last executing test programs: 1m30.447473246s ago: executing program 3 (id=320): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x3, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @addr}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 1m28.834185461s ago: executing program 3 (id=323): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x8000001, 0x1}, 0x8) close(r3) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080), 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1m27.815713711s ago: executing program 3 (id=325): syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) 1m26.577065177s ago: executing program 4 (id=329): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000010000)={&(0x7f0000010240)=@gettclass={0x24, 0x2a, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x5, 0xa}, {0xffe0, 0x9}, {0x5, 0x3}}, [""]}, 0x24}}, 0x40000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000100c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000010200)={&(0x7f00000102c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000101c0)={&(0x7f0000010180)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdc02, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x4, &(0x7f0000010040)=ANY=[@ANYBLOB="1800000000000000008000000000000061120400000000009500000000000000541b4a7f930f273df17d9cb61ee84f31fe0b96e71114"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r4 = syz_io_uring_setup(0x4b9, &(0x7f0000010100)={0x0, 0xe5f0, 0x100, 0x0, 0xffffffff}, &(0x7f0000ff0000), &(0x7f0000010080)) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000003740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000007c0)=[{0x0, 0x4000000}], 0x300}}], 0x48}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1m24.015738586s ago: executing program 3 (id=338): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, @in={0x2, 0x0, @local}], 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x9, 0x0, &(0x7f00000001c0)) timer_delete(0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x1a0, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'macvlan1\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'bridge0\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="8e2900002100"/16], 0x0}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x15) dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8}]}, 0x2c}}, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x4b67, &(0x7f0000000000)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x50, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r10}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}]}, 0x50}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000002a00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000440)}], 0x1}], 0x1, 0x0) 1m20.044743489s ago: executing program 3 (id=345): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @multicast, 'macvtap0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @multicast, 'veth0_to_hsr\x00'}}, 0x1e) socket$inet6(0xa, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fsopen(&(0x7f0000000040)='bdev\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[], 0x7) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) 1m16.281308722s ago: executing program 3 (id=357): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x3c, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) read(r2, &(0x7f0000000200)=""/183, 0x28) 37.077844232s ago: executing program 0 (id=428): r0 = io_uring_setup(0x1951, &(0x7f00000000c0)) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) read$usbmon(r1, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) 36.479692445s ago: executing program 2 (id=430): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x0, "d934a18c"}, @main=@item_012={0x1, 0x0, 0x0, "a5"}]}}, 0x0}, 0x0) 36.478749849s ago: executing program 0 (id=431): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) 33.774825503s ago: executing program 0 (id=434): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000"], &(0x7f0000000080)='GPL\x00'}, 0x90) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f00000003c0)=0xc) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002ac0)=""/4101, 0x1005}], 0x1}}], 0x2, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000004000)=""/4083, 0xff3, 0x10002, 0x0, 0x0) eventfd(0x0) 33.648430853s ago: executing program 2 (id=435): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x38}}, 0x0) 32.975806858s ago: executing program 2 (id=437): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 32.410955219s ago: executing program 2 (id=439): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x20000007) 31.886195837s ago: executing program 2 (id=440): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x6c, &(0x7f0000000540)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c}, @NLBL_CIPSOV4_A_MLSCATLST={0x4, 0xc, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x9, 0x6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x44}}, 0x0) 31.389785853s ago: executing program 2 (id=442): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000200)=""/229, 0xe5}], 0x1) 29.716669619s ago: executing program 0 (id=445): openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={{{}, {}, @device_b}, @ntf_ch_w}}]}, 0x3c}}, 0x0) 28.826973447s ago: executing program 0 (id=447): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r0) timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000a40)=0x80000000) readv(0xffffffffffffffff, 0x0, 0x0) 28.335613789s ago: executing program 0 (id=448): ioperm(0x0, 0x1, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) syz_emit_vhci(0x0, 0x21) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000600), &(0x7f0000000040)=0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r7 = syz_open_dev$sndctrl(&(0x7f0000000a80), 0x400000000000, 0x82000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000b00)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2000000000000000]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 17.820911808s ago: executing program 4 (id=355): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x0) 16.663406231s ago: executing program 4 (id=455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x2000, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @local}}}, 0x104) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='setgroups\x00') write$USERIO_CMD_SEND_INTERRUPT(r5, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) fsopen(&(0x7f00000003c0)='qnx6\x00', 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x5be30621}, 0x1c) 15.431643367s ago: executing program 4 (id=458): pipe(0x0) socket$inet6(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x4b6a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "5f0f2000a9003f00"}) socket(0x0, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x0, 0x2, 0x0) 14.168234038s ago: executing program 4 (id=460): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)="d4e666e247641d8d52a3ef9c12c8178a747bbd0977ea55bea644a3797cd4bd60faef2cacc01e4d7e7b27f8b0f4dbc1fd", 0x30}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/74, 0xf}, {&(0x7f0000000580)=""/66, 0x42}], 0x2}, 0x0) 13.250876283s ago: executing program 4 (id=464): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) open(&(0x7f0000000580)='./file0\x00', 0x100000001a1540, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb929"], 0xfdef) 12.045099144s ago: executing program 1 (id=465): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180), 0x4) 11.535698767s ago: executing program 1 (id=466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x800}, @val={0x1}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @dev}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "2f561db91540144d2216441109e0928a461804e03d173699e222fe8378367cd5", "8b1827ba4e3bff0013e9585b79563d99", {"9675e315f88a3166e1af2962ece17864", "784e07ab3bbf6e06fa0927f9ac49cc4b"}}}}}}, 0x86) 8.237142139s ago: executing program 1 (id=467): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x0, 0x0, 0x6, "5401471e4720"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="000c0100000001"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x1, "1e"}, 0x0, 0x0, 0x0, 0x0}) 2.345718528s ago: executing program 1 (id=469): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x14000000}) read$eventfd(r1, 0x0, 0x0) 2.047755488s ago: executing program 1 (id=470): fcntl$notify(0xffffffffffffffff, 0x402, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x400) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04"], 0x11) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002a000107000000000000000006000000ab7d693fbd523147aef47c26383826eba9d2cbd6e9ddfe77f0f63235967face0069ac445cdb5a7193a5d8f9e910f2e75c4668175c92db07780d12837a607fdd290"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsopen(&(0x7f00000004c0)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='source', 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x8000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = fsopen(&(0x7f00000003c0)='nfsd\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=471): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): found a 'TerraTec NOXON DAB Stick' in warm state [ 132.922005][ T5274] uclogic 0003:256C:006D.0005: failed retrieving Huion firmware version: -71 [ 132.942490][ T5503] veth0_macvtap: entered promiscuous mode [ 132.972906][ T5503] veth1_macvtap: entered promiscuous mode [ 133.005691][ T5274] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 133.035024][ T5274] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 133.148837][ T5274] usb 1-1: USB disconnect, device number 3 [ 133.222342][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.315582][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.338313][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.374000][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.608411][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.619344][ T29] audit: type=1400 audit(1722745940.974:239): avc: denied { create } for pid=5653 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 133.638632][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.747199][ T5656] capability: warning: `syz.4.96' uses 32-bit capabilities (legacy support in use) [ 134.382007][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.392719][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.436480][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.504712][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.548533][ T5275] usb 2-1: USB disconnect, device number 4 [ 134.555390][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.606844][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.675758][ T5503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.725561][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.084741][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.124488][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.873432][ T46] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 135.937401][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.981293][ T46] usb 3-1: USB disconnect, device number 7 [ 136.026721][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.100166][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.100193][ T29] audit: type=1400 audit(1722745943.704:240): avc: denied { write } for pid=5671 comm="syz.1.100" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 136.178419][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.217304][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.294160][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.308674][ T52] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.346517][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.346675][ T29] audit: type=1400 audit(1722745943.954:241): avc: denied { lock } for pid=5671 comm="syz.1.100" path="/dev/dri/card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 136.391015][ T5503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.457805][ T5675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'. [ 136.509417][ T5503] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.513550][ T29] audit: type=1400 audit(1722745944.034:242): avc: denied { shutdown } for pid=5674 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.566153][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 136.586232][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 136.618734][ T52] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.655729][ T5503] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.695313][ T52] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.718144][ T5503] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.721824][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.888382][ T29] audit: type=1400 audit(1722745944.194:243): avc: denied { view } for pid=5673 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 136.920010][ T5503] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.953277][ T29] audit: type=1400 audit(1722745944.294:244): avc: denied { create } for pid=5680 comm="syz.4.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 137.861268][ T52] usb 1-1: config 0 descriptor?? [ 137.996264][ T52] usb 1-1: can't set config #0, error -71 [ 138.056566][ T52] usb 1-1: USB disconnect, device number 4 [ 138.261089][ T29] audit: type=1400 audit(1722745945.874:245): avc: denied { execute } for pid=5691 comm="syz.0.105" path="/25/cpu.stat" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 138.540116][ T5679] sp0: Synchronizing with TNC [ 138.668244][ T52] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 138.908259][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 138.927617][ T52] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 138.963080][ T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.009697][ T52] usb 5-1: config 0 has no interface number 0 [ 139.098280][ T52] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 139.154592][ T52] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 139.209404][ T52] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.253600][ T52] usb 5-1: config 0 interface 52 has no altsetting 0 [ 139.293869][ T52] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 139.312710][ T52] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 139.337358][ T52] usb 5-1: Product: syz [ 139.343940][ T52] usb 5-1: SerialNumber: syz [ 139.425001][ T52] usb 5-1: config 0 descriptor?? [ 139.655474][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.728143][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.804567][ T52] input: syz (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input10 [ 139.870431][ T4655] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 139.922566][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.946207][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.008032][ T5694] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 140.011279][ T29] audit: type=1400 audit(1722745947.604:246): avc: denied { mount } for pid=5503 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 140.119524][ T4655] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 140.168306][ T29] audit: type=1400 audit(1722745947.614:247): avc: denied { read write } for pid=5693 comm="syz.4.106" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 140.191622][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.048594][ T29] audit: type=1400 audit(1722745947.614:248): avc: denied { open } for pid=5693 comm="syz.4.106" path="/dev/input/mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 142.072346][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.155773][ T1180] usb 5-1: USB disconnect, device number 6 [ 142.815190][ T29] audit: type=1400 audit(1722745950.244:249): avc: denied { write } for pid=5720 comm="syz.2.114" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 143.607333][ T29] audit: type=1400 audit(1722745951.214:250): avc: denied { mounton } for pid=5727 comm="syz.3.48" path="/proc/3/task" dev="proc" ino=8927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 143.748748][ T1180] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 143.964106][ T1180] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=61.87 [ 144.319890][ T1180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.377257][ T1180] usb 5-1: Product: syz [ 144.399308][ T1180] usb 5-1: Manufacturer: syz [ 144.434493][ T1180] usb 5-1: SerialNumber: syz [ 144.482761][ T1180] usb 5-1: config 0 descriptor?? [ 144.521010][ T1180] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 145.686306][ T5743] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 145.748167][ T5743] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 145.959026][ T5273] usb 5-1: USB disconnect, device number 7 [ 146.041356][ T5747] loop0: detected capacity change from 0 to 7 [ 146.079361][ T5221] Dev loop0: unable to read RDB block 7 [ 146.100745][ T5221] loop0: AHDI p2 p3 [ 146.109913][ T5221] loop0: partition table partially beyond EOD, truncated [ 146.136337][ T5221] loop0: p2 start 341296255 is beyond EOD, truncated [ 146.178463][ T5747] Dev loop0: unable to read RDB block 7 [ 146.214840][ T5747] loop0: AHDI p2 p3 [ 146.218887][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.228360][ T5747] loop0: partition table partially beyond EOD, truncated [ 146.247177][ T5747] loop0: p2 start 341296255 is beyond EOD, truncated [ 146.296434][ T4670] Dev loop0: unable to read RDB block 7 [ 146.313863][ T4670] loop0: AHDI p2 p3 [ 146.328204][ T4670] loop0: partition table partially beyond EOD, truncated [ 146.348877][ T4670] loop0: p2 start 341296255 is beyond EOD, truncated [ 146.438187][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 146.450464][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.508276][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 146.547955][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 146.620535][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 146.658215][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.666501][ T29] audit: type=1400 audit(1722745954.274:251): avc: denied { setopt } for pid=5754 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.741686][ T25] usb 2-1: config 0 descriptor?? [ 146.767328][ T29] audit: type=1400 audit(1722745954.274:252): avc: denied { getopt } for pid=5754 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 146.803452][ T5746] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 146.834581][ T25] hub 2-1:0.0: USB hub found [ 146.958458][ T29] audit: type=1400 audit(1722745954.544:253): avc: denied { write } for pid=5754 comm="syz.2.125" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 147.088293][ T1180] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 147.138567][ T25] hub 2-1:0.0: 2 ports detected [ 147.268383][ T52] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 147.308343][ T1180] usb 5-1: Using ep0 maxpacket: 16 [ 147.358265][ T1180] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 147.373896][ T1180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.414379][ T1180] usb 5-1: Product: syz [ 147.425341][ T1180] usb 5-1: Manufacturer: syz [ 147.454089][ T1180] usb 5-1: SerialNumber: syz [ 147.479415][ T1180] usb 5-1: config 0 descriptor?? [ 147.519970][ T52] usb 4-1: Using ep0 maxpacket: 8 [ 147.535758][ T1180] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 147.554031][ T52] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 147.578433][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.579199][ T1180] usb 5-1: Detected FT-X [ 147.628721][ T52] usb 4-1: Product: syz [ 147.658254][ T52] usb 4-1: Manufacturer: syz [ 147.683735][ T52] usb 4-1: SerialNumber: syz [ 147.738469][ T5273] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 147.770883][ T52] usb 4-1: config 0 descriptor?? [ 147.860923][ T1180] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 147.923557][ T1180] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 147.954997][ T1180] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 148.018845][ T1180] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 148.062992][ T5273] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 148.099401][ T1180] usb 5-1: USB disconnect, device number 8 [ 148.121044][ T5273] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 148.160147][ T1180] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 148.179527][ T5273] usb 3-1: config 9 has no interface number 0 [ 148.213749][ T5273] usb 3-1: config 9 interface 1 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 148.247100][ T1180] ftdi_sio 5-1:0.0: device disconnected [ 148.277280][ T5273] usb 3-1: config 9 interface 1 has no altsetting 0 [ 148.311458][ T52] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 148.358434][ T5273] usb 3-1: New USB device found, idVendor=058b, idProduct=0028, bcdDevice=f1.bf [ 148.428238][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.478444][ T5273] usb 3-1: Product: 竅ꙵ庠ಝ苼帔喈ﴘᄀ擫ࡖ硟꾲슟쫜⌓ᎭᲘ봔炡욼ᥔ퉛Ɨ쒹饩耮ﷳ틩Ꟊ項ﮠ뛛웓茮극Ὣﭚﱻ㲄曐벶ⷾ푆꣋訫蹋깼⦽㤠葙裏녛ᑓ횠㶴䘁ꖯ莈ౣ┗렍⵶㽠䇪偲铼逑싎렦韪캄迸柋ꢼ䚐ꤏ욽ၾ絭뀰㭀鈢海ꗝ겆핸㕱㕳韛Ὠ훓ᛚ봲蓖꩖藦 [ 148.545071][ T5273] usb 3-1: Manufacturer: 롚伄ꎷ뜂힗鼭嚵嬵汴푁㚧↷웙㳘㪑嵏₽ᅼ곙ڵ檻騛芪ồ蓼 [ 148.568483][ T5273] usb 3-1: SerialNumber: Ⰹ [ 149.888251][ C1] hrtimer: interrupt took 241506 ns [ 149.973398][ T5274] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 150.178151][ T5274] usb 1-1: Using ep0 maxpacket: 8 [ 150.206419][ T5274] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 150.235603][ T5274] usb 1-1: config 179 has no interface number 0 [ 150.260691][ T5274] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 150.311372][ T5274] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 150.340595][ T5274] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 150.356318][ T5274] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 150.398668][ T5274] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 150.455687][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.492668][ T5273] ftdi_sio 3-1:9.1: FTDI USB Serial Device converter detected [ 150.522010][ T5771] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 150.549764][ T5273] ftdi_sio ttyUSB0: unknown device type: 0xf1bf [ 150.608533][ T5273] usb 3-1: USB disconnect, device number 8 [ 150.616078][ T5273] ftdi_sio 3-1:9.1: device disconnected [ 150.668537][ T5344] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 150.829074][ T5274] usb 1-1: USB disconnect, device number 5 [ 150.866831][ T52] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 150.894373][ T5344] usb 5-1: Using ep0 maxpacket: 16 [ 150.934582][ T5344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.962868][ T52] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 150.979842][ T5344] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 151.015145][ T52] usb 4-1: media controller created [ 151.021379][ T5308] hub 2-1:0.0: set hub depth failed [ 151.077262][ T5312] usb 2-1: USB disconnect, device number 5 [ 151.104386][ T29] audit: type=1400 audit(1722745958.704:254): avc: denied { read } for pid=5776 comm="syz.1.132" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 151.128871][ T5344] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 151.128911][ T5344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.159614][ T5344] usb 5-1: config 0 descriptor?? [ 151.198753][ T29] audit: type=1400 audit(1722745958.704:255): avc: denied { open } for pid=5776 comm="syz.1.132" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 151.258333][ T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.482046][ T52] dvb_usb_rtl28xxu 4-1:0.0: unknown tuner MT2063 [ 151.509288][ T29] audit: type=1400 audit(1722745958.714:256): avc: denied { ioctl } for pid=5776 comm="syz.1.132" path="/dev/fb0" dev="devtmpfs" ino=631 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 151.581955][ T29] audit: type=1400 audit(1722745958.944:257): avc: denied { read write } for pid=5778 comm="syz.2.133" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 151.713962][ T29] audit: type=1400 audit(1722745958.944:258): avc: denied { open } for pid=5778 comm="syz.2.133" path="/26/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 151.745463][ T5344] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 151.754127][ T52] usb 4-1: USB disconnect, device number 3 [ 151.809360][ T5344] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 151.850099][ T29] audit: type=1400 audit(1722745959.144:259): avc: denied { create } for pid=5781 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.873884][ T5344] microsoft 0003:045E:07DA.0006: no inputs found [ 151.888201][ T5344] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 151.948229][ T29] audit: type=1400 audit(1722745959.174:260): avc: denied { bind } for pid=5781 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 152.072676][ T29] audit: type=1400 audit(1722745959.174:261): avc: denied { connect } for pid=5781 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 152.175208][ T29] audit: type=1400 audit(1722745959.194:262): avc: denied { write } for pid=5781 comm="syz.1.134" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 152.288360][ T29] audit: type=1400 audit(1722745959.194:263): avc: denied { open } for pid=5781 comm="syz.1.134" path="/dev/ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 152.396806][ T5796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.430424][ T5796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.728361][ T5274] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.278828][ T5274] usb 2-1: Using ep0 maxpacket: 16 [ 153.403685][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.406842][ T5795] sd 0:0:1:0: PR command failed: 1026 [ 153.421542][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.422606][ T5795] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 153.444775][ T5795] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 153.445153][ T5274] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 153.547955][ T5274] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 153.558397][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.570431][ T5274] usb 2-1: config 0 descriptor?? [ 153.773068][ T5354] usb 5-1: USB disconnect, device number 9 [ 153.815759][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 154.144948][ T5274] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 154.186551][ T5274] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 154.230897][ T5274] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 154.278201][ T5274] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 154.290404][ T5275] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.321638][ T5274] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 154.338419][ T5274] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 154.363804][ T5274] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 154.374974][ T5274] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 154.388288][ T5274] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 154.405477][ T5274] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 154.582000][ T5798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.664935][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.806525][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.901619][ T5275] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 154.902347][ T5274] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input12 [ 154.915330][ T5798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.153985][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.189039][ T5274] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 155.209477][ T5275] usb 3-1: config 0 descriptor?? [ 155.448432][ T1180] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 155.589701][ T5820] process 'syz.4.147' launched './file0' with NULL argv: empty string added [ 155.670761][ T5275] cypress 0003:04B4:ED81.0008: item fetching failed at offset 5/7 [ 155.689142][ T1180] usb 1-1: Using ep0 maxpacket: 8 [ 155.710567][ T5344] usb 2-1: USB disconnect, device number 6 [ 155.732712][ T5275] cypress 0003:04B4:ED81.0008: parse failed [ 155.745980][ T1180] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.788424][ T5275] cypress 0003:04B4:ED81.0008: probe with driver cypress failed with error -22 [ 155.809195][ T1180] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.852689][ T1180] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 155.891887][ T1180] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 155.916037][ T1180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.962165][ T1180] usb 1-1: config 0 descriptor?? [ 156.258617][ T5344] usb 3-1: USB disconnect, device number 9 [ 156.474841][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 156.474860][ T29] audit: type=1400 audit(1722745964.074:273): avc: denied { relabelfrom } for pid=5823 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 157.399568][ T1180] uclogic 0003:5543:0064.0009: item fetching failed at offset 5/7 [ 157.418636][ T1180] uclogic 0003:5543:0064.0009: parse failed [ 157.425055][ T1180] uclogic 0003:5543:0064.0009: probe with driver uclogic failed with error -22 [ 157.439576][ T29] audit: type=1400 audit(1722745964.084:274): avc: denied { relabelto } for pid=5823 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 157.468435][ T1180] usb 1-1: USB disconnect, device number 6 [ 158.707603][ T29] audit: type=1400 audit(1722745966.314:275): avc: denied { read } for pid=5846 comm="syz.0.154" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 158.835622][ T29] audit: type=1400 audit(1722745966.444:276): avc: denied { bind } for pid=5846 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.957115][ T29] audit: type=1400 audit(1722745966.474:277): avc: denied { accept } for pid=5846 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 159.093933][ T29] audit: type=1400 audit(1722745966.484:278): avc: denied { read } for pid=5846 comm="syz.0.154" name="ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 159.144690][ T5227] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 159.319906][ T29] audit: type=1400 audit(1722745966.484:279): avc: denied { open } for pid=5846 comm="syz.0.154" path="/dev/ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 159.319980][ T29] audit: type=1400 audit(1722745966.594:280): avc: denied { read write } for pid=5846 comm="syz.0.154" dev="sockfs" ino=9444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 159.320040][ T29] audit: type=1400 audit(1722745966.654:281): avc: denied { read } for pid=5853 comm="syz.4.157" name="uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 159.320102][ T29] audit: type=1400 audit(1722745966.654:282): avc: denied { open } for pid=5853 comm="syz.4.157" path="/dev/uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 159.471742][ T5859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 159.992048][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.129265][ T5864] sch_fq: defrate 0 ignored. [ 161.510080][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 161.510098][ T29] audit: type=1400 audit(1722745969.124:291): avc: denied { write } for pid=5873 comm="syz.3.163" name="event0" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 161.539301][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.658751][ T29] audit: type=1326 audit(1722745970.264:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.1.168" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8b79779f9 code=0x0 [ 162.745115][ T5899] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 163.138580][ T29] audit: type=1400 audit(1722745970.534:293): avc: denied { connect } for pid=5889 comm="syz.1.