last executing test programs: 1m8.5418781s ago: executing program 1 (id=1220): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@rand_addr=0x64010102, @in6=@mcast1, 0x0, 0x7, 0x4e21, 0x8, 0xa, 0x0, 0xa0, 0x1}, {0x40b, 0x4, 0x8, 0x0, 0x8, 0x1, 0x0, 0x5}, {0x0, 0x3cb, 0x7f}, 0x8, 0x6e6bbc, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x4d2, 0x33}, 0x4, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x1, 0x4, 0x2, 0x1000, 0x2}}, 0xe8) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000001850000000000000000000000000000018400000f8ffffff00000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x2}, 0x90) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) 1m7.455320369s ago: executing program 1 (id=1223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) fsetxattr$security_ima(r3, 0x0, &(0x7f0000000100)=@v2={0x3, 0x0, 0x7, 0x8, 0x2a, "779f05bc71ca9f521d198d0002638cfd1db272b32150c174704eff66e5a662ff885aa485809189cc88a5"}, 0x33, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x541b, 0x0) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvmsg(r4, &(0x7f0000006e80)={0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006680)=""/88, 0x58}], 0x1}, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 41.870516142s ago: executing program 2 (id=1267): rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000100), 0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x242, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r5) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6], 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_ASSOCIATE(r1, 0x0, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="400003"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) 39.484936073s ago: executing program 2 (id=1272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) readv(r6, 0x0, 0x0) close(r5) r7 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 38.17669578s ago: executing program 2 (id=1274): socket$inet6(0xa, 0x80002, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}}, 0x0) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) fsopen(0x0, 0x0) r2 = userfaultfd(0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) read(r2, &(0x7f0000000380)=""/167, 0xa7) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2c41, 0x122) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r3, r4, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0xf3, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, 0x10, 0x0, 0x0, 0x3}}) 36.723910746s ago: executing program 2 (id=1277): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000100)={0x9, 0x2, 0x0, {0xfffffffd, 0x4, 0x0, 0xfffffffe}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) openat$zero(0xffffffffffffff9c, 0x0, 0x5208c3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x0) dup(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_pidfd_open(0x0, 0x0) 33.961727181s ago: executing program 2 (id=1280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0}, 0x20014000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000000a40)=""/102368, 0x18fe0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @local}, 0x1c) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x30, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000052000000a5000000b708000000001b2e7b8af8ff00000015aa12557a68fab7a4b68597b50d0b9a00b7080000e0ffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400008000000007040000f0ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x0, 0x6, 0x8, 0xfffffffe}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff5}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x100) mount(&(0x7f0000000340)=@filename='\x00', &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000040)='&@,,') 30.069440417s ago: executing program 2 (id=1287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) fsetxattr$security_ima(r3, 0x0, &(0x7f0000000100)=@v2={0x3, 0x0, 0x7, 0x8, 0x2a, "779f05bc71ca9f521d198d0002638cfd1db272b32150c174704eff66e5a662ff885aa485809189cc88a5"}, 0x33, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x541b, 0x0) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvmsg(r4, &(0x7f0000006e80)={0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006680)=""/88, 0x58}], 0x1}, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 28.767309957s ago: executing program 0 (id=1291): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000010000000000000000000005000100070900000000000000797a30000000000c000780080006000000000015000300686173683a69702c706f72742c6e65740000000005000500020000000500040000000000"], 0x5c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @local}, 0x200000d0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {&(0x7f00000008c0)="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", 0x205}, {&(0x7f0000000040)="81edd95b7b7f2f00107b8cb63b122192d63b0b67536888", 0x17}, {&(0x7f0000000b00)="752154ede3d82d4ca2832646b3e8b879e3d2baaee63c66e777d599f47e598cb0f89c87b3c70494da0c096d28c0e2914e3d6b4e2bfd3fdc829e5ea0ade07dacba9f881d7d44f4ed83a7848626caf0db293b214c474a7062da26e98bd91ee77f03d933fa0fecf2431ab442e216273f55224f5bfbc21d4d5bffb372bf11a5e36daeb73b8b03e696f256dc44deca6068d18d5f2d91c67ee7be47cb4dff6b251f", 0x9e}, {&(0x7f0000000780)="f8a81983bc2379afb36f7953499d4423cfb4b12e7415ffeb241abed5c7d0197921c68f2fa4b67451da0999e1602de3d1a54e5b1c93908bf29a09955e8118c83595128785b35c0c28418ec91ee3359e581306c20d5a4cfc2d888d5e1c983fed27bc788df351ae86f4e3ddd2aa697aa010e7b77b4162de7b99e11b1f759608c3959bf5c1ebd37aed386675e94db08093db191fda9230", 0x95}], 0x5) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000700)={0x0, 0x2aaaaaaaaaaad05, 0x0, &(0x7f0000000480), 0x24926ff, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000006c0)=[{}]}) 22.617671487s ago: executing program 3 (id=1293): sigaltstack(0x0, 0x0) sigaltstack(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000002700)='cmdline\x00') munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) read$FUSE(r2, &(0x7f0000000000)={0x2020}, 0x2020) semop(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 22.609942234s ago: executing program 0 (id=1304): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="cdb6d1667f2c6f3c4df60ce5c47773c6", 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x313600, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7) r3 = openat(r1, 0x0, 0x0, 0x0) ftruncate(r3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)='veth0_macvtap\x00', 0x7, 0x8000000000000001}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = epoll_create1(0x80000) read$FUSE(r5, &(0x7f0000001ac0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r7 = dup3(r6, r2, 0x0) fallocate(r7, 0x6, 0x8, 0xfffffffffffffff8) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x6, @dev={0xac, 0x14, 0x14, 0x1}, 0x0, 0x0, 'rr\x00', 0x0, 0x0, 0xfffffffd}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 17.300970779s ago: executing program 3 (id=1298): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0606610, &(0x7f0000000040)=0x60) fsopen(0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000200b06010000000000000109022400010000000009040000010300000009210000000122050009058103a00000000efb78bc108f0200"], 0x0) syz_usb_control_io(r3, &(0x7f0000000080)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="007e521a4f26088571e11f19acdd4e52dbb381cc9b937700002d19ebbbb27eb98d15db0c2532ff9a46c22d4920ce6a30d0a513b0293ab15b2f92ca8441c477c862fee55ee8105b6b2df63bd872cca0"], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/251, 0xfb}, {&(0x7f00000006c0)=""/6, 0x6}, {&(0x7f0000000700)=""/162, 0xa2}, {&(0x7f00000007c0)=""/110, 0x6e}], 0x4, 0x1, 0xfff) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, 0x0, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000300)={0x28, 0x0, r5, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r5}) sendmsg$unix(r0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 13.814814138s ago: executing program 1 (id=1243): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0xffffffffffffffda}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a2030303030303030303030303030303030303030300a4f4741494e1357c17f9431f59b0a4449474954414c3320274344204361707475726520537769746368272030303030303030303030"], 0xb8) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r2, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000340), 0x7, 0x8000) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000400)={0xa, {0xfffffff9, 0x9, 0x4, 0x7}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x92af, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000680)=ANY=[], 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x280803) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) 13.810418827s ago: executing program 0 (id=1310): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000180)={[0x9]}, 0x0, 0x8) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, 0x0, 0x0) r6 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r0, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) 12.007544809s ago: executing program 3 (id=1299): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0}, 0x20014000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000000a40)=""/102368, 0x18fe0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @local}, 0x1c) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x30, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000052000000a5000000b708000000001b2e7b8af8ff00000015aa12557a68fab7a4b68597b50d0b9a00b7080000e0ffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400008000000007040000f0ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x0, 0x6, 0x8, 0xfffffffe}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff5}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x100) mount(&(0x7f0000000340)=@filename='\x00', &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000040)='&@,,') 12.006589284s ago: executing program 0 (id=1313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f00000003c0), 0x0) tkill(0x0, 0xb) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1023, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r4, 0x1, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 10.992293091s ago: executing program 0 (id=1303): syz_open_dev$vcsn(&(0x7f0000000040), 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) r2 = socket$inet_sctp(0x2, 0x0, 0x84) bind$inet(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x34000, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000003b000701000000000000000001000000040000000800018004001000080002"], 0x28}}, 0x0) 10.526549337s ago: executing program 1 (id=1305): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) msgget$private(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) syz_open_dev$sndpcmc(&(0x7f00000041c0), 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4188aec6, &(0x7f00000001c0)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x4}, {}, {0x1}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0xff}]}}) r4 = socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000680009037d620000000000000a0000000000000004000400060007"], 0x24}}, 0x0) 9.800203017s ago: executing program 0 (id=1306): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x3e3f) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8040080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x4e, &(0x7f0000000f80)=ANY=[@ANYBLOB="bbbbbbbbbbbbfff7ffffffff88a800008100000086dd52e561b500102187798800000000000000"], 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 8.044917496s ago: executing program 4 (id=1307): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_PIE_OFF(r0, 0x7006) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0xc082, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r6 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r5, r6, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x31, '\x00\x00\x00\x00 #\x00'}) clock_settime(0x0, &(0x7f0000009ac0)) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) 7.051983089s ago: executing program 4 (id=1308): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x498) syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') socket$unix(0x1, 0x0, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x10800, 0x0) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCFLSH(r6, 0x40204706, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 5.720531864s ago: executing program 4 (id=1309): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000100)={&(0x7f00000000c0)=""/51, 0x0, 0xfffffffffffffe55}, &(0x7f0000000140)={&(0x7f0000000080)=""/49, 0x0, 0x3e}) sigaltstack(&(0x7f0000000040)={0x0}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000000c0)='@', 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0x100f}], 0x1}}], 0x1, 0x122, 0x0) 5.409741311s ago: executing program 3 (id=1312): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001540)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001}, 0x48) r2 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x20}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x80fe) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000000c0)=0xbf) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) clock_getres(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000340)="d4c2457d4d5c747f39cde3dc4644f2e40b9f075f74f0f4382542ce5505c5992713cdadb280ee58249b2dea94e1bd8994b046e8b5f992fa5a5faf", 0x3a}, {&(0x7f00000003c0)="0c96463c1d7df513afb3e0916b070e97edb16ab6029e8a1ed896b1dd58d5f41fe7ad243003abfb42842264e1d97b2389613e33b64007cf91c69af5221329c83c095114d65da65e44447e3783855ce1e3c520dd1ef3060b9fbea27dc23b108ff528e700b7ff7e253d7b", 0x69}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000000100)="561b65bfdebfbb99e145199c83d1942d5b8f8547f2ef5972568e4a6aaa", 0x1d}], 0x4, 0x9, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 4.541722751s ago: executing program 4 (id=1314): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x54c) semtimedop(r1, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x10, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x3}, 0x48) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000407d1eb42d000000090001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000500)={0x24, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) 3.046265226s ago: executing program 1 (id=1315): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x14, r0, 0x50dc85624ea6c250, 0x1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20004050}, 0x40) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, r6, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{}, {}, @device_a, @device_b}, @void, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x40}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) socket$isdn(0x22, 0x2, 0x3) socket$pppl2tp(0x18, 0x1, 0x1) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) 2.845670017s ago: executing program 3 (id=1316): syz_emit_ethernet(0xa2, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd603000bb006c2b00fc020000000000fe8000000000000000000000000000aa0000020800000000000000000064907802000000000000000000000082f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108402fa83b1d661c18462075368a1871929ddeb8f71aa23d391b8fa99e9816af2d040876a663a86d97f46b9665cc18492b"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000900)="8c85ff9fbb89ead882486b624a831ae210cd60e31dec21153558cb019dfd87da879fca91485a2832bf4536a170e8c643348555cdee358af0945bb47c8d9c0414ef6eeea465330b054a5d2f05714504dfbd63be6632a21106f63b1686d1a8d1f1fee83ef81eed580434821e652c38b693aa4b44191734c4a5229d0ddf687bea7cbbd0401458443ba109bf6709504c080e5972a52ae8bf94c8d2", 0x37db, r1}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00'}, 0x90) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11}, &(0x7f00000001c0)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r5 = syz_open_pts(r4, 0x0) read(r5, 0x0, 0x2006) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)) r6 = dup(r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) open(0x0, 0x0, 0x146) 1.959878362s ago: executing program 4 (id=1317): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = memfd_create(&(0x7f0000000200)='-Bu\r\x00\x00j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xff\x00\x00\x00\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97\xf1H?