ C1] cdc_wdm 3-1:1.0: Cannot schedule work [ 79.353343][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.353510][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.353677][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.353699][ C1] cdc_wdm 3-1:1.0: Cannot schedule work [ 79.353874][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.353898][ C1] cdc_wdm 3-1:1.0: Cannot schedule work [ 79.354064][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.354240][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.534315][ C1] cdc_wdm 3-1:1.0: Cannot schedule work [ 79.540670][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.546498][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.552300][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.558065][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.563833][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.569598][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.575378][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.581166][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.586955][ C1] cdc_wdm 3-1:1.0: Stall on int endpoint [ 79.592610][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 79.601755][ T5706] usb 3-1: USB disconnect, device number 5 [ 79.648451][ T6623] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.311'. [ 79.663559][ T6623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.311'. [ 79.904048][ T6639] sock: sock_set_timeout: `syz.4.319' (pid 6639) tries to set negative timeout [ 81.481786][ T6659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.573250][ T6667] evm: overlay not supported [ 81.710093][ T804] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 81.820480][ T5726] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.882481][ T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.900233][ T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.910327][ T804] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 81.919375][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.928877][ T804] usb 1-1: config 0 descriptor?? [ 81.959852][ T5706] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 81.989878][ T5726] usb 5-1: Using ep0 maxpacket: 8 [ 81.998945][ T5726] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 82.014170][ T5726] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.033045][ T5726] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.050344][ T5726] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.061830][ T5726] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.077426][ T5726] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 82.087846][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.132272][ T5706] usb 3-1: Using ep0 maxpacket: 32 [ 82.290947][ T5706] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 82.330014][ T1174] wlan1: Trigger new scan to find an IBSS to join [ 82.334747][ T5726] usb 5-1: usb_control_msg returned -32 [ 82.378436][ T5726] usbtmc 5-1:16.0: can't read capabilities [ 82.379009][ T5706] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 82.388077][ T5726] usb 5-1: USB disconnect, device number 3 [ 82.430512][ T5706] usb 3-1: config 0 has no interface number 0 [ 82.451940][ T5706] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 82.473448][ T5706] usb 3-1: config 0 has no interface number 0 [ 82.488596][ T5706] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 82.509889][ T5706] usb 3-1: config 0 has no interface number 0 [ 82.522380][ T5706] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 82.537759][ T5706] usb 3-1: config 0 has no interface number 0 [ 82.546630][ T5706] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 82.558559][ T5706] usb 3-1: config 0 has no interface number 0 [ 82.567336][ T5706] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 82.576159][ T5706] usb 3-1: config 0 has no interface number 0 [ 82.584011][ T5706] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 82.584599][ T804] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 82.593330][ T5706] usb 3-1: config 0 has no interface number 0 [ 82.606099][ T5706] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 82.636603][ T804] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 82.645372][ T5706] usb 3-1: config 0 has no interface number 0 [ 82.655939][ T804] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 82.672964][ T804] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 82.689716][ T804] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 82.689859][ T5706] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 82.706505][ T804] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 82.726044][ T6686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.736321][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.744465][ T5706] usb 3-1: Product: syz [ 82.749928][ T5706] usb 3-1: Manufacturer: syz [ 82.753099][ T804] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 82.779505][ T5706] usb 3-1: SerialNumber: syz [ 82.786472][ T804] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 82.790387][ T5706] usb 3-1: config 0 descriptor?? [ 82.823786][ T5706] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 82.862910][ T6694] kvm: kvm [6693]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 82.873536][ T804] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 83.032788][ T6699] loop9: detected capacity change from 0 to 255852544 [ 83.082914][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.094532][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.102694][ T6699] loop9: detected capacity change from 255852544 to 524287871 [ 83.150127][ T6700] Invalid logical block size (4) [ 83.161304][ T6227] Buffer I/O error on dev loop9, logical block 65535983, async page read [ 83.396260][ T5706] etas_es58x 3-1:0.2: could not parse product info: '424242424242' [ 83.436615][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 83.436630][ T29] audit: type=1400 audit(1782142105.776:398): avc: denied { search } for pid=5272 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.492831][ T29] audit: type=1400 audit(1782142105.776:399): avc: denied { search } for pid=5272 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.516326][ T29] audit: type=1400 audit(1782142105.776:400): avc: denied { search } for pid=5272 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.569244][ T29] audit: type=1400 audit(1782142105.776:401): avc: denied { read } for pid=5272 comm="dhcpcd" name="n31" dev="tmpfs" ino=3472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.598684][ T29] audit: type=1400 audit(1782142105.776:402): avc: denied { open } for pid=5272 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=3472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.648380][ T29] audit: type=1400 audit(1782142105.776:403): avc: denied { getattr } for pid=5272 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=3472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.688422][ T29] audit: type=1400 audit(1782142105.896:404): avc: denied { read } for pid=6711 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.720805][ T29] audit: type=1400 audit(1782142105.896:405): avc: denied { read open } for pid=6711 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.747676][ T29] audit: type=1400 audit(1782142105.896:406): avc: denied { getattr } for pid=6711 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.855352][ T804] usb 1-1: USB disconnect, device number 6 [ 83.870767][ T29] audit: type=1400 audit(1782142106.216:407): avc: denied { write } for pid=6710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.015916][ T5272] etas_es58x 3-1:0.2 can0: bit-timing not yet defined [ 84.024092][ C1] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 84.032180][ C1] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 84.039841][ C1] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 84.047469][ C1] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 84.055105][ C1] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 84.068613][ T5272] etas_es58x 3-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 84.219973][ T804] usb 3-1: USB disconnect, device number 6 [ 84.226738][ T804] etas_es58x 3-1:0.2: Disconnecting syz syz [ 84.508401][ T6758] netlink: 96 bytes leftover after parsing attributes in process `syz.0.346'. [ 84.851197][ T5706] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 85.139919][ T5706] usb 2-1: Using ep0 maxpacket: 32 [ 85.157469][ T6786] sd 0:0:1:0: PR command failed: 1026 [ 85.167300][ T5706] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.191276][ T6786] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 85.209681][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.221040][ T6786] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 85.249261][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 85.283969][ T5706] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 85.322316][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.345814][ T5706] usb 2-1: config 0 descriptor?? [ 85.366832][ T5706] hub 2-1:0.0: USB hub found [ 85.372649][ T212] wlan1: Trigger new scan to find an IBSS to join [ 85.389497][ T6808] netlink: 'syz.0.354': attribute type 1 has an invalid length. [ 85.452284][ T6808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.474755][ T6816] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 85.516009][ T6816] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 85.567555][ T6825] capability: warning: `syz.4.356' uses deprecated v2 capabilities in a way that may be insecure [ 85.591400][ T5706] hub 2-1:0.0: 1 port detected [ 86.180049][ T804] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.217573][ T5706] hub 2-1:0.0: activate --> -90 [ 86.341049][ T804] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.359872][ T804] usb 5-1: config 0 has no interface number 0 [ 86.374120][ T804] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.398770][ T804] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.424885][ T804] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 86.445380][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.473314][ T804] usb 5-1: config 0 descriptor?? [ 86.634843][ T5706] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 86.635112][ T5726] usb 2-1: USB disconnect, device number 11 [ 86.694934][ T6869] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 86.976581][ T6875] netlink: 'syz.3.367': attribute type 1 has an invalid length. [ 87.022415][ T6875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.130613][ T6877] netlink: 'syz.3.367': attribute type 10 has an invalid length. [ 87.138426][ T6877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.367'. [ 87.885306][ T6875] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 87.894701][ T6877] dummy0: entered promiscuous mode [ 87.901566][ T1174] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 87.913942][ T6877] bond1: (slave dummy0): Removing an active aggregator [ 87.926529][ T6877] bond1: (slave dummy0): Releasing backup interface [ 87.936536][ T804] usbhid 5-1:0.1: can't add hid device: -71 [ 87.957057][ T804] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 87.985270][ T804] usb 5-1: USB disconnect, device number 4 [ 88.048715][ T6905] tipc: Failed to remove unknown binding: 66,1,1/0:2945497090/2945497092 [ 88.239868][ T42] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 88.400256][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 88.409558][ T42] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 88.426854][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 88.429883][ T48] wlan1: Trigger new scan to find an IBSS to join [ 88.447622][ T42] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 88.462258][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.475980][ T42] usb 2-1: Product: syz [ 88.489863][ T42] usb 2-1: Manufacturer: syz [ 88.504675][ T42] usb 2-1: SerialNumber: syz [ 88.517085][ T42] usb 2-1: config 0 descriptor?? [ 88.529832][ T804] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 88.544346][ T42] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 88.569141][ T42] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 88.711104][ T804] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.721677][ T804] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 88.731934][ T804] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.753224][ T804] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.762532][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.770580][ T804] usb 1-1: Product: syz [ 88.774858][ T804] usb 1-1: Manufacturer: syz [ 88.779475][ T804] usb 1-1: SerialNumber: syz [ 88.789165][ T804] cdc_mbim 1-1:1.0: skipping garbage [ 88.796970][ T804] cdc_mbim 1-1:1.0: skipping garbage [ 88.802343][ T804] cdc_mbim 1-1:1.0: CDC Union missing and no IAD found [ 88.812435][ T804] cdc_mbim 1-1:1.0: bind() failure [ 89.154825][ T42] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 89.163675][ T42] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 89.189994][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 89.190008][ T29] audit: type=1400 audit(1782142111.526:449): avc: denied { read } for pid=6939 comm="syz.2.389" lport=37923 faddr=::ffff:10.1.1.2 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.374625][ T42] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 89.389879][ T42] em28xx 2-1:0.0: No AC97 audio processor [ 89.410032][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.425528][ T42] usb 2-1: USB disconnect, device number 12 [ 89.447222][ T42] em28xx 2-1:0.0: Disconnecting em28xx [ 89.463148][ T42] em28xx 2-1:0.0: Freeing device [ 89.986175][ T6946] kvm: emulating exchange as write [ 90.181140][ T6958] netlink: 'syz.2.396': attribute type 16 has an invalid length. [ 90.189032][ T6958] netlink: 'syz.2.396': attribute type 17 has an invalid length. [ 90.236642][ T6958] bond1: left promiscuous mode [ 90.241734][ T6958] bridge3: left promiscuous mode [ 90.267501][ T29] audit: type=1400 audit(1782142112.606:450): avc: denied { map } for pid=6963 comm="syz.3.398" path="socket:[14209]" dev="sockfs" ino=14209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 90.659940][ T5805] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 90.809880][ T5805] usb 2-1: Using ep0 maxpacket: 32 [ 90.816364][ T5805] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.825108][ T5805] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 90.833404][ T5805] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 