last executing test programs: 59.025453251s ago: executing program 4 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 50.228572515s ago: executing program 4 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 33.575373363s ago: executing program 4 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 24.856172566s ago: executing program 4 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 22.182515226s ago: executing program 1 (id=620): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 20.114137237s ago: executing program 1 (id=638): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$inet(0x2, 0x2, 0x73) 20.007868897s ago: executing program 1 (id=641): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='contention_end\x00', r1}, 0x18) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)) 19.595370234s ago: executing program 1 (id=647): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) 14.063573606s ago: executing program 4 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 12.887829181s ago: executing program 1 (id=647): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) 3.886900203s ago: executing program 0 (id=763): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 3.104126905s ago: executing program 0 (id=770): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x400000002, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) 2.906385152s ago: executing program 0 (id=773): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0x70bd27}, 0x14}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)={{0x12, 0x1, 0x0, 0x96, 0x90, 0x34, 0x20, 0x2058, 0x1005, 0xb5f6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x0, 0x0, 0x51, 0x8e, 0x3f}}, {{0x9, 0x4, 0x62, 0x0, 0x0, 0xd1, 0xd8, 0xa3, 0xff}}]}}]}}, 0x0) 2.895147838s ago: executing program 3 (id=774): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x6}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000000c0)={0xfe}) 2.567201565s ago: executing program 3 (id=778): socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000001cc0), 0x800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x0, 0x1, 0xb}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 1.502208562s ago: executing program 2 (id=783): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010800000000000000feffffff00", @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1.394548179s ago: executing program 2 (id=784): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 1.387286226s ago: executing program 0 (id=785): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004044) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x80083314, 0x0) 1.140624419s ago: executing program 3 (id=786): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000040), 0x12) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff09, 0x0) 1.089159782s ago: executing program 2 (id=787): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1.070225518s ago: executing program 3 (id=788): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003001200850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10) 982.877787ms ago: executing program 3 (id=789): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000100)='./file1\x00', 0x162) mkdir(&(0x7f0000000040)='./bus\x00', 0x149) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) 887.38212ms ago: executing program 3 (id=790): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) 654.397728ms ago: executing program 2 (id=791): mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, &(0x7f0000010540)={0x2020}, 0x2020) 607.128988ms ago: executing program 2 (id=792): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d89024", 0x4}], 0x1, 0x0, 0x0, 0x8004}, 0x0) recvmmsg$unix(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000122, 0x0) 578.87029ms ago: executing program 0 (id=793): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r1, 0x0, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 571.997948ms ago: executing program 4 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 527.13442ms ago: executing program 2 (id=794): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00002e3000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2}) 173.816µs ago: executing program 0 (id=795): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r3}, 0xc) 0s ago: executing program 1 (id=647): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) kernel console output (not intermixed with test programs): mp_invalid_vmcs=1 to dump internal KVM state. [ 79.680681][ T6322] netlink: 48 bytes leftover after parsing attributes in process `syz.0.158'. [ 79.738869][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 79.747371][ T5859] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 79.757381][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.775936][ T5859] usb 4-1: Product: syz [ 79.780364][ T5859] usb 4-1: Manufacturer: syz [ 79.786660][ T5859] usb 4-1: SerialNumber: syz [ 79.815711][ T5859] usb 4-1: config 0 descriptor?? [ 79.845808][ T5859] gspca_main: sq905-2.14.0 probing 2770:9120 [ 79.943518][ T5906] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.016918][ T6336] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.105681][ T5906] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 80.135097][ T5906] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 80.148052][ T5906] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 80.160529][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.202262][ T6324] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 80.225153][ T5906] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 80.265675][ T6344] syzkaller1: entered promiscuous mode [ 80.309501][ T6345] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 60 [ 80.313188][ T6344] syzkaller1: entered allmulticast mode [ 80.741125][ T6356] pim6reg1: entered promiscuous mode [ 80.753619][ T6356] pim6reg1: entered allmulticast mode [ 80.845286][ T5859] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 80.852759][ T5859] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 80.911502][ T5859] usb 4-1: USB disconnect, device number 4 [ 81.095570][ T6364] kvm: user requested TSC rate below hardware speed [ 81.321704][ T92] cfg80211: failed to load regulatory.db [ 81.630723][ T6377] mmap: syz.3.183 (6377) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.705638][ T6379] warning: `syz.0.184' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.754583][ T92] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.797629][ T5906] usb 3-1: USB disconnect, device number 2 [ 82.955901][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.986232][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.027657][ T92] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 83.054281][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.084241][ T92] usb 5-1: config 0 descriptor?? [ 83.156926][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 83.204702][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.201'. [ 83.238648][ T6420] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.247448][ T6420] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.256729][ T6420] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.265785][ T6420] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.516108][ T6437] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 83.518010][ T92] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 83.559399][ T92] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 83.572295][ T92] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0003/input/input6 [ 83.592403][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 83.592416][ T30] audit: type=1400 audit(1747770711.145:267): avc: denied { read } for pid=5169 comm="acpid" name="event4" dev="devtmpfs" ino=2827 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.613782][ T92] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 83.675585][ T30] audit: type=1400 audit(1747770711.145:268): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2827 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.701558][ T30] audit: type=1400 audit(1747770711.235:269): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2827 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.749447][ T92] usb 5-1: USB disconnect, device number 3 [ 83.834293][ T6440] fido_id[6440]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 83.975353][ T30] audit: type=1400 audit(1747770711.525:270): avc: denied { create } for pid=6447 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 83.976249][ T6111] Bluetooth: hci5: Frame reassembly failed (-84) [ 84.013227][ T30] audit: type=1400 audit(1747770711.565:271): avc: denied { sys_admin } for pid=6447 comm="syz.0.214" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 84.120249][ T30] audit: type=1400 audit(1747770711.675:272): avc: denied { write } for pid=6451 comm="syz.0.215" name="sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.175878][ T30] audit: type=1400 audit(1747770711.675:273): avc: denied { open } for pid=6451 comm="syz.0.215" path="/dev/sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.286286][ T30] audit: type=1400 audit(1747770711.845:274): avc: denied { read } for pid=6453 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.451986][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'. [ 84.477322][ T6460] netlink: 'syz.2.219': attribute type 2 has an invalid length. [ 84.548556][ T30] audit: type=1400 audit(1747770712.105:275): avc: denied { read } for pid=6461 comm="syz.4.220" name="sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.654532][ T30] audit: type=1400 audit(1747770712.195:276): avc: denied { read } for pid=6463 comm="syz.0.221" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.175451][ T5906] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.333568][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 85.346839][ T5906] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 85.362373][ T5906] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.376425][ T5906] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.390408][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 85.397789][ T5906] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 85.407351][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.430566][ T5906] usb 5-1: config 0 descriptor?? [ 85.703841][ T5822] Bluetooth: hci0: command 0x0401 tx timeout [ 85.846070][ T5906] hid-alps 0003:044E:120B.0004: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.4-1/input0 [ 86.033373][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 86.040070][ T5822] Bluetooth: hci5: command 0x1003 tx timeout [ 86.046554][ T5860] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 86.070753][ T5902] usb 5-1: USB disconnect, device number 4 [ 86.217674][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 86.228891][ T5860] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 86.239746][ T5860] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 86.252377][ T5860] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.288590][ T5860] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 86.310248][ T5860] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 86.324888][ T5860] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 86.353751][ T5860] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 86.377266][ T6523] loop2: detected capacity change from 0 to 7 [ 86.383453][ T5860] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.396999][ T6523] Dev loop2: unable to read RDB block 7 [ 86.402580][ T6523] loop2: AHDI p1 p2 p3 [ 86.407285][ T5860] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 86.412144][ T6523] loop2: partition table partially beyond EOD, truncated [ 86.419280][ T5860] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 86.437331][ T6523] loop2: p1 start 1601398130 is beyond EOD, truncated [ 86.441788][ T5860] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 86.446015][ T6523] loop2: p2 start 1702059890 is beyond EOD, truncated [ 86.473259][ T5860] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 86.496598][ T5860] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.514720][ T5860] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 86.529141][ T5860] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 86.543440][ T5860] usb 4-1: string descriptor 0 read error: -22 [ 86.545118][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.250'. [ 86.560325][ T5860] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 86.571986][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.613912][ T5860] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 86.687012][ T6530] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 86.699491][ T6532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 86.893331][ T5918] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.986978][ T92] usb 4-1: USB disconnect, device number 5 [ 87.063366][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 87.070768][ T5918] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 87.083229][ T5918] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 87.091397][ T5918] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 87.100199][ T5918] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 87.108865][ T5918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 87.117755][ T5918] usb 2-1: config 0 has no interface number 0 [ 87.133425][ T5918] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 87.149797][ T5918] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 87.160855][ T5918] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 87.170716][ T5918] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.183981][ T5918] usb 2-1: config 0 interface 125 has no altsetting 0 [ 87.191346][ T5918] usb 2-1: config 0 interface 125 has no altsetting 2 [ 87.217056][ T5918] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 87.236501][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.255830][ T5918] usb 2-1: Product: syz [ 87.260146][ T5918] usb 2-1: Manufacturer: syz [ 87.268203][ T5918] usb 2-1: SerialNumber: syz [ 87.286073][ T5918] usb 2-1: config 0 descriptor?? [ 87.294795][ T5918] usb 2-1: selecting invalid altsetting 2 [ 88.059386][ T6565] x_tables: duplicate underflow at hook 3 [ 88.396182][ T5859] usb 2-1: USB disconnect, device number 3 [ 88.443443][ T5860] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 88.615788][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 88.628748][ T5860] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 88.638514][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.650728][ T5860] usb 4-1: Product: syz [ 88.656003][ T5860] usb 4-1: Manufacturer: syz [ 88.660964][ T5860] usb 4-1: SerialNumber: syz [ 88.677829][ T5860] usb 4-1: config 0 descriptor?? [ 88.697682][ T5860] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 88.747110][ T6103] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.762887][ T6103] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.793289][ T5906] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.828888][ T6103] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.839313][ T6103] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.891100][ T6590] pim6reg1: entered promiscuous mode [ 88.898599][ T6590] pim6reg1: entered allmulticast mode [ 88.922436][ T6103] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.935838][ T6103] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.960557][ T5906] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 88.980130][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.011207][ T5906] usb 3-1: config 0 descriptor?? [ 89.041163][ T5906] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 89.050894][ T6103] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.102300][ T6103] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.193621][ T6595] loop8: detected capacity change from 0 to 7 [ 89.215396][ T6595] Dev loop8: unable to read RDB block 7 [ 89.222274][ T6595] loop8: unable to read partition table [ 89.224223][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.231615][ T6595] loop8: partition table beyond EOD, [ 89.239260][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.242789][ T6595] truncated [ 89.256385][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.266526][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.273932][ T6595] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 89.286019][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.356787][ T6600] input: syz1 as /devices/virtual/input/input7 [ 89.423934][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 89.423949][ T30] audit: type=1400 audit(1747770716.985:293): avc: denied { ioctl } for pid=6602 comm="syz.0.284" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 89.443782][ T5906] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 89.454413][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.517547][ T6103] bridge_slave_1: left allmulticast mode [ 89.544953][ T6103] bridge_slave_1: left promiscuous mode [ 89.564535][ T30] audit: type=1400 audit(1747770717.035:294): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.580018][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.585730][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.599197][ T30] audit: type=1400 audit(1747770717.035:295): avc: denied { read } for pid=5479 comm="dhcpcd" name="n100" dev="tmpfs" ino=3122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.620807][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.645187][ T30] audit: type=1400 audit(1747770717.035:296): avc: denied { open } for pid=5479 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.668129][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.674473][ T30] audit: type=1400 audit(1747770717.035:297): avc: denied { getattr } for pid=5479 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.706052][ T6103] bridge_slave_0: left allmulticast mode [ 89.707847][ T5860] gspca_ov534_9: reg_w failed -71 [ 89.733811][ T6103] bridge_slave_0: left promiscuous mode [ 89.740224][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.846785][ T5906] gspca_cpia1: usb_control_msg 02, error -71 [ 89.867538][ T5906] gspca_cpia1: usb_control_msg 05, error -71 [ 89.877743][ T5906] cpia1 3-1:0.0: unexpected systemstate: 00 [ 89.896662][ T5906] usb 3-1: USB disconnect, device number 3 [ 90.013303][ T5860] gspca_ov534_9: Unknown sensor 0000 [ 90.013381][ T5860] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 90.039244][ T5860] usb 4-1: USB disconnect, device number 6 [ 90.140863][ T6103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.152552][ T6103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.162289][ T6103] bond0 (unregistering): Released all slaves [ 90.173230][ T1202] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 90.324822][ T1202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 90.337782][ T1202] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 90.349265][ T1202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.362722][ T1202] usb 1-1: config 0 descriptor?? [ 90.369771][ T6616] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 90.587621][ T5863] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 90.605711][ T6597] chnl_net:caif_netlink_parms(): no params data found [ 90.755678][ T6103] hsr_slave_0: left promiscuous mode [ 90.761484][ T6103] hsr_slave_1: left promiscuous mode [ 90.767479][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.775111][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 90.781778][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.790174][ T5863] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 90.799079][ T5863] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.809394][ T5863] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.819977][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.834157][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.842384][ T1202] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 90.862398][ T5863] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.871718][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.887049][ T6103] veth1_macvtap: left promiscuous mode [ 90.894774][ T5863] usb 2-1: Product: syz [ 90.898954][ T5863] usb 2-1: Manufacturer: syz [ 90.903805][ T6103] veth0_macvtap: left promiscuous mode [ 90.909395][ T6103] veth1_vlan: left promiscuous mode [ 90.914794][ T5863] usb 2-1: SerialNumber: syz [ 90.921383][ T6103] veth0_vlan: left promiscuous mode [ 90.953236][ T5914] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 91.065820][ T5859] usb 1-1: USB disconnect, device number 4 [ 91.116038][ T30] audit: type=1400 audit(1747770718.675:298): avc: denied { watch } for pid=6642 comm="syz.2.298" path="/69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.160280][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.168178][ T30] audit: type=1400 audit(1747770718.675:299): avc: denied { watch_sb watch_reads } for pid=6642 comm="syz.2.298" path="/69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.169090][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 91.213284][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.228739][ T5914] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 91.241617][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.252551][ T5914] usb 4-1: config 0 descriptor?? [ 91.363005][ T5863] usb 2-1: 0:2 : does not exist [ 91.384454][ T5823] Bluetooth: hci1: command tx timeout [ 91.483356][ T5914] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 91.570018][ T30] audit: type=1400 audit(1747770719.125:300): avc: denied { write } for pid=6650 comm="syz.2.302" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 91.678031][ T6103] team0 (unregistering): Port device team_slave_1 removed [ 91.730007][ T6103] team0 (unregistering): Port device team_slave_0 removed [ 92.010505][ T5863] usb 2-1: USB disconnect, device number 4 [ 92.078906][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.296861][ T5914] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 92.310754][ T5914] asix 4-1:0.0: probe with driver asix failed with error -71 [ 92.333134][ T5914] usb 4-1: USB disconnect, device number 7 [ 92.524730][ T6597] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.539502][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.550107][ T6597] bridge_slave_0: entered allmulticast mode [ 92.573112][ T6597] bridge_slave_0: entered promiscuous mode [ 92.577058][ T5918] IPVS: starting estimator thread 0... [ 92.589254][ T6675] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 92.625169][ T6597] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.632299][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.662417][ T6597] bridge_slave_1: entered allmulticast mode [ 92.671482][ T6597] bridge_slave_1: entered promiscuous mode [ 92.683557][ T6677] IPVS: using max 42 ests per chain, 100800 per kthread [ 92.711299][ T30] audit: type=1400 audit(1747770720.265:301): avc: denied { bind } for pid=6680 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.779643][ T30] audit: type=1400 audit(1747770720.325:302): avc: denied { write } for pid=6680 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.812719][ T6597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.831591][ T6597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.922561][ T6103] IPVS: stop unused estimator thread 0... [ 93.047284][ T6597] team0: Port device team_slave_0 added [ 93.049153][ T6694] IPVS: Scheduler module ip_vs_sip not found [ 93.065752][ T6597] team0: Port device team_slave_1 added [ 93.188743][ T6597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.202615][ T6597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.223278][ T5918] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 93.275853][ T6597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.291917][ T6597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.303058][ T6597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.316967][ T6708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.353423][ T6597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.435652][ T5918] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.456673][ T5918] usb 2-1: not running at top speed; connect to a high speed hub [ 93.471634][ T5918] usb 2-1: config 9 has an invalid interface number: 76 but max is 0 [ 93.480211][ T5823] Bluetooth: hci1: command tx timeout [ 93.482496][ T5918] usb 2-1: config 9 has no interface number 0 [ 93.517988][ T6597] hsr_slave_0: entered promiscuous mode [ 93.523615][ T5918] usb 2-1: config 9 interface 76 has no altsetting 0 [ 93.525419][ T5918] usb 2-1: New USB device found, idVendor=16d8, idProduct=6804, bcdDevice=68.d5 [ 93.535615][ T6597] hsr_slave_1: entered promiscuous mode [ 93.549780][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.568964][ T5918] usb 2-1: Product: syz [ 93.573600][ T5918] usb 2-1: Manufacturer: syz [ 93.578369][ T5918] usb 2-1: SerialNumber: syz [ 93.589742][ T6597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.597681][ T6597] Cannot create hsr debugfs directory [ 93.799090][ T5918] hub 2-1:9.76: bad descriptor, ignoring hub [ 93.818077][ T5918] hub 2-1:9.76: probe with driver hub failed with error -5 [ 93.842135][ T5918] option 2-1:9.76: GSM modem (1-port) converter detected [ 93.887499][ T5918] usb 2-1: USB disconnect, device number 5 [ 93.915603][ T5918] option 2-1:9.76: device disconnected [ 94.031511][ T6731] input: syz0 as /devices/virtual/input/input8 [ 94.038516][ T6731] input: failed to attach handler leds to device input8, error: -6 [ 94.176846][ T6736] netlink: 52 bytes leftover after parsing attributes in process `syz.2.337'. [ 94.310751][ T6597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.330980][ T6597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.359939][ T6597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.385771][ T6597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.490686][ T6747] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 94.648858][ T6597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.716229][ T6597] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.749957][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.757117][ T6122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.788118][ T6122] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.795294][ T6122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.943371][ T5918] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 95.055134][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 95.055148][ T30] audit: type=1400 audit(1747770722.615:311): avc: denied { map } for pid=6763 comm="syz.0.349" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 95.115275][ T5918] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 95.123881][ T5918] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 95.154153][ T6597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.161813][ T5918] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 95.179068][ T5918] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 95.203341][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 95.223634][ T5914] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 95.224091][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 95.248087][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 95.291893][ T6772] netlink: 40 bytes leftover after parsing attributes in process `syz.0.351'. [ 95.291953][ T5918] usb 3-1: string descriptor 0 read error: -22 [ 95.308755][ T5918] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 95.328376][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.355286][ T5918] usb 3-1: config 0 descriptor?? [ 95.373500][ T5918] hub 3-1:0.0: bad descriptor, ignoring hub [ 95.379454][ T5918] hub 3-1:0.0: probe with driver hub failed with error -5 [ 95.413352][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 95.420175][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.450411][ T5918] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 95.453920][ T5914] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 95.520689][ T5914] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 95.543921][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.544004][ T5822] Bluetooth: hci1: command tx timeout [ 95.572820][ T5914] usb 4-1: Product: syz [ 95.585379][ T5918] usb 3-1: USB disconnect, device number 4 [ 95.591283][ T5914] usb 4-1: Manufacturer: syz [ 95.600603][ T5914] usb 4-1: SerialNumber: syz [ 95.650973][ T5914] usb 4-1: config 0 descriptor?? [ 95.696509][ T5859] kernel write not supported for file /205/loginuid (pid: 5859 comm: kworker/1:5) [ 95.751578][ T6597] veth0_vlan: entered promiscuous mode [ 95.753942][ T5863] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.778429][ T6597] veth1_vlan: entered promiscuous mode [ 95.836342][ T6597] veth0_macvtap: entered promiscuous mode [ 95.850499][ T6597] veth1_macvtap: entered promiscuous mode [ 95.874021][ T6597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.907837][ T6597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.937565][ T6597] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.946942][ T6597] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.953766][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 95.955910][ T6597] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.971145][ T6597] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.972344][ T5863] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 95.991636][ T5863] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 96.004018][ T5863] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 96.027227][ T5863] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 96.045129][ T5863] usb 2-1: config 0 interface 0 has no altsetting 0 [ 96.076235][ T5863] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 96.112697][ T5914] usb 4-1: USB disconnect, device number 8 [ 96.119536][ T6137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.130564][ T5863] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 96.143711][ T6137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.151094][ T5863] usb 2-1: Product: syz [ 96.155742][ T5863] usb 2-1: Manufacturer: syz [ 96.160334][ T5863] usb 2-1: SerialNumber: syz [ 96.174970][ T5863] usb 2-1: config 0 descriptor?? [ 96.184074][ T5863] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 96.199022][ T6099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.207750][ T5863] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 96.208730][ T6099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.263522][ T30] audit: type=1400 audit(1747770723.815:312): avc: denied { mounton } for pid=6597 comm="syz-executor" path="/root/syzkaller.FqxN1w/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 96.327354][ T30] audit: type=1400 audit(1747770723.885:313): avc: denied { mount } for pid=6597 comm="syz-executor" name="/" dev="gadgetfs" ino=6079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 96.746999][ T5906] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.903682][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 96.914567][ T5906] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.941273][ T5906] usb 3-1: config 0 has no interface number 0 [ 96.965543][ T5906] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 96.994677][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.014646][ T5918] usb 2-1: USB disconnect, device number 6 [ 97.024980][ T5918] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 97.032489][ T5906] usb 3-1: Product: syz [ 97.036869][ T5906] usb 3-1: Manufacturer: syz [ 97.041461][ T5906] usb 3-1: SerialNumber: syz [ 97.062308][ T5906] usb 3-1: config 0 descriptor?? [ 97.080834][ T5906] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 97.403314][ T92] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 97.557679][ T92] usb 4-1: Using ep0 maxpacket: 8 [ 97.579781][ T92] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.591175][ T6137] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.618542][ T92] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.627828][ T92] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 97.639114][ T92] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 97.657443][ T92] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 97.666749][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.683025][ T92] hub 4-1:1.0: bad descriptor, ignoring hub [ 97.690279][ T92] hub 4-1:1.0: probe with driver hub failed with error -5 [ 97.722821][ T92] cdc_wdm 4-1:1.0: skipping garbage [ 97.735856][ T92] cdc_wdm 4-1:1.0: skipping garbage [ 97.752518][ T92] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 97.759027][ T92] cdc_wdm 4-1:1.0: Unknown control protocol [ 97.926091][ T30] audit: type=1400 audit(1747770725.485:314): avc: denied { read write } for pid=6815 comm="syz.3.369" name="cdc-wdm0" dev="devtmpfs" ino=2880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 97.956412][ T30] audit: type=1400 audit(1747770725.485:315): avc: denied { mount } for pid=6833 comm="syz.1.377" name="/" dev="ramfs" ino=11825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 97.979845][ T30] audit: type=1400 audit(1747770725.515:316): avc: denied { open } for pid=6815 comm="syz.3.369" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 98.105405][ T5906] gspca_spca1528: reg_w err -71 [ 98.110357][ T5906] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 98.139758][ T5906] usb 3-1: USB disconnect, device number 5 [ 98.241014][ T6137] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.261480][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.270506][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.278226][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.287312][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.294767][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.343740][ T5918] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 98.395658][ T6816] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 98.433523][ T5863] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 98.452910][ T6844] chnl_net:caif_netlink_parms(): no params data found [ 98.494943][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 98.510435][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.522378][ T6844] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.530656][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.537792][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.547922][ T6844] bridge_slave_0: entered allmulticast mode [ 98.547984][ T5918] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 98.562896][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.563074][ T6844] bridge_slave_0: entered promiscuous mode [ 98.582761][ T6844] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.588237][ T5918] usb 2-1: config 0 descriptor?? [ 98.594430][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.601993][ T6844] bridge_slave_1: entered allmulticast mode [ 98.608237][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 98.618846][ T6844] bridge_slave_1: entered promiscuous mode [ 98.619741][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 98.638416][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 98.679778][ T5863] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 98.700253][ T30] audit: type=1400 audit(1747770726.255:317): avc: denied { mounton } for pid=6852 comm="syz.2.382" path="/90/bus" dev="tmpfs" ino=475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 98.700473][ T6853] 9pnet_virtio: no channels available for device 127.0.0.1 [ 98.723020][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.750025][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.759720][ T6137] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.773264][ T5863] usb 1-1: Product: syz [ 98.777569][ T5863] usb 1-1: Manufacturer: syz [ 98.784814][ T5863] usb 1-1: SerialNumber: syz [ 98.794818][ T5863] usb 1-1: config 0 descriptor?? [ 98.802598][ T5863] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 98.812384][ T5863] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 98.816877][ T6844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.855032][ T6844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.908810][ T1202] usb 4-1: USB disconnect, device number 9 [ 98.920930][ T6137] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.979375][ T6844] team0: Port device team_slave_0 added [ 98.988442][ T6844] team0: Port device team_slave_1 added [ 99.045969][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.053236][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.096910][ T5918] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 99.142366][ T6844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.179611][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.194798][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.262489][ T6844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.297214][ T5860] usb 2-1: USB disconnect, device number 7 [ 99.449380][ T5863] em28xx 1-1:0.0: unknown em28xx chip ID (86) [ 99.477233][ T6844] hsr_slave_0: entered promiscuous mode [ 99.492948][ T6844] hsr_slave_1: entered promiscuous mode [ 99.494098][ T6844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.494139][ T6844] Cannot create hsr debugfs directory [ 99.606287][ T6137] bridge_slave_1: left allmulticast mode [ 99.606349][ T6137] bridge_slave_1: left promiscuous mode [ 99.606506][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.610160][ T6137] bridge_slave_0: left allmulticast mode [ 99.610179][ T6137] bridge_slave_0: left promiscuous mode [ 99.610355][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.656094][ T5863] em28xx 1-1:0.0: Config register raw data: 0x56 [ 99.825994][ T58] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 99.856947][ T5863] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 99.892008][ T5863] em28xx 1-1:0.0: No AC97 audio processor [ 99.919345][ T5863] usb 1-1: USB disconnect, device number 5 [ 99.934998][ T5863] em28xx 1-1:0.0: Disconnecting em28xx [ 99.958777][ T30] audit: type=1400 audit(1747770727.515:318): avc: denied { read } for pid=6867 comm="syz.1.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.983342][ T5863] em28xx 1-1:0.0: Freeing device [ 99.988587][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 100.006573][ T58] usb 3-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 100.046483][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.082073][ T58] usb 3-1: Product: syz [ 100.093705][ T58] usb 3-1: Manufacturer: syz [ 100.105906][ T58] usb 3-1: SerialNumber: syz [ 100.118079][ T58] usb 3-1: config 0 descriptor?? [ 100.135931][ T58] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 100.214851][ T6137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.230725][ T6137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.274057][ T6137] bond0 (unregistering): Released all slaves [ 100.344065][ T5822] Bluetooth: hci1: command tx timeout [ 100.762718][ T58] gspca_sunplus: reg_w_riv err -71 [ 100.776476][ T58] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 100.810071][ T58] usb 3-1: USB disconnect, device number 6 [ 101.035765][ T30] audit: type=1400 audit(1747770728.595:319): avc: denied { open } for pid=6898 comm="syz.1.401" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 101.078323][ T6137] hsr_slave_0: left promiscuous mode [ 101.088006][ T6137] hsr_slave_1: left promiscuous mode [ 101.095254][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.103118][ T6137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.117750][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.132609][ T6137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.166279][ T6137] veth1_macvtap: left promiscuous mode [ 101.171828][ T6137] veth0_macvtap: left promiscuous mode [ 101.181608][ T6137] veth1_vlan: left promiscuous mode [ 101.192610][ T6137] veth0_vlan: left promiscuous mode [ 101.216821][ T30] audit: type=1400 audit(1747770728.775:320): avc: denied { watch } for pid=6903 comm="syz.0.403" path="/108/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 101.238983][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.300383][ T30] audit: type=1400 audit(1747770728.775:321): avc: denied { watch_sb watch_reads } for pid=6903 comm="syz.0.403" path="/108/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 101.323262][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.409322][ T30] audit: type=1400 audit(1747770728.885:322): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 101.734160][ T30] audit: type=1400 audit(1747770729.295:323): avc: denied { ioctl } for pid=6920 comm="syz.0.411" path="/dev/sg0" dev="devtmpfs" ino=734 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 101.860818][ T6137] team0 (unregistering): Port device team_slave_1 removed [ 101.887884][ T6137] team0 (unregistering): Port device team_slave_0 removed [ 102.211371][ T6925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.349319][ T6934] input: syz0 as /devices/virtual/input/input10 [ 102.423603][ T5822] Bluetooth: hci1: command tx timeout [ 102.464326][ T30] audit: type=1400 audit(1747770730.015:324): avc: denied { read } for pid=6941 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.487310][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.591586][ T30] audit: type=1400 audit(1747770730.015:325): avc: denied { open } for pid=6941 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.756746][ T30] audit: type=1400 audit(1747770730.015:326): avc: denied { getattr } for pid=6941 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.908153][ T30] audit: type=1400 audit(1747770730.145:327): avc: denied { map } for pid=6944 comm="syz.2.416" path="/dev/sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 103.018873][ T6963] ======================================================= [ 103.018873][ T6963] WARNING: The mand mount option has been deprecated and [ 103.018873][ T6963] and is ignored by this kernel. Remove the mand [ 103.018873][ T6963] option from the mount to silence this warning. [ 103.018873][ T6963] ======================================================= [ 103.053743][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.084364][ T6968] overlay: ./file0 is not a directory [ 103.100797][ T30] audit: type=1400 audit(1747770730.145:328): avc: denied { execute } for pid=6944 comm="syz.2.416" path="/dev/sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 103.315291][ T6972] tipc: Started in network mode [ 103.363282][ T6972] tipc: Node identity ac1414aa, cluster identity 4711 [ 103.425150][ T6972] tipc: Enabled bearer , priority 10 [ 103.451839][ T6844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.503037][ T6844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.567710][ T6844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.616597][ T6844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.763080][ T5914] IPVS: starting estimator thread 0... [ 103.767265][ T6986] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 103.843272][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 103.868378][ T6844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.883246][ T6990] IPVS: using max 44 ests per chain, 105600 per kthread [ 103.983372][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 104.016358][ T6844] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.106494][ T6137] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.113688][ T6137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.123245][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 104.170867][ T6137] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.178085][ T6137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.263357][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 104.403247][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 104.503330][ T5822] Bluetooth: hci1: command tx timeout [ 104.545521][ T5906] tipc: Node number set to 2886997162 [ 104.683239][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 104.743445][ T5822] Bluetooth: hci0: command 0x0401 tx timeout [ 104.743755][ T5863] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 104.793790][ T6844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.812283][ T5863] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 104.953226][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 105.243443][ T58] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 105.259148][ T7032] loop6: detected capacity change from 0 to 63 [ 105.289406][ T6604] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.345455][ T7032] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 105.395270][ T7035] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 105.422074][ T7032] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 105.445862][ T58] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.455550][ T58] usb 1-1: not running at top speed; connect to a high speed hub [ 105.461263][ T6844] veth0_vlan: entered promiscuous mode [ 105.470657][ T58] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 105.483250][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 105.505385][ T58] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 105.546626][ T58] usb 1-1: config 4 has no interface number 0 [ 105.567044][ T58] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 105.573525][ T6844] veth1_vlan: entered promiscuous mode [ 105.580761][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.582826][ T7032] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 105.629995][ T7032] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 105.642911][ T58] usb 1-1: Product: syz [ 105.654095][ T6844] veth0_macvtap: entered promiscuous mode [ 105.668176][ T6844] veth1_macvtap: entered promiscuous mode [ 105.674996][ T58] usb 1-1: Manufacturer: syz [ 105.675211][ T7032] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 105.699699][ T58] usb 1-1: SerialNumber: syz [ 105.709821][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.725447][ T7032] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 105.752985][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.771234][ T7032] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 105.809887][ T6844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.855071][ T6844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.892261][ T6844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.922903][ T6844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.025969][ T58] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 106.033377][ T58] usb 1-1: No valid video chain found. [ 106.051744][ T58] usb 1-1: USB disconnect, device number 6 [ 106.144499][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 106.144514][ T30] audit: type=1400 audit(1747770733.705:340): avc: denied { mounton } for pid=7052 comm="syz.1.441" path="/78/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 106.277401][ T30] audit: type=1400 audit(1747770733.825:341): avc: denied { write } for pid=7058 comm="syz.1.444" name="tcp6" dev="proc" ino=4026533312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 106.304041][ T5914] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 106.466035][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.479856][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.492469][ T5914] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 106.503264][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 106.532216][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.563050][ T5914] usb 4-1: config 0 descriptor?? [ 106.587006][ T5822] Bluetooth: hci1: command tx timeout [ 106.983294][ T5822] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.002004][ T5863] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 107.015756][ T5914] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 107.036856][ T5863] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 107.048648][ T5914] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 107.066986][ T5914] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0007/input/input11 [ 107.134718][ T5914] cm6533_jd 0003:0D8C:0022.