\x80BK\xe0\xee\xfeT\xd8\xf0z\xaf\xedF', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x12, &(0x7f0000000000)={0x0, &(0x7f0000000200)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) r4 = dup(r0) r5 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xd4\x14Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x5) copy_file_range(r4, 0x0, r5, 0x0, 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0x40186f40, 0x20000502) 677.578126ms ago: executing program 4 (id=1318): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) sysfs$1(0x1, &(0x7f0000000100)='/dev/hwrng\x00') getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000140)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000814, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @private0, 0x7fffffff}, 0x1c) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0x57867165, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) dup(0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, 0xffffffffffffffff) 346.582103ms ago: executing program 3 (id=1319): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000980), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x31, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc008561b, &(0x7f00000000c0)={0x40980001, 0x0, "bf5dff0f251ed700f61765c214525a2572ce1ced49e8981e103268fadc1433ae"}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000440), 0x0, 0x40040) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r6, 0x8044610a, 0x0) sendmmsg$unix(r5, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="c4095b4135fcbc710ffec3bde139e161c88dc659c449d095f5814ff46b01f073736a1e243f2b99e1479a5398d594426bbe358880053387e671c72e9921001ef87d1cd6f526487d4dc3557b559d9f6e338dfcc4ab11a65fb0f26f4ae7364c63bc516126", 0x63}, {&(0x7f0000000140)="29cdc58b67be7ad2faf6abe5e0", 0xd}], 0x2, 0x0, 0x0, 0x8815}}], 0x1, 0x8004) 0s ago: executing program 1 (id=1320): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="d5"}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}]}, 0x2c}}, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) openat$dlm_monitor(0xffffff9c, 0x0, 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) pause() write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) kernel console output (not intermixed with test programs): 1:1050): avc: denied { accept } for pid=10116 comm="syz.1.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 711.652183][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.699301][ T29] audit: type=1400 audit(705.491:1051): avc: denied { write } for pid=10116 comm="syz.1.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 711.718967][ T29] audit: type=1400 audit(705.491:1052): avc: denied { read } for pid=10116 comm="syz.1.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 711.923452][ T29] audit: type=1400 audit(705.571:1053): avc: denied { sys_module } for pid=10116 comm="syz.1.868" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 712.154561][T10144] netlink: 36 bytes leftover after parsing attributes in process `syz.1.877'. [ 712.264612][ T5282] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 712.432688][ T8522] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 712.450186][ T8522] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 712.460348][ T8522] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 712.464983][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 712.478882][ T29] audit: type=1400 audit(705.571:1054): avc: denied { module_load } for pid=10116 comm="syz.1.868" path="/sys/power/wakeup_count" dev="sysfs" ino=1381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 712.503556][ T8522] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 712.519043][ T8522] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 712.530297][ T8522] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 712.621729][ T5282] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 712.707125][T10149] vivid-000: disconnect [ 712.729022][ T5282] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 712.735103][ T5282] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 712.779938][ T29] audit: type=1400 audit(706.331:1055): avc: denied { create } for pid=10118 comm="syz.3.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 712.824867][T10149] vivid-000: reconnect [ 712.869876][ T29] audit: type=1400 audit(707.011:1056): avc: denied { create } for pid=10124 comm="syz.2.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 712.890428][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 712.927513][ T5282] usb 4-1: SerialNumber: syz [ 712.954543][ T29] audit: type=1400 audit(707.011:1057): avc: denied { setopt } for pid=10124 comm="syz.2.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 713.029153][ T5282] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 713.041674][ T29] audit: type=1400 audit(707.011:1058): avc: denied { bind } for pid=10124 comm="syz.2.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 713.090155][ T5282] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 713.121437][ T5282] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 713.137658][ T29] audit: type=1400 audit(707.011:1059): avc: denied { write } for pid=10124 comm="syz.2.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 713.359302][ T5320] usb 4-1: USB disconnect, device number 11 [ 714.704979][ T8522] Bluetooth: hci5: command tx timeout [ 715.046829][T10148] chnl_net:caif_netlink_parms(): no params data found [ 715.104043][T10173] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 715.507303][ T3009] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.184548][T10195] random: crng reseeded on system resumption [ 716.796414][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 716.796457][ T29] audit: type=1400 audit(716.131:1094): avc: denied { append } for pid=10179 comm="syz.0.885" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 716.863433][ T8522] Bluetooth: hci5: command tx timeout [ 717.109213][ T3009] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.165735][ T29] audit: type=1400 audit(716.151:1095): avc: denied { open } for pid=10179 comm="syz.0.885" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 717.269211][ T29] audit: type=1400 audit(717.111:1096): avc: denied { setopt } for pid=10189 comm="syz.1.887" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 717.776739][ T29] audit: type=1400 audit(717.741:1097): avc: denied { ioctl } for pid=10206 comm="syz.3.889" path="socket:[31899]" dev="sockfs" ino=31899 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 717.804738][ T3009] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.028274][ T8522] Bluetooth: hci5: command tx timeout [ 719.391615][ T3009] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.615716][T10148] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.718727][T10148] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.884949][T10148] bridge_slave_0: entered allmulticast mode [ 720.137638][T10148] bridge_slave_0: entered promiscuous mode [ 720.188054][T10148] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.214615][T10148] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.221892][T10148] bridge_slave_1: entered allmulticast mode [ 720.266996][T10148] bridge_slave_1: entered promiscuous mode [ 720.421586][T10148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.470151][T10148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.633648][T10148] team0: Port device team_slave_0 added [ 720.703857][ T29] audit: type=1400 audit(720.671:1098): avc: denied { read } for pid=4889 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 720.759955][T10148] team0: Port device team_slave_1 added [ 720.819252][ T29] audit: type=1400 audit(720.791:1099): avc: denied { search } for pid=4889 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.891621][ T29] audit: type=1400 audit(720.791:1100): avc: denied { read } for pid=4889 comm="dhcpcd" name="n158" dev="tmpfs" ino=4965 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 720.951691][ T29] audit: type=1400 audit(720.791:1101): avc: denied { open } for pid=4889 comm="dhcpcd" path="/run/udev/data/n158" dev="tmpfs" ino=4965 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 721.018317][T10148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.042077][T10148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.074672][ T29] audit: type=1400 audit(720.791:1102): avc: denied { getattr } for pid=4889 comm="dhcpcd" path="/run/udev/data/n158" dev="tmpfs" ino=4965 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 721.105378][ T8522] Bluetooth: hci5: command tx timeout [ 721.171885][T10148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.209804][ T3009] bridge_slave_1: left allmulticast mode [ 721.223437][ T3009] bridge_slave_1: left promiscuous mode [ 721.237312][ T29] audit: type=1400 audit(721.211:1103): avc: denied { setopt } for pid=10214 comm="syz.2.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 721.240266][ T3009] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.296254][ T3009] bridge_slave_0: left allmulticast mode [ 721.302142][ T3009] bridge_slave_0: left promiscuous mode [ 721.308580][ T3009] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.815954][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 721.815972][ T29] audit: type=1400 audit(721.781:1112): avc: denied { ioctl } for pid=10223 comm="syz.0.893" path="/dev/usbmon0" dev="devtmpfs" ino=702 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 722.829635][ T29] audit: type=1400 audit(722.791:1113): avc: denied { write } for pid=10227 comm="syz.3.894" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 722.969717][ T3009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.012372][ T3009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.030782][ T3009] bond0 (unregistering): Released all slaves [ 723.058230][T10148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.070594][T10148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.212009][T10148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.634303][ T29] audit: type=1400 audit(723.591:1114): avc: denied { read } for pid=10240 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.634350][ T29] audit: type=1400 audit(723.591:1115): avc: denied { open } for pid=10240 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.634385][ T29] audit: type=1400 audit(723.591:1116): avc: denied { getattr } for pid=10240 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.807976][ T29] audit: type=1400 audit(723.781:1117): avc: denied { ioctl } for pid=10238 comm="syz.2.896" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=32005 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 724.857957][ T29] audit: type=1400 audit(724.831:1118): avc: denied { name_connect } for pid=10235 comm="syz.1.897" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 724.971502][T10148] hsr_slave_0: entered promiscuous mode [ 725.017156][T10148] hsr_slave_1: entered promiscuous mode [ 725.098993][T10148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.151287][T10148] Cannot create hsr debugfs directory [ 725.202075][ T29] audit: type=1400 audit(725.171:1119): avc: denied { read write } for pid=10257 comm="syz.0.898" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 726.222076][ T29] audit: type=1400 audit(725.171:1120): avc: denied { open } for pid=10257 comm="syz.0.898" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 727.173646][ T29] audit: type=1400 audit(725.621:1121): avc: denied { create } for pid=10257 comm="syz.0.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 727.714640][ T29] audit: type=1400 audit(725.641:1122): avc: denied { shutdown } for pid=10257 comm="syz.0.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 727.940553][ T29] audit: type=1400 audit(726.461:1123): avc: denied { setopt } for pid=10235 comm="syz.1.897" laddr=::ffff:172.20.20.54 lport=51880 faddr=::ffff:172.20.20.54 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 728.070463][ T29] audit: type=1400 audit(726.521:1124): avc: denied { write } for pid=10234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.145437][ T29] audit: type=1400 audit(726.521:1125): avc: denied { add_name } for pid=10234 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.183667][ T3009] hsr_slave_0: left promiscuous mode [ 728.198414][ T3009] hsr_slave_1: left promiscuous mode [ 729.042363][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.051306][ T29] audit: type=1400 audit(726.521:1126): avc: denied { create } for pid=10234 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 729.095104][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.117887][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.167862][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.194603][ T29] audit: type=1400 audit(726.521:1127): avc: denied { write } for pid=10234 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=5017 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 729.272872][ T29] audit: type=1400 audit(726.521:1128): avc: denied { append } for pid=10234 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=5017 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 729.327143][ T3009] veth1_macvtap: left promiscuous mode [ 729.343905][ T3009] veth0_macvtap: left promiscuous mode [ 729.368610][ T3009] veth1_vlan: left promiscuous mode [ 729.374011][ T3009] veth0_vlan: left promiscuous mode [ 729.389474][ T29] audit: type=1400 audit(726.631:1129): avc: denied { create } for pid=10263 comm="syz.2.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 729.458600][ T29] audit: type=1400 audit(726.651:1130): avc: denied { connect } for pid=10263 comm="syz.2.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 729.904656][ T5309] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 730.791000][ T5309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 730.803311][ T5309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.817928][ T5309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 730.829204][ T5309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 730.839064][ T5309] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 730.853143][ T5309] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 730.862956][ T5309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.899573][ T5309] usb 1-1: config 0 descriptor?? [ 731.373820][ T5309] ntrig 0003:1B96:000A.0005: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 731.649688][ T5309] usb 1-1: USB disconnect, device number 9 [ 731.887429][ T3009] team0 (unregistering): Port device team_slave_1 removed [ 732.009948][ T3009] team0 (unregistering): Port device team_slave_0 removed [ 732.159550][ T8522] Bluetooth: hci1: unexpected event for opcode 0x0428 [ 732.222442][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 732.222459][ T29] audit: type=1400 audit(732.191:1139): avc: denied { write } for pid=10306 comm="syz.3.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 732.312974][ T29] audit: type=1400 audit(732.281:1140): avc: denied { write } for pid=10306 comm="syz.3.909" path="socket:[31561]" dev="sockfs" ino=31561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 732.318376][T10307] usb usb8: usbfs: process 10307 (syz.3.909) did not claim interface 0 before use [ 732.406467][ T29] audit: type=1400 audit(732.371:1141): avc: denied { write } for pid=10309 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 733.534808][T10312] team0: Device ipvlan1 failed to register rx_handler [ 733.660648][ T8522] Bluetooth: hci0: Malformed Event: 0x2f [ 734.558018][ T29] audit: type=1400 audit(734.511:1142): avc: denied { create } for pid=10324 comm="syz.2.913" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 734.578103][ C0] vkms_vblank_simulate: vblank timer overrun [ 734.620920][T10327] syz.2.913: attempt to access beyond end of device [ 734.620920][T10327] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 734.649446][ T29] audit: type=1400 audit(734.561:1143): avc: denied { mounton } for pid=10324 comm="syz.2.913" path="/29/file0" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 734.769728][T10327] SQUASHFS error: Failed to read block 0x0: -5 [ 734.809286][T10327] unable to read squashfs_super_block [ 734.810395][ T29] audit: type=1400 audit(734.741:1144): avc: denied { write } for pid=10331 comm="syz.3.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 734.919697][ T29] audit: type=1400 audit(734.891:1145): avc: denied { create } for pid=10331 comm="syz.3.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 734.969668][T10336] xt_l2tp: invalid flags combination: c [ 735.004290][ T29] audit: type=1400 audit(734.931:1146): avc: denied { bind } for pid=10331 comm="syz.3.