90.841811][ T5805] usb 2-1: config 14 has no interface number 0 [ 90.847955][ T5805] usb 2-1: config 14 has no interface number 1 [ 90.854403][ T5805] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 90.865457][ T5805] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 90.877256][ T5805] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 90.889094][ T5805] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 90.901104][ T5805] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 90.912557][ T5805] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.925765][ T5805] usb 2-1: config 14 interface 57 has no altsetting 0 [ 90.932585][ T5805] usb 2-1: config 14 interface 228 has no altsetting 0 [ 90.940837][ T5805] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 90.949939][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.957921][ T5805] usb 2-1: Product: syz [ 90.962086][ T5805] usb 2-1: Manufacturer: syz [ 90.966661][ T5805] usb 2-1: SerialNumber: syz [ 91.325476][ T5698] usb 1-1: USB disconnect, device number 7 [ 91.413919][ T5805] legousbtower 2-1:14.57: interrupt endpoints not found [ 91.715571][ T7025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 91.814424][ T5805] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 91.840181][ T5805] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 92.000609][ T29] audit: type=1400 audit(1782142114.346:451): avc: denied { read } for pid=7038 comm="syz.4.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 ³[ 92.050505][ T7042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.420'. [ 92.338177][ T29] audit: type=1400 audit(1782142114.676:452): avc: denied { create } for pid=7054 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.682687][ T804] usb 2-1: USB disconnect, device number 13 [ 92.712739][ T804] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 93.371653][ T1168] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 93.450670][ T29] audit: type=1400 audit(1782142115.796:453): avc: denied { execute } for pid=7061 comm="syz.4.427" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 94.111535][ T7064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.362154][ T5805] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 94.504979][ T29] audit: type=1400 audit(1782142116.846:454): avc: denied { read } for pid=7090 comm="syz.1.434" name="video0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.549857][ T5805] usb 3-1: Using ep0 maxpacket: 32 [ 94.573603][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 94.587751][ T29] audit: type=1400 audit(1782142116.876:455): avc: denied { ioctl } for pid=7090 comm="syz.1.434" path="/dev/video0" dev="devtmpfs" ino=931 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.648750][ T5805] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 94.681070][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 94.695183][ T5805] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 94.706295][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.715764][ T5805] usb 3-1: Product: syz [ 94.723534][ T5805] usb 3-1: Manufacturer: syz [ 94.729650][ T5805] usb 3-1: SerialNumber: syz [ 94.737885][ T5805] usb 3-1: config 0 descriptor?? [ 94.746325][ T5805] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 94.762392][ T29] audit: type=1400 audit(1782142117.106:456): avc: denied { read } for pid=4962 comm="acpid" name="js0" dev="devtmpfs" ino=2905 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.789617][ T29] audit: type=1400 audit(1782142117.106:457): avc: denied { open } for pid=4962 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2905 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.815525][ T29] audit: type=1400 audit(1782142117.106:458): avc: denied { ioctl } for pid=4962 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2905 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.895543][ T7094] kvm: user requested TSC rate below hardware speed [ 95.002033][ T7094] kvm: kvm [7093]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 95.030110][ T7094] kvm: kvm [7093]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 95.062216][ T7099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.437'. [ 95.105695][ T7094] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 95.263327][ T2168] usb 3-1: USB disconnect, device number 7 [ 95.263401][ C1] xpad 3-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 95.277505][ C1] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 95.439185][ T29] audit: type=1400 audit(1782142117.776:459): avc: denied { read write } for pid=7108 comm="syz.4.440" name="mouse0" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 95.479609][ T29] audit: type=1400 audit(1782142117.776:460): avc: denied { open } for pid=7108 comm="syz.4.440" path="/dev/input/mouse0" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 96.513307][ T29] audit: type=1400 audit(1782142118.856:461): avc: denied { bind } for pid=7147 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.607904][ T7150] netlink: 'syz.3.453': attribute type 39 has an invalid length. [ 97.008636][ T7160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.458'. [ 97.017706][ T7161] syzkaller1: entered promiscuous mode [ 97.023810][ T7161] syzkaller1: entered allmulticast mode [ 97.079442][ T7160] netlink: 128 bytes leftover after parsing attributes in process `syz.3.458'. [ 97.236566][ T29] audit: type=1326 audit(1782142119.576:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm="syz.3.460" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e89b9ce59 code=0x0 [ 97.563825][ T29] audit: type=1400 audit(1782142119.906:463): avc: denied { remount } for pid=7181 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 97.899824][ T2168] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.052927][ T7214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.470'. [ 98.066120][ T2168] usb 5-1: Using ep0 maxpacket: 8 [ 98.077534][ T2168] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 98.091268][ T7214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.097883][ T2168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.109907][ T2168] usb 5-1: Product: syz [ 98.114384][ T2168] usb 5-1: Manufacturer: syz [ 98.119110][ T2168] usb 5-1: SerialNumber: syz [ 98.127198][ T2168] usb 5-1: config 0 descriptor?? [ 98.151806][ T2168] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 98.166879][ T7214] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 98.206781][ T7218] netlink: 'syz.2.471': attribute type 4 has an invalid length. [ 98.239323][ T7220] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 98.259549][ T7221] netlink: 'syz.2.471': attribute type 4 has an invalid length. [ 98.281708][ T7220] bond1 (unregistering): Released all slaves [ 98.370223][ T7218] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.377441][ T7218] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.408077][ T7219] kvm: kvm [7216]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 98.637220][ T6982] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.657250][ T6982] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.667311][ T6982] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.680152][ T6982] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.680526][ T7237] trusted_key: syz.3.478 sent an empty control message without MSG_MORE. [ 98.862860][ T6982] Bluetooth: hci5: Frame reassembly failed (-84) [ 98.878384][ T7254] netlink: 'syz.0.485': attribute type 1 has an invalid length. [ 98.894857][ T7254] bond2: entered promiscuous mode [ 98.904707][ T7254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.945164][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 98.964236][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 99.009386][ T7254] bond2: (slave bridge1): making interface the new active one [ 99.023934][ T7254] bridge1: entered promiscuous mode [ 99.040943][ T7254] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 99.470457][ T7264] kvm: user requested TSC rate below hardware speed [ 99.502042][ T7264] kvm: kvm [7263]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 99.511886][ T7264] kvm: kvm [7263]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 99.668093][ T7270] netlink: 'syz.0.490': attribute type 4 has an invalid length. [ 99.683357][ T7270] netlink: 'syz.0.490': attribute type 4 has an invalid length. [ 99.736363][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.743702][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.800007][ T2168] gspca_sonixj: i2c_w8 err -71 [ 99.817181][ T7270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.835021][ T7270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.869934][ T2168] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 99.881440][ T2168] usb 5-1: USB disconnect, device number 5 [ 99.922306][ T6987] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.941362][ T6987] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.951870][ T6987] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.964443][ T6987] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.023333][ T7282] netlink: 'syz.3.495': attribute type 16 has an invalid length. [ 100.033466][ T7282] netlink: 'syz.3.495': attribute type 17 has an invalid length. [ 100.050556][ T7282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.057757][ T7282] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.065162][ T7282] dummy0: left promiscuous mode [ 100.072446][ T7282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.091219][ T7282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.099527][ T7282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.108853][ T7282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.119215][ T7282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.131706][ T7282] veth1_vlan: left promiscuous mode [ 100.137486][ T7282] veth0_vlan: left promiscuous mode [ 100.143394][ T7282] veth0_vlan: entered promiscuous mode [ 100.150101][ T7282] veth1_vlan: entered promiscuous mode [ 100.157206][ T7282] veth1_macvtap: left promiscuous mode [ 100.163157][ T7282] veth0_macvtap: left promiscuous mode [ 100.168949][ T7282] veth0_macvtap: entered promiscuous mode [ 100.175184][ T7282] veth1_macvtap: entered promiscuous mode [ 100.183464][ T7282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.190905][ T7282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.198558][ T7282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.206318][ T7282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.222284][ T7282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.232914][ T6979] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.240027][ T6979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.248849][ T6979] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.255944][ T6979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.269954][ T5698] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 100.282108][ T6990] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.291550][ T6990] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.300708][ T6990] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.309891][ T6990] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.353565][ C1] ================================================================== [ 100.361629][ C1] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0xa51/0xb30 [ 100.369586][ C1] Read of size 2 at addr ffff888156f046f4 by task syz.4.496/7288 [ 100.377267][ C1] [ 100.379566][ C1] CPU: 1 UID: 0 PID: 7288 Comm: syz.4.496 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.379583][ C1] Tainted: [L]=SOFTLOCKUP [ 100.379586][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 100.379593][ C1] Call Trace: [ 100.379597][ C1] [ 100.379601][ C1] dump_stack_lvl+0x100/0x190 [ 100.379616][ C1] print_report+0x13d/0x4b0 [ 100.379632][ C1] ? __virt_addr_valid+0x239/0x430 [ 100.379645][ C1] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 100.379659][ C1] kasan_report+0xdf/0x1c0 [ 100.379672][ C1] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 100.379687][ C1] qdisc_pkt_len_segs_init+0xa51/0xb30 [ 100.379702][ C1] __netif_receive_skb_core.constprop.0+0x1132/0x3530 [ 100.379714][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 100.379728][ C1] ? kasan_save_stack+0x30/0x50 [ 100.379738][ C1] ? kasan_save_track+0x14/0x30 [ 100.379747][ C1] ? kasan_save_free_info+0x3b/0x70 [ 100.379764][ C1] ? kmem_cache_free+0x127/0x6b0 [ 100.379787][ C1] ? kfree_skbmem+0x19a/0x210 [ 100.379802][ C1] ? sk_skb_reason_drop+0x10f/0x1b0 [ 100.379816][ C1] ? ipv6_rcv+0x34c/0x3d0 [ 100.379828][ C1] ? __netif_receive_skb+0x1f/0x120 [ 100.379838][ C1] ? process_backlog+0x37a/0x1580 [ 100.379848][ C1] ? __napi_poll.constprop.0+0xaf/0x450 [ 100.379858][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 100.379870][ C1] ? __local_bh_enable_ip+0xf8/0x120 [ 100.379881][ C1] ? __dev_queue_xmit+0xa05/0x4940 [ 100.379890][ C1] ? neigh_resolve_output+0x51f/0x8f0 [ 100.379905][ C1] ? __ip6_finish_output+0x357/0xdf0 [ 100.379916][ C1] ? NF_HOOK.constprop.0+0x115/0x5a0 [ 100.379929][ C1] ? mld_sendpack+0x8f7/0xec0 [ 100.379941][ C1] ? mld_ifc_work+0x75a/0xc10 [ 100.379953][ C1] ? process_one_work+0xa23/0x1940 [ 100.379962][ C1] ? worker_thread+0x5ef/0xe50 [ 100.379971][ C1] ? kthread+0x370/0x450 [ 100.379986][ C1] ? ret_from_fork+0x72b/0xd50 [ 100.379999][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 100.380017][ C1] __netif_receive_skb_list_core+0x353/0x940 [ 100.380030][ C1] ? kfree_skbmem+0x19a/0x210 [ 100.380044][ C1] ? kmem_cache_free+0x127/0x6b0 [ 100.380061][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 100.380073][ C1] ? lock_acquire+0x301/0x370 [ 100.380084][ C1] ? sk_skb_reason_drop+0x114/0x1b0 [ 100.380099][ C1] netif_receive_skb_list_internal+0x722/0xd40 [ 100.380111][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 100.380123][ C1] ? dev_gro_receive+0x280/0x3060 [ 100.380135][ C1] ? rcu_is_watching+0x12/0xc0 [ 100.380149][ C1] ? dev_gro_receive+0x280/0x3060 [ 100.380161][ C1] ? lock_release+0x24d/0x310 [ 100.380172][ C1] ? dev_gro_receive+0x238/0x3060 [ 100.380186][ C1] napi_complete_done+0x221/0x940 [ 100.380196][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 100.380207][ C1] ? rcu_is_watching+0x12/0xc0 [ 100.380221][ C1] ? gro_cell_poll+0x441/0x690 [ 100.380232][ C1] ? lock_release+0x24d/0x310 [ 100.380243][ C1] gro_cell_poll+0x46e/0x690 [ 100.380256][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 100.380267][ C1] net_rx_action+0xa40/0xf20 [ 