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 163.385326][ T29] audit: type=1400 audit(1722745970.534:294): avc: denied { name_connect } for pid=5889 comm="syz.1.168" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 163.406295][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.543548][ T29] audit: type=1400 audit(1722745971.114:295): avc: denied { lock } for pid=5902 comm="syz.2.171" path="socket:[9579]" dev="sockfs" ino=9579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 164.205580][ T5923] capability: warning: `syz.4.178' uses deprecated v2 capabilities in a way that may be insecure [ 164.242542][ T29] audit: type=1400 audit(1722745971.854:296): avc: denied { connect } for pid=5921 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.409605][ T29] audit: type=1400 audit(1722745971.884:297): avc: denied { name_connect } for pid=5921 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 164.463110][ T29] audit: type=1400 audit(1722745971.944:298): avc: denied { shutdown } for pid=5921 comm="syz.3.177" lport=57164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.547746][ T29] audit: type=1400 audit(1722745972.054:299): avc: denied { getopt } for pid=5921 comm="syz.3.177" lport=57164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.922617][ T5939] netlink: 'syz.0.180': attribute type 4 has an invalid length. [ 165.066029][ T29] audit: type=1400 audit(1722745972.674:300): avc: denied { ioctl } for pid=5929 comm="syz.4.181" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.331081][ T5312] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 165.572303][ T5312] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.604423][ T5312] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.651733][ T5312] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 165.682942][ T5312] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.707977][ T5312] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 165.717666][ T5312] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 165.732360][ T5312] usb 5-1: Product: syz [ 165.736594][ T5312] usb 5-1: Manufacturer: syz [ 165.768354][ T5312] cdc_wdm 5-1:1.0: skipping garbage [ 165.773577][ T5312] cdc_wdm 5-1:1.0: skipping garbage [ 165.825773][ T5312] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 165.882639][ T5312] cdc_wdm 5-1:1.0: Unknown control protocol [ 166.710220][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 166.716965][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 166.723283][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 166.729922][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 166.736363][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 166.743019][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 166.749588][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 166.756233][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 166.762643][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 166.769275][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 166.775688][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 166.782312][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 166.788722][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 166.795341][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 166.801730][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 166.808333][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 166.814661][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 166.821277][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 166.827685][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 166.834292][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 166.875224][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 166.884191][ T25] usb 5-1: USB disconnect, device number 10 [ 168.048221][ T5227] Bluetooth: hci5: command tx timeout [ 168.741584][ T12] Bluetooth: (null): Invalid header checksum [ 169.359017][ T12] Bluetooth: (null): Invalid header checksum [ 169.460252][ T12] Bluetooth: (null): Invalid header checksum [ 169.789576][ T5971] Process accounting resumed [ 171.619913][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 171.619934][ T29] audit: type=1400 audit(1722745979.134:302): avc: denied { ioctl } for pid=5987 comm="syz.1.197" path="socket:[10500]" dev="sockfs" ino=10500 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 171.709138][ T5993] syz.2.196(5993): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 171.801914][ T29] audit: type=1400 audit(1722745979.414:303): avc: denied { mounton } for pid=5989 comm="syz.2.196" path="/41/file0" dev="tmpfs" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 171.957466][ T5994] Bluetooth: MGMT ver 1.23 [ 172.387914][ T29] audit: type=1400 audit(1722745979.994:304): avc: denied { read } for pid=6005 comm="syz.3.202" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 172.427743][ T29] audit: type=1400 audit(1722745980.024:305): avc: denied { open } for pid=6005 comm="syz.3.202" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 172.473538][ T29] audit: type=1400 audit(1722745980.074:306): avc: denied { search } for pid=4652 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.554702][ T29] audit: type=1400 audit(1722745980.164:307): avc: denied { ioctl } for pid=6007 comm="syz.2.203" path="/dev/input/event0" dev="devtmpfs" ino=835 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 172.608430][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 172.645360][ T29] audit: type=1400 audit(1722745980.254:308): avc: denied { ioctl } for pid=6005 comm="syz.3.202" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 172.798451][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 172.812768][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 172.834831][ T25] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 172.859018][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.921041][ T25] usb 5-1: Product: syz [ 172.928764][ T25] usb 5-1: Manufacturer: syz [ 172.933407][ T25] usb 5-1: SerialNumber: syz [ 172.991076][ T25] usb 5-1: config 0 descriptor?? [ 173.014057][ T6003] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 173.033998][ T25] hub 5-1:0.0: bad descriptor, ignoring hub [ 173.068176][ T25] hub 5-1:0.0: probe with driver hub failed with error -5 [ 173.134338][ T25] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 173.149315][ T29] audit: type=1400 audit(1722745980.724:309): avc: denied { ioctl } for pid=6015 comm="syz.0.206" path="socket:[10536]" dev="sockfs" ino=10536 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.367898][ T29] audit: type=1400 audit(1722745980.954:310): avc: denied { write } for pid=6018 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.888178][ T29] audit: type=1400 audit(1722745981.494:311): avc: denied { map } for pid=6022 comm="syz.2.209" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.048634][ T5231] Bluetooth: hci3: command 0x1407 tx timeout [ 174.236304][ T5227] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 174.695775][ T5274] usb 5-1: USB disconnect, device number 11 [ 174.695928][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 175.757143][ T6052] warning: `syz.4.219' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 177.496593][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 177.496614][ T29] audit: type=1400 audit(1722745985.104:314): avc: denied { ioctl } for pid=6062 comm="syz.3.221" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 182.388298][ T5227] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 182.396931][ T5227] Bluetooth: hci1: Injecting HCI hardware error event [ 182.404898][ T5227] Bluetooth: hci1: hardware error 0x00 [ 182.616534][ T29] audit: type=1400 audit(1722745990.084:315): avc: denied { write } for pid=4652 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.699422][ T29] audit: type=1400 audit(1722745990.114:316): avc: denied { remove_name } for pid=4652 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.733617][ T29] audit: type=1400 audit(1722745990.114:317): avc: denied { rename } for pid=4652 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 182.777907][ T29] audit: type=1400 audit(1722745990.114:318): avc: denied { add_name } for pid=4652 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.010655][ T29] audit: type=1400 audit(1722745990.114:319): avc: denied { unlink } for pid=4652 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.101999][ T29] audit: type=1400 audit(1722745990.114:320): avc: denied { create } for pid=4652 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.205619][ T29] audit: type=1400 audit(1722745990.174:321): avc: denied { connect } for pid=6078 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.335826][ T29] audit: type=1400 audit(1722745990.944:322): avc: denied { bind } for pid=6084 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 183.677220][ T29] audit: type=1400 audit(1722745991.284:323): avc: denied { create } for pid=6093 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 183.840092][ T6096] can: request_module (can-proto-0) failed. [ 183.978666][ T6093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.126780][ T6104] netlink: 60 bytes leftover after parsing attributes in process `syz.0.238'. [ 184.176227][ T6104] unsupported nlmsg_type 40 [ 184.337839][ T5235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 184.348317][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 184.360419][ T5235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 184.379484][ T5235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 184.389410][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 184.406751][ T5235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 184.414439][ T5235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 184.573250][ T25] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.608769][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.629206][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.650648][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.684474][ T25] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 184.718472][ T25] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 184.739791][ T25] usb 4-1: Product: syz [ 184.757199][ T25] usb 4-1: Manufacturer: syz [ 184.798402][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 184.806137][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 184.816804][ T25] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 184.828598][ T25] cdc_wdm 4-1:1.0: Unknown control protocol [ 184.848404][ T5227] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 185.538010][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.243'. [ 185.599791][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 185.617519][ C1] wdm_int_callback: 200 callbacks suppressed [ 185.617544][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 185.630148][ C1] wdm_int_callback: 200 callbacks suppressed [ 185.630164][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 185.642444][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 185.649062][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 185.655502][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 185.662122][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 185.668421][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 185.675004][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 185.681321][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 185.687905][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 185.694202][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 185.700789][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 185.707081][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 185.713664][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 185.720139][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 185.726721][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 185.733012][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 185.739595][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 185.745881][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 185.752462][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 185.769518][ T25] usb 4-1: USB disconnect, device number 4 [ 185.775412][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 185.796147][ T6127] block nbd0: Unsupported socket: shutdown callout must be supported. [ 186.072857][ T6108] chnl_net:caif_netlink_parms(): no params data found [ 186.226541][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 186.448757][ T5227] Bluetooth: hci6: command tx timeout [ 186.698553][ T6108] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.736733][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.768628][ T6108] bridge_slave_0: entered allmulticast mode [ 186.807556][ T6108] bridge_slave_0: entered promiscuous mode [ 186.859222][ T6108] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.886185][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.917001][ T6108] bridge_slave_1: entered allmulticast mode [ 186.951233][ T6108] bridge_slave_1: entered promiscuous mode [ 187.352168][ T29] audit: type=1400 audit(1722745994.944:324): avc: denied { watch } for pid=6146 comm="syz.0.249" path="/60" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 188.070710][ T29] audit: type=1400 audit(1722745994.944:325): avc: denied { watch_sb } for pid=6146 comm="syz.0.249" path="/60" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 188.430181][ T6108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.492682][ T6108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.527880][ T29] audit: type=1400 audit(1722745996.134:326): avc: denied { setopt } for pid=6151 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.579627][ T5227] Bluetooth: hci6: command tx timeout [ 188.788806][ T5312] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 188.900741][ T6108] team0: Port device team_slave_0 added [ 188.915614][ T6159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.253'. [ 188.982665][ T5312] usb 2-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed [ 189.039158][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.056403][ T5312] usb 2-1: Product: syz [ 189.065416][ T5312] usb 2-1: Manufacturer: syz [ 189.107187][ T5312] usb 2-1: SerialNumber: syz [ 189.131665][ T6160] Zero length message leads to an empty skb [ 189.145832][ T5312] usb 2-1: config 0 descriptor?? [ 189.154543][ T6108] team0: Port device team_slave_1 added [ 189.218800][ T5312] r8712u: register