last executing test programs: 43.745772118s ago: executing program 4 (id=608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902"], 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 41.429872553s ago: executing program 4 (id=617): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000100)=""/9, 0xfffffd87) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r2 = socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xffe) 41.050316949s ago: executing program 4 (id=619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xf809, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540), 0x0}, 0x20) 40.085502053s ago: executing program 4 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00660000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x1, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r3, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) 39.071775944s ago: executing program 4 (id=623): syz_usb_connect(0x0, 0x8f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xe5, 0xd9, 0xb1, 0x10, 0xace, 0x20ff, 0x101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x1, 0x3, 0x4, 0x30, 0xed, "", [{{0x9, 0x4, 0x75, 0x0, 0x1, 0x12, 0x7a, 0xa4, 0xc7, [], [{{0x9, 0x5, 0x3, 0x3, 0x210, 0x7, 0x73, 0xd, [@generic={0x62, 0xe, "dc38852f33fc2c1466f904eb50cdab997e3ded7e0c97603068a4ebfc3c0a39381862d3fd3e69afbe5bf9b60a5ae1c4688c9204143d50732a1753007d52266946b350e32c6102db2755a38f9a730f19e82c96f986ff09adcb3cf614395b5974ba"}]}}]}}]}}]}}, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0xb) write(r1, &(0x7f0000000000)='3', 0x4e) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1200810, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x4}, {r2}], 0x2, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000005ec0)=[{&(0x7f0000004d00)=""/128, 0x80}], 0x1) 37.26613197s ago: executing program 4 (id=631): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) r0 = geteuid() lsetxattr$security_capability(&(0x7f0000000000)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x48, 0x80000000}, {0xfffffff8, 0x3}], r0}, 0x18, 0x2) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) 21.945901616s ago: executing program 32 (id=631): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) r0 = geteuid() lsetxattr$security_capability(&(0x7f0000000000)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x48, 0x80000000}, {0xfffffff8, 0x3}], r0}, 0x18, 0x2) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) 9.301835419s ago: executing program 0 (id=780): socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfd}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x4, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, @any, 0xff}, 0xa) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002780), 0xaa500, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000001840)={&(0x7f0000000380)={0xa, 0x4e24, 0x7, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x32}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x32}}}], 0x30}, 0x4040040) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0x0, 0x0) read(r5, 0x0, 0x0) 9.298845892s ago: executing program 1 (id=781): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x101040, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x103080, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9286649abd8d4f18, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 9.298025699s ago: executing program 2 (id=782): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) accept(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 9.297635923s ago: executing program 3 (id=783): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 7.58093909s ago: executing program 0 (id=784): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240440c5, 0x0, 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x802) read(r2, 0x0, 0x70) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ipv6_route\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/7, 0x7}], 0x1, 0xffffffbf, 0x0) 7.579211515s ago: executing program 1 (id=785): openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x2, 0x0) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) syz_usbip_server_init(0x6) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x0, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1d", @ANYRES32=r0], 0x22) 7.578839623s ago: executing program 2 (id=786): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000000)={0x0, r7}) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000140)=0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r5, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) 7.578658742s ago: executing program 3 (id=787): socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2b, 0x4, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x7fff, 0x1, 0x9}, 0x0, 0x0) 5.865804099s ago: executing program 0 (id=788): r0 = socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x10003, 0x6, 0x40004, 0x7ffffffffffffd, 0x6a6}, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', '', [{0x20, '\xd9m\xf4\f00\xf4\xfa\t\t'}]}, 0xf) close(r3) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) socket(0xb, 0x2, 0x0) eventfd2(0xe5c, 0x80000) sendfile(r1, r2, 0x0, 0xffffffff000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 5.862318519s ago: executing program 1 (id=789): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000540000000000000070000006b1138000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(0x0, 0x0, &(0x7f0000000500)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x0, 0x200, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r3, &(0x7f0000000400)='wusb3801 0x4', 0xc) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000100)=0x2, 0x4) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r4 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000409911ff0f00000000000109022000010100803209040000020806500007058102000200070502"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.861484512s ago: executing program 2 (id=790): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000240)=0x7f, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) write(0xffffffffffffffff, &(0x7f00000002c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/nullb1\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000002000)="53464f5a05abbf5900"/1762, 0x6e2, 0x4) 5.861091573s ago: executing program 3 (id=791): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) 3.988927676s ago: executing program 0 (id=792): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.987745041s ago: executing program 1 (id=793): mmap(&(0x7f0000442000/0x3000)=nil, 0x3000, 0x100000b, 0xa8011, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 3.987289211s ago: executing program 2 (id=794): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x39) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) r2 = syz_ublk_setup_io_uring(0x19, &(0x7f0000000040)={0x0, 0x2d72, 0x0, 0xfffffffd, 0x1ef}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x200007, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2000, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8801, 