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 107.281006][ T5914] usb 4-1: USB disconnect, device number 10 [ 107.342800][ T30] audit: type=1400 audit(1747770734.895:342): avc: denied { getopt } for pid=7098 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 107.888794][ T7129] SELinux: ebitmap: truncated map [ 107.898388][ T7129] SELinux: failed to load policy [ 108.428662][ T30] audit: type=1400 audit(1747770735.985:343): avc: denied { bind } for pid=7145 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.450822][ T30] audit: type=1400 audit(1747770736.005:344): avc: denied { listen } for pid=7145 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.475850][ T30] audit: type=1400 audit(1747770736.005:345): avc: denied { accept } for pid=7145 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.143388][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.150441][ T5863] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 109.158014][ T5863] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 109.623215][ C1] net_ratelimit: 2 callbacks suppressed [ 109.623234][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 110.663228][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 111.224416][ T5863] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 111.224505][ T5822] Bluetooth: hci4: command 0x0c1a tx timeout [ 111.230520][ T5863] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 111.703287][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 112.743221][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 113.383285][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.389355][ T5863] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 113.398693][ T5863] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 113.564685][ T6137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.592400][ T6137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.610957][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.465'. [ 113.693363][ T6137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.734419][ T6137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.783216][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 113.843332][ T7162] wireguard0: entered promiscuous mode [ 113.857153][ T7162] wireguard0: entered allmulticast mode [ 114.073546][ T30] audit: type=1400 audit(1747770741.625:346): avc: denied { unmount } for pid=7174 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 114.186570][ T6103] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.253433][ T58] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 114.273253][ T7182] overlay: ./file0 is not a directory [ 114.286496][ T6103] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.389246][ T6103] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.403229][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 114.420738][ T58] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 114.447589][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.465118][ T58] usb 2-1: Product: syz [ 114.479499][ T58] usb 2-1: Manufacturer: syz [ 114.484780][ T58] usb 2-1: SerialNumber: syz [ 114.505415][ T58] usb 2-1: config 0 descriptor?? [ 114.517827][ T6103] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.522507][ T58] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 114.553598][ T58] usb 2-1: setting power ON [ 114.563691][ T58] dvb-usb: bulk message failed: -22 (2/0) [ 114.592309][ T58] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.629185][ T58] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 114.647908][ T58] usb 2-1: media controller created [ 114.693640][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.718368][ T7173] dvb-usb: bulk message failed: -22 (3/0) [ 114.720554][ T30] audit: type=1400 audit(1747770742.275:347): avc: denied { append } for pid=7172 comm="syz.1.475" name="i2c-1" dev="devtmpfs" ino=2914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.779329][ T58] usb 2-1: selecting invalid altsetting 6 [ 114.807484][ T58] usb 2-1: digital interface selection failed (-22) [ 114.823214][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 114.869252][ T6103] bridge_slave_1: left allmulticast mode [ 114.875367][ T58] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 114.878356][ T6103] bridge_slave_1: left promiscuous mode [ 114.933649][ T58] usb 2-1: setting power OFF [ 114.938555][ T58] dvb-usb: bulk message failed: -22 (2/0) [ 114.939696][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.975967][ T58] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 115.024301][ T6103] bridge_slave_0: left allmulticast mode [ 115.024743][ T58] (NULL device *): no alternate interface [ 115.046135][ T6103] bridge_slave_0: left promiscuous mode [ 115.092078][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.125549][ T58] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 115.164991][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.165863][ T58] usb 2-1: USB disconnect, device number 8 [ 115.179355][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.192917][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.200665][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.211059][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.220914][ T6604] udevd[6604]: setting owner of /dev/bus/usb/002/008 to uid=0, gid=0 failed: No such file or directory [ 115.721584][ T6103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.730867][ T30] audit: type=1400 audit(1747770743.285:348): avc: denied { mounton } for pid=7218 comm="syz.2.494" path=2F3131392FE91F7189591E9233614B dev="tmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 115.756604][ T6103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.774782][ T6103] bond0 (unregistering): Released all slaves [ 115.863268][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 115.992510][ T30] audit: type=1400 audit(1747770743.545:349): avc: denied { read } for pid=7224 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 116.044404][ T7230] vivid-001: disconnect [ 116.116599][ T30] audit: type=1400 audit(1747770743.675:350): avc: denied { connect } for pid=7231 comm="syz.2.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.187916][ T7226] vivid-001: reconnect [ 116.488889][ T6103] hsr_slave_0: left promiscuous mode [ 116.532428][ T6103] hsr_slave_1: left promiscuous mode [ 116.539438][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.563873][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.593045][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.616210][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.669502][ T6103] veth1_macvtap: left promiscuous mode [ 116.681041][ T6103] veth0_macvtap: left promiscuous mode [ 116.700686][ T6103] veth1_vlan: left promiscuous mode [ 116.707912][ T6103] veth0_vlan: left promiscuous mode [ 116.903265][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 117.097365][ T6103] team0 (unregistering): Port device team_slave_1 removed [ 117.122962][ T6103] team0 (unregistering): Port device team_slave_0 removed [ 117.303349][ T5822] Bluetooth: hci1: command tx timeout [ 117.460293][ T7197] chnl_net:caif_netlink_parms(): no params data found [ 117.634433][ T7197] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.641542][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.650071][ T7197] bridge_slave_0: entered allmulticast mode [ 117.658604][ T7197] bridge_slave_0: entered promiscuous mode [ 117.669529][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.676775][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.713425][ T7197] bridge_slave_1: entered allmulticast mode [ 117.739471][ T7197] bridge_slave_1: entered promiscuous mode [ 117.854202][ T7197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.876464][ T7197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.943336][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 118.020651][ T7197] team0: Port device team_slave_0 added [ 118.044965][ T7197] team0: Port device team_slave_1 added [ 118.136832][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.154921][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.188965][ T7197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.205822][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.212773][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.239609][ T7197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.253902][ T30] audit: type=1400 audit(1747770745.815:351): avc: denied { shutdown } for pid=7298 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.515766][ T7197] hsr_slave_0: entered promiscuous mode [ 118.521844][ T7197] hsr_slave_1: entered promiscuous mode [ 118.555316][ T7197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.562913][ T7197] Cannot create hsr debugfs directory [ 118.673072][ T30] audit: type=1400 audit(1747770746.225:352): avc: denied { create } for pid=7317 comm="syz.1.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.692310][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.782419][ T30] audit: type=1400 audit(1747770746.255:353): avc: denied { ioctl } for pid=7317 comm="syz.1.536" path="socket:[16583]" dev="sockfs" ino=16583 ioctlcmd=0x8b19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.890953][ T30] audit: type=1400 audit(1747770746.435:354): avc: denied { remount } for pid=7321 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 118.968724][ T7324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.539'. [ 118.970429][ T30] audit: type=1400 audit(1747770746.525:355): avc: denied { accept } for pid=7327 comm="syz.2.541" path="socket:[15688]" dev="sockfs" ino=15688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.001362][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 119.372083][ T7346] loop6: detected capacity change from 0 to 7 [ 119.383310][ T5822] Bluetooth: hci1: command tx timeout [ 119.759936][ T7197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.804160][ T7197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 119.817066][ T7197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 119.859674][ T7197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.023237][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 120.109087][ T7197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.152491][ T7197] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.165177][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.172315][ T6103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.226769][ T6099] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.233951][ T6099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.556331][ T7197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.047764][ T7197] veth0_vlan: entered promiscuous mode [ 121.063284][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 121.109948][ T7197] veth1_vlan: entered promiscuous mode [ 121.147053][ T7415] bridge0: port 3(vlan2) entered blocking state [ 121.157786][ T7415] bridge0: port 3(vlan2) entered disabled state [ 121.165799][ T7415] vlan2: entered allmulticast mode [ 121.171268][ T7415] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 121.187067][ T7415] vlan2: entered promiscuous mode [ 121.192194][ T7415] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 121.249506][ T7197] veth0_macvtap: entered promiscuous mode [ 121.282191][ T7197] veth1_macvtap: entered promiscuous mode [ 121.286132][ T92] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 121.333026][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.350627][ T30] audit: type=1400 audit(1747770748.905:356): avc: denied { nlmsg_read } for pid=7421 comm="syz.3.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.356655][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.430325][ T7197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.446857][ T7197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.456432][ T7197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.457018][ T30] audit: type=1400 audit(1747770748.905:357): avc: denied { read } for pid=7421 comm="syz.3.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.469302][ T7197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.485368][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 121.494196][ T5822] Bluetooth: hci1: command tx timeout [ 121.537920][ T92] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 121.655890][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 121.722033][ T92] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 121.740507][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.578'. [ 121.746756][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.757544][ T92] usb 2-1: Product: syz [ 121.761717][ T92] usb 2-1: Manufacturer: syz [ 121.768081][ T92] usb 2-1: SerialNumber: syz [ 121.780085][ T6122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.791806][ T92] usb 2-1: config 0 descriptor?? [ 121.813200][ T6122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.833376][ T7412] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.840595][ T7412] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.902579][ T92] usb 2-1: ucan: probing device on interface #0 [ 121.927184][ T6111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.936470][ T6111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.961978][ T7440] input: syz0 as /devices/virtual/input/input12 [ 122.103274][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 122.596775][ T92] ucan 2-1:0.0 can0: registered device [ 122.618660][ T7461] syzkaller1: entered promiscuous mode [ 122.626181][ T7461] syzkaller1: entered allmulticast mode [ 122.659973][ T30] audit: type=1400 audit(1747770750.215:358): avc: denied { write } for pid=7464 comm="syz.0.595" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 122.702912][ T30] audit: type=1400 audit(1747770750.215:359): avc: denied { open } for pid=7464 comm="syz.0.595" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 122.726638][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.738595][ T92] ucan 2-1:0.0 can0: firmware string: Á [ 122.915771][ T6111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.960125][ T92] usb 2-1: USB disconnect, device number 9 [ 123.103321][ T5860] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 123.143311][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 123.265924][ T5860] usb 3-1: config 0 has no interfaces? [ 123.273308][ T5860] usb 3-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 123.282377][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.293106][ T5860] usb 3-1: Product: syz [ 123.297310][ T5860] usb 3-1: Manufacturer: syz [ 123.301898][ T5860] usb 3-1: SerialNumber: syz [ 123.310398][ T5860] usb 3-1: config 0 descriptor?? [ 123.395109][ T6111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.566753][ T92] usb 3-1: USB disconnect, device number 7 [ 123.661408][ T6111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.840786][ T6111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.877255][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.878350][ T30] audit: type=1400 audit(1747770751.435:360): avc: denied { connect } for pid=7488 comm="syz.1.