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 735.194356][ T29] audit: type=1400 audit(734.931:1147): avc: denied { connect } for pid=10331 comm="syz.3.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 735.359008][ T29] audit: type=1400 audit(734.941:1148): avc: denied { getopt } for pid=10331 comm="syz.3.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 736.517010][ T8522] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 736.527410][ T8522] Bluetooth: hci1: Injecting HCI hardware error event [ 736.546887][ T5231] Bluetooth: hci1: hardware error 0x00 [ 736.832600][T10352] snd_dummy snd_dummy.0: control 0:1:0:syz0:0 is already present [ 737.762612][ T29] audit: type=1400 audit(737.731:1149): avc: denied { ioctl } for pid=10354 comm="syz.1.918" path="socket:[32195]" dev="sockfs" ino=32195 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 738.698709][ T5231] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 739.030921][ T29] audit: type=1400 audit(739.001:1150): avc: denied { unlink } for pid=9424 comm="syz-executor" name="file0" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 740.134200][ T29] audit: type=1400 audit(739.991:1151): avc: denied { read } for pid=10378 comm="syz.1.920" name="sg0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 740.328982][T10148] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 740.746657][ T29] audit: type=1400 audit(740.001:1152): avc: denied { open } for pid=10378 comm="syz.1.920" path="/dev/sg0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 740.951974][ T29] audit: type=1400 audit(740.041:1153): avc: denied { ioctl } for pid=10378 comm="syz.1.920" path="/dev/sg0" dev="devtmpfs" ino=703 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 741.092128][T10148] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 741.333147][T10148] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 742.127427][T10148] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 742.383518][ T29] audit: type=1400 audit(742.351:1154): avc: denied { read } for pid=10405 comm="syz.3.925" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 742.459526][ T29] audit: type=1400 audit(742.391:1155): avc: denied { open } for pid=10405 comm="syz.3.925" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 742.562503][ T29] audit: type=1400 audit(742.481:1156): avc: denied { ioctl } for pid=10405 comm="syz.3.925" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 742.694966][ T5320] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 742.719589][T10399] ebtables: ebtables: counters copy to user failed while replacing table [ 742.739441][ T29] audit: type=1400 audit(742.481:1157): avc: denied { set_context_mgr } for pid=10405 comm="syz.3.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 742.815003][ T29] audit: type=1400 audit(742.501:1158): avc: denied { read } for pid=10400 comm="syz.1.924" laddr=::ac14:14aa lport=47119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 742.819068][T10148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.912722][ T29] audit: type=1400 audit(742.521:1159): avc: denied { write } for pid=10405 comm="syz.3.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 742.984862][ T5320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.039963][ T5320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.050378][T10148] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.067537][ T29] audit: type=1400 audit(742.521:1160): avc: denied { nlmsg_write } for pid=10405 comm="syz.3.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 743.124765][ T5320] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 743.172249][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.179515][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.220295][ T29] audit: type=1400 audit(742.711:1161): avc: denied { accept } for pid=10405 comm="syz.3.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 743.228006][ T5320] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 743.239949][ C1] vkms_vblank_simulate: vblank timer overrun [ 743.302642][ T5320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.341084][ T5320] usb 1-1: config 0 descriptor?? [ 743.410764][ T29] audit: type=1400 audit(742.711:1162): avc: denied { getopt } for pid=10405 comm="syz.3.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 743.437824][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.445107][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.537415][ T29] audit: type=1400 audit(743.031:1163): avc: denied { create } for pid=10400 comm="syz.1.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 743.683796][ T29] audit: type=1400 audit(743.121:1164): avc: denied { ioctl } for pid=10417 comm="syz.3.927" path="socket:[32496]" dev="sockfs" ino=32496 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 743.809179][ T29] audit: type=1400 audit(743.141:1165): avc: denied { write } for pid=10400 comm="syz.1.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 743.887673][ T29] audit: type=1400 audit(743.341:1166): avc: denied { name_bind } for pid=10424 comm="syz.2.926" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 743.987029][ T5320] pyra 0003:1E7D:2C24.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.0-1/input0 [ 744.001669][ T29] audit: type=1400 audit(743.501:1167): avc: denied { write } for pid=10424 comm="syz.2.926" path="socket:[32502]" dev="sockfs" ino=32502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 744.504240][T10399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.713613][T10399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.841922][T10442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.929'. [ 744.876148][T10148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.893312][T10442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.929'. [ 746.116765][ T5277] usb 1-1: USB disconnect, device number 10 [ 747.703906][T10148] veth0_vlan: entered promiscuous mode [ 747.818255][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.818419][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.982805][T10148] veth1_vlan: entered promiscuous mode [ 748.075107][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 748.075125][ T29] audit: type=1400 audit(748.051:1173): avc: denied { read write } for pid=10479 comm="syz.2.934" name="uhid" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 748.178795][ T29] audit: type=1400 audit(748.051:1174): avc: denied { open } for pid=10479 comm="syz.2.934" path="/dev/uhid" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 748.256160][T10148] veth0_macvtap: entered promiscuous mode [ 748.287425][ T29] audit: type=1326 audit(748.071:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.1.933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a70f7cef9 code=0x0 [ 748.331028][T10148] veth1_macvtap: entered promiscuous mode [ 748.435383][T10148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.472614][T10148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.494591][ T29] audit: type=1400 audit(748.111:1176): avc: denied { create } for pid=10479 comm="syz.2.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 748.568056][ T29] audit: type=1400 audit(748.121:1177): avc: denied { getopt } for pid=10479 comm="syz.2.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 748.574887][T10148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.644309][T10148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.691350][T10148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.748216][T10148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.818790][T10148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.824612][ T29] audit: type=1400 audit(748.541:1178): avc: denied { mount } for pid=10466 comm="syz.1.933" name="/" dev="hugetlbfs" ino=32893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 748.850263][T10148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.930179][T10148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.991423][T10148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.045883][T10148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.098833][T10148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.153067][T10148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.214532][T10148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.273451][T10148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.333516][T10148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.333610][T10148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.341204][T10148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.366134][T10148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.366165][T10148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.366187][T10148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.366208][T10148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.428575][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 749.824736][ T4197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.824755][ T4197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.087216][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.139806][T10500] Cannot find del_set index 0 as target [ 750.319267][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.232691][ T29] audit: type=1400 audit(751.201:1179): avc: denied { mounton } for pid=10148 comm="syz-executor" path="/root/syzkaller.o3ll6S/syz-tmp" dev="sda1" ino=1977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 751.322539][ T29] audit: type=1400 audit(751.231:1180): avc: denied { mounton } for pid=10496 comm="syz.3.936" path="/42/file0" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 751.478858][ T29] audit: type=1400 audit(751.251:1181): avc: denied { unmount } for pid=10148 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 751.544739][ T29] audit: type=1400 audit(751.351:1182): avc: denied { mounton } for pid=10148 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 753.628456][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 753.628472][ T29] audit: type=1400 audit(753.471:1189): avc: denied { create } for pid=10518 comm="syz.0.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 753.878270][T10519] netlink: 244 bytes leftover after parsing attributes in process `syz.4.941'. [ 754.091479][ T29] audit: type=1400 audit(753.931:1190): avc: denied { read } for pid=10523 comm="syz.3.942" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 754.220319][ T29] audit: type=1400 audit(753.941:1191): avc: denied { open } for pid=10523 comm="syz.3.942" path="/dev/ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 754.844277][ T29] audit: type=1400 audit(753.961:1192): avc: denied { read } for pid=10523 comm="syz.3.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 755.837464][T10530] syz.2.943 (10530): drop_caches: 2 [ 756.541980][ T29] audit: type=1400 audit(756.511:1193): avc: denied { name_bind } for pid=10534 comm="syz.3.945" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 757.235305][ T29] audit: type=1400 audit(756.601:1194): avc: denied { ioctl } for pid=10534 comm="syz.3.945" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 757.355835][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 759.099441][T10538] syz.4.946: attempt to access beyond end of device [ 759.099441][T10538] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 759.225944][T10538] SQUASHFS error: Failed to read block 0x0: -5 [ 759.243818][T10538] unable to read squashfs_super_block [ 759.497255][ T29] audit: type=1326 audit(759.471:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10557 comm="syz.1.951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a70f7cef9 code=0x0 [ 764.125687][ T29] audit: type=1326 audit(764.091:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10554 comm="syz.0.949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81fa97cef9 code=0x0 [ 766.025146][T10572] [U]  [ 766.052462][ T29] audit: type=1400 audit(765.511:1197): avc: denied { execute } for pid=10579 comm="syz.1.955" path=2F6D656D66643A43896DDA99FF7FFFFFFFFFFFFFFF0B3618636F66639F702B56A9F48474C3FD0183202864656C6574656429 dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 766.406092][T10573] Process accounting resumed [ 766.544560][ T5309] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 766.771595][ T5309] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 766.937040][ T5309] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 766.954157][ T5309] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 766.963401][ T5309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 766.972833][ T5309] usb 2-1: SerialNumber: syz [ 767.730320][ T5309] usb 2-1: invalid UAC_HEADER (v1) [ 769.718171][ T5309] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 769.786342][ T5309] usb 2-1: USB disconnect, device number 5 [ 769.868310][T10575] udevd[10575]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 769.944034][ T29] audit: type=1400 audit(769.891:1198): avc: denied { write } for pid=4657 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 770.035435][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.964'. [ 770.044336][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.964'. [ 770.056041][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.964'. [ 770.079057][ T29] audit: type=1400 audit(769.891:1199): avc: denied { remove_name } for pid=4657 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 770.163916][ T29] audit: type=1400 audit(769.891:1200): avc: denied { rename } for pid=4657 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 770.281851][ T29] audit: type=1400 audit(769.891:1201): avc: denied { add_name } for pid=4657 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 770.407899][ T29] audit: type=1400 audit(769.891:1202): avc: denied { unlink } for pid=4657 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 770.496779][ T29] audit: type=1400 audit(769.891:1203): avc: denied { create } for pid=4657 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 771.378744][ T5231] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 771.737559][ T29] audit: type=1400 audit(771.701:1204): avc: denied { accept } for pid=10621 comm="syz.3.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 771.856025][ T29] audit: type=1400 audit(771.831:1205): avc: denied { bind } for pid=10628 comm="syz.0.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 771.979446][ T29] audit: type=1400 audit(771.851:1206): avc: denied { name_bind } for pid=10628 comm="syz.0.967" src=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 772.122227][ T29] audit: type=1400 audit(771.851:1207): avc: denied { node_bind } for pid=10628 comm="syz.0.967" src=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 772.198826][ T29] audit: type=1400 audit(771.921:1208): avc: denied { ioctl } for pid=10628 comm="syz.0.967" path="socket:[33157]" dev="sockfs" ino=33157 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 773.000145][T10639] Non-string source [ 773.964346][ T29] audit: type=1400 audit(773.841:1209): avc: denied { open } for pid=10653 comm="syz.2.975" path="/dev/ptyq8" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 774.023297][ T29] audit: type=1400 audit(773.861:1210): avc: denied { connect } for pid=10648 comm="syz.0.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 774.112532][ T29] audit: type=1400 audit(773.891:1211): avc: denied { bind } for pid=10648 comm="syz.0.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 774.231655][ T29] audit: type=1400 audit(773.901:1212): avc: denied { write } for pid=10648 comm="syz.0.973" path="socket:[34095]" dev="sockfs" ino=34095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 774.361069][T10661] netlink: 'syz.2.975': attribute type 1 has an invalid length. [ 774.390520][T10661] netlink: 224 bytes leftover after parsing attributes in process `syz.2.975'. [ 775.048751][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 775.133760][T10665] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20002 [ 775.570064][ T29] audit: type=1400 audit(775.511:1213): avc: denied { create } for pid=10670 comm="syz.3.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 775.814602][ T9577] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 776.075155][ T9577] usb 1-1: Using ep0 maxpacket: 8 [ 776.943298][ T9577] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.981213][ T9577] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 777.007331][ T29] audit: type=1400 audit(776.971:1214): avc: denied { create } for pid=10680 comm="syz.1.