0x2, 0x134}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x630, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) 3.986937161s ago: executing program 3 (id=795): socket(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 2.035552835s ago: executing program 0 (id=796): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10093ea, 0x2000, 0x4003bfff, 0x40299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.02971026s ago: executing program 1 (id=797): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) sendmmsg$inet(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=' ', 0x1}], 0x1}}], 0x1, 0x4040001) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2.028368446s ago: executing program 2 (id=798): openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0xa800, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0xfffffffffffffffc, &(0x7f0000000000)=0xffffff48) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) r4 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(r4, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0xc0105500, &(0x7f0000000000)=ANY=[]) r5 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) 1.969418652s ago: executing program 3 (id=799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) 2.077952ms ago: executing program 0 (id=800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="01154e0001000011221e445588fbca0100011606", 0x14, 0x4044015, &(0x7f0000000040)={0x11, 0x0, r2, 0x0, 0x0, 0x0}, 0x14) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x40003) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') 942.194Āµs ago: executing program 1 (id=801): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80), 0x0, 0x40004000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r0, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'veth1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@setlink={0x34, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff00", 0x25, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 395.017Āµs ago: executing program 2 (id=802): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 3 (id=803): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000540000000000000070000006b1138000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(0x0, 0x0, &(0x7f0000000500)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x0, 0x200, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r3, &(0x7f0000000400)='wusb3801 0x4', 0xc) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000100)=0x2, 0x4) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r4 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000409911ff0f0000000000010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): ached to major 180 minor 0 [ 106.285275][ T6512] loop0: detected capacity change from 0 to 3904 [ 106.331571][ T6512] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 106.331611][ T6512] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 106.331628][ T6512] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 106.331666][ T6512] loop0: [ 106.367385][ T30] audit: type=1400 audit(1788556384.988:447): avc: denied { write } for pid=6482 comm="syz.0.218" name="legousbtower0" dev="devtmpfs" ino=2888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 106.604021][ T9] usb 1-1: USB disconnect, device number 7 [ 106.616624][ T9] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 108.979026][ T6555] fuse: fd is not a fuse device [ 109.137104][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 109.189978][ T30] audit: type=1400 audit(1788556387.808:448): avc: denied { name_bind } for pid=6562 comm="syz.2.244" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 109.190032][ T30] audit: type=1400 audit(1788556387.818:449): avc: denied { node_bind } for pid=6562 comm="syz.2.244" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 109.213847][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 109.614736][ T6566] ip_tables: iptables: counters copy to user failed while replacing table [ 110.326303][ T6571] kvm: pic: level sensitive irq not supported [ 110.326959][ T6571] kvm: pic: single mode not supported [ 110.326984][ T6571] kvm: pic: level sensitive irq not supported [ 110.327388][ T6571] kvm: pic: level sensitive irq not supported [ 110.350413][ T6571] kvm: pic: single mode not supported [ 110.350436][ T6571] kvm: pic: level sensitive irq not supported [ 110.351285][ T6571] kvm: pic: single mode not supported [ 110.351347][ T6571] kvm: pic: single mode not supported [ 110.351409][ T6571] kvm: pic: single mode not supported [ 110.351470][ T6571] kvm: pic: single mode not supported [ 110.351532][ T6571] kvm: pic: single mode not supported [ 110.351594][ T6571] kvm: pic: single mode not supported [ 110.351654][ T6571] kvm: pic: single mode not supported [ 110.351715][ T6571] kvm: pic: single mode not supported [ 110.410065][ T6571] kvm: pic: level sensitive irq not supported [ 110.418610][ T6571] kvm: pic: level sensitive irq not supported [ 110.424947][ T6571] kvm: pic: level sensitive irq not supported [ 111.300740][ T6587] SELinux: mls: truncated range [ 111.300760][ T6587] SELinux: error reading MLS range of context [ 111.300775][ T6587] SELinux: invalid ocon [ 111.366877][ T6587] SELinux: failed to load policy [ 111.396685][ T30] audit: type=1400 audit(1788556389.808:450): avc: denied { load_policy } for pid=6585 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 111.717690][ T6602] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 111.717726][ T6602] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 111.719984][ T30] audit: type=1400 audit(1788556390.348:451): avc: denied { create } for pid=6592 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.021831][ T30] audit: type=1400 audit(1788556390.648:452): avc: denied { shutdown } for pid=6609 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.045958][ T30] audit: type=1400 audit(1788556390.668:453): avc: denied { read } for pid=6609 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.068886][ T30] audit: type=1400 audit(1788556390.688:454): avc: denied { create } for pid=6611 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.147779][ T30] audit: type=1400 audit(1788556390.768:455): avc: denied { connect } for pid=6611 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.171602][ T30] audit: type=1400 audit(1788556390.798:456): avc: denied { bind } for pid=6611 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.174178][ T30] audit: type=1400 audit(1788556390.798:457): avc: denied { write } for pid=6611 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.414480][ T6619] rt1719 0-0049: probe with driver rt1719 failed with error -5 [ 112.434281][ T6619] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 112.469973][ T6620] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 112.637235][ T6620] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 113.733007][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 113.773289][ T5603] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 113.919587][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 