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.885387][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.916170][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.929104][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.938676][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.034529][ T5860] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 124.183934][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 124.221902][ T6111] bridge_slave_1: left allmulticast mode [ 124.229950][ T6111] bridge_slave_1: left promiscuous mode [ 124.236411][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.240038][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.313265][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.329041][ T30] audit: type=1400 audit(1747770751.865:361): avc: denied { read } for pid=7497 comm="syz.3.608" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 124.383383][ T6111] bridge_slave_0: left allmulticast mode [ 124.389123][ T6111] bridge_slave_0: left promiscuous mode [ 124.395292][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.406671][ T5860] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 124.450077][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.483551][ T30] audit: type=1400 audit(1747770751.885:362): avc: denied { open } for pid=7497 comm="syz.3.608" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 124.515472][ T5860] usb 1-1: config 0 descriptor?? [ 124.569028][ T30] audit: type=1400 audit(1747770751.925:363): avc: denied { ioctl } for pid=7497 comm="syz.3.608" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 124.594182][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.599859][ T7504] kvm: kvm [7503]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4c [ 124.636268][ T30] audit: type=1400 audit(1747770751.925:364): avc: denied { set_context_mgr } for pid=7497 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 124.716986][ T30] audit: type=1400 audit(1747770752.135:365): avc: denied { create } for pid=7505 comm="syz.3.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 124.978693][ T5860] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 125.003861][ T5860] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 125.161145][ T5860] cp2112 0003:10C4:EA90.0008: Part Number: 0x82 Device Version: 0xFE [ 125.170873][ T6111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.181343][ T6111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.192028][ T6111] bond0 (unregistering): Released all slaves [ 125.223263][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 125.468565][ T7525] random: crng reseeded on system resumption [ 125.538218][ T6111] hsr_slave_0: left promiscuous mode [ 125.556144][ T6111] hsr_slave_1: left promiscuous mode [ 125.565741][ T5860] cp2112 0003:10C4:EA90.0008: error setting SMBus config [ 125.571739][ T6111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.583375][ T6111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.604789][ T5860] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -71 [ 125.630637][ T6111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.641231][ T5860] usb 1-1: USB disconnect, device number 7 [ 125.663012][ T6111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.692891][ T6111] veth1_macvtap: left promiscuous mode [ 125.708081][ T6111] veth0_macvtap: left promiscuous mode [ 125.713831][ T6111] veth1_vlan: left promiscuous mode [ 125.719138][ T6111] veth0_vlan: left promiscuous mode [ 125.933415][ T92] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 126.002972][ T6111] team0 (unregistering): Port device team_slave_1 removed [ 126.028060][ T6111] team0 (unregistering): Port device team_slave_0 removed [ 126.033342][ T5822] Bluetooth: hci1: command tx timeout [ 126.106931][ T92] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 126.129995][ T92] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 126.157549][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.181539][ T92] usb 2-1: Product: syz [ 126.193376][ T92] usb 2-1: Manufacturer: syz [ 126.197979][ T92] usb 2-1: SerialNumber: syz [ 126.214963][ T92] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 126.263244][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 126.446596][ T7490] chnl_net:caif_netlink_parms(): no params data found [ 126.709054][ T7542] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 126.751053][ T7490] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.775482][ T7490] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.782729][ T7490] bridge_slave_0: entered allmulticast mode [ 126.796567][ T7490] bridge_slave_0: entered promiscuous mode [ 126.807211][ T7490] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.818364][ T7490] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.828935][ T7490] bridge_slave_1: entered allmulticast mode [ 126.866059][ T7490] bridge_slave_1: entered promiscuous mode [ 126.901001][ T7490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.929127][ T7490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.017967][ T7490] team0: Port device team_slave_0 added [ 127.028069][ T92] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 127.052558][ T7490] team0: Port device team_slave_1 added [ 127.082764][ T92] usb 2-1: USB disconnect, device number 10 [ 127.149796][ T7490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.160070][ T7490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.197867][ T7490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.210299][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 127.225934][ T7490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.234205][ T7490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.261003][ T7490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.303203][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 127.391274][ T7490] hsr_slave_0: entered promiscuous mode [ 127.400163][ T7490] hsr_slave_1: entered promiscuous mode [ 127.406853][ T7490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.415278][ T7490] Cannot create hsr debugfs directory [ 127.829501][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 127.829516][ T30] audit: type=1400 audit(1747770755.385:370): avc: denied { accept } for pid=7576 comm="syz.3.642" lport=38061 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.093806][ T30] audit: type=1400 audit(1747770755.645:371): avc: denied { setopt } for pid=7586 comm="syz.3.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.119170][ T5823] Bluetooth: hci1: command tx timeout [ 128.183538][ T5823] Bluetooth: hci5: command 0xfc11 tx timeout [ 128.189746][ T5822] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 128.221070][ T6115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.343116][ T6115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.343214][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 128.398134][ T30] audit: type=1326 audit(1747770755.955:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.3.650" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe127b8e969 code=0x0 [ 128.466680][ T7595] syz.3.650: attempt to access beyond end of device [ 128.466680][ T7595] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 128.490329][ T6115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.569817][ T6115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.614263][ T5906] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 128.675967][ T7490] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.692361][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.703291][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.711523][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.717388][ T7490] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.729753][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.739240][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.752591][ T7490] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.774730][ T7490] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.780521][ T5906] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.795680][ T5906] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 128.823296][ T5906] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.872112][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.917996][ T7590] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.936427][ T5906] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.060275][ T6115] bridge_slave_1: left allmulticast mode [ 129.076953][ T6115] bridge_slave_1: left promiscuous mode [ 129.083539][ T6115] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.096068][ T6115] bridge_slave_0: left allmulticast mode [ 129.107273][ T6115] bridge_slave_0: left promiscuous mode [ 129.113024][ T6115] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.187581][ T5918] usb 3-1: USB disconnect, device number 8 [ 129.313186][ T30] audit: type=1400 audit(1747770756.865:373): avc: denied { read append } for pid=7604 comm="syz.3.654" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.383325][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 129.401296][ T30] audit: type=1400 audit(1747770756.865:374): avc: denied { open } for pid=7604 comm="syz.3.654" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.609531][ T6115] batman_adv: batadv0: Removing interface: vlan2 [ 129.619868][ T6115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.629930][ T6115] bond_slave_0: left allmulticast mode [ 129.636925][ T6115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.646434][ T6115] bond_slave_1: left allmulticast mode [ 129.652915][ T6115] bond0 (unregistering): Released all slaves [ 129.733425][ T5860] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 129.891293][ T30] audit: type=1326 audit(1747770757.445:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.3.658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe127b8e969 code=0x0 [ 129.936060][ T5860] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 129.955836][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.973855][ T7490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.984217][ T5860] usb 1-1: config 0 descriptor?? [ 130.007780][ T7599] chnl_net:caif_netlink_parms(): no params data found [ 130.038402][ T6115] hsr_slave_0: left promiscuous mode [ 130.045953][ T6115] hsr_slave_1: left promiscuous mode [ 130.052007][ T6115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.060238][ T6115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.068170][ T6115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.075771][ T6115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.093631][ T6115] veth1_macvtap: left promiscuous mode [ 130.099217][ T6115] veth0_macvtap: left promiscuous mode [ 130.105402][ T6115] veth1_vlan: left promiscuous mode [ 130.110753][ T6115] veth0_vlan: left promiscuous mode [ 130.183485][ T5823] Bluetooth: hci1: command tx timeout [ 130.410361][ T5860] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 130.423203][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 130.531852][ T6115] team0 (unregistering): Port device team_slave_1 removed [ 130.561195][ T6115] team0 (unregistering): Port device team_slave_0 removed [ 130.836274][ T5823] Bluetooth: hci3: command tx timeout [ 130.982035][ T7490] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.002526][ T7599] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.009783][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.017083][ T7599] bridge_slave_0: entered allmulticast mode [ 131.029517][ T7599] bridge_slave_0: entered promiscuous mode [ 131.037604][ T7599] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.044956][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.053337][ T7599] bridge_slave_1: entered allmulticast mode [ 131.053493][ T1202] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 131.062109][ T7599] bridge_slave_1: entered promiscuous mode [ 131.102162][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.109332][ T6122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.119342][ T6122] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.126493][ T6122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.149705][ T5918] usb 1-1: USB disconnect, device number 8 [ 131.198994][ T7599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.218229][ T7599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.236025][ T1202] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.247347][ T1202] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.264168][ T1202] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 131.273410][ T1202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 131.281406][ T1202] usb 4-1: SerialNumber: syz [ 131.285931][ T7599] team0: Port device team_slave_0 added [ 131.302343][ T7599] team0: Port device team_slave_1 added [ 131.336935][ T7599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.349167][ T7599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.375498][ T7599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.383911][ T5914] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 131.401158][ T7599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.409706][ T7599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.435576][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.443075][ T7599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.463241][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 131.499026][ T7599] hsr_slave_0: entered promiscuous mode [ 131.505815][ T7599] hsr_slave_1: entered promiscuous mode [ 131.518480][ T7599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.521580][ T1202] usb 4-1: 0:2 : does not exist [ 131.526419][ T7599] Cannot create hsr debugfs directory [ 131.535255][ T1202] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 131.551486][ T5914] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 131.561922][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.570419][ T5914] usb 3-1: Product: syz [ 131.574935][ T5914] usb 3-1: Manufacturer: syz [ 131.579827][ T5914] usb 3-1: SerialNumber: syz [ 131.601518][ T1202] usb 4-1: USB disconnect, device number 11 [ 131.611366][ T5914] usb 3-1: config 0 descriptor?? [ 131.680071][ T6604] udevd[6604]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.796591][ T7490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.862606][ T5914] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 132.032654][ T7653] bridge0: port 3(gretap0) entered blocking state [ 132.044252][ T7653] bridge0: port 3(gretap0) entered disabled state [ 132.051509][ T7653] gretap0: entered allmulticast mode [ 132.059922][ T7653] gretap0: entered promiscuous mode [ 132.067161][ T7653] bridge0: port 3(gretap0) entered blocking state [ 132.073857][ T7653] bridge0: port 3(gretap0) entered forwarding state [ 132.086135][ T7654] gretap0: left allmulticast mode [ 132.091169][ T7654] gretap0: left promiscuous mode [ 132.097141][ T7654] bridge0: port 