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 777.032467][ T9577] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.103657][ T29] audit: type=1400 audit(777.021:1215): avc: denied { bind } for pid=10680 comm="syz.1.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 777.165475][ T9577] usb 1-1: config 0 descriptor?? [ 777.218841][ T9577] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 777.344949][ T2638] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 778.243657][ T9577] gspca_vc032x: reg_r err -110 [ 778.257106][ T9577] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 778.275445][ T29] audit: type=1400 audit(777.411:1216): avc: denied { setopt } for pid=10682 comm="syz.2.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 778.386851][ T2638] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.407507][ T29] audit: type=1400 audit(778.371:1217): avc: denied { write } for pid=10686 comm="syz.3.982" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 778.427144][ T2638] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 778.444236][ T2638] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 778.453646][ T2638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 778.463367][ T2638] usb 2-1: SerialNumber: syz [ 778.496800][ T2638] usb 2-1: bad CDC descriptors [ 778.712623][T10681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.724413][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.748640][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.749912][T10681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.766587][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.779648][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.790066][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.799510][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.811635][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.819567][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.827777][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.835606][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.843108][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.851252][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.859724][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.867637][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.878008][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.885907][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.893419][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.903642][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.912428][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.922479][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.930624][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.938674][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.946757][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.954260][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.962523][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.969979][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.980500][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.988222][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 778.995838][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 779.003407][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 779.011067][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 779.019522][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 779.031080][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 779.039847][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 779.052792][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 779.060467][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 779.068212][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 779.078364][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 779.085887][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 779.093680][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 779.101220][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 779.108844][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 779.116334][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 779.123829][ T9577] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 779.140115][ T9577] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 779.164398][ T2638] usb 2-1: USB disconnect, device number 6 [ 779.244129][ T5277] usb 1-1: USB disconnect, device number 11 [ 780.914318][T10702] sctp: [Deprecated]: syz.2.984 (pid 10702) Use of int in maxseg socket option. [ 780.914318][T10702] Use struct sctp_assoc_value instead [ 780.914583][ T29] audit: type=1400 audit(780.467:1218): avc: denied { setopt } for pid=10691 comm="syz.3.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 781.011405][T10703] netlink: 32 bytes leftover after parsing attributes in process `syz.4.986'. [ 781.038306][T10703] netlink: 32 bytes leftover after parsing attributes in process `syz.4.986'. [ 781.143406][T10703] netlink: 32 bytes leftover after parsing attributes in process `syz.4.986'. [ 782.306572][ T29] audit: type=1400 audit(781.517:1219): avc: denied { mount } for pid=10707 comm="syz.0.987" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 782.395260][T10689] delete_channel: no stack [ 782.765033][ T29] audit: type=1400 audit(782.737:1220): avc: denied { read } for pid=10718 comm="syz.2.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 782.892079][ T29] audit: type=1400 audit(782.797:1221): avc: denied { setopt } for pid=10718 comm="syz.2.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 782.952980][ T29] audit: type=1400 audit(782.927:1222): avc: denied { write } for pid=10718 comm="syz.2.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 783.168452][T10714] QAT: Invalid ioctl 21531 [ 790.368875][ T29] audit: type=1400 audit(790.317:1223): avc: denied { connect } for pid=10739 comm="syz.2.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 792.539360][T10753] binder: 10750:10753 ioctl 541b 0 returned -22 [ 792.925744][ T29] audit: type=1400 audit(792.897:1224): avc: denied { mount } for pid=10755 comm="syz.2.1001" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 794.116456][ T29] audit: type=1400 audit(794.097:1225): avc: denied { listen } for pid=10764 comm="syz.0.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 794.262244][ T8522] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 794.559840][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 794.614123][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 794.628174][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 794.671887][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 794.700966][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 794.711626][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 795.194819][ T2638] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 795.472051][ T2638] usb 1-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 795.539720][ T2638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.605899][ T2638] usb 1-1: config 0 descriptor?? [ 795.656711][ T2638] usb 1-1: bad CDC descriptors [ 796.311998][ T8522] Bluetooth: hci2: command 0x0c1a tx timeout [ 796.330142][T10791] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1008'. [ 796.339922][ T29] audit: type=1400 audit(796.307:1226): avc: denied { write } for pid=10784 comm="syz.4.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 796.768866][T10774] chnl_net:caif_netlink_parms(): no params data found [ 796.862075][ T8522] Bluetooth: hci3: command tx timeout [ 796.953189][T10802] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 796.961326][T10802] netlink: 9352 bytes leftover after parsing attributes in process `syz.4.1010'. [ 796.970748][T10802] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 796.978641][T10802] netlink: 'syz.4.1010': attribute type 2 has an invalid length. [ 796.986602][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 797.797173][T10798] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 797.806219][T10798] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 798.615037][ T2638] usb 1-1: USB disconnect, device number 12 [ 798.936740][ T8522] Bluetooth: hci3: command tx timeout [ 799.096321][T10774] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.194816][T10774] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.259884][T10774] bridge_slave_0: entered allmulticast mode [ 799.283872][T10774] bridge_slave_0: entered promiscuous mode [ 799.322819][T10774] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.363637][T10774] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.393823][T10774] bridge_slave_1: entered allmulticast mode [ 799.396529][ T29] audit: type=1400 audit(799.357:1227): avc: denied { setopt } for pid=10813 comm="syz.1.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 799.455988][T10774] bridge_slave_1: entered promiscuous mode [ 799.704598][ T9577] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 799.894574][ T9577] usb 5-1: Using ep0 maxpacket: 8 [ 800.065294][T10817] sp0: Synchronizing with TNC [ 800.131474][T10774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.142809][ T9577] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.202343][ T9577] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 800.240132][T10774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.354574][ T9577] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.409455][ T9577] usb 5-1: config 0 descriptor?? [ 800.581118][ T9577] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 800.592952][T10810] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 800.645292][T10810] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 800.695476][T10810] Error parsing options; rc = [-22] [ 800.721797][T10774] team0: Port device team_slave_0 added [ 800.857455][T10774] team0: Port device team_slave_1 added [ 801.014602][ T8522] Bluetooth: hci3: command tx timeout [ 801.134577][ T9577] gspca_vc032x: reg_r err -110 [ 801.147028][ T9577] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 801.207505][ T9577] usb 5-1: USB disconnect, device number 10 [ 801.532365][T10774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.559125][T10774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.741420][T10774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.765569][T10774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.783094][T10774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.871720][T10774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.128138][T10774] hsr_slave_0: entered promiscuous mode [ 802.197337][T10774] hsr_slave_1: entered promiscuous mode [ 802.248485][T10774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 802.277444][T10774] Cannot create hsr debugfs directory [ 802.307416][ T29] audit: type=1400 audit(802.277:1228): avc: denied { block_suspend } for pid=10828 comm="syz.4.1018" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 803.354547][ T5231] Bluetooth: hci3: command tx timeout [ 803.434632][ T5282] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 803.706161][ T5282] usb 2-1: Using ep0 maxpacket: 8 [ 803.727208][ T5282] usb 2-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=b9.de [ 803.739327][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.751074][T10835] xt_l2tp: invalid flags combination: c [ 803.803190][ T29] audit: type=1400 audit(803.717:1229): avc: denied { connect } for pid=10842 comm="syz.0.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 803.822388][ T5282] usb 2-1: Product: syz [ 803.826708][ T5282] usb 2-1: Manufacturer: syz [ 803.847473][ T5282] usb 2-1: SerialNumber: syz [ 803.861402][ T29] audit: type=1400 audit(803.767:1230): avc: denied { map } for pid=10842 comm="syz.0.1020" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 803.886981][ T5282] usb 2-1: config 0 descriptor?? [ 803.906624][ T5282] belkin_sa 2-1:0.0: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 803.921415][ T5282] usb 2-1: bcdDevice: b9de, bfc: 0 [ 803.939128][ T29] audit: type=1400 audit(803.767:1231): avc: denied { execute } for pid=10842 comm="syz.0.1020" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 803.986993][ T5282] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 804.031839][ T29] audit: type=1326 audit(803.967:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10828 comm="syz.4.1018" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0004d7cef9 code=0x0 [ 804.628475][T10774] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.666512][ T2638] usb 2-1: USB disconnect, device number 7 [ 804.846056][ T2638] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 804.895757][ T2638] belkin_sa 2-1:0.0: device disconnected [ 804.993848][ T29] audit: type=1400 audit(804.967:1233): avc: denied { mount } for pid=10849 comm="syz.2.1021" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 806.014817][ T29] audit: type=1400 audit(805.207:1234): avc: denied { remount } for pid=10849 comm="syz.2.1021" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 806.195521][T10774] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.222863][ T29] audit: type=1400 audit(806.197:1235): avc: denied { unmount } for pid=9424 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 806.410036][T10861] sctp: [Deprecated]: syz.0.1032 (pid 10861) Use of int in maxseg socket option. [ 806.410036][T10861] Use struct sctp_assoc_value instead [ 806.561354][T10774] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.940695][T10869] netlink: 'syz.2.1034': attribute type 16 has an invalid length. [ 806.940729][T10869] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1034'. [ 808.569694][T10774] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.061618][T10774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 809.158925][T10774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 809.229130][T10774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 809.269633][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.331335][ T29] audit: type=1400 audit(809.297:1236): avc: denied { create } for pid=10873 comm="syz.0.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 809.332586][T10774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 809.415244][ T29] audit: type=1400 audit(809.387:1237): avc: denied { setopt } for pid=10873 comm="syz.0.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 809.655887][T10882] syz.0.1036: attempt to access beyond end of device [ 809.655887][T10882] nbd0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 809.707074][T10882] hfsplus: unable to find HFS+ superblock [ 809.708295][T10887] /dev/nbd0: Can't open blockdev [ 809.902729][T10880] ceph: No mds server is up or the cluster is laggy [ 809.960722][ T8] libceph: connect (1)[c::]:6789 error -101 [ 810.025373][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 810.055412][ T2638] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 810.299426][ T9577] libceph: connect (1)[c::]:6789 error -101 [ 810.309214][ T9577] libceph: mon0 (1)[c::]:6789 connect error [ 810.314557][ T2638] usb 2-1: Using ep0 maxpacket: 8 [ 810.323228][ T2638] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.375045][ T4197] bridge_slave_1: left allmulticast mode [ 810.390350][ T2638] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 810.414590][ T2638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.426823][ T4197] bridge_slave_1: left promiscuous mode [ 810.458862][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.473243][ T2638] usb 2-1: config 0 descriptor?? [ 810.500243][ T2638] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 810.575380][ T4197] bridge_slave_0: left allmulticast mode [ 810.581937][ T4197] bridge_slave_0: left promiscuous mode [ 810.591405][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.741186][ T2638] gspca_vc032x: reg_r err -71 [ 810.766477][ T2638] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 810.808366][ T2638] usb 2-1: USB disconnect, device number 8 [ 811.964634][ T29] audit: type=1400 audit(811.107:1238): avc: denied { ioctl } for pid=10893 comm="syz.4.1029" path="/dev/input/event2" dev="devtmpfs" ino=839 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 812.645865][ T29] audit: type=1400 audit(812.597:1239): avc: denied { bind } for pid=10900 comm="syz.4.