113.939239][ T5603] usb 5-1: Using ep0 maxpacket: 32 [ 113.945755][ T5603] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 113.962321][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 113.983840][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 113.996332][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 113.996459][ T5603] usb 5-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.996514][ T5603] usb 5-1: config 0 interface 0 has no altsetting 0 [ 113.996612][ T5603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.078023][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.086500][ T9] usb 3-1: Product: syz [ 114.086524][ T9] usb 3-1: Manufacturer: syz [ 114.086590][ T9] usb 3-1: SerialNumber: syz [ 114.300649][ T5603] usb 5-1: config 0 descriptor?? [ 114.307303][ T9] usb 3-1: config 0 descriptor?? [ 114.325790][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 114.325819][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 114.499286][ T6632] syzkaller0: entered promiscuous mode [ 114.499357][ T6632] syzkaller0: entered allmulticast mode [ 114.760597][ T5603] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 114.762798][ T5603] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 114.762832][ T5603] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 114.762849][ T5603] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 114.762866][ T5603] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 114.762883][ T5603] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 114.762899][ T5603] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 114.762917][ T5603] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 114.762934][ T5603] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 114.762952][ T5603] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 114.768508][ T5603] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.77 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 114.930488][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 114.931048][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 114.965298][ T6575] usb 5-1: USB disconnect, device number 7 [ 115.535174][ T9] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 115.661355][ T6660] i2c i2c-0: new_device: Missing parameters [ 115.668275][ T6660] i2c i2c-0: new_device: Can't parse I2C address [ 116.404580][ T6575] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 116.457505][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 116.492920][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 116.533513][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 116.566003][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 116.640849][ T9] usb 3-1: USB disconnect, device number 5 [ 116.741080][ T6575] usb 5-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 116.755738][ T6575] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.766958][ T6575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.788501][ T6575] usb-storage 5-1:1.0: USB Mass Storage device detected [ 117.041470][ T6672] overlayfs: failed to clone upperpath [ 117.059928][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 117.059962][ T30] audit: type=1400 audit(1788556395.688:461): avc: denied { unlink } for pid=6663 comm="syz.3.273" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 117.177129][ T6676] overlayfs: failed to resolve './cgroup': -2 [ 117.580808][ T6684] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 117.590871][ T6684] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 117.889445][ T5725] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 117.969313][ T30] audit: type=1400 audit(1788556396.538:462): avc: denied { create } for pid=6685 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.989401][ T30] audit: type=1400 audit(1788556396.588:463): avc: denied { connect } for pid=6685 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.052560][ T30] audit: type=1400 audit(1788556396.678:464): avc: denied { ioctl } for pid=6685 comm="syz.0.281" path="socket:[13212]" dev="sockfs" ino=13212 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.103803][ T5725] usb 3-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 118.120502][ T5725] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 32768, setting to 1024 [ 118.133029][ T5725] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 118.133122][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.175434][ T30] audit: type=1400 audit(1788556396.798:465): avc: denied { read write } for pid=6685 comm="syz.0.281" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 118.213698][ T30] audit: type=1400 audit(1788556396.828:466): avc: denied { open } for pid=6685 comm="syz.0.281" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 118.448538][ T5725] usb-storage 3-1:1.0: USB Mass Storage device detected [ 118.610914][ T5696] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 118.794815][ T5696] usb 1-1: Using ep0 maxpacket: 8 [ 118.823500][ T5696] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 118.891631][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.901256][ T5696] usb 1-1: Product: syz [ 118.901314][ T5696] usb 1-1: Manufacturer: syz [ 118.901385][ T5696] usb 1-1: SerialNumber: syz [ 119.012942][ T5696] usb 1-1: config 0 descriptor?? [ 119.396006][ T5696] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 119.553383][ T30] audit: type=1804 audit(1788556398.178:467): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.282" name="/newroot/40/file0" dev="tmpfs" ino=239 res=1 errno=0 [ 119.555651][ T5603] usb 5-1: USB disconnect, device number 8 [ 119.622130][ T5725] usb-storage 3-1:1.0: probe with driver usb-storage failed with error -5 [ 119.649392][ T5725] usb 3-1: USB disconnect, device number 6 [ 119.774847][ T30] audit: type=1400 audit(1788556398.398:468): avc: denied { relabelfrom } for pid=6696 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 119.775627][ T30] audit: type=1400 audit(1788556398.398:469): avc: denied { relabelto } for pid=6696 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 119.804881][ T42] syzkaller0: tun_net_xmit 76 [ 119.805021][ T42] syzkaller0: tun_net_xmit 48 [ 119.819581][ T5796] syzkaller0: tun_net_xmit 76 [ 119.828177][ T6697] syzkaller0: create flow: hash 1258083365 index 1 [ 119.844603][ T5696] usb write operation failed. (-71) [ 119.853558][ T5696] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 119.864101][ T5696] dvbdev: DVB: registering new adapter (Terratec H7) [ 119.873022][ T5696] usb 1-1: media controller created [ 119.880040][ T5696] usb read operation failed. (-71) [ 119.885906][ T5696] usb write operation failed. (-71) [ 119.900631][ T5696] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 119.916006][ T5696] usb 1-1: USB disconnect, device number 8 [ 119.991826][ T6696] syzkaller0: delete flow: hash 1258083365 index 1 [ 120.614641][ T30] audit: type=1400 audit(1788556399.238:470): avc: denied { mounton } for pid=6718 comm="syz.2.292" path="/48/file0" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 