3(gretap0) entered disabled state [ 132.263330][ T5823] Bluetooth: hci1: command tx timeout [ 132.275259][ T5914] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 132.317033][ T7490] veth0_vlan: entered promiscuous mode [ 132.361216][ T7490] veth1_vlan: entered promiscuous mode [ 132.449087][ T7599] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 132.466639][ T7599] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 132.496179][ T7599] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 132.504597][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 132.515949][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.522246][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.523078][ T1202] usb 3-1: USB disconnect, device number 9 [ 132.552564][ T7599] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 132.560876][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 132.599489][ T7490] veth0_macvtap: entered promiscuous mode [ 132.613623][ T7490] veth1_macvtap: entered promiscuous mode [ 132.662251][ T7490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.667816][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'. [ 132.694323][ T7490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.707963][ T7490] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.716882][ T7490] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.726681][ T7490] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.736013][ T7490] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.817078][ T7599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.876096][ T6115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.887792][ T6115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.903919][ T5823] Bluetooth: hci3: command tx timeout [ 132.912370][ T7599] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.947127][ T6099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.951296][ T6115] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.962082][ T6115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.963247][ T6099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.014084][ T6099] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.021278][ T6099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.135739][ T30] audit: type=1326 audit(1747770760.695:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7679 comm="syz.2.675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f024458e969 code=0x0 [ 133.409401][ T7599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.496136][ T7599] veth0_vlan: entered promiscuous mode [ 133.503412][ T30] audit: type=1400 audit(1747770761.055:377): avc: denied { read } for pid=7689 comm="syz.3.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.507883][ T7599] veth1_vlan: entered promiscuous mode [ 133.543364][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 133.556248][ T7599] veth0_macvtap: entered promiscuous mode [ 133.567042][ T7599] veth1_macvtap: entered promiscuous mode [ 133.585819][ T7599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.596977][ T7599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.627290][ T7599] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.663801][ T7599] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.672531][ T7599] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.704036][ T7599] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.768110][ T6103] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.890917][ T6103] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.962563][ T6129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.982221][ T6129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.028313][ T6103] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.049974][ T6137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.059722][ T6137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.182411][ T6103] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.497425][ T6103] bridge_slave_1: left allmulticast mode [ 134.509512][ T6103] bridge_slave_1: left promiscuous mode [ 134.526310][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.556897][ T6103] bridge_slave_0: left allmulticast mode [ 134.571515][ T6103] bridge_slave_0: left promiscuous mode [ 134.577645][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.585321][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 134.729922][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.738834][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.750625][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.771392][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.780478][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 134.805161][ T5863] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 134.892766][ T92] Process accounting resumed [ 134.985397][ T5863] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 135.013290][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.044538][ T5863] usb 3-1: config 0 descriptor?? [ 135.057293][ T5863] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 135.328139][ T6103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.354852][ T6103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.383313][ T5914] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 135.383599][ T6103] bond0 (unregistering): Released all slaves [ 135.415409][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.424519][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.443293][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.451571][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.461660][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.474582][ T5863] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 135.564913][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.576042][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.586951][ T5914] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 135.596239][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.607255][ T5914] usb 1-1: config 0 descriptor?? [ 135.623201][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 135.985278][ T6103] hsr_slave_0: left promiscuous mode [ 135.991286][ T6103] hsr_slave_1: left promiscuous mode [ 135.998151][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.006713][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.014906][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.022399][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.047588][ T6103] veth1_macvtap: left promiscuous mode [ 136.053356][ T6103] veth0_macvtap: left promiscuous mode [ 136.058962][ T6103] veth1_vlan: left promiscuous mode [ 136.066940][ T6103] veth0_vlan: left promiscuous mode [ 136.099841][ T7716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.126664][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.255511][ T5863] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 136.281178][ T5863] usb 3-1: USB disconnect, device number 10 [ 136.290623][ T5914] hid-rmi 0003:0461:4E72.000A: unknown main item tag 0x0 [ 136.298842][ T5914] hid-rmi 0003:0461:4E72.000A: unknown main item tag 0x0 [ 136.307754][ T5914] hid-rmi 0003:0461:4E72.000A: unknown main item tag 0x0 [ 136.315004][ T5914] hid-rmi 0003:0461:4E72.000A: item fetching failed at offset 10/11 [ 136.326033][ T5914] hid-rmi 0003:0461:4E72.000A: parse failed [ 136.332015][ T5914] hid-rmi 0003:0461:4E72.000A: probe with driver hid-rmi failed with error -22 [ 136.501760][ T58] usb 1-1: USB disconnect, device number 9 [ 136.665606][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 136.823808][ T5823] Bluetooth: hci1: command tx timeout [ 136.851629][ T6103] team0 (unregistering): Port device team_slave_1 removed [ 136.877032][ T6103] team0 (unregistering): Port device team_slave_0 removed [ 136.984333][ T58] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 137.147323][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 137.161607][ T30] audit: type=1400 audit(1747770764.715:378): avc: denied { write } for pid=7731 comm="syz.2.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.182574][ T58] usb 3-1: unable to get BOS descriptor or descriptor too short [ 137.200054][ T58] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 137.226877][ T58] usb 3-1: can't read configurations, error -71 [ 137.501861][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.699'. [ 137.531847][ T7752] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.544758][ T5823] Bluetooth: hci3: command tx timeout [ 137.574542][ T7752] bridge_slave_1 (unregistering): left allmulticast mode [ 137.581709][ T7752] bridge_slave_1 (unregistering): left promiscuous mode [ 137.589116][ T7752] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.619073][ T7707] chnl_net:caif_netlink_parms(): no params data found [ 137.703275][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 137.830709][ T7757] pim6reg9: entered allmulticast mode [ 137.879919][ T7759] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.910778][ T7722] chnl_net:caif_netlink_parms(): no params data found [ 138.048473][ T6103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.110831][ T30] audit: type=1400 audit(1747770765.665:379): avc: denied { create } for pid=7770 comm="syz.3.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 138.243426][ T5859] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 138.280144][ T30] audit: type=1400 audit(1747770765.835:380): avc: denied { bind } for pid=7777 comm="syz.3.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.304748][ T6103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.331466][ T7707] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.350502][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.360638][ T7707] bridge_slave_0: entered allmulticast mode [ 138.368193][ T7707] bridge_slave_0: entered promiscuous mode [ 138.376245][ T7781] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.397371][ T6103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.418678][ T5859] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 138.449127][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.484545][ T6103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.509929][ T5859] usb 1-1: Product: syz [ 138.524515][ T5859] usb 1-1: Manufacturer: syz [ 138.529123][ T5859] usb 1-1: SerialNumber: syz [ 138.543286][ T7707] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.566262][ T5859] usb 1-1: config 0 descriptor?? [ 138.582062][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.602323][ T5859] ch341 1-1:0.0: ch341-uart converter detected [ 138.612159][ T7707] bridge_slave_1: entered allmulticast mode [ 138.647017][ T7707] bridge_slave_1: entered promiscuous mode [ 138.743696][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 138.903564][ T5823] Bluetooth: hci1: command tx timeout [ 138.972036][ T7707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.989500][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.997892][ T7722] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.010285][ T7722] bridge_slave_0: entered allmulticast mode [ 139.017967][ T7722] bridge_slave_0: entered promiscuous mode [ 139.041828][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.052533][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.083701][ T7722] bridge_slave_1: entered allmulticast mode [ 139.113445][ T7722] bridge_slave_1: entered promiscuous mode [ 139.163000][ T7707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.172458][ T30] audit: type=1400 audit(1747770766.715:381): avc: denied { create } for pid=7793 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 139.206647][ T30] audit: type=1400 audit(1747770766.735:382): avc: denied { connect } for pid=7793 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 139.295334][ T7707] team0: Port device team_slave_0 added [ 139.367655][ T7707] team0: Port device team_slave_1 added [ 139.427752][ T7722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.450757][ T5859] usb 1-1: failed to send control message: -71 [ 139.459970][ T7803] process 'syz.2.718' launched './file0' with NULL argv: empty string added [ 139.465120][ T5859] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 139.484273][ T7707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.498763][ T5859] usb 1-1: USB disconnect, device number 10 [ 139.505298][ T7707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.533212][ T30] audit: type=1400 audit(1747770767.055:383): avc: denied { execute_no_trans } for pid=7800 comm="syz.2.718" path="/174/file0" dev="tmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 139.561816][ T5859] ch341 1-1:0.0: device disconnected [ 139.586395][ T7707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.611093][ T7722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.627295][ T5823] Bluetooth: hci3: command tx timeout [ 139.700484][ T7707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.709976][ T7707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.740180][ T7707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.766228][ T6103] bridge_slave_1: left allmulticast mode [ 139.775416][ T6103] bridge_slave_1: left promiscuous mode [ 139.783226][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 139.800173][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.818515][ T6103] bridge_slave_0: left allmulticast mode [ 139.833203][ T6103] bridge_slave_0: left promiscuous mode [ 139.838921][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.053547][ T5914] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 140.121220][ T7816] dlm: non-version read from control device 4 [ 140.181296][ T6103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.224912][ T6103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.226258][ T6103] bond0 (unregistering): Released all slaves [ 140.233821][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 140.262424][ T5914] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 140.286815][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.306516][ T7722] team0: Port device team_slave_0 added [ 140.339130][ T5914] pvrusb2: Hardware description: Terratec Grabster AV400 [ 140.367358][ T5914] pvrusb2: ********** [ 140.371410][ T5914] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 140.393434][ T5914] pvrusb2: Important functionality might not be entirely working. [ 140.411418][ T5914] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 140.433842][ T7722] team0: Port device team_slave_1 added [ 140.438453][ T5914] pvrusb2: ********** [ 140.500880][ T7722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.510616][ T7722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.539765][ T7722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.554312][ T2332] pvrusb2: Invalid write control endpoint [ 140.579664][ T7707] hsr_slave_0: entered promiscuous mode [ 140.614129][ T7707] hsr_slave_1: entered promiscuous mode [ 140.622687][ T7707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.646165][ T7707] Cannot create hsr debugfs directory [ 140.660904][ T2332] pvrusb2: Invalid write control endpoint [ 140.675459][ T2332] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 140.692055][ T2332] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 140.700298][ T2332] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 140.721476][ T7722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.736711][ T7722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.763916][ T2332] pvrusb2: Device being rendered inoperable [ 140.771494][ T2332] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 140.779002][ T2332] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 140.789552][ T7722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.796446][ T7810] pvrusb2: Killing an I2C write to 0 that is too large (desired=63 limit=61) [ 140.823306][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 140.836683][ T2332] pvrusb2: Attached sub-driver cx25840 [ 140.839158][ T5860] usb 3-1: USB disconnect, device number 13 [ 140.845030][ T2332] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 140.872070][ T2332] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 140.985085][ T5823] Bluetooth: hci1: command tx timeout [ 141.139534][ T6103] hsr_slave_0: left promiscuous mode [ 141.151322][ T6103] hsr_slave_1: left promiscuous mode [ 141.159343][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.168231][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.177856][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.185662][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.215329][ T6103] veth1_macvtap: left promiscuous mode [ 141.231276][ T6103] veth0_macvtap: left promiscuous mode [ 141.237766][ T6103] veth1_vlan: left promiscuous mode [ 141.248561][ T6103] veth0_vlan: left promiscuous mode [ 141.473714][ T30] audit: type=1400 audit(1747770769.015:384): avc: denied { watch } for pid=7850 comm="syz.0.739" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 141.705154][ T5823] Bluetooth: hci3: command tx timeout [ 141.863234][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 142.031320][ T6103] team0 (unregistering): Port device team_slave_1 removed [ 142.080069][ T6103] team0 (unregistering): Port device team_slave_0 removed [ 142.143258][ T5859] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 142.307886][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 142.318726][ T5859] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 142.335251][ T5859] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.346146][ T5859] usb 1-1: config 0 has no interface number 0 [ 142.353210][ T5859] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 142.370383][ T5859] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.390241][ T5859] usb 1-1: config 0 interface 52 has no altsetting 0 [ 142.402368][ T5859] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 142.411940][ T5859] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 142.420215][ T5859] usb 1-1: Manufacturer: syz [ 142.434417][ T5859] usb 1-1: config 0 descriptor?? [ 142.495611][ T7722] hsr_slave_0: entered promiscuous mode [ 142.501723][ T7722] hsr_slave_1: entered promiscuous mode [ 142.508192][ T7722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.516140][ T7722] Cannot create hsr debugfs directory [ 142.521974][ T7867] tipc: Started in network mode [ 142.527491][ T7867] tipc: Node identity 4, cluster identity 4711 [ 142.533969][ T7867] tipc: Node number set to 4 [ 142.659355][ T5859] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input13 [ 142.905977][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 142.906013][ T30] audit: type=1400 audit(1747770770.455:385): avc: denied { getopt } for pid=7875 comm="syz.3.750" lport=59878 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 142.955356][ T5860] usb 1-1: USB disconnect, device number 11 [ 142.955408][ C1] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 143.063227][ T5823] Bluetooth: hci1: command tx timeout [ 143.330538][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.756'. [ 143.392137][ T7893] capability: warning: `syz.2.757' uses 32-bit capabilities (legacy support in use) [ 143.398240][ T7707] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.418030][ T7707] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.450252][ T7707] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.467230][ T7707] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.682576][ T7707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.703001][ T7707] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.731538][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.738680][ T6111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.748336][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.755468][ T6111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.761197][ T30] audit: type=1400 audit(1747770771.315:386): avc: denied { ioctl } for pid=7903 comm="syz.0.762" path="socket:[21756]" dev="sockfs" ino=21756 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 143.783271][ T5823] Bluetooth: hci3: command tx timeout [ 143.925887][ T30] audit: type=1326 audit(1747770771.485:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcba38e969 code=0x7ffc0000 [ 143.942393][ T7707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.949250][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 144.006281][ T30] audit: type=1326 audit(1747770771.485:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcba38e969 code=0x7ffc0000 [ 144.115377][ T7722] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 144.134232][ T30] audit: type=1326 audit(1747770771.525:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcba38e969 code=0x7ffc0000 [ 144.160124][ T7722] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 144.181047][ T7722] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 144.210802][ T7722] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 144.245660][ T7913] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.329346][ T7913] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 144.337257][ T30] audit: type=1326 audit(1747770771.525:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcba38e969 code=0x7ffc0000 [ 144.407950][ T7913] audit: backlog limit exceeded [ 144.413320][ T30] audit: type=1326 audit(1747770771.525:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7905 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbcba32ab39 code=0x7ffc0000 [ 144.503663][ T7921] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.578045][ T7722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.623010][ T7707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.671961][ T7722] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.765596][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.772740][ T6103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.776410][ T7931] capability: warning: `syz.2.772' uses deprecated v2 capabilities in a way that may be insecure [ 144.839214][ T6103] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.846371][ T6103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.916092][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 144.930362][ T7722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.983209][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 145.113311][ T5907] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 145.263274][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 145.276872][ T5907] usb 1-1: config 0 has an invalid interface number: 61 but max is 1 [ 145.285736][ T5907] usb 1-1: config 0 has an invalid interface number: 98 but max is 1 [ 145.291756][ T7722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.294499][ T5907] usb 1-1: config 0 has no interface number 0 [ 145.310954][ T5907] usb 1-1: config 0 has no interface number 1 [ 145.341616][ T5907] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 145.353048][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.360965][ T7707] veth0_vlan: entered promiscuous mode [ 145.369712][ T5907] usb 1-1: Product: syz [ 145.375797][ T5907] usb 1-1: Manufacturer: syz [ 145.377532][ T7722] veth0_vlan: entered promiscuous mode [ 145.389870][ T5907] usb 1-1: SerialNumber: syz [ 145.394933][ T7707] veth1_vlan: entered promiscuous mode [ 145.409127][ T5907] usb 1-1: config 0 descriptor?? [ 145.411438][ T7722] veth1_vlan: entered promiscuous mode [ 145.444980][ T92] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 145.458250][ T7707] veth0_macvtap: entered promiscuous mode [ 145.488253][ T7954] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.506150][ T7707] veth1_macvtap: entered promiscuous mode [ 145.521859][ T7722] veth0_macvtap: entered promiscuous mode [ 145.539298][ T7722] veth1_macvtap: entered promiscuous mode [ 145.545619][ T5907] viperboard 1-1:0.61: version 0.00 found at bus 001 address 012 [ 145.551973][ T7707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.594633][ T5907] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 145.599901][ T7707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.603896][ T5907] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 145.614064][ T7722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.634310][ T92] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.651342][ T92] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.655024][ T7722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.676325][ T92] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.691219][ T5907] viperboard 1-1:0.98: version 0.00 found at bus 001 address 012 [ 145.700445][ T7722] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.704309][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 145.716275][ T7722] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.728831][ T5907] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 145.732438][ T7722] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.739063][ T92] usb 4-1: SerialNumber: syz [ 145.750495][ T7722] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.751034][ T5907] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 145.794020][ T5907] usb 1-1: USB disconnect, device number 12 [ 145.810063][ T7707] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.832667][ T7707] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.873192][ T7707] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.895985][ T7707] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.992615][ T92] usb 4-1: 0:2 : does not exist [ 146.013973][ T92] usb 4-1: usbmixer: too many channels (61) in unit 5 [ 146.023268][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 146.073642][ T92] usb 4-1: USB disconnect, device number 12 [ 146.140697][ T6604] udevd[6604]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.141397][ T6103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.190446][ T6111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.201209][ T6111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.206046][ T6103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.265946][ T6111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.275405][ T6111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.363507][ T6129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.379740][ T6129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.383880][ T7966] random: crng reseeded on system resumption [ 146.772722][ T7976] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 146.783639][ T7976] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 146.794933][ T7976] overlayfs: failed to set uuid (211/file1, err=-13); falling back to uuid=null. [ 147.063202][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 147.236744][ T6115] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.263574][ T5914] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 147.413358][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 147.420528][ T5914] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 147.429039][ T5914] usb 4-1: config 179 has no interface number 0 [ 147.435467][ T5914] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 147.446585][ T5914] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 147.457980][ T5914] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 147.469492][ T5914] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 147.471522][ T6115] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.481157][ T5914] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 147.481200][ T5914] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 147.481220][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.525710][ T7978] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.790856][ T6115] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.861381][ T5907] usb 4-1: USB disconnect, device number 13 [ 147.861476][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 147.875891][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 147.884637][ C0] ================================================================== [ 147.892711][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x26f/0x2b0 [ 147.900527][ C0] Read of size 4 at addr ffff88805ad6885c by task syz-executor/7990 [ 147.908513][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 147.910837][ C0] CPU: 0 UID: 0 PID: 7990 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 147.910865][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.910876][ C0] Call Trace: [ 147.910883][ C0] [ 147.910891][ C0] dump_stack_lvl+0x116/0x1f0 [ 147.910921][ C0] print_report+0xc3/0x670 [ 147.910941][ C0] ? __virt_addr_valid+0x5e/0x590 [ 147.910967][ C0] ? __phys_addr+0xc6/0x150 [ 147.910993][ C0] ? do_raw_spin_lock+0x26f/0x2b0 [ 147.911013][ C0] kasan_report+0xe0/0x110 [ 147.911034][ C0] ? do_raw_spin_lock+0x26f/0x2b0 [ 147.911058][ C0] do_raw_spin_lock+0x26f/0x2b0 [ 147.911079][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 147.911100][ C0] ? kcov_remote_stop+0x1b0/0x5f0 [ 147.911121][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 147.911145][ C0] ? __wake_up+0x1c/0x60 [ 147.911169][ C0] __wake_up+0x1c/0x60 [ 147.911193][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 147.911214][ C0] __usb_hcd_giveback_urb+0x3b8/0x6e0 [ 147.911242][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 147.911269][ C0] dummy_timer+0x180e/0x3a20 [ 147.911292][ C0] ? find_held_lock+0x2b/0x80 [ 147.911314][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 147.911336][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 147.911355][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 147.911375][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 147.911393][ C0] ? rcu_is_watching+0x12/0xc0 [ 147.911413][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 147.911439][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 147.911454][ C0] __hrtimer_run_queues+0x202/0xad0 [ 147.911478][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 147.911498][ C0] ? read_tsc+0x9/0x20 [ 147.911526][ C0] hrtimer_run_softirq+0x17d/0x350 [ 147.911549][ C0] handle_softirqs+0x216/0x8e0 [ 147.911574][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 147.911598][ C0] __irq_exit_rcu+0x109/0x170 [ 147.911620][ C0] irq_exit_rcu+0x9/0x30 [ 147.911642][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 147.911672][ C0] [ 147.911679][ C0] [ 147.911685][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 147.911706][ C0] RIP: 0010:kasan_byte_accessible+0x0/0x30 [ 147.911729][ C0] Code: 0c 24 ba 01 00 00 00 e9 1e fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 0f [ 147.911748][ C0] RSP: 0018:ffffc900043273f0 EFLAGS: 00000202 [ 147.911765][ C0] RAX: 0000000000000001 RBX: ffffffff8e3bfc00 RCX: 0000000000000002 [ 147.911777][ C0] RDX: 0000000000000000 RSI: ffffffff8169da31 RDI: ffffffff8e3bfc00 [ 147.911790][ C0] RBP: ffffffff8e3bfc00 R08: 0000000000000000 R09: 0000000000000000 [ 147.911802][ C0] R10: ffffc90004327550 R11: dffffc0000000000 R12: ffffffff8169da31 [ 147.911814][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.911828][ C0] ? unwind_next_frame+0xd1/0x20a0 [ 147.911853][ C0] ? unwind_next_frame+0xd1/0x20a0 [ 147.911878][ C0] __kasan_check_byte+0x13/0x50 [ 147.911897][ C0] lock_acquire+0xfc/0x350 [ 147.911928][ C0] unwind_next_frame+0xd1/0x20a0 [ 147.911950][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 