100.380279][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 100.380290][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 100.380306][ C1] ? sched_clock+0x38/0x60 [ 100.380316][ C1] ? sched_clock_cpu+0x6c/0x570 [ 100.380326][ C1] ? ttwu_do_activate+0x219/0x800 [ 100.380343][ C1] ? rcu_is_watching+0x12/0xc0 [ 100.380358][ C1] handle_softirqs+0x1ea/0x9b0 [ 100.380371][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 100.380382][ C1] ? irqtime_account_delta+0x9a/0x110 [ 100.380399][ C1] ? tun_rx_batched.isra.0+0x402/0x750 [ 100.380414][ C1] do_softirq+0xac/0xe0 [ 100.380426][ C1] [ 100.380429][ C1] [ 100.380433][ C1] __local_bh_enable_ip+0xf8/0x120 [ 100.380445][ C1] tun_rx_batched.isra.0+0x407/0x750 [ 100.380460][ C1] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 100.380476][ C1] ? lock_acquire+0x301/0x370 [ 100.380486][ C1] ? tun_get_user+0x1cc8/0x3c20 [ 100.380502][ C1] ? rcu_is_watching+0x12/0xc0 [ 100.380516][ C1] ? tun_get_user+0x1cc8/0x3c20 [ 100.380536][ C1] tun_get_user+0x1e31/0x3c20 [ 100.380571][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 100.380594][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 100.380612][ C1] ? tun_get+0x191/0x370 [ 100.380626][ C1] ? rcu_is_watching+0x12/0xc0 [ 100.380640][ C1] ? tun_get+0x191/0x370 [ 100.380653][ C1] ? lock_release+0x24d/0x310 [ 100.380665][ C1] tun_chr_write_iter+0xdc/0x200 [ 100.380682][ C1] vfs_write+0x6ac/0x1050 [ 100.380697][ C1] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 100.380714][ C1] ? __pfx_vfs_write+0x10/0x10 [ 100.380727][ C1] ? lock_release+0x24d/0x310 [ 100.380741][ C1] ksys_write+0x12a/0x250 [ 100.380754][ C1] ? __pfx_ksys_write+0x10/0x10 [ 100.380768][ C1] ? rcu_is_watching+0x12/0xc0 [ 100.380782][ C1] do_syscall_64+0x115/0x870 [ 100.380791][ C1] ? clear_bhb_loop+0x40/0x90 [ 100.380803][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.380814][ C1] RIP: 0033:0x7f4cf0d9ce59 [ 100.380823][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.380833][ C1] RSP: 002b:00007f4cf1c7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.380844][ C1] RAX: ffffffffffffffda RBX: 00007f4cf1015fa0 RCX: 00007f4cf0d9ce59 [ 100.380851][ C1] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000003 [ 100.380857][ C1] RBP: 00007f4cf0e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 100.380864][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.380870][ C1] R13: 00007f4cf1016038 R14: 00007f4cf1015fa0 R15: 00007ffdab78b868 [ 100.380880][ C1] [ 100.380884][ C1] [ 100.940654][ C1] The buggy address belongs to the physical page: [ 100.947041][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x156f04 [ 100.955862][ C1] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 100.963040][ C1] raw: 057ff00000000000 ffffea00055bc108 ffffea00055bc108 0000000000000000 [ 100.971600][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 100.980171][ C1] page dumped because: kasan: bad access detected [ 100.986561][ C1] page_owner info is not present (never set?) [ 100.992593][ C1] [ 100.994893][ C1] Memory state around the buggy address: [ 101.000497][ C1] ffff888156f04580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 101.008533][ C1] ffff888156f04600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 101.016916][ C1] >ffff888156f04680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 101.024948][ C1] ^ [ 101.032636][ C1] ffff888156f04700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 101.040673][ C1] ffff888156f04780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 101.048707][ C1] ================================================================== [ 101.056811][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 101.063999][ C1] CPU: 1 UID: 0 PID: 7288 Comm: syz.4.496 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.074743][ C1] Tainted: [L]=SOFTLOCKUP [ 101.079044][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.089093][ C1] Call Trace: [ 101.092350][ C1] [ 101.095180][ C1] dump_stack_lvl+0x100/0x190 [ 101.099843][ C1] vpanic+0x552/0x970 [ 101.103804][ C1] ? __pfx_vpanic+0x10/0x10 [ 101.108293][ C1] ? rcu_is_watching+0x12/0xc0 [ 101.113044][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 101.119096][ C1] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 101.124711][ C1] panic+0xd1/0xe0 [ 101.128413][ C1] ? __pfx_panic+0x10/0x10 [ 101.132809][ C1] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 101.138777][ C1] ? check_panic_on_warn+0x1f/0x90 [ 101.143888][ C1] check_panic_on_warn.cold+0x19/0x34 [ 101.149239][ C1] end_report.part.0+0x3a/0x90 [ 101.153987][ C1] kasan_report.cold+0xe/0x18 [ 101.158650][ C1] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 101.164270][ C1] qdisc_pkt_len_segs_init+0xa51/0xb30 [ 101.169712][ C1] __netif_receive_skb_core.constprop.0+0x1132/0x3530 [ 101.176461][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 