121.160635][ T5696] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.355361][ T5696] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.08 [ 121.365821][ T5696] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 121.365852][ T5696] usb 3-1: config 1 has no interface number 0 [ 121.385374][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.385406][ T5696] usb 3-1: Product: syz [ 121.385433][ T5696] usb 3-1: Manufacturer: syz [ 121.385455][ T5696] usb 3-1: SerialNumber: syz [ 121.427128][ T5696] usb 3-1: 3:0 : does not exist [ 121.427151][ T5696] usb 3-1: 3:0 : does not exist [ 121.661044][ T5603] usb 3-1: USB disconnect, device number 7 [ 122.042550][ T6734] fuse: fd is not a fuse device [ 122.054099][ T6728] sch_tbf: burst 15 is lower than device syzkaller0 mtu (1514) ! [ 122.065422][ T6728] netlink: 164 bytes leftover after parsing attributes in process `syz.4.296'. [ 122.617281][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 122.617320][ T30] audit: type=1400 audit(1788556401.238:472): avc: denied { mount } for pid=6739 comm="syz.2.299" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 122.964534][ T6755] syzkaller0: entered promiscuous mode [ 122.972940][ T6755] syzkaller0: entered allmulticast mode [ 122.986010][ T6755] tipc: Enabled bearer , priority 0 [ 122.993825][ T6754] tipc: Resetting bearer [ 123.018291][ T6754] tipc: Disabling bearer [ 123.108662][ T6760] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 123.118401][ T6760] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 123.379410][ T5696] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 123.529828][ T5696] usb 3-1: device descriptor read/64, error -71 [ 123.789709][ T5696] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 123.930328][ T5696] usb 3-1: device descriptor read/64, error -71 [ 124.054410][ T5696] usb usb3-port1: attempt power cycle [ 124.457379][ T5696] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 124.487216][ T5696] usb 3-1: device descriptor read/8, error -71 [ 124.731501][ T5696] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 124.766951][ T5696] usb 3-1: device descriptor read/8, error -71 [ 124.884541][ T5696] usb usb3-port1: unable to enumerate USB device [ 125.414584][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.309'. [ 125.681712][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.309'. [ 126.224603][ T30] audit: type=1400 audit(1788556404.848:473): avc: denied { getopt } for pid=6787 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.224877][ T6788] netlink: 'syz.3.314': attribute type 1 has an invalid length. [ 126.263595][ T6788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.279919][ T5796] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 126.373857][ T30] audit: type=1800 audit(1788556404.998:474): pid=6794 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.315" name="addr_traddr" dev="configfs" ino=14915 res=0 errno=0 [ 126.375376][ T30] audit: type=1400 audit(1788556404.998:475): avc: denied { write } for pid=6793 comm="syz.2.315" name="subsystems" dev="configfs" ino=10169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.375877][ T30] audit: type=1400 audit(1788556404.998:476): avc: denied { write } for pid=6793 comm="syz.2.315" name="subsystems" dev="configfs" ino=10169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.375959][ T6794] nvmet_tcp: address family 255 not supported [ 126.431214][ T6788] bond1: (slave geneve2): making interface the new active one [ 126.478847][ T6788] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 126.520892][ T5796] usb 1-1: Using ep0 maxpacket: 8 [ 126.526470][ T5796] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 126.536694][ T5796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.536741][ T5796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.590466][ T5796] usb 1-1: config 0 descriptor?? [ 127.451593][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.458494][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.854227][ T5796] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 128.011771][ T5796] usb 1-1: USB disconnect, device number 9 [ 128.258991][ T30] audit: type=1400 audit(1788556406.878:477): avc: denied { write } for pid=6812 comm="syz.1.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.279684][ T6814] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 128.355656][ T6817] netlink: 76 bytes leftover after parsing attributes in process `syz.3.324'. [ 128.368450][ T30] audit: type=1400 audit(1788556406.988:478): avc: denied { name_bind 0x1000000 } for pid=6816 comm="syz.3.324" path="socket:[14968]" dev="sockfs" ino=14968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.404805][ T30] audit: type=1400 audit(1788556407.028:479): avc: denied { read } for pid=6816 comm="syz.3.324" path="socket:[14967]" dev="sockfs" ino=14967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.523459][ T6819] ======================================================= [ 128.523459][ T6819] WARNING: The mand mount option has been deprecated and [ 128.523459][ T6819] and is ignored by this kernel. Remove the mand [ 128.523459][ T6819] option from the mount to silence this warning. [ 128.523459][ T6819] ======================================================= [ 128.889291][ T5796] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 129.029338][ T5796] usb 5-1: device descriptor read/64, error -71 [ 129.132768][ T6828] fuse: fd is not a fuse device [ 129.270496][ T5796] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 129.409591][ T5796] usb 5-1: device descriptor read/64, error -71 [ 129.521680][ T5796] usb usb5-port1: attempt power cycle [ 129.899315][ T5796] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 129.935285][ T5796] usb 5-1: device descriptor read/8, error -71 [ 130.199877][ T5796] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 130.224423][ T5796] usb 5-1: device descriptor read/8, error -71 [ 130.341020][ T5796] usb usb5-port1: unable to enumerate USB device [ 130.356733][ T30] audit: type=1400 audit(1788556408.978:480): avc: denied { ioctl } for pid=6829 comm="syz.2.328" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 130.570577][ T30] audit: type=1400 audit(1788556409.198:481): avc: denied { read write } for pid=6825 comm="syz.3.327" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 130.601747][ T30] audit: type=1400 audit(1788556409.228:482): avc: denied { open } for pid=6825 comm="syz.3.327" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 130.720048][ T30] audit: type=1326 audit(1788556409.348:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.0.331" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898c39e159 code=0x7ffc0000 [ 130.749254][ T30] audit: type=1326 audit(1788556409.348:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.0.331" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898c39e159 code=0x7ffc0000 [ 130.749400][ T30] audit: type=1326 audit(1788556409.348:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.0.331" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f898c39e159 