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 813.387654][ T29] audit: type=1400 audit(812.617:1240): avc: denied { node_bind } for pid=10900 comm="syz.4.1030" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 813.703432][ T29] audit: type=1400 audit(813.677:1241): avc: denied { connect } for pid=10904 comm="syz.4.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 813.730355][ T29] audit: type=1400 audit(813.677:1242): avc: denied { name_connect } for pid=10904 comm="syz.4.1031" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 813.784139][ T29] audit: type=1400 audit(813.757:1243): avc: denied { read } for pid=10904 comm="syz.4.1031" lport=55028 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 813.881913][ T29] audit: type=1400 audit(813.847:1244): avc: denied { listen } for pid=10906 comm="syz.1.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 814.104576][ T29] audit: type=1400 audit(813.877:1245): avc: denied { shutdown } for pid=10909 comm="syz.2.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 815.796248][ T5282] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 816.105387][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 816.197722][ T5282] usb 3-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 816.209183][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.729447][ T5282] usb 3-1: config 0 descriptor?? [ 816.774737][ T5282] usb 3-1: can't set config #0, error -71 [ 816.923104][ T5282] usb 3-1: USB disconnect, device number 10 [ 816.957420][ T4197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.038001][ T4197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.086791][ T4197] bond0 (unregistering): Released all slaves [ 817.441286][T10774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.470958][T10774] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.876381][ T9086] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.883521][ T9086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.204233][ T8522] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 818.430007][ T9086] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.437154][ T9086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.478673][ T4197] hsr_slave_0: left promiscuous mode [ 819.544774][ T4197] hsr_slave_1: left promiscuous mode [ 819.563972][ T4197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 819.574596][ T4197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.592424][ T4197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 819.614266][ T4197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.704222][ T4197] veth1_macvtap: left promiscuous mode [ 819.713210][ T4197] veth0_macvtap: left promiscuous mode [ 819.726332][ T4197] veth1_vlan: left promiscuous mode [ 819.740206][ T4197] veth0_vlan: left promiscuous mode [ 820.932983][ T4197] team0 (unregistering): Port device team_slave_1 removed [ 821.000895][ T4197] team0 (unregistering): Port device team_slave_0 removed [ 822.089139][T10774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.142688][T10774] veth0_vlan: entered promiscuous mode [ 822.154529][T10774] veth1_vlan: entered promiscuous mode [ 822.191763][T10774] veth0_macvtap: entered promiscuous mode [ 822.213167][T10774] veth1_macvtap: entered promiscuous mode [ 822.231813][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.246114][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.256486][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.269019][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.280309][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.292463][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.303162][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.314078][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.327594][T10774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.342302][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.352819][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.362670][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.373344][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.383229][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.398031][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.408933][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.419487][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.431176][T10774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.447079][T10774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.456432][T10774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.466335][T10774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.475451][T10774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.570908][ T5630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.586689][ T5630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.622869][ T9086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.636935][ T9086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.133061][ T29] audit: type=1400 audit(823.087:1246): avc: denied { setopt } for pid=10954 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 823.336557][T10965] affs: Unrecognized mount option "ßÉûÁ8Ÿ]DïÔòKxÛõp„'Ádi!ê§æ¬„" or missing value [ 823.346522][T10965] affs: Error parsing options [ 824.115860][ T29] audit: type=1400 audit(823.307:1247): avc: denied { accept } for pid=10956 comm="syz.1.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 824.223691][ T29] audit: type=1400 audit(823.307:1248): avc: denied { ioctl } for pid=10956 comm="syz.1.1056" path="socket:[34967]" dev="sockfs" ino=34967 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 824.320102][ T29] audit: type=1400 audit(824.187:1249): avc: denied { execute_no_trans } for pid=10961 comm="syz.4.1058" path="/21/file2" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 824.781988][T10970] vivid-004: ================= START STATUS ================= [ 824.796296][T10970] vivid-004: Radio HW Seek Mode: Bounded [ 824.811205][T10970] vivid-004: Radio Programmable HW Seek: false [ 824.821613][T10970] vivid-004: RDS Rx I/O Mode: Block I/O [ 824.829042][T10970] vivid-004: Generate RBDS Instead of RDS: false [ 824.849846][T10970] vivid-004: RDS Reception: true [ 824.864122][T10970] vivid-004: RDS Program Type: 0 inactive [ 824.885258][T10970] vivid-004: RDS PS Name: inactive [ 824.908653][T10970] vivid-004: RDS Radio Text: inactive [ 824.932688][T10970] vivid-004: RDS Traffic Announcement: false inactive [ 824.941639][T10970] vivid-004: RDS Traffic Program: false inactive [ 824.955251][T10970] vivid-004: RDS Music: false inactive [ 825.002651][T10970] vivid-004: ================== END STATUS ================== [ 826.402874][T10992] xt_CT: You must specify a L4 protocol and not use inversions on it [ 827.092485][ T29] audit: type=1400 audit(826.367:1250): avc: denied { lock } for pid=10988 comm="syz.4.1048" path="socket:[36054]" dev="sockfs" ino=36054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 827.710005][ T9577] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 827.729144][ T29] audit: type=1400 audit(827.707:1251): avc: denied { write } for pid=10997 comm="syz.4.1049" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 828.004714][ T9577] usb 4-1: Using ep0 maxpacket: 8 [ 828.357551][ T9577] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.372253][ T9577] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 828.382451][ T9577] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.996346][ T9577] usb 4-1: config 0 descriptor?? [ 829.453420][ T29] audit: type=1326 audit(829.427:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0004d7cef9 code=0x7ffc0000 [ 829.672335][ T29] audit: type=1326 audit(829.427:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0004d7cef9 code=0x7ffc0000 [ 830.196133][ T29] audit: type=1326 audit(829.427:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0004d7cef9 code=0x7ffc0000 [ 831.475287][ T29] audit: type=1326 audit(829.427:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0004d7cef9 code=0x7ffc0000 [ 831.612473][T11018] netlink: 'syz.1.1059': attribute type 11 has an invalid length. [ 831.622021][T11018] netlink: 211132 bytes leftover after parsing attributes in process `syz.1.1059'. [ 831.644545][ T29] audit: type=1326 audit(829.427:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0004d7cef9 code=0x7ffc0000 [ 831.764415][ T29] audit: type=1326 audit(829.427:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0004d7cef9 code=0x7ffc0000 [ 831.840829][ T29] audit: type=1326 audit(829.427:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0004d7cef9 code=0x7ffc0000 [ 831.876707][ T29] audit: type=1326 audit(829.427:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0004d7cef9 code=0x7ffc0000 [ 832.078239][ T29] audit: type=1326 audit(829.427:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0004d7cef9 code=0x7ffc0000 [ 832.240134][ T29] audit: type=1326 audit(829.427:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0004d7cef9 code=0x7ffc0000 [ 832.472021][ T9577] usb 4-1: can't set config #0, error -71 [ 832.509437][ T9577] usb 4-1: USB disconnect, device number 12 [ 832.751854][T11033] kAFS: unable to lookup cell '' [ 834.819237][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.967332][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.167672][T11058] netlink: 'syz.4.1068': attribute type 2 has an invalid length. [ 835.183462][T11058] netlink: 'syz.4.1068': attribute type 1 has an invalid length. [ 835.476579][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 835.476597][ T29] audit: type=1400 audit(835.457:1265): avc: denied { getopt } for pid=11064 comm="syz.0.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 835.616772][ T29] audit: type=1400 audit(835.597:1266): avc: denied { unmount } for pid=8906 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 835.894568][ T5231] Bluetooth: hci3: command tx timeout [ 836.714792][T11077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1073'. [ 836.764617][T11077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1073'. [ 836.824130][ T29] audit: type=1400 audit(836.797:1267): avc: denied { bind } for pid=11076 comm="syz.0.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 836.901149][ T29] audit: type=1400 audit(836.797:1268): avc: denied { name_bind } for pid=11076 comm="syz.0.1073" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 837.130715][ T5231] Bluetooth: hci5: command 0x0406 tx timeout [ 838.308312][ T29] audit: type=1400 audit(836.797:1269): avc: denied { node_bind } for pid=11076 comm="syz.0.1073" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 838.416146][ T29] audit: type=1400 audit(837.297:1270): avc: denied { mount } for pid=11082 comm="syz.4.1076" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 838.443738][ T29] audit: type=1400 audit(837.337:1271): avc: denied { mounton } for pid=11082 comm="syz.4.1076" path="/29/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 838.529741][T11092] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 838.539893][ T29] audit: type=1400 audit(837.357:1272): avc: denied { mount } for pid=11082 comm="syz.4.1076" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 838.721323][T11099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1088'. [ 839.470484][ T29] audit: type=1400 audit(838.337:1273): avc: denied { unmount } for pid=10148 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 839.596315][ T29] audit: type=1400 audit(838.557:1274): avc: denied { getopt } for pid=11090 comm="syz.4.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 840.523085][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.544755][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.505386][ T8522] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 843.681349][ T29] audit: type=1400 audit(843.647:1275): avc: denied { read } for pid=11126 comm="syz.0.1084" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 844.054349][T11131] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 844.060996][T11131] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 844.069454][T11131] vhci_hcd vhci_hcd.0: Device attached [ 844.078589][T11131] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 844.091301][T11131] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 844.114787][T11131] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 844.304921][ T5320] vhci_hcd: vhci_device speed not set [ 844.337827][T11134] vhci_hcd: connection closed [ 844.339973][ T4197] vhci_hcd: stop threads [ 844.352085][ T4197] vhci_hcd: release socket [ 844.357045][ T4197] vhci_hcd: disconnect device [ 844.374610][ T5320] usb 9-1: new full-speed USB device number 3 using vhci_hcd [ 844.382067][ T5320] usb 9-1: enqueue for inactive port 0 [ 844.466241][ T5320] vhci_hcd: vhci_device speed not set [ 844.863837][T11129] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 844.870341][T11129] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 844.884004][T11129] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 844.890358][T11129] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 844.899791][T11129] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 844.911502][T11129] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 844.922720][T11129] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 846.052929][ T8522] Bluetooth: hci0: command 0x0c1a tx timeout [ 847.443871][T11152] unsupported nlmsg_type 40 [ 847.445930][ T8522] Bluetooth: hci3: command 0x0c1a tx timeout [ 847.449131][ T5231] Bluetooth: hci5: command 0x0406 tx timeout [ 847.458111][ T8522] Bluetooth: hci2: command 0x0c1a tx timeout [ 849.495006][ T8522] Bluetooth: hci5: command 0x0406 tx timeout [ 849.495029][ T5231] Bluetooth: hci3: command 0x0c1a tx timeout [ 851.904693][ T5231] Bluetooth: hci3: command 0x0c1a tx timeout [ 853.184974][ T29] audit: type=1400 audit(853.037:1276): avc: denied { create } for pid=11156 comm="syz.4.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 853.780295][ T29] audit: type=1400 audit(853.037:1277): avc: denied { connect } for pid=11156 comm="syz.4.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 854.892310][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'. [ 861.124594][ T29] audit: type=1400 audit(855.977:1278): avc: denied { bind } for pid=11188 comm="syz.1.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 862.408331][T11193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.944204][ T29] audit: type=1400 audit(862.917:1279): avc: denied { append } for pid=11195 comm="syz.0.1101" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 863.003433][ T29] audit: type=1400 audit(862.967:1280): avc: denied { mount } for pid=11201 comm="syz.1.1112" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 863.140063][ T29] audit: type=1400 audit(863.117:1281): avc: denied { setopt } for pid=11201 comm="syz.1.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 863.694696][ T29] audit: type=1400 audit(863.657:1282): avc: denied { connect } for pid=11208 comm="syz.2.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 864.210109][T11217] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 864.287815][ T5231] Bluetooth: hci5: Malformed Event: 0x2f [ 864.671280][ T29] audit: type=1400 audit(864.647:1283): avc: denied { accept } for pid=11219 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 864.671465][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 865.431683][ T29] audit: type=1400 audit(865.397:1284): avc: denied { ioctl } for pid=11227 comm="syz.2.1107" path="/dev/rtc0" dev="devtmpfs" ino=838 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 866.290728][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 868.876821][T11258] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 869.722063][T11274] netlink: 'syz.3.1119': attribute type 6 has an invalid length. [ 869.994580][ T48] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 870.653245][T11279] syz.4.1120 (11279): drop_caches: 2 [ 870.676250][T11279] syz.4.1120 (11279): drop_caches: 2 [ 870.775489][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.988769][ T29] audit: type=1400 audit(870.877:1285): avc: denied { accept } for pid=11273 comm="syz.3.