101.181749][ C1] ? kasan_save_stack+0x30/0x50 [ 101.186585][ C1] ? kasan_save_track+0x14/0x30 [ 101.191421][ C1] ? kasan_save_free_info+0x3b/0x70 [ 101.196614][ C1] ? kmem_cache_free+0x127/0x6b0 [ 101.201541][ C1] ? kfree_skbmem+0x19a/0x210 [ 101.206210][ C1] ? sk_skb_reason_drop+0x10f/0x1b0 [ 101.211402][ C1] ? ipv6_rcv+0x34c/0x3d0 [ 101.215726][ C1] ? __netif_receive_skb+0x1f/0x120 [ 101.220903][ C1] ? process_backlog+0x37a/0x1580 [ 101.225911][ C1] ? __napi_poll.constprop.0+0xaf/0x450 [ 101.231437][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 101.238531][ C1] ? __local_bh_enable_ip+0xf8/0x120 [ 101.243813][ C1] ? __dev_queue_xmit+0xa05/0x4940 [ 101.248914][ C1] ? neigh_resolve_output+0x51f/0x8f0 [ 101.254286][ C1] ? __ip6_finish_output+0x357/0xdf0 [ 101.259558][ C1] ? NF_HOOK.constprop.0+0x115/0x5a0 [ 101.264835][ C1] ? mld_sendpack+0x8f7/0xec0 [ 101.269495][ C1] ? mld_ifc_work+0x75a/0xc10 [ 101.274154][ C1] ? process_one_work+0xa23/0x1940 [ 101.279242][ C1] ? worker_thread+0x5ef/0xe50 [ 101.283987][ C1] ? kthread+0x370/0x450 [ 101.288220][ C1] ? ret_from_fork+0x72b/0xd50 [ 101.292967][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 101.297898][ C1] __netif_receive_skb_list_core+0x353/0x940 [ 101.303862][ C1] ? kfree_skbmem+0x19a/0x210 [ 101.308523][ C1] ? kmem_cache_free+0x127/0x6b0 [ 101.313446][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 101.319929][ C1] ? lock_acquire+0x301/0x370 [ 101.324587][ C1] ? sk_skb_reason_drop+0x114/0x1b0 [ 101.329772][ C1] netif_receive_skb_list_internal+0x722/0xd40 [ 101.335909][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 101.342563][ C1] ? dev_gro_receive+0x280/0x3060 [ 101.347570][ C1] ? rcu_is_watching+0x12/0xc0 [ 101.352317][ C1] ? dev_gro_receive+0x280/0x3060 [ 101.357324][ C1] ? lock_release+0x24d/0x310 [ 101.361983][ C1] ? dev_gro_receive+0x238/0x3060 [ 101.366990][ C1] napi_complete_done+0x221/0x940 [ 101.371996][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 101.377520][ C1] ? rcu_is_watching+0x12/0xc0 [ 101.382265][ C1] ? gro_cell_poll+0x441/0x690 [ 101.387008][ C1] ? lock_release+0x24d/0x310 [ 101.391662][ C1] gro_cell_poll+0x46e/0x690 [ 101.396235][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 101.401592][ C1] net_rx_action+0xa40/0xf20 [ 101.406163][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 101.411255][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 101.416450][ C1] ? sched_clock+0x38/0x60 [ 101.420852][ C1] ? sched_clock_cpu+0x6c/0x570 [ 101.425680][ C1] ? ttwu_do_activate+0x219/0x800 [ 101.430696][ C1] ? rcu_is_watching+0x12/0xc0 [ 101.435448][ C1] handle_softirqs+0x1ea/0x9b0 [ 101.440205][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 101.445473][ C1] ? irqtime_account_delta+0x9a/0x110 [ 101.450829][ C1] ? tun_rx_batched.isra.0+0x402/0x750 [ 101.456271][ C1] do_softirq+0xac/0xe0 [ 101.460405][ C1] [ 101.463314][ C1] [ 101.466223][ C1] __local_bh_enable_ip+0xf8/0x120 [ 101.471317][ C1] tun_rx_batched.isra.0+0x407/0x750 [ 101.476585][ C1] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 101.482381][ C1] ? lock_acquire+0x301/0x370 [ 101.487037][ C1] ? tun_get_user+0x1cc8/0x3c20 [ 101.491871][ C1] ? rcu_is_watching+0x12/0xc0 [ 101.496625][ C1] ? tun_get_user+0x1cc8/0x3c20 [ 101.501478][ C1] tun_get_user+0x1e31/0x3c20 [ 101.506155][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 101.511176][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 101.516630][ C1] ? tun_get+0x191/0x370 [ 101.520859][ C1] ? rcu_is_watching+0x12/0xc0 [ 101.525610][ C1] ? tun_get+0x191/0x370 [ 101.529839][ C1] ? lock_release+0x24d/0x310 [ 101.534509][ C1] tun_chr_write_iter+0xdc/0x200 [ 101.539436][ C1] vfs_write+0x6ac/0x1050 [ 101.543752][ C1] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 101.549286][ C1] ? __pfx_vfs_write+0x10/0x10 [ 101.554035][ C1] ? lock_release+0x24d/0x310 [ 101.558694][ C1] ksys_write+0x12a/0x250 [ 101.563008][ C1] ? __pfx_ksys_write+0x10/0x10 [ 101.567846][ C1] ? rcu_is_watching+0x12/0xc0 [ 101.572597][ C1] do_syscall_64+0x115/0x870 [ 101.577164][ C1] ? clear_bhb_loop+0x40/0x90 [ 101.581824][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.587700][ C1] RIP: 0033:0x7f4cf0d9ce59 [ 101.592096][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.611683][ C1] RSP: 002b:00007f4cf1c7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 101.620077][ C1] RAX: ffffffffffffffda RBX: 00007f4cf1015fa0 RCX: 00007f4cf0d9ce59 [ 101.628025][ C1] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000003 [ 101.635975][ C1] RBP: 00007f4cf0e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 101.643926][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.651874][ C1] R13: 00007f4cf1016038 R14: 00007f4cf1015fa0 R15: 00007ffdab78b868 [ 101.659827][ C1] [ 101.663028][ C1] Kernel Offset: disabled [ 101.667326][ C1] Rebooting in 86400 seconds..