code=0x7ffc0000 [ 130.912708][ T30] audit: type=1326 audit(1788556409.538:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.0.331" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898c39e159 code=0x7ffc0000 [ 132.359504][ T5710] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 132.430928][ T5796] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 132.509157][ T5710] usb 3-1: Using ep0 maxpacket: 32 [ 132.514998][ T5710] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 132.524910][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.524933][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.524966][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.560743][ T5710] usb 3-1: config 0 descriptor?? [ 132.571389][ T5710] hub 3-1:0.0: USB hub found [ 132.633349][ T5796] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 132.647802][ T5796] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.659436][ T5796] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.672352][ T5796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 132.672374][ T5796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.690137][ T5796] usb 5-1: config 0 descriptor?? [ 132.792468][ T5710] hub 3-1:0.0: 29 ports detected [ 132.802036][ T5710] hub 3-1:0.0: insufficient power available to use all downstream ports [ 132.804102][ T6866] Set syz1 is full, maxelem 6117 reached [ 132.995145][ T6855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.007918][ T6855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.254934][ T5710] usb 3-1: USB disconnect, device number 12 [ 133.529185][ T5796] sony 0003:054C:0268.0003: can't set operational mode: step 1 [ 133.538198][ T5796] sony 0003:054C:0268.0003: Failed to set controller into operational mode [ 133.554511][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 133.554538][ T30] audit: type=1400 audit(1788556412.178:490): avc: denied { wake_alarm } for pid=6874 comm="syz.0.342" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 133.597027][ T5796] sony 0003:054C:0268.0003: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 133.597056][ T5796] sony 0003:054C:0268.0003: failed to claim input [ 133.634935][ T5796] usb 5-1: USB disconnect, device number 13 [ 133.765146][ T6882] fido_id[6882]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 133.981835][ T6886] syzkaller0: entered promiscuous mode [ 133.987373][ T6886] syzkaller0: entered allmulticast mode [ 134.259750][ T6884] fuse: fd is not a fuse device [ 134.763276][ T30] audit: type=1326 audit(1788556413.388:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.1.350" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b33f9e159 code=0x7ffc0000 [ 134.763315][ T30] audit: type=1326 audit(1788556413.388:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.1.350" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b33f9e159 code=0x7ffc0000 [ 134.821200][ T30] audit: type=1326 audit(1788556413.448:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.1.350" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8b33f9e159 code=0x7ffc0000 [ 135.000547][ T30] audit: type=1326 audit(1788556413.628:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.1.350" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b33f9e159 code=0x7ffc0000 [ 135.026932][ T30] audit: type=1326 audit(1788556413.628:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.1.350" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b33f9e159 code=0x7ffc0000 [ 135.285153][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'. [ 135.375102][ T30] audit: type=1400 audit(1788556413.998:496): avc: denied { ioctl } for pid=6905 comm="syz.1.353" path="socket:[15110]" dev="sockfs" ino=15110 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.404930][ T6906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.486545][ T6908] macvlan2: entered promiscuous mode [ 135.486580][ T6908] macvlan2: entered allmulticast mode [ 135.486749][ T6908] bond1: entered allmulticast mode [ 135.486776][ T6908] bond1: entered promiscuous mode [ 135.493294][ T6908] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.498391][ T6908] team0: Port device macvlan2 added [ 135.500624][ T6904] syzkaller0: entered promiscuous mode [ 135.500638][ T6904] syzkaller0: entered allmulticast mode [ 136.173709][ T5710] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 136.379331][ T5710] usb 1-1: Using ep0 maxpacket: 16 [ 136.389373][ T5710] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 136.418340][ T5710] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 136.429820][ T5710] usb 1-1: config 0 has no interface number 0 [ 136.429915][ T5710] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 136.437270][ T5710] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 136.494542][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.503178][ T5710] usb 1-1: Product: syz [ 136.503243][ T5710] usb 1-1: Manufacturer: syz [ 136.503957][ T5710] usb 1-1: SerialNumber: syz [ 136.633901][ T5710] usb 1-1: config 0 descriptor?? [ 136.678606][ T6927] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 136.691420][ T6927] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 136.966802][ T6927] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 136.966940][ T6927] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 137.198785][ T5710] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 138.671263][ T6958] FAULT_INJECTION: forcing a failure. [ 138.671263][ T6958] name failslab, interval 1, probability 0, space 0, times 0 [ 138.671312][ T6958] CPU: 1 UID: 0 PID: 6958 Comm: syz.4.370 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.671343][ T6958] Tainted: [L]=SOFTLOCKUP [ 138.671349][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 138.671358][ T6958] Call Trace: [ 138.671363][ T6958] [ 138.671370][ T6958] dump_stack_lvl+0x100/0x190 [ 138.671399][ T6958] should_fail_ex.cold+0x5/0xa [ 138.671424][ T6958] should_failslab+0xc2/0x120 [ 138.671445][ T6958] __kmalloc_noprof+0xfc/0x840 [ 138.671463][ T6958] ? hash_ipportnet4_add+0x162f/0x33a0 [ 138.671493][ T6958] hash_ipportnet4_add+0x162f/0x33a0 [ 138.671531][ T6958] ? __pfx_hash_ipportnet4_add+0x10/0x10 [ 138.671557][ T6958] ? ip_set_range_to_cidr+0xaf/0x110 [ 138.671583][ T6958] hash_ipportnet4_uadt+0xc5c/0x1630 [ 138.671610][ T6958] ? __pfx_hash_ipportnet4_add+0x10/0x10 [ 138.671635][ T6958] ? __pfx_hash_ipportnet4_uadt+0x10/0x10 [ 138.671669][ T6958] ? __local_bh_enable_ip+0xa5/0x120 [ 138.671690][ T6958] call_ad.isra.0+0x171/0x950 [ 138.671711][ T6958] ? __pfx_hash_ipportnet4_resize+0x10/0x10 [ 138.671736][ T6958] ? __pfx_call_ad.isra.0+0x10/0x10 [ 138.671754][ T6958] ? __pfx___nla_validate_parse+0x10/0x10 [ 138.671784][ T6958] ? __nla_parse+0x40/0x60 [ 138.671807][ T6958] ip_set_ad.isra.0+0x3f1/0x8b0 [ 138.671831][ T6958] ? __pfx_ip_set_ad.isra.0+0x10/0x10 [ 138.671850][ T6958] ? trace_contention_end+0x126/0x160 [ 138.671887][ T6958] ? find_held_lock+0x2b/0x80 [ 138.671914][ T6958] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 138.671941][ T6958] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 