rtl8712_netdev_ops to netdev_ops [ 189.234707][ T5312] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 189.825793][ T6108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.833181][ T6108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.877588][ T29] audit: type=1400 audit(1722745997.394:327): avc: denied { create } for pid=6153 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 189.904897][ T6108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.629062][ T5227] Bluetooth: hci6: command tx timeout [ 190.632217][ T6108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.658586][ T6108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.668386][ T5312] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 190.685351][ T6108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.850909][ T5312] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 190.893661][ T5227] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 190.917037][ T5312] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 191.157090][ T6108] hsr_slave_0: entered promiscuous mode [ 191.283080][ T6108] hsr_slave_1: entered promiscuous mode [ 191.321783][ T6108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.465830][ T6108] Cannot create hsr debugfs directory [ 191.770205][ T5354] usb 2-1: USB disconnect, device number 7 [ 192.688319][ T5227] Bluetooth: hci6: command tx timeout [ 193.008172][ T5227] Bluetooth: hci2: command tx timeout [ 193.009100][ T29] audit: type=1400 audit(1722745999.854:328): avc: denied { write } for pid=6174 comm="syz.1.258" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 193.134079][ T29] audit: type=1400 audit(1722745999.854:329): avc: denied { open } for pid=6174 comm="syz.1.258" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 194.690665][ T5227] Bluetooth: hci0: command tx timeout [ 194.857943][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.865360][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.853727][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'. [ 198.994634][ T6108] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.352360][ T6108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.468858][ T29] audit: type=1400 audit(1722746007.074:330): avc: denied { create } for pid=6206 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.500200][ T6208] Bluetooth: MGMT ver 1.23 [ 199.540372][ T29] audit: type=1400 audit(1722746007.094:331): avc: denied { getopt } for pid=6206 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.646194][ T6108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.745983][ T29] audit: type=1400 audit(1722746007.354:332): avc: denied { setopt } for pid=6211 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.072064][ T6108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.161632][ T6221] netlink: zone id is out of range [ 200.167216][ T6221] netlink: zone id is out of range [ 200.228254][ T6221] netlink: zone id is out of range [ 200.251939][ T6221] netlink: zone id is out of range [ 200.288650][ T6221] netlink: zone id is out of range [ 200.301307][ T6221] netlink: zone id is out of range [ 200.348835][ T6221] netlink: del zone limit has 4 unknown bytes [ 200.899467][ T6108] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 200.911504][ T29] audit: type=1326 audit(1722746008.524:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a55d779f9 code=0x7fc00000 [ 200.952818][ T6108] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.012930][ T6108] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.034502][ T29] audit: type=1326 audit(1722746008.534:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1a55d779f9 code=0x7fc00000 [ 201.199784][ T6108] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.407106][ T29] audit: type=1326 audit(1722746009.014:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a55d779f9 code=0x7fc00000 [ 201.515988][ T29] audit: type=1326 audit(1722746009.014:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f1a55d779f9 code=0x7fc00000 [ 201.658389][ T29] audit: type=1326 audit(1722746009.014:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a55d779f9 code=0x7fc00000 [ 201.758514][ T29] audit: type=1326 audit(1722746009.044:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a55d779f9 code=0x7fc00000 [ 201.783024][ T6108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.906561][ T29] audit: type=1326 audit(1722746009.044:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a55d779f9 code=0x7fc00000 [ 202.025208][ T6108] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.984683][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.991960][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.131001][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.138424][ T5354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.124302][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 204.256488][ T6108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.294067][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 204.508178][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 204.523255][ T25] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 204.536289][ T6108] veth0_vlan: entered promiscuous mode [ 204.558361][ T25] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 204.585996][ T6108] veth1_vlan: entered promiscuous mode [ 204.593183][ T25] usb 1-1: config 1 has no interface number 1 [ 204.618238][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 204.665003][ T25] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.711058][ T25] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.726257][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.769589][ T25] usb 1-1: Product: syz [ 204.781775][ T25] usb 1-1: Manufacturer: syz [ 204.812783][ T6108] veth0_macvtap: entered promiscuous mode [ 204.815476][ T25] usb 1-1: SerialNumber: syz [ 204.903611][ T6108] veth1_macvtap: entered promiscuous mode [ 205.047304][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.122695][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.142880][ T25] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 205.231109][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.275959][ T25] usb 1-1: USB disconnect, device number 7 [ 205.282112][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.307399][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.378418][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.437454][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.477835][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.507783][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.543390][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.596176][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.633919][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.677839][ T5271] udevd[5271]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.681892][ T6108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.770181][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.797544][ T6275] sctp: [Deprecated]: syz.1.292 (pid 6275) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.797544][ T6275] Use struct sctp_sack_info instead [ 205.853071][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.879441][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.907484][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.954548][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.977163][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.991203][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.065280][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.154060][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.196166][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.226588][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.250697][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.315436][ T6108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.434783][ T6108] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.458913][ T6108] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.467845][ T6108] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.477892][ T6108] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.095520][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.133902][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.171598][ T55] Bluetooth: hci3: command 0x1407 tx timeout [ 207.180183][ T5234] Bluetooth: hci0: command 0x0406 tx timeout [ 207.186327][ T5233] Bluetooth: hci2: command 0x0406 tx timeout [ 207.186342][ T5237] Bluetooth: hci4: command 0x0406 tx timeout [ 207.293515][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.310529][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.596900][ T6288] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 208.094679][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 208.094697][ T29] audit: type=1400 audit(1722746015.704:348): avc: denied { ioctl } for pid=6311 comm="syz.4.301" path="socket:[12454]" dev="sockfs" ino=12454 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.186113][ T29] audit: type=1400 audit(1722746015.744:349): avc: denied { bind } for pid=6311 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.252150][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 208.359562][ T29] audit: type=1400 audit(1722746015.784:350): avc: denied { write } for pid=6311 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.378711][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.728196][ T5344] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 208.948344][ T5344] usb 2-1: Using ep0 maxpacket: 16 [ 208.970353][ T5344] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 208.995464][ T5344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.031718][ T5344] usb 2-1: Product: syz [ 209.068324][ T5344] usb 2-1: Manufacturer: syz [ 209.098638][ T5344] usb 2-1: SerialNumber: syz [ 209.128325][ T5354] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 209.130457][ T5344] usb 2-1: config 0 descriptor?? [ 209.198892][ T5344] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 209.236898][ T5344] usb 2-1: Detected FT-X [ 209.247507][ T29] audit: type=1400 audit(1722746016.854:351): avc: denied { create } for pid=6334 comm="syz.4.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 209.306163][ T29] audit: type=1400 audit(1722746016.894:352): avc: denied { setopt } for pid=6334 comm="syz.4.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 209.378207][ T5354] usb 3-1: Using ep0 maxpacket: 16 [ 209.386521][ T5354] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.407249][ T5354] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 209.445930][ T5354] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 209.476248][ T5344] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 209.485425][ T5344] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 209.508164][ T5354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.520916][ T5344] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 209.541937][ T5354] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 209.564029][ T5344] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 209.600866][ T5344] usb 2-1: USB disconnect, device number 8 [ 209.791519][ T6343] syzkaller0: entered promiscuous mode [ 209.797092][ T6343] syzkaller0: entered allmulticast mode [ 210.092225][ T5344] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 210.439929][ T5344] ftdi_sio 2-1:0.0: device disconnected [ 210.990409][ T5354] usb 3-1: USB disconnect, device number 10 [ 213.920969][ T29] audit: type=1400 audit(1722746021.524:353): avc: denied { bind } for pid=6362 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 214.171538][ T29] audit: type=1400 audit(1722746021.534:354): avc: denied { node_bind } for pid=6362 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 215.128332][ T5308] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 215.421284][ T5354] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 215.438372][ T5308] usb 2-1: Using ep0 maxpacket: 16 [ 215.449387][ T5308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.482897][ T5308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.507517][ T5308] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 215.544570][ T5308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.609842][ T5308] usb 2-1: config 0 descriptor?? [ 215.618140][ T5354] usb 3-1: Using ep0 maxpacket: 16 [ 215.630124][ T5354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 215.841825][ T6372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.858720][ T6372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.927564][ T5354] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 216.003391][ T5354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.066162][ T29] audit: type=1400 audit(1722746023.664:355): avc: denied { setopt } for pid=6381 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.102776][ T5354] usb 3-1: config 0 descriptor?? [ 216.167026][ T5308] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 216.189646][ T5308] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 216.334373][ T5308] uclogic 0003:5543:0004.000A: No inputs registered, leaving [ 216.361191][ T5308] uclogic 0003:5543:0004.000A: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.1-1/input0 [ 216.424469][ T5308] usb 2-1: USB disconnect, device number 9 [ 216.855260][ T6377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.942376][ T6377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.020795][ T5275] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 217.050353][ T5354] hid-sensor-hub 0003:0158:0100.000B: unknown main item tag 0x1 [ 217.396498][ T5354] hid-sensor-hub 0003:0158:0100.000B: unexpected long global item [ 217.466345][ T5354] hid-sensor-hub 0003:0158:0100.000B: parse failed [ 217.514191][ T5275] usb 4-1: Using ep0 maxpacket: 16 [ 217.521169][ T5354] hid-sensor-hub 0003:0158:0100.000B: probe with driver hid-sensor-hub failed with error -22 [ 217.573085][ T5275] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 217.608515][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.629075][ T5354] usb 3-1: USB disconnect, device number 11 [ 217.680710][ T5275] usb 4-1: Product: syz [ 217.705506][ T5275] usb 4-1: Manufacturer: syz [ 217.763311][ T5275] usb 4-1: SerialNumber: syz [ 217.804780][ T5275] usb 4-1: config 0 descriptor?? [ 217.861019][ T5275] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 217.904208][ T5275] usb 4-1: Detected FT-X [ 218.270138][ T29] audit: type=1400 audit(1722746025.874:356): avc: denied { write } for pid=6399 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 218.478817][ T5275] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 218.557411][ T5275] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 218.569934][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 218.589862][ T5275] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 218.613683][ T5275] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 218.650759][ T29] audit: type=1400 audit(1722746026.214:357): avc: denied { name_bind } for pid=6409 comm="syz.1.333" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 218.687168][ T5275] usb 4-1: USB disconnect, device number 5 [ 218.718328][ T5275] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 218.818346][ T29] audit: type=1400 audit(1722746026.314:358): avc: denied { write } for pid=6409 comm="syz.1.333" path="socket:[11762]" dev="sockfs" ino=11762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 218.859110][ T5275] ftdi_sio 4-1:0.0: device disconnected [ 219.988508][ T29] audit: type=1400 audit(1722746026.314:359): avc: denied { nlmsg_write } for pid=6409 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 220.157892][ T29] audit: type=1400 audit(1722746026.714:360): avc: denied { bind } for pid=6397 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 220.248833][ T29] audit: type=1400 audit(1722746027.634:361): avc: denied { write } for pid=6397 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 220.754403][ T29] audit: type=1400 audit(1722746028.354:362): avc: denied { mount } for pid=6425 comm="syz.1.337" name="/" dev="hugetlbfs" ino=11777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 220.855387][ T29] audit: type=1400 audit(1722746028.444:363): avc: denied { connect } for pid=6420 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 221.757466][ T29] audit: type=1400 audit(1722746028.474:364): avc: denied { bind } for pid=6424 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.817714][ T29] audit: type=1400 audit(1722746028.474:365): avc: denied { node_bind } for pid=6424 comm="syz.3.338" saddr=172.20.20.64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 221.972270][ T29] audit: type=1400 audit(1722746029.384:366): avc: denied { unmount } for pid=5219 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 222.066738][ T29] audit: type=1400 audit(1722746029.424:367): avc: denied { wake_alarm } for pid=6424 comm="syz.3.338" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 222.198261][ T29] audit: type=1400 audit(1722746029.514:368): avc: denied { read } for pid=6433 comm="syz.2.340" name="usbmon0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 222.464303][ T5308] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 223.368181][ T5275] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 223.559323][ T5308] usb 1-1: device descriptor read/all, error -71 [ 223.595364][ T5275] usb 2-1: Using ep0 maxpacket: 8 [ 223.624993][ T5275] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 223.650377][ T5275] usb 2-1: config 179 has no interface number 0 [ 223.668452][ T5275] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 223.744051][ T5275] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 223.765863][ T5275] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 223.778890][ T5275] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 223.821009][ T5275] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 223.843006][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.939066][ T6444] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 224.230207][ T5275] usb 2-1: USB disconnect, device number 10 [ 225.508357][ T1180] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 225.528542][ T6465] IPv6: NLM_F_REPLACE set, but no existing node found! [ 225.851346][ T1180] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 225.877653][ T1180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.948306][ T1180] usb 4-1: Product: syz [ 225.978290][ T1180] usb 4-1: Manufacturer: syz [ 225.986992][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 225.987008][ T29] audit: type=1400 audit(1722746033.594:372): avc: denied { accept } for pid=6468 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 226.020117][ T1180] usb 4-1: SerialNumber: syz [ 226.052778][ T1180] usb 4-1: config 0 descriptor?? [ 227.098398][ T5354] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 227.322612][ T5354] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 227.357459][ T5354] usb 2-1: config 0 has no interface number 0 [ 227.411020][ T5354] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 227.428197][ T5354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.436671][ T5354] usb 2-1: Product: syz [ 227.446939][ T5354] usb 2-1: Manufacturer: syz [ 227.489363][ T5354] usb 2-1: SerialNumber: syz [ 227.521595][ T5354] usb 2-1: config 0 descriptor?? [ 227.617847][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 227.706744][ T29] audit: type=1400 audit(1722746035.314:373): avc: denied { nlmsg_read } for pid=6480 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 227.727439][ T6483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.354'. [ 227.878962][ T6481] SELinux: Context some 00000000000000000000 00000000000000000000 is not valid (left unmapped). [ 227.965736][ T5354] usb 2-1: USB disconnect, device number 11 [ 228.048861][ T5275] usb 4-1: USB disconnect, device number 6 [ 228.382042][ T29] audit: type=1400 audit(1722746035.994:374): avc: denied { read } for pid=6486 comm="syz.0.356" name="uhid" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 228.485498][ T29] audit: type=1400 audit(1722746035.994:375): avc: denied { open } for pid=6486 comm="syz.0.356" path="/dev/uhid" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 229.746620][ T29] audit: type=1400 audit(1722746036.664:376): avc: denied { read } for pid=6489 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 230.389439][ T5231] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 230.400029][ T5231] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 230.408703][ T5231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 230.418589][ T5231] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 230.430457][ T5231] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 230.439602][ T5231] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 231.166028][ T5231] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 231.830479][ T6504] chnl_net:caif_netlink_parms(): no params data found [ 232.578138][ T1180] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 232.608440][ T5231] Bluetooth: hci7: command tx timeout [ 232.798952][ T6504] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.806848][ T1180] usb 3-1: Using ep0 maxpacket: 16 [ 232.825170][ T1180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.841109][ T6504] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.875223][ T6504] bridge_slave_0: entered allmulticast mode [ 232.882926][ T1180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.917579][ T6504] bridge_slave_0: entered promiscuous mode [ 232.929165][ T1180] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 232.958475][ T6504] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.976849][ T1180] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 232.986387][ T6504] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.007368][ T6504] bridge_slave_1: entered allmulticast mode [ 233.014249][ T1180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.030826][ T6504] bridge_slave_1: entered promiscuous mode [ 233.044079][ T1180] usb 3-1: config 0 descriptor?? [ 233.143499][ T6504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.165347][ T6504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.266807][ T6504] team0: Port device team_slave_0 added [ 233.335730][ T6504] team0: Port device team_slave_1 added [ 233.452792][ T6504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.468221][ T6504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.505977][ T6504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.531357][ T6504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.543430][ T6504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.581052][ T1180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 233.588965][ T6504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.623803][ T1180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 233.656499][ T1180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 233.688697][ T1180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 233.708714][ T1180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 233.739075][ T1180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 233.753196][ T1180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 233.764892][ T1180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 233.786014][ T6504] hsr_slave_0: entered promiscuous mode [ 233.794229][ T1180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 233.810859][ T1180] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 233.822316][ T6504] hsr_slave_1: entered promiscuous mode [ 233.851919][ T6504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.863784][ T1180] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000C/input/input15 [ 233.883950][ T6504] Cannot create hsr debugfs directory [ 233.964960][ T1180] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 234.000392][ T6529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.077372][ T6529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.718165][ T5231] Bluetooth: hci7: command tx timeout [ 234.718368][ T5308] usb 3-1: USB disconnect, device number 12 [ 237.309894][ T5231] Bluetooth: hci7: command tx timeout [ 237.394473][ T6504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.138234][ T5275] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 238.206683][ T6504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.221605][ T29] audit: type=1400 audit(1722746045.834:377): avc: denied { ioctl } for pid=6547 comm="syz.1.371" path="socket:[12163]" dev="sockfs" ino=12163 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.458575][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 238.478624][ T29] audit: type=1400 audit(1722746045.984:378): avc: denied { map } for pid=6547 comm="syz.1.371" path="socket:[12164]" dev="sockfs" ino=12164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 238.518679][ T5275] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.555195][ T5275] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.578688][ T29] audit: type=1400 audit(1722746045.984:379): avc: denied { read } for pid=6547 comm="syz.1.371" path="socket:[12164]" dev="sockfs" ino=12164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 238.623810][ T5275] usb 1-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 238.668086][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.676136][ T5275] usb 1-1: Product: syz [ 238.696704][ T5275] usb 1-1: Manufacturer: syz [ 238.704323][ T5275] usb 1-1: SerialNumber: syz [ 238.774633][ T5275] usb 1-1: config 0 descriptor?? [ 238.840958][ T6504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.086733][ T29] audit: type=1400 audit(1722746046.694:380): avc: denied { name_connect } for pid=6551 comm="syz.1.374" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 244.261520][ T5227] Bluetooth: hci5: command 0x0406 tx timeout [ 244.267681][ T5227] Bluetooth: hci7: command tx timeout [ 244.498904][ T5275] usb 1-1: USB disconnect, device number 10 [ 244.750617][ T5271] udevd[5271]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.951274][ T6504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.130110][ T6556] netlink: 'syz.0.375': attribute type 17 has an invalid length. [ 245.168957][ T6556] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 245.473382][ T6560] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.383794][ T5235] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 246.402751][ T5235] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 246.411415][ T5235] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 246.427422][ T5235] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 246.437834][ T5235] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 246.446337][ T5235] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 247.002520][ T6504] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 247.009489][ T1180] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 247.171069][ T6504] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 247.239827][ T1180] usb 1-1: Using ep0 maxpacket: 16 [ 247.318280][ T1180] usb 1-1: config 0 has no interfaces? [ 247.430576][ T1180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 247.469106][ T6504] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.478270][ T1180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.531217][ T1180] usb 1-1: Product: syz [ 247.561903][ T1180] usb 1-1: Manufacturer: syz [ 247.588167][ T1180] usb 1-1: SerialNumber: syz [ 247.617654][ T1180] usb 1-1: config 0 descriptor?? [ 247.647342][ T29] audit: type=1326 audit(1722746055.254:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b79779f9 code=0x7ffc0000 [ 247.741864][ T29] audit: type=1326 audit(1722746055.274:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b79779f9 code=0x7ffc0000 [ 248.071589][ T6504] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 248.111630][ T29] audit: type=1400 audit(1722746055.724:383): avc: denied { setopt } for pid=6566 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 248.476320][ T5277] usb 1-1: USB disconnect, device number 11 [ 248.848701][ T5235] Bluetooth: hci8: command tx timeout [ 248.896555][ T6189] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.068370][ T29] audit: type=1400 audit(1722746056.674:384): avc: denied { ioctl } for pid=6585 comm="syz.2.384" path="socket:[13423]" dev="sockfs" ino=13423 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 249.235849][ T29] audit: type=1326 audit(1722746056.844:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.1.385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8b79779f9 code=0x0 [ 249.330115][ T6189] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.582306][ T6189] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.916994][ T6189] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.019288][ T29] audit: type=1400 audit(1722746057.544:386): avc: denied { watch watch_reads } for pid=6587 comm="syz.1.385" path="/proc/292" dev="proc" ino=12854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 250.918560][ T29] audit: type=1400 audit(1722746058.514:387): avc: denied { search } for pid=4884 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.919785][ T6504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.972009][ T5235] Bluetooth: hci8: command tx timeout [ 252.056282][ T6562] chnl_net:caif_netlink_parms(): no params data found [ 252.099409][ T29] audit: type=1400 audit(1722746058.554:388): avc: denied { read } for pid=4884 comm="dhcpcd" name="n70" dev="tmpfs" ino=3229 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 252.317163][ T29] audit: type=1400 audit(1722746058.554:389): avc: denied { open } for pid=4884 comm="dhcpcd" path="/run/udev/data/n70" dev="tmpfs" ino=3229 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 252.317207][ T29] audit: type=1400 audit(1722746058.554:390): avc: denied { getattr } for pid=4884 comm="dhcpcd" path="/run/udev/data/n70" dev="tmpfs" ino=3229 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 252.368226][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.452725][ T6504] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.663790][ T6189] bridge_slave_1: left allmulticast mode [ 252.663950][ T6189] bridge_slave_1: left promiscuous mode [ 252.666533][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.692724][ T6189] bridge_slave_0: left allmulticast mode [ 252.692744][ T6189] bridge_slave_0: left promiscuous mode [ 252.692958][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.709196][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 252.709228][ T29] audit: type=1400 audit(1722746060.304:392): avc: denied { read } for pid=6627 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.709293][ T29] audit: type=1400 audit(1722746060.304:393): avc: denied { open } for pid=6627 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.709352][ T29] audit: type=1400 audit(1722746060.304:394): avc: denied { getattr } for pid=6627 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.013424][ T5235] Bluetooth: hci8: command tx timeout [ 253.109524][ T5308] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 253.298875][ T5308] usb 2-1: Using ep0 maxpacket: 32 [ 253.330852][ T5308] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 253.330895][ T5308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.330925][ T5308] usb 2-1: Product: syz [ 253.330946][ T5308] usb 2-1: Manufacturer: syz [ 253.331327][ T5308] usb 2-1: SerialNumber: syz [ 253.381761][ T5308] usb 2-1: config 0 descriptor?? [ 253.400770][ T5308] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 253.778260][ T5275] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 253.927776][ T29] audit: type=1400 audit(1722746061.534:395): avc: denied { write } for pid=6625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.950757][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.039426][ T5275] usb 1-1: Using ep0 maxpacket: 16 [ 254.061585][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.108558][ T29] audit: type=1400 audit(1722746061.574:396): avc: denied { add_name } for pid=6625 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.131029][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.135226][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.229770][ T29] audit: type=1400 audit(1722746061.574:397): avc: denied { create } for pid=6625 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 254.257039][ T5275] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 254.342496][ T5275] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 254.349481][ T29] audit: type=1400 audit(1722746061.584:398): avc: denied { write } for pid=6625 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3259 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 254.362404][ T5275] usb 1-1: Product: syz [ 254.439576][ T5275] usb 1-1: Manufacturer: syz [ 254.446350][ T29] audit: type=1400 audit(1722746061.584:399): avc: denied { append } for pid=6625 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3259 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 254.484214][ T5275] usb 1-1: config 0 descriptor?? [ 254.710825][ T29] audit: type=1400 audit(1722746062.324:400): avc: denied { remove_name } for pid=6647 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3259 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.878964][ T29] audit: type=1400 audit(1722746062.324:401): avc: denied { unlink } for pid=6647 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3259 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 254.902029][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.993110][ T5275] kovaplus 0003:1E7D:2D50.000D: unknown main item tag 0xd [ 255.095565][ T5235] Bluetooth: hci8: command tx timeout [ 255.102002][ T5275] kovaplus 0003:1E7D:2D50.000D: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 255.234825][ T5308] gspca_ov534_9: reg_r err -71 [ 255.385392][ T5275] kovaplus 0003:1E7D:2D50.000D: couldn't init struct kovaplus_device [ 255.448204][ T5275] kovaplus 0003:1E7D:2D50.000D: couldn't install mouse [ 255.492394][ T5275] kovaplus 0003:1E7D:2D50.000D: probe with driver kovaplus failed with error -71 [ 255.538652][ T5275] usb 1-1: USB disconnect, device number 12 [ 255.598277][ T5308] gspca_ov534_9: Unknown sensor 0000 [ 255.598353][ T5308] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 255.640636][ T6189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.718806][ T5308] usb 2-1: USB disconnect, device number 12 [ 255.765091][ T6189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.885934][ T6189] bond0 (unregistering): Released all slaves [ 256.086185][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.093500][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.300487][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.323360][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.420832][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.428164][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.549067][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 258.184469][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.224131][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.239675][ T6562] bridge_slave_0: entered allmulticast mode [ 258.279396][ T6562] bridge_slave_0: entered promiscuous mode [ 258.319129][ T6562] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.348533][ T6562] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.388657][ T6562] bridge_slave_1: entered allmulticast mode [ 258.423130][ T6562] bridge_slave_1: entered promiscuous mode [ 258.643574][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 258.643588][ T29] audit: type=1400 audit(1722746066.254:404): avc: denied { watch watch_reads } for pid=6688 comm="syz.2.410" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 259.434195][ T6562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.525901][ T6562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.647526][ T6189] hsr_slave_0: left promiscuous mode [ 259.663237][ T6189] hsr_slave_1: left promiscuous mode [ 259.794361][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.837751][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.886735][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.908968][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.017372][ T6189] veth1_macvtap: left promiscuous mode [ 260.068507][ T6189] veth0_macvtap: left promiscuous mode [ 260.074139][ T6189] veth1_vlan: left promiscuous mode [ 260.124433][ T6189] veth0_vlan: left promiscuous mode [ 260.258299][ T5308] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 260.498800][ T5308] usb 3-1: Using ep0 maxpacket: 8 [ 260.559568][ T5308] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 260.567002][ T5308] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 260.683652][ T5308] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.768100][ T5308] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 260.837401][ T5308] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 260.924558][ T5308] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 260.970880][ T5308] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 261.042264][ T5308] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.065101][ T6705] trusted_key: syz.0.414 sent an empty control message without MSG_MORE. [ 261.127410][ T5308] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 261.158567][ T5308] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 261.244094][ T5308] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 261.272323][ T5308] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 261.314303][ T5308] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.344548][ T5308] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 261.399787][ T5308] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 261.483414][ T5308] usb 3-1: string descriptor 0 read error: -22 [ 261.497601][ T5308] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 261.562728][ T5308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.652346][ T5308] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 263.054182][ T6189] team0 (unregistering): Port device team_slave_1 removed [ 263.137062][ T6189] team0 (unregistering): Port device team_slave_0 removed [ 264.131021][ T5229] usb 3-1: USB disconnect, device number 13 [ 265.449519][ T6562] team0: Port device team_slave_0 added [ 265.488506][ T6562] team0: Port device team_slave_1 added [ 266.106889][ T29] audit: type=1400 audit(1722746073.714:405): avc: denied { setattr } for pid=6718 comm="syz.0.421" name="tun" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 266.109476][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.152518][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.302605][ T6562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.375709][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.425658][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.571970][ T6562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.334824][ T6734] netlink: 'syz.2.426': attribute type 2 has an invalid length. [ 267.627694][ T29] audit: type=1400 audit(1722746075.224:406): avc: denied { ioctl } for pid=6738 comm="syz.0.428" path="/dev/usbmon0" dev="devtmpfs" ino=702 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 267.779614][ T6562] hsr_slave_0: entered promiscuous mode [ 267.873976][ T6562] hsr_slave_1: entered promiscuous mode [ 268.018876][ T6562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.064376][ T6562] Cannot create hsr debugfs directory [ 268.328227][ T5312] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 268.452329][ T6504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.546206][ T5312] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 268.648224][ T5308] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 268.658294][ T5312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.740028][ T5312] usb 1-1: Product: syz [ 268.747035][ T5312] usb 1-1: Manufacturer: syz [ 268.868281][ T5312] usb 1-1: SerialNumber: syz [ 268.940722][ T5308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.959752][ T5312] usb 1-1: config 0 descriptor?? [ 269.077927][ T5308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.168559][ T5308] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 269.258718][ T5308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.403975][ T5308] usb 3-1: config 0 descriptor?? [ 269.525446][ T5312] usb 1-1: Firmware version (0.0) predates our first public release. [ 269.604971][ T5312] usb 1-1: Please update to version 0.2 or newer [ 269.658753][ T5312] usb 1-1: Firmware: build [ 269.921219][ T5308] zeroplus 0003:0C12:0030.000E: unknown main item tag 0x0 [ 270.032919][ T5308] zeroplus 0003:0C12:0030.000E: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.2-1/input0 [ 270.143074][ T5312] usb 1-1: USB disconnect, device number 13 [ 270.149261][ T5308] zeroplus 0003:0C12:0030.000E: no inputs found [ 270.258802][ T5308] usb 3-1: USB disconnect, device number 14 [ 271.286810][ T5271] udevd[5271]: setting owner of /dev/bus/usb/001/013 to uid=0, gid=0 failed: No such file or directory [ 271.773488][ T5312] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 272.070780][ T5312] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 272.135140][ T5312] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 272.164273][ T6504] veth0_vlan: entered promiscuous mode [ 272.234152][ T5312] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.251453][ T6504] veth1_vlan: entered promiscuous mode [ 272.298109][ T5312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.349062][ T5312] usb 1-1: config 0 descriptor?? [ 272.388987][ T5312] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 272.455088][ T29] audit: type=1400 audit(1722746080.064:407): avc: denied { getopt } for pid=6795 comm="syz.2.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 272.783259][ T6562] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.812911][ T6799] netlink: 'syz.2.440': attribute type 6 has an invalid length. [ 272.868088][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 272.926615][ T6562] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 273.059311][ T6562] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 273.206442][ T6504] veth0_macvtap: entered promiscuous mode [ 273.244105][ T6562] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 273.394105][ T6504] veth1_macvtap: entered promiscuous mode [ 274.328197][ T29] audit: type=1400 audit(1722746081.414:408): avc: denied { create } for pid=6809 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 274.425788][ T5344] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 274.497249][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.566748][ T29] audit: type=1400 audit(1722746081.434:409): avc: denied { bind } for pid=6809 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 274.575754][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.667615][ T5312] usb 1-1: USB disconnect, device number 14 [ 274.673916][ T5344] usb 3-1: Using ep0 maxpacket: 32 [ 274.732126][ T5344] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 274.779576][ T5344] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 274.808147][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.839695][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.853123][ T5344] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 274.864933][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.873740][ T29] audit: type=1400 audit(1722746082.474:410): avc: denied { mount } for pid=6814 comm="syz.1.444" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 274.876261][ T5344] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 274.923840][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.998269][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.028201][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.062167][ T5344] usb 3-1: config 0 interface 0 has no altsetting 0 [ 275.088068][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.109724][ T5344] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 275.132428][ T29] audit: type=1400 audit(1722746082.744:411): avc: denied { unmount } for pid=5219 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 275.148065][ T5344] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 275.161458][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.216044][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.226773][ T5344] usb 3-1: Product: syz [ 275.247445][ T5344] usb 3-1: Manufacturer: syz [ 275.252813][ T5344] usb 3-1: SerialNumber: syz [ 275.257618][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.313162][ T5344] usb 3-1: config 0 descriptor?? [ 275.342301][ T6504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.395861][ T5344] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 275.493386][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.532675][ T5344] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 275.564815][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.634200][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.738767][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.801031][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.856352][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.923697][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.997286][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.028273][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 276.039995][ T5344] usb 3-1: USB disconnect, device number 15 [ 276.060053][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.085883][ T5344] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 276.124851][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.145345][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.156182][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.207077][ T6504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.238728][ T6807] ldusb: No device