147.911971][ C0] ? __unwind_start+0x574/0x7f0 [ 147.911993][ C0] ? get_stack_info_noinstr+0x18/0x120 [ 147.912016][ C0] __unwind_start+0x45f/0x7f0 [ 147.912039][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 147.912064][ C0] arch_stack_walk+0x73/0x100 [ 147.912090][ C0] ? __unwind_start+0x574/0x7f0 [ 147.912113][ C0] stack_trace_save+0x8e/0xc0 [ 147.912136][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 147.912162][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 147.912188][ C0] save_stack+0x160/0x1f0 [ 147.912233][ C0] ? __pfx_save_stack+0x10/0x10 [ 147.912265][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 147.912295][ C0] __set_page_owner+0x91/0x550 [ 147.912315][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 147.912331][ C0] ? bad_range+0x244/0x490 [ 147.912355][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.912379][ C0] ? get_page_from_freelist+0x133c/0x3920 [ 147.912399][ C0] post_alloc_hook+0x181/0x1b0 [ 147.912426][ C0] get_page_from_freelist+0x135c/0x3920 [ 147.912450][ C0] ? __pfx___might_resched+0x10/0x10 [ 147.912476][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 147.912493][ C0] ? should_fail_alloc_page+0xee/0x130 [ 147.912515][ C0] ? prepare_alloc_pages+0x3c2/0x610 [ 147.912538][ C0] ? rcu_is_watching+0x12/0xc0 [ 147.912561][ C0] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 147.912584][ C0] ? alloc_pages_bulk_noprof+0xa4c/0x13b0 [ 147.912604][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 147.912624][ C0] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 147.912645][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 147.912670][ C0] ? policy_nodemask+0xea/0x4e0 [ 147.912689][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 147.912710][ C0] ? policy_nodemask+0xea/0x4e0 [ 147.912730][ C0] alloc_pages_mpol+0x1fb/0x550 [ 147.912750][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 147.912770][ C0] ? __get_vm_area_node+0x1dc/0x330 [ 147.912797][ C0] alloc_pages_noprof+0x131/0x390 [ 147.912817][ C0] __vmalloc_node_range_noprof+0x732/0x1540 [ 147.912848][ C0] ? kcov_ioctl+0x4c/0x730 [ 147.912868][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.912895][ C0] ? hook_file_ioctl_common+0x145/0x410 [ 147.912917][ C0] ? kcov_ioctl+0x4c/0x730 [ 147.912934][ C0] vmalloc_user_noprof+0x6b/0x90 [ 147.912960][ C0] ? kcov_ioctl+0x4c/0x730 [ 147.912976][ C0] kcov_ioctl+0x4c/0x730 [ 147.912994][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 147.913012][ C0] __x64_sys_ioctl+0x190/0x200 [ 147.913037][ C0] do_syscall_64+0xcd/0x260 [ 147.913064][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.913083][ C0] RIP: 0033:0x7ff3bef8e56b [ 147.913098][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 147.913116][ C0] RSP: 002b:00007ffc7bc226f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.913132][ C0] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007ff3bef8e56b [ 147.913143][ C0] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000da [ 147.913154][ C0] RBP: 00007ff3bf1b61f8 R08: 00000000000000d9 R09: 0000000000000000 [ 147.913164][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.913174][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 147.913192][ C0] [ 147.913198][ C0] [ 148.103219][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 148.104288][ C0] Allocated by task 5914: [ 148.557331][ C0] kasan_save_stack+0x33/0x60 [ 148.561997][ C0] kasan_save_track+0x14/0x30 [ 148.566658][ C0] __kasan_kmalloc+0xaa/0xb0 [ 148.571236][ C0] xpad_probe+0x286/0x1f30 [ 148.575642][ C0] usb_probe_interface+0x303/0x9c0 [ 148.580743][ C0] really_probe+0x23e/0xa90 [ 148.585230][ C0] __driver_probe_device+0x1de/0x440 [ 148.590498][ C0] driver_probe_device+0x4c/0x1b0 [ 148.595506][ C0] __device_attach_driver+0x1df/0x310 [ 148.600862][ C0] bus_for_each_drv+0x156/0x1e0 [ 148.605718][ C0] __device_attach+0x1e4/0x4b0 [ 148.610464][ C0] bus_probe_device+0x17f/0x1c0 [ 148.615296][ C0] device_add+0x1148/0x1a70 [ 148.619787][ C0] usb_set_configuration+0x1187/0x1e20 [ 148.625231][ C0] usb_generic_driver_probe+0xb1/0x110 [ 148.630671][ C0] usb_probe_device+0xef/0x3e0 [ 148.635420][ C0] really_probe+0x23e/0xa90 [ 148.639906][ C0] __driver_probe_device+0x1de/0x440 [ 148.645172][ C0] driver_probe_device+0x4c/0x1b0 [ 148.650176][ C0] __device_attach_driver+0x1df/0x310 [ 148.655528][ C0] bus_for_each_drv+0x156/0x1e0 [ 148.660367][ C0] __device_attach+0x1e4/0x4b0 [ 148.665112][ C0] bus_probe_device+0x17f/0x1c0 [ 148.669941][ C0] device_add+0x1148/0x1a70 [ 148.674429][ C0] usb_new_device+0xd07/0x1a20 [ 148.679176][ C0] hub_event+0x2eb7/0x4fa0 [ 148.683574][ C0] process_one_work+0x9cf/0x1b70 [ 148.688494][ C0] worker_thread+0x6c8/0xf10 [ 148.693066][ C0] kthread+0x3c2/0x780 [ 148.697116][ C0] ret_from_fork+0x45/0x80 [ 148.701514][ C0] ret_from_fork_asm+0x1a/0x30 [ 148.706265][ C0] [ 148.708569][ C0] Freed by task 5907: [ 148.712525][ C0] kasan_save_stack+0x33/0x60 [ 148.717182][ C0] kasan_save_track+0x14/0x30 [ 148.721841][ C0] kasan_save_free_info+0x3b/0x60 [ 148.726849][ C0] __kasan_slab_free+0x51/0x70 [ 148.731595][ C0] kfree+0x2b6/0x4d0 [ 148.735478][ C0] xpad_disconnect+0x1cf/0x580 [ 148.740231][ C0] usb_unbind_interface+0x1da/0x9a0 [ 148.745416][ C0] device_remove+0x125/0x170 [ 148.749988][ C0] device_release_driver_internal+0x44b/0x620 [ 148.756053][ C0] bus_remove_device+0x22f/0x420 [ 148.760970][ C0] device_del+0x396/0x9f0 [ 148.765283][ C0] usb_disable_device+0x355/0x7d0 [ 148.770291][ C0] usb_disconnect+0x2e1/0x920 [ 148.774950][ C0] hub_event+0x1c57/0x4fa0 [ 148.779363][ C0] process_one_work+0x9cf/0x1b70 [ 148.784283][ C0] worker_thread+0x6c8/0xf10 [ 148.788857][ C0] kthread+0x3c2/0x780 [ 148.792905][ C0] ret_from_fork+0x45/0x80 [ 148.797305][ C0] ret_from_fork_asm+0x1a/0x30 [ 148.802055][ C0] [ 148.804361][ C0] The buggy address belongs to the object at ffff88805ad68800 [ 148.804361][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 148.818400][ C0] The buggy address is located 92 bytes inside of [ 148.818400][ C0] freed 1024-byte region [ffff88805ad68800, ffff88805ad68c00) [ 148.832181][ C0] [ 148.834495][ C0] The buggy address belongs to the physical page: [ 148.840887][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ad68 [ 148.849631][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 148.858116][ C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 148.866075][ C0] page_type: f5(slab) [ 148.870040][ C0] raw: 00fff00000000040 ffff88801b441dc0 0000000000000000 dead000000000001 [ 148.878604][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 148.887168][ C0] head: 00fff00000000040 ffff88801b441dc0 0000000000000000 dead000000000001 [ 148.895821][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 148.904479][ C0] head: 00fff00000000003 ffffea00016b5a01 00000000ffffffff 00000000ffffffff [ 148.913135][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 148.921787][ C0] page dumped because: kasan: bad access detected [ 148.928176][ C0] page_owner tracks the page as allocated [ 148.933868][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5809, tgid 5809 (syz-executor), ts 66140953294, free_ts 16065598558 [ 148.955208][ C0] post_alloc_hook+0x181/0x1b0 [ 148.959962][ C0] get_page_from_freelist+0x135c/0x3920 [ 148.965488][ C0] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 148.971360][ C0] alloc_pages_mpol+0x1fb/0x550 [ 148.976192][ C0] new_slab+0x244/0x340 [ 148.980333][ C0] ___slab_alloc+0xd9c/0x1940 [ 148.984995][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 148.990353][ C0] __kmalloc_node_noprof+0x2ed/0x500 [ 148.995633][ C0] qdisc_alloc+0xbb/0xc50 [ 148.999953][ C0] qdisc_create_dflt+0x73/0x430 [ 149.004785][ C0] dev_activate+0x63f/0x12d0 [ 149.009364][ C0] __dev_open+0x43a/0x7d0 [ 149.013683][ C0] __dev_change_flags+0x55d/0x720 [ 149.018689][ C0] netif_change_flags+0x8d/0x160 [ 149.023607][ C0] do_setlink.constprop.0+0xddf/0x44b0 [ 149.029056][ C0] rtnl_newlink+0x1446/0x2000 [ 149.033714][ C0] page last free pid 1 tgid 1 stack trace: [ 149.039498][ C0] __free_frozen_pages+0x69d/0xff0 [ 149.044598][ C0] free_contig_range+0x135/0x3f0 [ 149.049520][ C0] destroy_args+0x66f/0x830 [ 149.054005][ C0] debug_vm_pgtable+0x130e/0x2d50 [ 149.059012][ C0] do_one_initcall+0x120/0x6e0 [ 149.063761][ C0] kernel_init_freeable+0x5c2/0x900 [ 149.068940][ C0] kernel_init+0x1c/0x2b0 [ 149.073253][ C0] ret_from_fork+0x45/0x80 [ 149.077652][ C0] ret_from_fork_asm+0x1a/0x30 [ 149.082403][ C0] [ 149.084707][ C0] Memory state around the buggy address: [ 149.090315][ C0] ffff88805ad68700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 149.098356][ C0] ffff88805ad68780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 149.106396][ C0] >ffff88805ad68800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 149.114437][ C0] ^ [ 149.121348][ C0] ffff88805ad68880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 149.129387][ C0] ffff88805ad68900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 149.137426][ C0] ================================================================== [ 149.143184][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 149.145470][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 149.145483][ C0] CPU: 0 UID: 0 PID: 7990 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 149.145503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.145513][ C0] Call Trace: [ 149.145519][ C0] [ 149.145526][ C0] dump_stack_lvl+0x3d/0x1f0 [ 149.145550][ C0] panic+0x71c/0x800 [ 149.145573][ C0] ? __pfx_panic+0x10/0x10 [ 149.145597][ C0] ? __pfx__printk+0x10/0x10 [ 149.145621][ C0] ? end_report+0x4c/0x170 [ 149.145642][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 149.145658][ C0] ? do_raw_spin_lock+0x26f/0x2b0 [ 149.145675][ C0] check_panic_on_warn+0xab/0xb0 [ 149.145690][ C0] end_report+0x107/0x170 [ 149.145705][ C0] kasan_report+0xee/0x110 [ 149.145722][ C0] ? do_raw_spin_lock+0x26f/0x2b0 [ 149.145742][ C0] do_raw_spin_lock+0x26f/0x2b0 [ 149.145759][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 149.145777][ C0] ? kcov_remote_stop+0x1b0/0x5f0 [ 149.145795][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 149.145816][ C0] ? __wake_up+0x1c/0x60 [ 149.145837][ C0] __wake_up+0x1c/0x60 [ 149.145858][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 149.145877][ C0] __usb_hcd_giveback_urb+0x3b8/0x6e0 [ 149.145902][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 149.145927][ C0] dummy_timer+0x180e/0x3a20 [ 149.145947][ C0] ? find_held_lock+0x2b/0x80 [ 149.145965][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 149.145985][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 149.146001][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 149.146019][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 149.146034][ C0] ? rcu_is_watching+0x12/0xc0 [ 149.146052][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 149.146074][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 149.146088][ C0] __hrtimer_run_queues+0x202/0xad0 [ 149.146110][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 149.146128][ C0] ? read_tsc+0x9/0x20 [ 149.146153][ C0] hrtimer_run_softirq+0x17d/0x350 [ 149.146171][ C0] handle_softirqs+0x216/0x8e0 [ 149.146192][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 149.146213][ C0] __irq_exit_rcu+0x109/0x170 [ 149.146232][ C0] irq_exit_rcu+0x9/0x30 [ 149.146251][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 149.146272][ C0] [ 149.146277][ C0] [ 149.146283][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 149.146301][ C0] RIP: 0010:kasan_byte_accessible+0x0/0x30 [ 149.146322][ C0] Code: 0c 24 ba 01 00 00 00 e9 1e fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 0f [ 149.146338][ C0] RSP: 0018:ffffc900043273f0 EFLAGS: 00000202 [ 149.146353][ C0] RAX: 0000000000000001 RBX: ffffffff8e3bfc00 RCX: 0000000000000002 [ 149.146363][ C0] RDX: 0000000000000000 RSI: ffffffff8169da31 RDI: ffffffff8e3bfc00 [ 149.146375][ C0] RBP: ffffffff8e3bfc00 R08: 0000000000000000 R09: 0000000000000000 [ 149.146385][ C0] R10: ffffc90004327550 R11: dffffc0000000000 R12: ffffffff8169da31 [ 149.146396][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.146408][ C0] ? unwind_next_frame+0xd1/0x20a0 [ 149.146429][ C0] ? unwind_next_frame+0xd1/0x20a0 [ 149.146449][ C0] __kasan_check_byte+0x13/0x50 [ 149.146466][ C0] lock_acquire+0xfc/0x350 [ 149.146492][ C0] unwind_next_frame+0xd1/0x20a0 [ 149.146510][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 149.146529][ C0] ? __unwind_start+0x574/0x7f0 [ 149.146548][ C0] ? get_stack_info_noinstr+0x18/0x120 [ 149.146568][ C0] __unwind_start+0x45f/0x7f0 [ 149.146587][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 149.146609][ C0] arch_stack_walk+0x73/0x100 [ 149.146630][ C0] ? __unwind_start+0x574/0x7f0 [ 149.146654][ C0] stack_trace_save+0x8e/0xc0 [ 149.146674][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 149.146696][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 149.146719][ C0] save_stack+0x160/0x1f0 [ 149.146742][ C0] ? __pfx_save_stack+0x10/0x10 [ 149.146769][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 149.146794][ C0] __set_page_owner+0x91/0x550 [ 149.146811][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 149.146826][ C0] ? bad_range+0x244/0x490 [ 149.146846][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 149.146867][ C0] ? get_page_from_freelist+0x133c/0x3920 [ 149.146885][ C0] post_alloc_hook+0x181/0x1b0 [ 149.146909][ C0] get_page_from_freelist+0x135c/0x3920 [ 149.146930][ C0] ? __pfx___might_resched+0x10/0x10 [ 149.146952][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 149.146967][ C0] ? should_fail_alloc_page+0xee/0x130 [ 149.146984][ C0] ? prepare_alloc_pages+0x3c2/0x610 [ 149.147004][ C0] ? rcu_is_watching+0x12/0xc0 [ 149.147024][ C0] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 149.147043][ C0] ? alloc_pages_bulk_noprof+0xa4c/0x13b0 [ 149.147061][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 149.147078][ C0] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 149.147097][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 149.147114][ C0] ? policy_nodemask+0xea/0x4e0 [ 149.147131][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 149.147148][ C0] ? policy_nodemask+0xea/0x4e0 [ 149.147165][ C0] alloc_pages_mpol+0x1fb/0x550 [ 149.147182][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 149.147199][ C0] ? __get_vm_area_node+0x1dc/0x330 [ 149.147221][ C0] alloc_pages_noprof+0x131/0x390 [ 149.147239][ C0] __vmalloc_node_range_noprof+0x732/0x1540 [ 149.147265][ C0] ? kcov_ioctl+0x4c/0x730 [ 149.147283][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 149.147306][ C0] ? hook_file_ioctl_common+0x145/0x410 [ 149.147325][ C0] ? kcov_ioctl+0x4c/0x730 [ 149.147339][ C0] vmalloc_user_noprof+0x6b/0x90 [ 149.147360][ C0] ? kcov_ioctl+0x4c/0x730 [ 149.147375][ C0] kcov_ioctl+0x4c/0x730 [ 149.147389][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 149.147406][ C0] __x64_sys_ioctl+0x190/0x200 [ 149.147428][ C0] do_syscall_64+0xcd/0x260 [ 149.147452][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.147469][ C0] RIP: 0033:0x7ff3bef8e56b [ 149.147482][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 149.147497][ C0] RSP: 002b:00007ffc7bc226f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.147512][ C0] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007ff3bef8e56b [ 149.147523][ C0] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000da [ 149.147534][ C0] RBP: 00007ff3bf1b61f8 R08: 00000000000000d9 R09: 0000000000000000 [ 149.147544][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.147555][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 149.147571][ C0] [ 149.152567][ C0] Kernel Offset: disabled