138.671961][ T6958] ? __lock_acquire+0x4c5/0x1ec0 [ 138.671997][ T6958] ? avc_has_perm_noaudit+0x145/0x3b0 [ 138.672023][ T6958] netlink_rcv_skb+0x159/0x420 [ 138.672047][ T6958] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 138.672067][ T6958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.672099][ T6958] ? ns_capable+0xd2/0xf0 [ 138.672118][ T6958] nfnetlink_rcv+0x1b3/0x440 [ 138.672137][ T6958] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 138.672154][ T6958] ? netlink_deliver_tap+0x1ae/0xcc0 [ 138.672181][ T6958] netlink_unicast+0x585/0x850 [ 138.672207][ T6958] ? __pfx_netlink_unicast+0x10/0x10 [ 138.672229][ T6958] ? __pfx_sock_has_perm+0x10/0x10 [ 138.672255][ T6958] netlink_sendmsg+0x8b0/0xda0 [ 138.672282][ T6958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.672308][ T6958] ? selinux_socket_sendmsg+0x198/0x2f0 [ 138.672339][ T6958] ____sys_sendmsg+0xa4d/0xbe0 [ 138.672358][ T6958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.672382][ T6958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.672413][ T6958] ___sys_sendmsg+0x190/0x1e0 [ 138.672436][ T6958] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.672458][ T6958] ? futex_wait+0x11e/0x370 [ 138.672493][ T6958] ? find_held_lock+0x2b/0x80 [ 138.672529][ T6958] __sys_sendmsg+0x160/0x210 [ 138.672546][ T6958] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.672574][ T6958] do_syscall_64+0x123/0x790 [ 138.672596][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.672614][ T6958] RIP: 0033:0x7fa573f9e159 [ 138.672628][ T6958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.672645][ T6958] RSP: 002b:00007fa574e9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.672662][ T6958] RAX: ffffffffffffffda RBX: 00007fa574225fa0 RCX: 00007fa573f9e159 [ 138.672674][ T6958] RDX: 0000000020004000 RSI: 0000200000000100 RDI: 0000000000000004 [ 138.672684][ T6958] RBP: 00007fa574035024 R08: 0000000000000000 R09: 0000000000000000 [ 138.672694][ T6958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.672704][ T6958] R13: 00007fa574226038 R14: 00007fa574225fa0 R15: 00007ffd28593428 [ 138.672726][ T6958] [ 138.690185][ T6954] netlink: 182 bytes leftover after parsing attributes in process `syz.2.368'. [ 139.116218][ T6965] netlink: 'syz.1.372': attribute type 2 has an invalid length. [ 139.124102][ T6965] netlink: 'syz.1.372': attribute type 7 has an invalid length. [ 139.155329][ T30] audit: type=1400 audit(1788556417.778:497): avc: denied { bind } for pid=6966 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 139.155380][ T30] audit: type=1400 audit(1788556417.778:498): avc: denied { name_bind } for pid=6966 comm="syz.2.373" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 139.155448][ T30] audit: type=1400 audit(1788556417.778:499): avc: denied { node_bind } for pid=6966 comm="syz.2.373" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 139.180539][ T6965] Uż: entered promiscuous mode [ 139.181851][ T30] audit: type=1400 audit(1788556417.808:500): avc: denied { setopt } for pid=6966 comm="syz.2.373" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 139.183396][ T6967] netlink: 96 bytes leftover after parsing attributes in process `syz.2.373'. [ 139.522741][ T5710] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 139.522911][ T5710] asix 1-1:0.34: probe with driver asix failed with error -71 [ 139.528872][ T5710] usb 1-1: USB disconnect, device number 10 [ 139.550501][ T6981] netlink: 224 bytes leftover after parsing attributes in process `syz.3.379'. [ 139.590758][ T30] audit: type=1400 audit(1788556418.218:501): avc: denied { nlmsg_read } for pid=6980 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 139.650667][ T30] audit: type=1400 audit(1788556418.278:502): avc: denied { bind } for pid=6987 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.814459][ T7002] kexec: Could not allocate control_code_buffer [ 141.657450][ T30] audit: type=1400 audit(1788556420.278:503): avc: denied { block_suspend } for pid=7016 comm="syz.3.388" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 141.672489][ T7018] input: syz1 as /devices/virtual/input/input12 [ 141.888513][ T30] audit: type=1804 audit(1788556420.508:504): pid=7029 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.393" name="/newroot/65/file0" dev="tmpfs" ino=360 res=1 errno=0 [ 141.952218][ T30] audit: type=1400 audit(1788556420.578:505): avc: denied { bind } for pid=7026 comm="syz.1.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.049348][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 142.086870][ T30] audit: type=1400 audit(1788556420.708:506): avc: denied { write } for pid=7031 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.199101][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 142.204704][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 142.215394][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 142.215432][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 142.215463][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 142.215485][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 142.215507][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.217158][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 142.217176][ T9] usb 5-1: Product: syz [ 142.217188][ T9] usb 5-1: Manufacturer: syz [ 142.217200][ T9] usb 5-1: SerialNumber: syz [ 142.224619][ T9] usb 5-1: config 0 descriptor?? [ 142.232990][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 142.248600][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 142.437135][ T9] usb 5-1: USB disconnect, device number 14 [ 142.437167][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 142.440406][ T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 142.739862][ T5710] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 142.889091][ T5710] usb 3-1: Using ep0 maxpacket: 32 [ 142.889743][ T5710] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 142.892475][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.894516][ T5710] usb 3-1: config 0 descriptor?? [ 142.900550][ T5710] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 143.001246][ T7050] loop5: detected capacity change from 0 to 7 [ 143.005922][ T7050] Dev loop5: unable to read RDB block 7 [ 143.005968][ T7050] loop5: unable to read partition table [ 143.006154][ T7050] loop5: partition table beyond EOD, truncated [ 143.006175][ T7050] loop_reread_partitions: partition scan of loop5 (žč¢«xü—ŸŃą– ) failed (rc=-5) [ 144.024934][ T7066] netlink: 'syz.0.407': attribute type 1 has an invalid length. [ 144.198012][ T7068] binder: 7067:7068 ioctl 4018620d 0 returned -22 [ 144.426916][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 144.426968][ T30] audit: type=1400 audit(1788556423.048:510): avc: denied { create } for pid=7073 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.558914][ T7084] input: syz1 as /devices/virtual/input/input13 [ 145.567038][ T30] audit: type=1400 audit(1788556424.188:511): avc: denied { read } for pid=4951 comm="acpid" name="js0" dev="devtmpfs" ino=2940 