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 871.102435][ T48] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 871.133597][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.179606][ T48] usb 2-1: Product: syz [ 871.200442][ T48] usb 2-1: Manufacturer: syz [ 871.228196][ T48] usb 2-1: SerialNumber: syz [ 871.270342][ T48] usb 2-1: config 0 descriptor?? [ 871.307306][ T48] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 871.331867][ T48] usb 2-1: No valid video chain found. [ 872.255779][ T29] audit: type=1400 audit(872.197:1286): avc: denied { setopt } for pid=11294 comm="syz.0.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 872.300787][T11297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 873.165045][ T9577] usb 2-1: USB disconnect, device number 9 [ 873.610872][T11317] fuse: Unknown parameter '0x0000000000000005' [ 874.756473][T11328] Unsupported ieee802154 address type: 0 [ 875.414013][ T29] audit: type=1400 audit(874.727:1287): avc: denied { bind } for pid=11321 comm="syz.0.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 875.731643][ T29] audit: type=1400 audit(875.487:1288): avc: denied { ioctl } for pid=11310 comm="syz.3.1127" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 875.756266][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.679805][T11331] loop0: detected capacity change from 0 to 128 [ 877.322278][T11340] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 877.716925][ T29] audit: type=1326 audit(877.697:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.1.1144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a70f7cef9 code=0x0 [ 877.739277][ C1] vkms_vblank_simulate: vblank timer overrun [ 878.126107][T11353] random: crng reseeded on system resumption [ 879.769407][T11358] sctp: [Deprecated]: syz.1.1136 (pid 11358) Use of int in maxseg socket option. [ 879.769407][T11358] Use struct sctp_assoc_value instead [ 880.000707][ T29] audit: type=1400 audit(879.977:1290): avc: denied { shutdown } for pid=11359 comm="syz.3.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 880.056591][T11367] ubi0: detaching mtd0 [ 880.161980][T11367] ubi0: mtd0 is detached [ 880.184547][ T2638] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 880.504616][ T9577] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 880.692739][ T2638] usb 3-1: config 0 has no interfaces? [ 880.698488][ T2638] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 880.708716][ T2638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.341170][ T2638] usb 3-1: config 0 descriptor?? [ 881.541169][T11356] delete_channel: no stack [ 881.566359][ T9577] usb 5-1: No LPM exit latency info found, disabling LPM. [ 881.593670][ T9577] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 881.645150][ T9577] usb 5-1: string descriptor 0 read error: -22 [ 881.659743][ T9577] usb 5-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.40 [ 881.702132][ T9577] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.742010][ T9577] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 881.775390][T11377] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 881.782811][T11377] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 881.812900][T11377] vhci_hcd vhci_hcd.0: Device attached [ 881.911334][T11380] vhci_hcd: cannot find the pending unlink 5 [ 881.917744][ T29] audit: type=1400 audit(881.887:1291): avc: denied { write } for pid=11383 comm="syz.1.1143" path="socket:[37020]" dev="sockfs" ino=37020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 881.972127][ T48] usb 5-1: USB disconnect, device number 11 [ 882.094912][ T2638] usb 9-1: new high-speed USB device number 4 using vhci_hcd [ 882.957123][ T5277] kernel write not supported for file /dsp (pid: 5277 comm: kworker/1:3) [ 882.964607][T11363] kvm: pic: non byte read [ 882.972125][T11363] kvm: pic: non byte read [ 883.347095][T11380] vhci_hcd: connection reset by peer [ 883.364418][ T5600] vhci_hcd: stop threads [ 883.374562][ T5600] vhci_hcd: release socket [ 883.389370][ T5282] usb 3-1: USB disconnect, device number 11 [ 883.403453][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 883.405273][ T5600] vhci_hcd: disconnect device [ 886.924022][ T29] audit: type=1400 audit(886.877:1292): avc: denied { read } for pid=11424 comm="syz.2.1152" path="socket:[37202]" dev="sockfs" ino=37202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 887.049586][ T29] audit: type=1400 audit(886.897:1293): avc: denied { read } for pid=11424 comm="syz.2.1152" path="socket:[37201]" dev="sockfs" ino=37201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 887.255991][ T2638] vhci_hcd: vhci_device speed not set [ 887.666757][T11441] syz.4.1155: attempt to access beyond end of device [ 887.666757][T11441] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 887.701378][T11441] SQUASHFS error: Failed to read block 0x0: -5 [ 887.733986][T11441] unable to read squashfs_super_block [ 888.400320][T11448] sctp: [Deprecated]: syz.3.1157 (pid 11448) Use of int in maxseg socket option. [ 888.400320][T11448] Use struct sctp_assoc_value instead [ 888.759411][ T29] audit: type=1326 audit(888.727:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11444 comm="syz.2.1167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fb8b7cef9 code=0x0 [ 888.893507][T11456] sctp: [Deprecated]: syz.1.1158 (pid 11456) Use of int in maxseg socket option. [ 888.893507][T11456] Use struct sctp_assoc_value instead [ 889.151529][T11445] delete_channel: no stack [ 889.185017][ T29] audit: type=1400 audit(889.157:1295): avc: denied { accept } for pid=11458 comm="syz.4.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 889.254304][ T29] audit: type=1400 audit(889.227:1296): avc: denied { read } for pid=11452 comm="syz.0.1159" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 889.404385][ T29] audit: type=1400 audit(889.227:1297): avc: denied { open } for pid=11452 comm="syz.0.1159" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 889.515085][ T29] audit: type=1400 audit(889.297:1298): avc: denied { ioctl } for pid=11452 comm="syz.0.1159" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 889.714611][ T2638] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 889.785090][T11462] ebtables: ebtables: counters copy to user failed while replacing table [ 890.280074][T11475] syz.1.1162 (11475): drop_caches: 2 [ 891.171404][ T2638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.267686][ T2638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.044770][ T2638] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 892.160750][ T2638] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 892.287001][ T2638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.358715][ T2638] usb 5-1: config 0 descriptor?? [ 892.393252][ T2638] usb 5-1: can't set config #0, error -71 [ 892.425320][ T2638] usb 5-1: USB disconnect, device number 12 [ 892.623728][ T29] audit: type=1400 audit(892.557:1299): avc: denied { read } for pid=11486 comm="syz.4.1166" name="btrfs-control" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 892.828562][ T29] audit: type=1400 audit(892.557:1300): avc: denied { open } for pid=11486 comm="syz.4.1166" path="/dev/btrfs-control" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 892.947677][T11489] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 893.977950][ T29] audit: type=1400 audit(892.577:1301): avc: denied { ioctl } for pid=11486 comm="syz.4.1166" path="/dev/btrfs-control" dev="devtmpfs" ino=1120 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 895.864945][ T5231] Bluetooth: hci5: unexpected event for opcode 0x0c22 [ 896.017395][ T29] audit: type=1400 audit(895.987:1302): avc: denied { create } for pid=11497 comm="syz.1.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 896.871553][ T29] audit: type=1326 audit(896.847:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11508 comm="syz.3.1171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f607f37cef9 code=0x0 [ 897.282824][T11513] random: crng reseeded on system resumption [ 899.236037][T11525] Device name cannot be null; rc = [-22] [ 900.015279][T11526] sctp: [Deprecated]: syz.2.1174 (pid 11526) Use of int in maxseg socket option. [ 900.015279][T11526] Use struct sctp_assoc_value instead [ 900.051544][T11527] sctp: [Deprecated]: syz.4.1173 (pid 11527) Use of int in maxseg socket option. [ 900.051544][T11527] Use struct sctp_assoc_value instead [ 901.367206][T11539] syz.1.1184: attempt to access beyond end of device [ 901.367206][T11539] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 901.517488][T11539] SQUASHFS error: Failed to read block 0x0: -5 [ 901.533971][ T29] audit: type=1400 audit(901.507:1304): avc: denied { ioctl } for pid=11540 comm="syz.0.1178" path="socket:[37392]" dev="sockfs" ino=37392 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 901.579108][T11539] unable to read squashfs_super_block [ 901.634598][ T5282] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 901.726392][T11522] delete_channel: no stack [ 901.839639][ T5282] usb 4-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=e1.fc [ 901.873637][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.911519][ T5282] usb 4-1: config 0 descriptor?? [ 901.988404][ T5282] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 902.848305][ T29] audit: type=1400 audit(902.817:1305): avc: denied { read } for pid=4660 comm="acpid" name="mouse1" dev="devtmpfs" ino=2628 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 903.006630][ T29] audit: type=1400 audit(902.817:1306): avc: denied { open } for pid=4660 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2628 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 903.078130][T11560] loop0: detected capacity change from 0 to 128 [ 903.109315][ T29] audit: type=1400 audit(903.067:1307): avc: denied { write } for pid=11547 comm="syz.0.1192" name="sg0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 903.665029][ T4660] bcm5974 4-1:0.0: could not read from device [ 903.808594][ T5282] usb 4-1: USB disconnect, device number 13 [ 903.811005][ T4660] bcm5974 4-1:0.0: could not read from device [ 904.480342][T11579] Illegal XDP return value 60210 on prog (id 344) dev N/A, expect packet loss! [ 905.489965][ T29] audit: type=1400 audit(905.467:1308): avc: denied { mount } for pid=11585 comm="syz.1.1189" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 905.594930][ T2638] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 905.844734][ T2638] usb 5-1: device descriptor read/64, error -71 [ 906.119793][T11602] Bluetooth: Short BCSP packet [ 906.204596][ T2638] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 906.384568][ T2638] usb 5-1: device descriptor read/64, error -71 [ 906.385994][ T9086] Bluetooth: Error in BCSP hdr checksum [ 906.525533][ T2638] usb usb5-port1: attempt power cycle [ 906.626610][ T5600] Bluetooth: Error in BCSP hdr checksum [ 906.785848][ T8522] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 907.014601][ T2638] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 907.060132][ T2638] usb 5-1: device descriptor read/8, error -71 [ 907.384568][ T2638] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 907.445405][ T2638] usb 5-1: device descriptor read/8, error -71 [ 907.553017][T11626] befs: (nullb0): No write support. Marking filesystem read-only [ 907.588247][T11626] befs: (nullb0): invalid magic header [ 907.619804][ T2638] usb usb5-port1: unable to enumerate USB device [ 907.876346][T11631] ptrace attach of "./syz-executor exec"[10774] was attempted by "./syz-executor exec"[11631] [ 907.913412][T11631] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 908.134939][ T5231] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 909.306835][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 909.399973][T11653] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1201'. [ 909.454923][T11653] Êü: entered promiscuous mode [ 909.940752][ T29] audit: type=1326 audit(909.817:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11644 comm="syz.4.1203" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0004d7cef9 code=0x0 [ 910.107625][T11655] netlink: 'syz.4.1203': attribute type 4 has an invalid length. [ 910.856809][ T5231] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 910.867483][ T5231] Bluetooth: hci3: Injecting HCI hardware error event [ 910.892091][ T5231] Bluetooth: hci3: hardware error 0x00 [ 911.753102][ T29] audit: type=1400 audit(911.727:1310): avc: denied { listen } for pid=11662 comm="syz.4.1205" laddr=172.20.20.170 lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 911.797081][T11669] [U]  [ 911.875403][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'. [ 911.897229][T11675] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1207'. [ 911.929195][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'. [ 911.961518][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'. [ 912.935455][ T5231] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 913.997490][T11698] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1212' sets config #0 [ 914.832189][T11688] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 914.848898][T11688] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 914.870535][T11688] Error parsing options; rc = [-22] [ 916.027291][T11703] tty tty24: ldisc open failed (-12), clearing slot 23 [ 916.370833][T11707] random: crng reseeded on system resumption [ 916.399682][ T29] audit: type=1400 audit(916.347:1311): avc: denied { write } for pid=11705 comm="syz.2.1215" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 918.564926][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 919.457017][ T8] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 919.480497][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.552156][ T8] usb 4-1: config 0 descriptor?? [ 919.619529][T11732] Cannot find del_set index 0 as target [ 920.562973][ T8] usb 4-1: Cannot read MAC address [ 920.578713][ T8] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 920.701772][ T8] usb 4-1: USB disconnect, device number 14 [ 921.608127][T11744] QAT: Invalid ioctl 21531 [ 921.659106][T11756] input: syz1 as /devices/virtual/input/input12 [ 921.730265][ T29] audit: type=1400 audit(921.707:1312): avc: denied { ioctl } for pid=4660 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2655 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 921.972600][ T29] audit: type=1400 audit(921.947:1313): avc: denied { listen } for pid=11754 comm="syz.2.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 922.001969][ T29] audit: type=1400 audit(921.947:1314): avc: denied { accept } for pid=11754 comm="syz.2.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 922.027102][ T29] audit: type=1400 audit(922.007:1315): avc: denied { setopt } for pid=11754 comm="syz.2.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 922.128191][ T29] audit: type=1400 audit(922.107:1316): avc: denied { append } for pid=11761 comm="syz.3.1228" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 923.565012][ T29] audit: type=1400 audit(923.537:1317): avc: denied { bind } for pid=11775 comm="syz.0.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 924.368826][ T29] audit: type=1400 audit(923.547:1318): avc: denied { write } for pid=11775 comm="syz.0.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 924.720617][ T29] audit: type=1400 audit(924.687:1319): avc: denied { ioctl } for pid=11789 comm="syz.2.1233" path="/dev/ptyq8" dev="devtmpfs" ino=129 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 927.678086][T11817] program syz.4.1238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 927.723496][T11817] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 927.874382][ T29] audit: type=1400 audit(927.847:1320): avc: denied { bind } for pid=11814 comm="syz.4.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 927.977983][ T29] audit: type=1400 audit(927.847:1321): avc: denied { listen } for pid=11814 comm="syz.4.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 930.105389][ T29] audit: type=1400 audit(930.077:1322): avc: denied { read } for pid=11829 comm="syz.4.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 931.100408][ T2638] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 931.327444][ T2638] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.404672][ T2638] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.466946][ T2638] usb 1-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 931.524796][ T2638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.565596][ T2638] usb 1-1: config 0 descriptor?? [ 931.864626][ T29] audit: type=1400 audit(931.827:1323): avc: denied { bind } for pid=11845 comm="syz.4.