or device unplugged -19 [ 276.304030][ T6504] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.334608][ T6504] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.383025][ T6504] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.488145][ T6504] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.687182][ T6834] libceph: resolve '. [ 276.687182][ T6834] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 276.687182][ T6834] ' (ret=-3): failed [ 278.718037][ C0] sched: RT throttling activated [ 285.184197][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.306943][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.425168][ T29] audit: type=1400 audit(1722746093.024:412): avc: denied { create } for pid=6845 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 285.608555][ T29] audit: type=1400 audit(1722746093.064:413): avc: denied { setopt } for pid=6845 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 285.718689][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.725635][ T6562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.726530][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.986509][ T6562] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.120138][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.127264][ T5229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.192330][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.199511][ T5229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.820177][ T5231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.832574][ T5231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.873898][ T5231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.883622][ T5231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.895955][ T5231] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 287.904038][ T5231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.018914][ T29] audit: type=1400 audit(1722746095.624:414): avc: denied { module_request } for pid=6562 comm="syz-executor" kmod="nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 288.040320][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.336927][ T6842] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.936461][ T5235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 289.076893][ T5235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 289.092484][ T5235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 289.105496][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 289.114019][ T5235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 289.125736][ T6842] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.141273][ T5235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 289.831727][ T6842] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.969282][ T5235] Bluetooth: hci5: command tx timeout [ 290.219113][ T6562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.422388][ T6842] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.181743][ T5235] Bluetooth: hci6: command tx timeout [ 291.644357][ T29] audit: type=1400 audit(1722746099.244:415): avc: denied { write } for pid=6924 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 292.408207][ T5235] Bluetooth: hci5: command tx timeout [ 292.521034][ T29] audit: type=1400 audit(1722746099.254:416): avc: denied { read } for pid=6924 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 292.963959][ T6842] bridge_slave_1: left allmulticast mode [ 292.970765][ T6842] bridge_slave_1: left promiscuous mode [ 292.976847][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.028954][ T6842] bridge_slave_0: left allmulticast mode [ 293.034649][ T6842] bridge_slave_0: left promiscuous mode [ 293.058318][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.248121][ T5235] Bluetooth: hci6: command tx timeout [ 294.449082][ T5235] Bluetooth: hci5: command tx timeout [ 295.048542][ T6842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.128570][ T6842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.176252][ T6842] bond0 (unregistering): Released all slaves [ 295.332557][ T5235] Bluetooth: hci6: command tx timeout [ 295.485360][ T6562] veth0_vlan: entered promiscuous mode [ 296.528905][ T5235] Bluetooth: hci5: command tx timeout [ 296.668337][ T5277] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 296.911297][ T5277] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 296.952046][ T5277] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 297.016781][ T5277] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 297.058465][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.087395][ T5277] usb 2-1: Product: syz [ 297.093589][ T5277] usb 2-1: Manufacturer: syz [ 297.101612][ T5277] usb 2-1: SerialNumber: syz [ 297.141700][ T5277] usb 2-1: config 0 descriptor?? [ 297.147456][ T6978] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 297.169668][ T6978] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 297.419126][ T5235] Bluetooth: hci6: command tx timeout [ 297.429965][ T6978] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 297.465254][ T6978] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 298.579600][ T5277] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 299.764997][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.784862][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.810219][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.850547][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.859633][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 299.867131][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.968342][ T5235] Bluetooth: hci2: command tx timeout [ 302.319923][ T5231] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 302.351866][ T5231] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 302.359965][ T5231] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 302.368209][ T5231] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 302.376350][ T5231] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 302.387054][ T5231] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 304.053953][ T5235] Bluetooth: hci2: command tx timeout [ 304.448373][ T5235] Bluetooth: hci9: command tx timeout [ 306.128199][ T5235] Bluetooth: hci2: command tx timeout [ 306.434849][ T5277] dm9601 2-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 54:01:47:1e:47:20 [ 306.543730][ T5235] Bluetooth: hci9: command tx timeout [ 306.544652][ T5277] usb 2-1: USB disconnect, device number 13 [ 306.590635][ T5277] dm9601 2-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 306.978384][ T6868] chnl_net:caif_netlink_parms(): no params data found [ 307.429779][ T6842] hsr_slave_0: left promiscuous mode [ 307.445143][ T6842] hsr_slave_1: left promiscuous mode [ 307.484167][ T6842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.525969][ T6842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.571790][ T6842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.612484][ T6842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.769224][ T6842] veth1_macvtap: left promiscuous mode [ 307.786303][ T6842] veth0_macvtap: left promiscuous mode [ 307.815784][ T6842] veth1_vlan: left promiscuous mode [ 307.828788][ T6842] veth0_vlan: left promiscuous mode [ 308.218101][ T5235] Bluetooth: hci2: command tx timeout [ 308.618149][ T5235] Bluetooth: hci9: command tx timeout [ 309.944420][ T6842] team0 (unregistering): Port device team_slave_1 removed [ 310.140548][ T6842] team0 (unregistering): Port device team_slave_0 removed [ 310.698291][ T5235] Bluetooth: hci9: command tx timeout [ 311.994762][ T6888] chnl_net:caif_netlink_parms(): no params data found [ 313.218503][ T6868] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.225791][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.362607][ T6868] bridge_slave_0: entered allmulticast mode [ 313.391885][ T6868] bridge_slave_0: entered promiscuous mode [ 313.430081][ T6868] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.437189][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.502008][ T6868] bridge_slave_1: entered allmulticast mode [ 313.537164][ T6868] bridge_slave_1: entered promiscuous mode [ 313.600011][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.618366][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.625689][ T6888] bridge_slave_0: entered allmulticast mode [ 313.708215][ T6888] bridge_slave_0: entered promiscuous mode [ 313.746236][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.754986][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.764976][ T6888] bridge_slave_1: entered allmulticast mode [ 313.828244][ T6888] bridge_slave_1: entered promiscuous mode [ 314.261744][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.345355][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.406587][ T6868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.446614][ T6868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.905673][ T6888] team0: Port device team_slave_0 added [ 314.969363][ T6888] team0: Port device team_slave_1 added [ 315.091799][ T6868] team0: Port device team_slave_0 added [ 315.481405][ T6868] team0: Port device team_slave_1 added [ 315.635380][ T6842] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.840133][ T6842] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.946442][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.978961][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.054761][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.184179][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.208697][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.309603][ T6868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.501243][ T6842] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.531599][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.548249][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.659638][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.700971][ T7008] chnl_net:caif_netlink_parms(): no params data found [ 316.866319][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.909133][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.939876][ T6868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.049391][ T6842] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.594518][ T6888] hsr_slave_0: entered promiscuous mode [ 317.628717][ T6888] hsr_slave_1: entered promiscuous mode [ 317.638307][ T6888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.645896][ T6888] Cannot create hsr debugfs directory [ 317.737452][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.751266][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.795707][ T7013] chnl_net:caif_netlink_parms(): no params data found [ 318.149449][ T6868] hsr_slave_0: entered promiscuous mode [ 318.182225][ T6868] hsr_slave_1: entered promiscuous mode [ 318.239410][ T6868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.247021][ T6868] Cannot create hsr debugfs directory [ 319.313068][ T7008] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.322681][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.360124][ T7008] bridge_slave_0: entered allmulticast mode [ 319.370156][ T7008] bridge_slave_0: entered promiscuous mode [ 319.732076][ T7008] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.767033][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.798703][ T7008] bridge_slave_1: entered allmulticast mode [ 319.805818][ T7008] bridge_slave_1: entered promiscuous mode [ 320.324910][ T7008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.752621][ T7008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.871800][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.894319][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.930599][ T7013] bridge_slave_0: entered allmulticast mode [ 320.940588][ T7013] bridge_slave_0: entered promiscuous mode [ 321.192934][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.210640][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.218417][ T7013] bridge_slave_1: entered allmulticast mode [ 321.237615][ T7013] bridge_slave_1: entered promiscuous mode [ 321.422139][ T7008] team0: Port device team_slave_0 added [ 321.489812][ T7008] team0: Port device team_slave_1 added [ 321.753022][ T7013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.000218][ T7013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.059165][ T7008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.066188][ T7008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.178390][ T7008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.235193][ T7008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.243078][ T7008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.288701][ T7008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.732220][ T6888] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.044185][ T7013] team0: Port device team_slave_0 added [ 323.100841][ T7013] team0: Port device team_slave_1 added [ 323.252531][ T6888] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.463254][ T7008] hsr_slave_0: entered promiscuous mode [ 323.493736][ T7008] hsr_slave_1: entered promiscuous mode [ 323.509689][ T7008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.517261][ T7008] Cannot create hsr debugfs directory [ 323.827107][ T6888] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.069956][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.076946][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.168463][ T7013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.269962][ T6888] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.467782][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.535002][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.648182][ T7013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.975084][ T6842] bridge_slave_1: left allmulticast mode [ 324.980891][ T6842] bridge_slave_1: left promiscuous mode [ 324.986584][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.052650][ T6842] bridge_slave_0: left allmulticast mode [ 325.097143][ T6842] bridge_slave_0: left promiscuous mode [ 325.108285][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.150277][ T6842] bridge_slave_1: left allmulticast mode [ 325.155943][ T6842] bridge_slave_1: left promiscuous mode [ 325.179462][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.224961][ T6842] bridge_slave_0: left allmulticast mode [ 325.232276][ T6842] bridge_slave_0: left promiscuous mode [ 325.242350][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.296430][ T6842] bridge_slave_1: left allmulticast mode [ 325.326662][ T6842] bridge_slave_1: left promiscuous mode [ 325.373140][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.445359][ T6842] bridge_slave_0: left allmulticast mode [ 325.459161][ T6842] bridge_slave_0: left promiscuous mode [ 325.489912][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.048490][ T30] INFO: task syz.2.209:6027 blocked for more than 147 seconds. [ 326.056075][ T30] Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 326.098144][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 326.120866][ T29] audit: type=1400 audit(1722746133.734:417): avc: denied { recv } for pid=5205 comm="sshd" saddr=10.128.0.169 src=34226 daddr=10.128.0.114 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 326.148889][ T30] task:syz.2.209 state:D stack:27552 pid:6027 tgid:6022 ppid:5218 flags:0x00004006 [ 326.248217][ T30] Call Trace: [ 326.278178][ T30] [ 326.281171][ T30] __schedule+0xe37/0x5490 [ 326.285638][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 326.402343][ T30] ? __pfx___schedule+0x10/0x10 [ 326.435212][ T30] ? schedule+0x298/0x350 [ 326.505455][ T30] ? __pfx_lock_release+0x10/0x10 [ 326.512105][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 326.517182][ T30] schedule+0xe7/0x350 [ 326.538268][ T30] io_schedule+0xbf/0x130 [ 326.542658][ T30] folio_wait_bit_common+0x3d8/0x9b0 [ 326.558807][ T30] ? folio_wait_bit_common+0x13c/0x9b0 [ 326.600419][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 326.606262][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 326.618688][ T30] ? __pfx___might_resched+0x10/0x10 [ 326.624033][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 326.681634][ T30] ? const_folio_flags.constprop.0+0x56/0x150 [ 326.687866][ T30] truncate_inode_pages_range+0xb93/0xe80 [ 326.728199][ T30] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 326.734526][ T30] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 326.798167][ T30] ? errseq_sample+0x53/0x70 [ 326.818212][ T30] ? bdev_open+0x3c2/0xe40 [ 326.822683][ T30] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 326.838201][ T30] ? __pfx_has_bh_in_lru+0x10/0x10 [ 326.843372][ T30] set_blocksize+0x2b2/0x370 [ 326.868800][ T30] blkdev_bszset+0x1a2/0x250 [ 326.888241][ T30] ? __pfx_blkdev_bszset+0x10/0x10 [ 326.898320][ T30] blkdev_ioctl+0x456/0x6e0 [ 326.902874][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 326.918109][ T30] ? selinux_file_ioctl+0xb4/0x270 [ 326.923316][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 326.958013][ T30] __x64_sys_ioctl+0x193/0x220 [ 326.962856][ T30] do_syscall_64+0xcd/0x250 [ 326.967385][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.028340][ T30] RIP: 0033:0x7f70a2d779f9 [ 327.038252][ T30] RSP: 002b:00007f70a3b08048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.058918][ T30] RAX: ffffffffffffffda RBX: 00007f70a2f06058 RCX: 00007f70a2d779f9 [ 327.075275][ T30] RDX: 0000000020000080 RSI: 0000000040081271 RDI: 0000000000000003 [ 327.128648][ T30] RBP: 00007f70a2de58ee R08: 0000000000000000 R09: 0000000000000000 [ 327.148181][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.156175][ T30] R13: 000000000000006e R14: 00007f70a2f06058 R15: 00007ffe93ab71a8 [ 327.194837][ T30] [ 327.238626][ T30] [ 327.238626][ T30] Showing all locks held in the system: [ 327.298042][ T30] 1 lock held by init/1: [ 327.338179][ T30] #0: ffff8880b923edd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 327.378098][ T30] 1 lock held by pool_workqueue_/3: [ 327.393512][ T30] #0: ffffffff8ddc0b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 327.421308][ T30] 1 lock held by khungtaskd/30: [ 327.426204][ T30] #0: ffffffff8ddb53a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 327.436228][ T30] 1 lock held by dhcpcd/4884: [ 327.441044][ T30] #0: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 327.450614][ T30] 2 locks held by getty/4981: [ 327.455349][ T30] #0: ffff88802b4ac0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 327.468319][ T30] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 327.500042][ T30] 1 lock held by syz-executor/5219: [ 327.505267][ T30] #0: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250 [ 327.542120][ T30] 3 locks held by kworker/0:5/5273: [ 327.547336][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 327.568089][ T30] #1: ffffc90003127d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 327.616880][ T30] #2: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 327.643851][ T30] 3 locks held by kworker/1:5/5308: [ 327.657321][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 327.678085][ T30] #1: ffffc90003a97d80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 327.692244][ T30] #2: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 327.750831][ T30] 2 locks held by syz.3.20/5378: [ 327.755789][ T30] 3 locks held by kworker/u8:10/6189: [ 327.788071][ T30] #0: ffff8880b923edd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 327.808198][ T30] #1: ffffc90003a47d80 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 327.878140][ T30] #2: ffff8880b923edd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 327.912922][ T30] 5 locks held by kworker/u8:11/6842: [ 327.918671][ T30] #0: ffff8880166e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 327.971138][ T30] #1: ffffc900033d7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 328.018091][ T30] #2: ffffffff8fa0a550 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 [ 328.073493][ T30] #3: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x503/0xbf0 [ 328.120633][ T30] #4: ffffffff8ddc0b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 328.148125][ T30] 4 locks held by syz-executor/6868: [ 328.168171][ T30] #0: ffff88805e066420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 328.187204][ T30] #1: ffff888063399888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x281/0x500 [ 328.228151][ T30] #2: ffff888022d172d8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2a4/0x500 [ 328.258153][ T30] #3: ffffffff8efb84e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 328.288087][ T30] 7 locks held by syz-executor/6888: [ 328.293607][ T30] #0: ffff88805e066420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 328.328226][ T30] #1: ffff8880629a0c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x281/0x500 [ 328.388127][ T30] #2: ffff888022d171e8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2a4/0x500 [ 328.443663][ T30] #3: ffffffff8efb84e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x187/0x730 [ 328.495441][ T30] #4: ffff8880798040e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 [ 328.538091][ T30] #5: ffff888079803250 (&devlink->lock_key#10){+.+.}-{3:3}, at: nsim_drv_probe+0xd5/0x1490 [ 328.618044][ T30] #6: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: fib_seq_sum+0x30/0x2f0 [ 328.626942][ T30] 1 lock held by syz-executor/7008: [ 328.718332][ T30] #0: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 328.727850][ T30] 1 lock held by syz-executor/7013: [ 328.780761][ T30] #0: ffffffff8fa1fca8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 328.828130][ T30] 4 locks held by udevd/7041: [ 328.832936][ T30] #0: ffff88807b432c30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xde/0x12c0 [ 328.898112][ T30] #1: ffff88802e9abc88 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x4d/0x240 [ 328.907626][ T30] #2: ffff88806b3a35a8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 328.978083][ T30] #3: ffff8880798040e8 (&dev->mutex){....}-{3:3}, at: uevent_show+0x188/0x3b0 [ 328.987558][ T30] [ 329.004354][ T30] ============================================= [ 329.004354][ T30] [ 329.048168][ T30] NMI backtrace for cpu 0 [ 329.052542][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 329.063046][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 329.073101][ T30] Call Trace: [ 329.076377][ T30] [ 329.079331][ T30] dump_stack_lvl+0x116/0x1f0 [ 329.084040][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 329.089004][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 329.095014][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 329.101008][ T30] watchdog+0xf4e/0x1280 [ 329.105244][ T30] ? __pfx_watchdog+0x10/0x10 [ 329.109928][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 329.115163][ T30] ? __kthread_parkme+0x148/0x220 [ 329.120213][ T30] ? __pfx_watchdog+0x10/0x10 [ 329.124884][ T30] kthread+0x2c1/0x3a0 [ 329.128962][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.134180][ T30] ? __pfx_kthread+0x10/0x10 [ 329.138777][ T30] ret_from_fork+0x45/0x80 [ 329.143186][ T30] ? __pfx_kthread+0x10/0x10 [ 329.147762][ T30] ret_from_fork_asm+0x1a/0x30 [ 329.152538][ T30] [ 329.158243][ T30] Sending NMI from CPU 0 to CPUs 1: [ 329.168155][ C1] NMI backtrace for cpu 1 [ 329.168168][ C1] CPU: 1 UID: 0 PID: 3042 Comm: kworker/u8:9 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 329.168195][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 329.168209][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 329.168236][ C1] RIP: 0010:rcu_is_watching+0x5/0xc0 [ 329.168267][ C1] Code: e8 d0 f9 a0 09 65 8a 05 75 29 93 7e 0f b6 c0 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <53> 65 ff 05 eb 05 93 7e e8 6e f9 a0 09 48 c7 c3 c8 7e 03 00 83 f8 [ 329.168288][ C1] RSP: 0018:ffffc90000a18be0 EFLAGS: 00000046 [ 329.168305][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff815564b2 [ 329.168320][ C1] RDX: ffff88802be99e00 RSI: ffffffff81556a5b RDI: 0000000000000001 [ 329.168335][ C1] RBP: ffff88801f07b848 R08: 0000000000000001 R09: 0000000000000000 [ 329.168349][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802b406400 [ 329.168364][ C1] R13: ffff8880158a0000 R14: dffffc0000000000 R15: ffff88802b4ee000 [ 329.168379][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 329.168401][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.168417][ C1] CR2: 00000000201bf000 CR3: 000000007b57c000 CR4: 00000000003506f0 [ 329.168431][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 329.168445][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 329.168459][ C1] Call Trace: [ 329.168466][ C1] [ 329.168474][ C1] ? show_regs+0x8c/0xa0 [ 329.168506][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 329.168532][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 329.168563][ C1] ? nmi_handle+0x1a9/0x5c0 [ 329.168582][ C1] ? rcu_is_watching+0x5/0xc0 [ 329.168609][ C1] ? default_do_nmi+0x6a/0x160 [ 329.168639][ C1] ? exc_nmi+0x170/0x1e0 [ 329.168668][ C1] ? end_repeat_nmi+0xf/0x53 [ 329.168699][ C1] ? __queue_work+0x302/0x1070 [ 329.168733][ C1] ? __queue_work+0x8ab/0x1070 [ 329.168759][ C1] ? rcu_is_watching+0x5/0xc0 [ 329.168786][ C1] ? rcu_is_watching+0x5/0xc0 [ 329.168813][ C1] ? rcu_is_watching+0x5/0xc0 [ 329.168840][ C1] [ 329.168846][ C1] [ 329.168853][ C1] __queue_work+0x8b0/0x1070 [ 329.168883][ C1] call_timer_fn+0x1a0/0x610 [ 329.168908][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 329.168938][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 329.168963][ C1] ? __pfx_lock_release+0x10/0x10 [ 329.168989][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 329.169018][ C1] ? next_expiry_recalc+0x254/0x2e0 [ 329.169041][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 329.169070][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 329.169100][ C1] __run_timers+0x567/0xaf0 [ 329.169126][ C1] ? __pfx___run_timers+0x10/0x10 [ 329.169151][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 329.169180][ C1] run_timer_base+0x111/0x190 [ 329.169205][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 329.169231][ C1] run_timer_softirq+0x1a/0x40 [ 329.169257][ C1] handle_softirqs+0x216/0x8f0 [ 329.169289][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 329.169321][ C1] irq_exit_rcu+0xbb/0x120 [ 329.169350][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 329.169374][ C1] [ 329.169380][ C1] [ 329.169387][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 329.169418][ C1] RIP: 0010:lock_release+0x10/0x6f0 [ 329.169445][ C1] Code: ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 57 <41> 56 41 55 41 54 49 89 fc 55 53 48 81 ec 90 00 00 00 48 8d 5c 24 [ 329.169465][ C1] RSP: 0018:ffffc90009d3f7e8 EFLAGS: 00000296 [ 329.169482][ C1] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: 0000000000000001 [ 329.169496][ C1] RDX: 0000000000000001 RSI: ffffffff84895212 RDI: ffffffff8e861500 [ 329.169511][ C1] RBP: ffffc90009d3f8f0 R08: 0000000000000000 R09: fffffbfff28c56d8 [ 329.169526][ C1] R10: ffffffff9462b6c7 R11: 0000000000000000 R12: ffff88801fa91918 [ 329.169540][ C1] R13: 1ffff920013a7f04 R14: ffffffff84895212 R15: ffffffff8b4f40e0 [ 329.169556][ C1] ? debug_object_assert_init+0x132/0x370 [ 329.169584][ C1] ? debug_object_assert_init+0x132/0x370 [ 329.169612][ C1] ? debug_object_assert_init+0x132/0x370 [ 329.169637][ C1] debug_object_assert_init+0x156/0x370 [ 329.169664][ C1] ? debug_object_assert_init+0x132/0x370 [ 329.169690][ C1] ? __pfx_debug_object_assert_init+0x10/0x10 [ 329.169722][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 329.169747][ C1] ? __pfx_mark_lock+0x10/0x10 [ 329.169770][ C1] ? __pfx_mark_lock+0x10/0x10 [ 329.169794][ C1] ? kmem_cache_free+0x12f/0x3a0 [ 329.169818][ C1] ? __pfx_mark_lock+0x10/0x10 [ 329.169842][ C1] ? __mod_timer+0xae/0xdc0 [ 329.169866][ C1] __mod_timer+0xae/0xdc0 [ 329.169892][ C1] ? __pfx___mod_timer+0x10/0x10 [ 329.169959][ C1] ? round_jiffies+0xfb/0x140 [ 329.169981][ C1] ? __pfx_round_jiffies+0x10/0x10 [ 329.170005][ C1] ieee80211_ibss_work+0x481/0x14c0 [ 329.170039][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 329.170065][ C1] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 329.170099][ C1] ? lock_acquire+0x1b1/0x560 [ 329.170124][ C1] ? find_held_lock+0x2d/0x110 [ 329.170156][ C1] ? skb_dequeue+0x126/0x180 [ 329.170181][ C1] ? __pfx_lock_release+0x10/0x10 [ 329.170208][ C1] ? mark_held_locks+0x9f/0xe0 [ 329.170232][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 329.170255][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 329.170277][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 329.170301][ C1] ieee80211_iface_work+0xd01/0xf00 [ 329.170324][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.170346][ C1] cfg80211_wiphy_work+0x445/0x760 [ 329.170369][ C1] process_one_work+0x9c5/0x1b40 [ 329.170398][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 329.170420][ C1] ? __pfx_process_one_work+0x10/0x10 [ 329.170449][ C1] ? assign_work+0x1a0/0x250 [ 329.170474][ C1] worker_thread+0x6c8/0xf20 [ 329.170504][ C1] ? __pfx_worker_thread+0x10/0x10 [ 329.170532][ C1] kthread+0x2c1/0x3a0 [ 329.170550][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.170571][ C1] ? __pfx_kthread+0x10/0x10 [ 329.170590][ C1] ret_from_fork+0x45/0x80 [ 329.170622][ C1] ? __pfx_kthread+0x10/0x10 [ 329.170641][ C1] ret_from_fork_asm+0x1a/0x30 [ 329.170674][ C1] [ 329.791983][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 329.798872][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 329.809399][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 329.819472][ T30] Call Trace: [ 329.822764][ T30] [ 329.825710][ T30] dump_stack_lvl+0x3d/0x1f0 [ 329.830332][ T30] panic+0x6f5/0x7a0 [ 329.834235][ T30] ? __pfx_panic+0x10/0x10 [ 329.838655][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 329.844028][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 329.850016][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 329.855389][ T30] ? watchdog+0xd8a/0x1280 [ 329.859810][ T30] ? watchdog+0xd7d/0x1280 [ 329.864230][ T30] watchdog+0xd9b/0x1280 [ 329.868480][ T30] ? __pfx_watchdog+0x10/0x10 [ 329.873157][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 329.878367][ T30] ? __kthread_parkme+0x148/0x220 [ 329.883418][ T30] ? __pfx_watchdog+0x10/0x10 [ 329.888106][ T30] kthread+0x2c1/0x3a0 [ 329.892181][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.897379][ T30] ? __pfx_kthread+0x10/0x10 [ 329.901967][ T30] ret_from_fork+0x45/0x80 [ 329.906392][ T30] ? __pfx_kthread+0x10/0x10 [ 329.910978][ T30] ret_from_fork_asm+0x1a/0x30 [ 329.915756][ T30] [ 329.918882][ T30] Kernel Offset: disabled [ 329.923195][ T30] Rebooting in 86400 seconds..