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 932.155372][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.295194][T11833] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 932.334343][T11833] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 932.376448][T11854] fuse: Bad value for 'fd' [ 932.429200][ T8522] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 932.447623][ T8522] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 932.458932][ T8522] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 932.468349][ T8522] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 932.480056][ T8522] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 932.487828][ T8522] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 933.207047][ T2638] wacom 0003:056A:00F8.0008: collection stack underflow [ 933.214064][ T2638] wacom 0003:056A:00F8.0008: item 0 0 0 12 parsing failed [ 933.261666][ T2638] wacom 0003:056A:00F8.0008: parse failed [ 933.404810][ T2638] wacom 0003:056A:00F8.0008: probe with driver wacom failed with error -22 [ 934.140437][T11868] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 934.344583][ T29] audit: type=1400 audit(934.197:1324): avc: denied { create } for pid=11863 comm="syz.4.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 934.504981][ T29] audit: type=1400 audit(934.197:1325): avc: denied { ioctl } for pid=11863 comm="syz.4.1247" path="socket:[38949]" dev="sockfs" ino=38949 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 934.509628][T11855] chnl_net:caif_netlink_parms(): no params data found [ 934.590551][ T5231] Bluetooth: hci1: command tx timeout [ 935.114047][T11855] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.151526][T11855] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.986907][T11855] bridge_slave_0: entered allmulticast mode [ 936.028266][ T29] audit: type=1400 audit(936.007:1326): avc: denied { ioctl } for pid=11891 comm="syz.0.1252" path="/dev/ppp" dev="devtmpfs" ino=695 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 936.095087][T11855] bridge_slave_0: entered promiscuous mode [ 936.377677][T11882] mkiss: ax0: crc mode is auto. [ 936.387659][T11855] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.450945][T11855] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.493344][T11855] bridge_slave_1: entered allmulticast mode [ 936.514682][T11855] bridge_slave_1: entered promiscuous mode [ 936.581954][ T5309] usb 1-1: USB disconnect, device number 13 [ 936.615091][ T5231] Bluetooth: hci1: command tx timeout [ 936.837574][ T29] audit: type=1400 audit(936.817:1327): avc: denied { ioctl } for pid=11891 comm="syz.0.1252" path="socket:[38993]" dev="sockfs" ino=38993 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 937.020411][T11855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.086846][T11855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.401878][T11904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1254'. [ 938.329927][T11855] team0: Port device team_slave_0 added [ 938.390865][T11855] team0: Port device team_slave_1 added [ 938.495199][ T29] audit: type=1400 audit(938.467:1328): avc: denied { bind } for pid=11906 comm="syz.3.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 938.551451][ T29] audit: type=1400 audit(938.467:1329): avc: denied { getopt } for pid=11906 comm="syz.3.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 938.901644][ T5231] Bluetooth: hci1: command tx timeout [ 939.611572][T11855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.697060][T11855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.834753][T11855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.936082][T11855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.943036][T11855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.039988][T11855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.970450][ T5231] Bluetooth: hci1: command tx timeout [ 941.478260][ T29] audit: type=1400 audit(941.447:1330): avc: denied { read } for pid=11936 comm="syz.4.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 944.955819][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 945.822260][T11855] hsr_slave_0: entered promiscuous mode [ 945.882550][T11944] Bluetooth: MGMT ver 1.23 [ 945.892416][T11855] hsr_slave_1: entered promiscuous mode [ 945.947672][T11944] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 945.976718][T11944] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 946.311226][ T29] audit: type=1400 audit(946.277:1331): avc: denied { listen } for pid=11948 comm="syz.3.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 946.334423][T11956] ptrace attach of "./syz-executor exec"[9412] was attempted by " [ 947.362148][ T5611] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.227657][ T5611] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.250727][T11953] rtc_cmos 00:00: Alarms can be up to one day in the future [ 948.374049][ T5282] rtc_cmos 00:00: Alarms can be up to one day in the future [ 948.442880][ T5282] rtc_cmos 00:00: Alarms can be up to one day in the future [ 948.519928][ T5282] rtc_cmos 00:00: Alarms can be up to one day in the future [ 948.561431][ T5282] rtc_cmos 00:00: Alarms can be up to one day in the future [ 948.578232][ T5611] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.584511][ T5282] rtc rtc0: __rtc_set_alarm: err=-22 [ 948.761151][T11972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1273'. [ 948.783499][T11972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1273'. [ 948.875179][ T5320] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 948.906769][T11972] bond1: entered allmulticast mode [ 948.912478][T11972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 949.804188][ T5320] usb 1-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=e1.fc [ 949.827613][ T5611] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.861324][ T5320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.926284][ T5320] usb 1-1: config 0 descriptor?? [ 949.938549][ T29] audit: type=1400 audit(949.917:1332): avc: denied { unmount } for pid=10148 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 950.060184][ T5320] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 950.106290][ T29] audit: type=1400 audit(950.087:1333): avc: denied { ioctl } for pid=11982 comm="syz.2.1274" path="socket:[39192]" dev="sockfs" ino=39192 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 951.400556][ T29] audit: type=1326 audit(951.377:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11993 comm="syz.2.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb8b7cef9 code=0x7ffc0000 [ 951.515289][ T29] audit: type=1326 audit(951.377:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11993 comm="syz.2.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb8b7cef9 code=0x7ffc0000 [ 951.624297][ T29] audit: type=1326 audit(951.377:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11993 comm="syz.2.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f9fb8b7cef9 code=0x7ffc0000 [ 951.675584][ T5611] bridge_slave_1: left allmulticast mode [ 951.710151][ T5611] bridge_slave_1: left promiscuous mode [ 951.734685][ T29] audit: type=1326 audit(951.377:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11993 comm="syz.2.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb8b7cef9 code=0x7ffc0000 [ 951.744720][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.883568][ T5611] bridge_slave_0: left allmulticast mode [ 951.889828][ T29] audit: type=1326 audit(951.407:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11993 comm="syz.2.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fb8b7cef9 code=0x7ffc0000 [ 951.900731][ T5611] bridge_slave_0: left promiscuous mode [ 951.971281][ T29] audit: type=1326 audit(951.407:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11993 comm="syz.2.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb8b7cef9 code=0x7ffc0000 [ 951.984717][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.012400][ T4660] bcm5974 1-1:0.0: could not read from device [ 952.024797][ T5309] usb 1-1: USB disconnect, device number 14 [ 952.047671][T11940] bcm5974 1-1:0.0: could not read from device [ 952.060033][ T29] audit: type=1326 audit(951.417:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11993 comm="syz.2.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fb8b7b890 code=0x7ffc0000 [ 952.082979][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.085683][ T29] audit: type=1326 audit(951.417:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11993 comm="syz.2.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fb8b7b890 code=0x7ffc0000 [ 955.615284][ T5611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.633807][ T5611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.663268][ T5611] bond0 (unregistering): Released all slaves [ 956.406115][T12024] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 956.413605][T12024] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 956.433346][T12024] Error parsing options; rc = [-22] [ 956.817106][ T5611] hsr_slave_0: left promiscuous mode [ 956.858886][ T5611] hsr_slave_1: left promiscuous mode [ 956.876510][ T5611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.910873][ T5611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.953829][ T5611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.994369][ T5611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.110172][ T5611] veth1_macvtap: left promiscuous mode [ 957.116945][ T5611] veth0_macvtap: left promiscuous mode [ 957.136074][ T5611] veth1_vlan: left promiscuous mode [ 957.175386][ T5611] veth0_vlan: left promiscuous mode [ 958.355554][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 958.355567][ T29] audit: type=1400 audit(958.337:1377): avc: denied { ioctl } for pid=12065 comm="syz.0.1290" path="socket:[39573]" dev="sockfs" ino=39573 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 958.603982][T12063] QAT: Invalid ioctl 21531 [ 959.044642][T12066] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 960.353562][T12079] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1291'. [ 961.017073][ T5611] team0 (unregistering): Port device team_slave_1 removed [ 961.249115][ T5611] team0 (unregistering): Port device team_slave_0 removed [ 962.834248][T11855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 963.070238][T11855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 963.473798][T11855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 964.049833][T11855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 964.337181][ T29] audit: type=1400 audit(964.317:1378): avc: denied { execute } for pid=12083 comm="syz.3.1302" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=39686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 964.700646][T11855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.813574][T11855] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.907432][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.914669][ T5611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.967023][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.974245][ T5611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.435713][ T5282] IPVS: starting estimator thread 0... [ 970.534682][T12130] IPVS: using max 16 ests per chain, 38400 per kthread [ 971.592237][T11855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.776106][T11855] veth0_vlan: entered promiscuous mode [ 971.871464][T11855] veth1_vlan: entered promiscuous mode [ 972.003390][T11855] veth0_macvtap: entered promiscuous mode [ 972.044819][ T5277] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 972.082175][ T8522] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 972.093782][ T8522] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 972.104209][ T8522] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 972.112538][ T8522] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 972.120712][ T8522] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 972.128706][ T8522] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 972.129554][T11855] veth1_macvtap: entered promiscuous mode [ 972.223049][T11855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.238652][T11855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.255116][T11855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.266953][T11855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.283360][T11855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.294554][T11855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.314619][T11855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.330754][ T5277] usb 4-1: Using ep0 maxpacket: 32 [ 972.338520][T11855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.354100][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.379491][T11855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.395097][ T5277] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 972.425142][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.435071][T11855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.462516][T11855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.475965][ T5277] usb 4-1: config 0 descriptor?? [ 972.504678][T11855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.519129][T11855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.529414][T11855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.582961][T11855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.599598][T11855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.613285][T11855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.650995][T11855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 972.778849][T11855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.791594][T11855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.808895][T11855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.821378][T11855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.988666][ T5277] usbhid 4-1:0.0: can't add hid device: -71 [ 973.025620][ T5277] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 973.063765][ T5277] usb 4-1: USB disconnect, device number 15 [ 973.469329][ T5600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.491127][ T5600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.699689][T12141] chnl_net:caif_netlink_parms(): no params data found [ 973.772548][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.785526][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.214811][ T5231] Bluetooth: hci0: command tx timeout [ 975.722401][T12141] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.760966][T12141] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.884743][T12141] bridge_slave_0: entered allmulticast mode [ 975.934335][T12141] bridge_slave_0: entered promiscuous mode [ 976.030872][T12141] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.054707][T12141] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.085124][T12141] bridge_slave_1: entered allmulticast mode [ 976.127953][T12141] bridge_slave_1: entered promiscuous mode [ 976.594758][ T5231] Bluetooth: hci0: command tx timeout [ 976.948130][T12160] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 976.975783][T12160] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 977.520159][T12181] openvswitch: netlink: IP tunnel dst address not specified [ 978.202242][ T5600] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.212490][T12184] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 978.302397][T12141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.524303][ T29] audit: type=1400 audit(978.487:1379): avc: denied { setopt } for pid=12179 comm="syz.1.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 978.545472][T12141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.616455][ T5231] Bluetooth: hci0: command tx timeout [ 978.936750][T12192] Unsupported ieee802154 address type: 0 [ 979.209416][ T5600] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.260513][T12173] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 979.274058][T12173] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 979.353575][T12173] Error parsing options; rc = [-22] [ 979.689300][ T5600] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.920516][T12141] team0: Port device team_slave_0 added [ 979.979076][T12141] team0: Port device team_slave_1 added [ 980.121305][ T29] audit: type=1400 audit(980.067:1380): avc: denied { write } for pid=12195 comm="syz.4.1307" name="ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 980.714554][ T5231] Bluetooth: hci0: command tx timeout [ 981.950407][ T5600] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.224828][T12141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.233957][T12141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.003132][T12141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.417190][T12141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 983.444851][T12141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.524771][T12141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.295171][ T9577] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 984.553286][ T9577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.566573][T12141] hsr_slave_0: entered promiscuous mode [ 984.596328][ T9577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.625026][T12141] hsr_slave_1: entered promiscuous mode [ 984.646210][ T9577] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 984.665642][T12141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 984.682123][T12141] Cannot create hsr debugfs directory [ 984.684530][ T9577] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 984.689594][ T5600] bridge_slave_1: left allmulticast mode [ 984.726462][ T5600] bridge_slave_1: left promiscuous mode [ 984.730713][ T9577] usb 5-1: Product: syz [ 984.732275][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.776390][ T9577] usb 5-1: config 0 descriptor?? [ 984.848965][ T5600] bridge_slave_0: left allmulticast mode [ 984.882859][ T5600] bridge_slave_0: left promiscuous mode [ 984.914798][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.051596][ T29] audit: type=1400 audit(985.023:1381): avc: denied { bind } for pid=12229 comm="syz.1.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 985.104048][ T29] audit: type=1400 audit(985.053:1382): avc: denied { setopt } for pid=12229 comm="syz.1.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 985.363134][ T9577] usbhid 5-1:0.0: can't add hid device: -71 [ 985.380729][ T9577] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 985.426113][ T9577] usb 5-1: USB disconnect, device number 17 [ 986.367048][T12248] ubi0: attaching mtd0 [ 986.380853][T12248] ubi0: scanning is finished [ 987.137696][T12248] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 987.384836][ T29] audit: type=1400 audit(987.363:1383): avc: denied { append } for pid=12250 comm="syz.4.1318" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 987.772043][ T5600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 987.791306][ T5600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 987.813417][ T5600] bond0 (unregistering): Released all slaves [ 988.022750][ T5600] Êü: left promiscuous mode [ 988.391917][T12265] ------------[ cut here ]------------ [ 988.398058][T12265] WARNING: CPU: 0 PID: 12265 at kernel/softirq.c:362 __local_bh_enable_ip+0xc3/0x120 [ 988.407564][T12265] Modules linked in: [ 988.411493][T12265] CPU: 0 UID: 0 PID: 12265 Comm: syz.1.1320 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 988.422280][T12265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 988.432350][T12265] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 988.438260][T12265] Code: 00 e8 d1 8b 0b 00 e8 9c f7 42 00 fb 65 8b 05 4c c6 b3 7e 85 c0 74 52 5b 5d c3 cc cc cc cc 65 8b 05 8e 73 b2 7e 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 a3 f5 42 00 eb 99 48 89 ef e8 69 d8 19 00 eb a2 [ 988.457884][T12265] RSP: 0018:ffffc90003796bd0 EFLAGS: 00010046 [ 988.463992][T12265] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 1ffffffff2028f33 [ 988.471995][T12265] RDX: 0000000000000000 RSI: 0000000000000200 RDI: ffffffff88f16e1d [ 988.479991][T12265] RBP: ffffffff88f16e1d R08: 0000000000000000 R09: fffffbfff20288d3 [ 988.487992][T12265] R10: ffffffff9014469f R11: ffffffff8b200130 R12: 0000000000000000 [ 988.495992][T12265] R13: ffff88807e31dd00 R14: ffff8880601440b8 R15: ffff888060144000 [ 988.503990][T12265] FS: 00007f19a55d46c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 988.512946][T12265] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 988.519534][T12265] CR2: 000000002004e000 CR3: 00000000634b0000 CR4: 00000000003506f0 [ 988.527518][T12265] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 988.535513][T12265] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 988.543505][T12265] Call Trace: [ 988.546802][T12265] [ 988.549752][T12265] ? show_regs+0x8c/0xa0 [ 988.554036][T12265] ? __warn+0xe5/0x3c0 [ 988.558141][T12265] ? __local_bh_enable_ip+0xc3/0x120 [ 988.563460][T12265] ? report_bug+0x3c0/0x580 [ 988.567995][T12265] ? handle_bug+0x3d/0x70 [ 988.572347][T12265] ? exc_invalid_op+0x17/0x50 [ 988.577054][T12265] ? asm_exc_invalid_op+0x1a/0x20 [ 988.582113][T12265] ? __dev_queue_xmit+0x86d/0x4300 [ 988.587258][T12265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.593363][T12265] ? __dev_queue_xmit+0x86d/0x4300 [ 988.598512][T12265] ? __local_bh_enable_ip+0xc3/0x120 [ 988.603831][T12265] ? __dev_queue_xmit+0x86d/0x4300 [ 988.608974][T12265] __dev_queue_xmit+0x882/0x4300 [ 988.613948][T12265] ? netlink_unicast+0x53c/0x7f0 [ 988.618914][T12265] ? netlink_sendmsg+0x8b8/0xd70 [ 988.623883][T12265] ? ____sys_sendmsg+0xab5/0xc90 [ 988.628845][T12265] ? ___sys_sendmsg+0x135/0x1e0 [ 988.633729][T12265] ? __sys_sendmsg+0x117/0x1f0 [ 988.638523][T12265] ? do_syscall_64+0xcd/0x250 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 988.643232][T12265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.649336][T12265] ? __pfx___dev_queue_xmit+0x10/0x10 [ 988.654782][T12265] ? __asan_memcpy+0x3c/0x60 [ 988.659410][T12265] ? __asan_memcpy+0x3c/0x60 [ 988.664040][T12265] ? __skb_clone+0x570/0x760 [ 988.668685][T12265] netlink_deliver_tap+0xa7d/0xd90 [ 988.673845][T12265] netlink_broadcast_filtered+0x92d/0xef0 [ 988.679622][T12265] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 988.685898][T12265] ? __asan_memset+0x23/0x50 [ 988.690541][T12265] ? nla_put_64bit+0x11a/0x160 [ 988.695353][T12265] nl80211_frame_tx_status+0xa6f/0xd10 [ 988.700861][T12265] ? __pfx_nl80211_frame_tx_status+0x10/0x10 [ 988.706880][T12265] ? __pfx___lock_acquire+0x10/0x10 [ 988.712130][T12265] ieee80211_report_used_skb+0x1241/0x21c0 [ 988.717983][T12265] ? __pfx_ieee80211_report_used_skb+0x10/0x10 [ 988.724204][T12265] ieee80211_free_txskb+0x23/0x40 [ 988.729261][T12265] ieee80211_do_stop+0xd65/0x2270 [ 988.734336][T12265] ? lockdep_hardirqs_on+0x7c/0x110 [ 988.739570][T12265] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 988.745422][T12265] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 988.750935][T12265] ? ieee80211_get_vif_queues+0x1d1/0x220 [ 988.756708][T12265] ieee80211_if_change_type+0x360/0x790 [ 988.762298][T12265] ieee80211_change_iface+0xa5/0x500 [ 988.767633][T12265] cfg80211_change_iface+0x586/0xdd0 [ 988.772964][T12265] nl80211_set_interface+0x64e/0x980 [ 988.778290][T12265] ? __pfx_nl80211_set_interface+0x10/0x10 [ 988.784138][T12265] ? nl80211_pre_doit+0x71e/0xb10 [ 988.789199][T12265] ? nl80211_pre_doit+0x1b0/0xb10 [ 988.794268][T12265] genl_family_rcv_msg_doit+0x202/0x2f0 [ 988.799856][T12265] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 988.805984][T12265] ? ns_capable+0xd7/0x110 [ 988.810438][T12265] genl_rcv_msg+0x565/0x800 [ 988.814986][T12265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 988.820051][T12265] ? __pfx___lock_acquire+0x10/0x10 [ 988.825290][T12265] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 988.830698][T12265] ? __pfx_nl80211_set_interface+0x10/0x10 [ 988.836531][T12265] ? __pfx_nl80211_post_doit+0x10/0x10 [ 988.842052][T12265] netlink_rcv_skb+0x16b/0x440 [ 988.846854][T12265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 988.851917][T12265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 988.857255][T12265] ? down_read+0xc9/0x330 [ 988.861612][T12265] ? __pfx_down_read+0x10/0x10 [ 988.866409][T12265] ? netlink_deliver_tap+0x1ae/0xd90 [ 988.871732][T12265] genl_rcv+0x28/0x40 [ 988.875738][T12265] netlink_unicast+0x53c/0x7f0 [ 988.880499][T12265] ? __pfx_netlink_unicast+0x10/0x10 [ 988.885814][T12265] netlink_sendmsg+0x8b8/0xd70 [ 988.890590][T12265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 988.895886][T12265] ? __import_iovec+0x1fd/0x6e0 [ 988.900737][T12265] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 988.906023][T12265] ____sys_sendmsg+0xab5/0xc90 [ 988.910783][T12265] ? copy_msghdr_from_user+0x10b/0x160 [ 988.916242][T12265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 988.921543][T12265] ? __pfx___futex_wait+0x10/0x10 [ 988.926594][T12265] ? __pfx___lock_acquire+0x10/0x10 [ 988.931788][T12265] ? __might_fault+0x13b/0x190 [ 988.936548][T12265] ___sys_sendmsg+0x135/0x1e0 [ 988.941225][T12265] ? __pfx____sys_sendmsg+0x10/0x10 [ 988.946441][T12265] ? __fget_light+0x173/0x210 [ 988.951108][T12265] __sys_sendmsg+0x117/0x1f0 [ 988.955692][T12265] ? __pfx___sys_sendmsg+0x10/0x10 [ 988.960797][T12265] ? __x64_sys_futex+0x1e1/0x4c0 [ 988.965742][T12265] do_syscall_64+0xcd/0x250 [ 988.970240][T12265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.976120][T12265] RIP: 0033:0x7f19a477cef9 [ 988.980530][T12265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 989.000129][T12265] RSP: 002b:00007f19a55d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 989.008533][T12265] RAX: ffffffffffffffda RBX: 00007f19a4935f80 RCX: 00007f19a477cef9 [ 989.016491][T12265] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 989.024454][T12265] RBP: 00007f19a47ef01e R08: 0000000000000000 R09: 0000000000000000 [ 989.032424][T12265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.040385][T12265] R13: 0000000000000000 R14: 00007f19a4935f80 R15: 00007ffe1bcd1268 [ 989.048362][T12265] [ 989.051373][T12265] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 989.058637][T12265] CPU: 0 UID: 0 PID: 12265 Comm: syz.1.1320 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 989.069377][T12265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 989.079419][T12265] Call Trace: [ 989.082682][T12265] [ 989.085600][T12265] dump_stack_lvl+0x3d/0x1f0 [ 989.090183][T12265] panic+0x6dc/0x7c0 [ 989.094070][T12265] ? __pfx_panic+0x10/0x10 [ 989.098488][T12265] ? show_trace_log_lvl+0x363/0x500 [ 989.103720][T12265] ? __local_bh_enable_ip+0xc3/0x120 [ 989.109012][T12265] check_panic_on_warn+0xab/0xb0 [ 989.113960][T12265] __warn+0xf1/0x3c0 [ 989.117864][T12265] ? __local_bh_enable_ip+0xc3/0x120 [ 989.123154][T12265] report_bug+0x3c0/0x580 [ 989.127492][T12265] handle_bug+0x3d/0x70 [ 989.131647][T12265] exc_invalid_op+0x17/0x50 [ 989.136163][T12265] asm_exc_invalid_op+0x1a/0x20 [ 989.141015][T12265] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 989.146913][T12265] Code: 00 e8 d1 8b 0b 00 e8 9c f7 42 00 fb 65 8b 05 4c c6 b3 7e 85 c0 74 52 5b 5d c3 cc cc cc cc 65 8b 05 8e 73 b2 7e 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 a3 f5 42 00 eb 99 48 89 ef e8 69 d8 19 00 eb a2 [ 989.166524][T12265] RSP: 0018:ffffc90003796bd0 EFLAGS: 00010046 [ 989.172594][T12265] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 1ffffffff2028f33 [ 989.180562][T12265] RDX: 0000000000000000 RSI: 0000000000000200 RDI: ffffffff88f16e1d [ 989.188530][T12265] RBP: ffffffff88f16e1d R08: 0000000000000000 R09: fffffbfff20288d3 [ 989.196498][T12265] R10: ffffffff9014469f R11: ffffffff8b200130 R12: 0000000000000000 [ 989.204471][T12265] R13: ffff88807e31dd00 R14: ffff8880601440b8 R15: ffff888060144000 [ 989.212456][T12265] ? __dev_queue_xmit+0x86d/0x4300 [ 989.217576][T12265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.223650][T12265] ? __dev_queue_xmit+0x86d/0x4300 [ 989.228768][T12265] ? __dev_queue_xmit+0x86d/0x4300 [ 989.233880][T12265] __dev_queue_xmit+0x882/0x4300 [ 989.238825][T12265] ? netlink_unicast+0x53c/0x7f0 [ 989.243763][T12265] ? netlink_sendmsg+0x8b8/0xd70 [ 989.248700][T12265] ? ____sys_sendmsg+0xab5/0xc90 [ 989.253636][T12265] ? ___sys_sendmsg+0x135/0x1e0 [ 989.258493][T12265] ? __sys_sendmsg+0x117/0x1f0 [ 989.263265][T12265] ? do_syscall_64+0xcd/0x250 [ 989.267951][T12265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.274021][T12265] ? __pfx___dev_queue_xmit+0x10/0x10 [ 989.279425][T12265] ? __asan_memcpy+0x3c/0x60 [ 989.284044][T12265] ? __asan_memcpy+0x3c/0x60 [ 989.288661][T12265] ? __skb_clone+0x570/0x760 [ 989.293286][T12265] netlink_deliver_tap+0xa7d/0xd90 [ 989.298423][T12265] netlink_broadcast_filtered+0x92d/0xef0 [ 989.304164][T12265] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 989.310411][T12265] ? __asan_memset+0x23/0x50 [ 989.315020][T12265] ? nla_put_64bit+0x11a/0x160 [ 989.319796][T12265] nl80211_frame_tx_status+0xa6f/0xd10 [ 989.325263][T12265] ? __pfx_nl80211_frame_tx_status+0x10/0x10 [ 989.331247][T12265] ? __pfx___lock_acquire+0x10/0x10 [ 989.336462][T12265] ieee80211_report_used_skb+0x1241/0x21c0 [ 989.342283][T12265] ? __pfx_ieee80211_report_used_skb+0x10/0x10 [ 989.348456][T12265] ieee80211_free_txskb+0x23/0x40 [ 989.353485][T12265] ieee80211_do_stop+0xd65/0x2270 [ 989.358526][T12265] ? lockdep_hardirqs_on+0x7c/0x110 [ 989.363730][T12265] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 989.369543][T12265] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 989.375015][T12265] ? ieee80211_get_vif_queues+0x1d1/0x220 [ 989.380753][T12265] ieee80211_if_change_type+0x360/0x790 [ 989.386309][T12265] ieee80211_change_iface+0xa5/0x500 [ 989.391610][T12265] cfg80211_change_iface+0x586/0xdd0 [ 989.396902][T12265] nl80211_set_interface+0x64e/0x980 [ 989.402195][T12265] ? __pfx_nl80211_set_interface+0x10/0x10 [ 989.408012][T12265] ? nl80211_pre_doit+0x71e/0xb10 [ 989.413045][T12265] ? nl80211_pre_doit+0x1b0/0xb10 [ 989.418085][T12265] genl_family_rcv_msg_doit+0x202/0x2f0 [ 989.423642][T12265] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 989.429730][T12265] ? ns_capable+0xd7/0x110 [ 989.434150][T12265] genl_rcv_msg+0x565/0x800 [ 989.438662][T12265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.443693][T12265] ? __pfx___lock_acquire+0x10/0x10 [ 989.448897][T12265] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 989.454277][T12265] ? __pfx_nl80211_set_interface+0x10/0x10 [ 989.460084][T12265] ? __pfx_nl80211_post_doit+0x10/0x10 [ 989.465563][T12265] netlink_rcv_skb+0x16b/0x440 [ 989.470328][T12265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.475368][T12265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 989.480668][T12265] ? down_read+0xc9/0x330 [ 989.484996][T12265] ? __pfx_down_read+0x10/0x10 [ 989.489758][T12265] ? netlink_deliver_tap+0x1ae/0xd90 [ 989.495054][T12265] genl_rcv+0x28/0x40 [ 989.499043][T12265] netlink_unicast+0x53c/0x7f0 [ 989.503816][T12265] ? __pfx_netlink_unicast+0x10/0x10 [ 989.509118][T12265] netlink_sendmsg+0x8b8/0xd70 [ 989.513889][T12265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.519176][T12265] ? __import_iovec+0x1fd/0x6e0 [ 989.524037][T12265] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 989.529340][T12265] ____sys_sendmsg+0xab5/0xc90 [ 989.534108][T12265] ? copy_msghdr_from_user+0x10b/0x160 [ 989.539576][T12265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 989.544867][T12265] ? __pfx___futex_wait+0x10/0x10 [ 989.549898][T12265] ? __pfx___lock_acquire+0x10/0x10 [ 989.555104][T12265] ? __might_fault+0x13b/0x190 [ 989.559876][T12265] ___sys_sendmsg+0x135/0x1e0 [ 989.564565][T12265] ? __pfx____sys_sendmsg+0x10/0x10 [ 989.569804][T12265] ? __fget_light+0x173/0x210 [ 989.574489][T12265] __sys_sendmsg+0x117/0x1f0 [ 989.579087][T12265] ? __pfx___sys_sendmsg+0x10/0x10 [ 989.584208][T12265] ? __x64_sys_futex+0x1e1/0x4c0 [ 989.589171][T12265] do_syscall_64+0xcd/0x250 [ 989.594470][T12265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.600367][T12265] RIP: 0033:0x7f19a477cef9 [ 989.604783][T12265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 989.624394][T12265] RSP: 002b:00007f19a55d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 989.632812][T12265] RAX: ffffffffffffffda RBX: 00007f19a4935f80 RCX: 00007f19a477cef9 [ 989.640780][T12265] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 989.648751][T12265] RBP: 00007f19a47ef01e R08: 0000000000000000 R09: 0000000000000000 [ 989.656719][T12265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.664685][T12265] R13: 0000000000000000 R14: 00007f19a4935f80 R15: 00007ffe1bcd1268 [ 989.672670][T12265] [ 989.675910][T12265] Kernel Offset: disabled [ 989.680387][T12265] Rebooting in 86400 seconds..