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.568203][ T7085] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.618525][ T30] audit: type=1400 audit(1788556424.238:512): avc: denied { open } for pid=4951 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2941 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.639146][ T30] audit: type=1400 audit(1788556424.238:513): avc: denied { ioctl } for pid=4951 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2941 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.691524][ T30] audit: type=1400 audit(1788556424.318:514): avc: denied { mount } for pid=7086 comm="syz.0.415" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 145.882246][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.139415][ T30] audit: type=1400 audit(1788556424.728:515): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 146.393315][ T5710] gspca_vc032x: reg_w err -71 [ 146.393349][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.393359][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.393366][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.393373][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.393379][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.393384][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.393390][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.393395][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.393400][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.393406][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.393411][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.393416][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.393422][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.393428][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.393434][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.393440][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.393446][ T5710] gspca_vc032x: I2c Bus Busy Wait 00 [ 146.393452][ T5710] gspca_vc032x: Unknown sensor... [ 146.393505][ T5710] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 146.397792][ T5710] usb 3-1: USB disconnect, device number 13 [ 147.924346][ T7118] IPVS: Error connecting to the multicast addr [ 147.929503][ T30] audit: type=1400 audit(1788556426.548:516): avc: denied { create } for pid=7117 comm="syz.4.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 147.929554][ T30] audit: type=1400 audit(1788556426.548:517): avc: denied { setopt } for pid=7117 comm="syz.4.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 147.976542][ T30] audit: type=1400 audit(1788556426.598:518): avc: denied { bind } for pid=7117 comm="syz.4.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 148.765397][ T5796] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 148.903953][ T7126] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 148.929266][ T5796] usb 5-1: Using ep0 maxpacket: 32 [ 148.936560][ T5796] usb 5-1: unable to get BOS descriptor or descriptor too short [ 148.936615][ T5796] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 148.955479][ T5796] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 148.955513][ T5796] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 148.955541][ T5796] usb 5-1: config 14 has no interface number 0 [ 148.955558][ T5796] usb 5-1: config 14 has no interface number 1 [ 148.955607][ T5796] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 148.955635][ T5796] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 148.955660][ T5796] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 148.955687][ T5796] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 148.955713][ T5796] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 148.955738][ T5796] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.955763][ T5796] usb 5-1: config 14 interface 57 has no altsetting 0 [ 148.955780][ T5796] usb 5-1: config 14 interface 228 has no altsetting 0 [ 149.049108][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.049132][ T5796] usb 5-1: Product: syz [ 149.049145][ T5796] usb 5-1: Manufacturer: syz [ 149.049159][ T5796] usb 5-1: SerialNumber: syz [ 149.072636][ T7132] kvm: user requested TSC rate below hardware speed [ 149.072908][ T7132] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=540686624 (1081373248 ns) > initial count (200000 ns). Using initial count to start timer. [ 149.249114][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 149.263432][ T30] audit: type=1400 audit(1788556427.888:519): avc: denied { unlink } for pid=7134 comm="syz.3.430" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 149.428068][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 149.434842][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 149.446078][ T9] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 149.446147][ T9] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 149.446176][ T9] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.446205][ T9] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 149.527585][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.536806][ T9] usb 3-1: Product: syz [ 149.536877][ T9] usb 3-1: Manufacturer: syz [ 149.536898][ T9] usb 3-1: SerialNumber: syz [ 149.563691][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 149.597716][ T5796] legousbtower 5-1:14.57: interrupt endpoints not found [ 149.798357][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input14 [ 149.959236][ T9] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 149.967638][ T9] (id 0x00) [ 150.029687][ T9] rc_core: IR keymap rc-imon-pad not found [ 150.036890][ T9] Registered IR keymap rc-empty [ 150.043360][ T9] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 150.043380][ T9] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 150.784818][ T7157] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 150.793374][ T7157] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 151.020960][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 151.981240][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input15 [ 152.532379][ T5796] legousbtower 5-1:14.228: get version request failed: -71 [ 152.532579][ T5796] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 152.559798][ T5796] usb 5-1: USB disconnect, device number 15 [ 152.574054][ T9] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:14> initialized [ 152.596048][ T9] usb 3-1: USB disconnect, device number 14 [ 152.661852][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 152.718898][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 152.753215][ T7173] FAULT_INJECTION: forcing a failure. [ 152.753215][ T7173] name failslab, interval 1, probability 0, space 0, times 0 [ 152.753261][ T7173] CPU: 1 UID: 0 PID: 7173 Comm: syz.2.441 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.753284][ T7173] Tainted: [L]=SOFTLOCKUP [ 152.753290][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 152.753299][ T7173] Call Trace: [ 152.753305][ T7173] [ 152.753311][ T7173] dump_stack_lvl+0x100/0x190 [ 152.753341][ T7173] should_fail_ex.cold+0x5/0xa [ 152.753366][ T7173] should_failslab+0xc2/0x120 [ 152.753388][ T7173] kmem_cache_alloc_noprof+0x92/0x6a0 [ 152.753407][ T7173] ? ceph_msg_new2+0x3e/0x4f0 [ 152.753439][ T7173] ceph_msg_new2+0x3e/0x4f0 [ 152.753467][ T7173] ceph_monc_init+0x686/0xcd0 [ 152.753496][ T7173] ceph_create_client+0x25e/0x370 [ 152.753523][ T7173] ceph_get_tree+0x1a4/0x1fd0 [ 152.753546][ T7173] ? bpf_lsm_capable+0x9/0x10 [ 152.753569][ T7173] ? security_capable+0x80/0x260 [ 152.753593][ T7173] vfs_get_tree+0x92/0x320 [ 152.753618][ T7173] vfs_cmd_create+0xd7/0x2a0 [ 152.753636][ T7173] __do_sys_fsconfig+0x55a/0xcb0 [ 152.753654][ T7173] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 152.753687][ T7173] do_syscall_64+0x123/0x790 [ 152.753718][ T7173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.753737][ T7173] RIP: 0033:0x7f2d5e19e159 [ 152.753752][ T7173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.753771][ T7173] RSP: 002b:00007f2d5f0a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 152.753790][ T7173] RAX: ffffffffffffffda RBX: 00007f2d5e425fa0 RCX: 00007f2d5e19e159 [ 152.753801][ T7173] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 152.753812][ T7173] RBP: 00007f2d5e235024 R08: 0000000000000000 R09: 0000000000000000 [ 152.753822][ T7173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.753832][ T7173] R13: 00007f2d5e426038 R14: 00007f2d5e425fa0 R15: 00007ffe52105418 [ 152.753855][ T7173] [ 153.018864][ T7184] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 153.020130][ T7184] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 153.085950][ T7185] tipc: Enabling of bearer rejected, failed to enable media [ 153.275076][ T5720] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 153.736598][ T5720] usb 1-1: Using ep0 maxpacket: 32 [ 153.779212][ T5720] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 153.937813][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.937856][ T5720] usb 1-1: Product: syz [ 153.937884][ T5720] usb 1-1: Manufacturer: syz [ 153.937897][ T5720] usb 1-1: SerialNumber: syz [ 154.293215][ T5720] usb 1-1: config 0 descriptor?? [ 154.679294][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 154.819449][ T9] usb 3-1: device descriptor read/64, error -71 [ 154.973495][ T5720] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 154.998133][ T7194] input: syz1 as /devices/virtual/input/input16 [ 155.069934][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 155.209528][ T9] usb 3-1: device descriptor read/64, error -71 [ 155.222819][ T5720] gspca_ov534_9: reg_w failed -71 [ 155.419304][ T9] usb usb3-port1: attempt power cycle [ 155.420064][ T7203] openvswitch: netlink: IPv4 tunnel dst address is zero [ 156.064552][ T7200] syz.4.452 (7200): drop_caches: 2 [ 156.197564][ T5720] gspca_ov534_9: Unknown sensor 0000 [ 156.200804][ T5720] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 156.259304][ T5720] usb 1-1: USB disconnect, device number 11 [ 156.509312][ T1212] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 156.662014][ T7217] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 156.671082][ T7217] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 156.683476][ T1212] usb 5-1: Using ep0 maxpacket: 32 [ 156.697020][ T1212] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 156.718460][ T1212] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 156.729476][ T1212] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 156.742500][ T1212] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.753920][ T1212] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 156.788559][ T9] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 156.804775][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.804865][ T1212] usb 5-1: Product: syz [ 156.804960][ T1212] usb 5-1: Manufacturer: syz [ 156.805041][ T1212] usb 5-1: SerialNumber: syz [ 156.898253][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 156.938068][ T1212] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input17 [ 157.000938][ T9] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 157.099339][ T5720] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 157.165590][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 157.180220][ T1212] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 157.188834][ T1212] (id 0x00) [ 157.260876][ T5720] usb 1-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 157.273837][ T5720] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.273890][ T5720] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 157.285686][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.437242][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.437281][ T9] usb 3-1: Product: syz [ 157.437305][ T9] usb 3-1: Manufacturer: syz [ 157.437321][ T9] usb 3-1: SerialNumber: syz [ 157.609268][ T1212] rc_core: IR keymap rc-imon-pad not found [ 157.615728][ T1212] Registered IR keymap rc-empty [ 157.624923][ T1212] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 157.637029][ T1212] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 157.694797][ T1212] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 157.720230][ T1212] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input18 [ 157.775293][ T1212] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:16> initialized [ 158.140968][ T9] usb 3-1: config 0 descriptor?? [ 158.576563][ T5720] usb 1-1: string descriptor 0 read error: -71 [ 158.582874][ T5720] usb 1-1: USB disconnect, device number 12 [ 158.590620][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 158.703865][ T7206] imon:send_packet: task interrupted [ 158.703889][ T7206] imon:send_packet: packet tx failed (-512) [ 158.703930][ T7206] imon:vfd_write: send packet #1 failed [ 158.741247][ T7224] syzkaller0: entered promiscuous mode [ 158.741266][ T7224] syzkaller0: entered allmulticast mode [ 158.746046][ T7224] tipc: Started in network mode [ 158.746065][ T7224] tipc: Node identity 422c74c57e7a, cluster identity 4711 [ 158.746693][ T7224] tipc: Enabled bearer , priority 0 [ 158.754924][ T7223] tipc: Resetting bearer [ 158.786485][ T7223] tipc: Disabling bearer [ 158.798443][ T5796] usb 5-1: USB disconnect, device number 16 [ 159.932183][ T30] audit: type=1400 audit(1788556438.558:520): avc: denied { getopt } for pid=7236 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 160.100910][ T7243] kvm: pic: level sensitive irq not supported [ 161.152590][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 161.176803][ T9] usb 3-1: USB disconnect, device number 18 [ 161.406881][ T7266] SELinux: failed to load policy [ 163.660068][ T30] audit: type=1400 audit(1788556442.288:521): avc: denied { setopt } for pid=7294 comm="syz.4.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.680466][ T7307] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 167.729557][ T30] audit: type=1400 audit(1788556446.358:522): avc: denied { audit_write } for pid=7312 comm="syz.4.479" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 167.811723][ T30] audit: type=1400 audit(1788556446.438:523): avc: denied { watch watch_reads } for pid=7312 comm="syz.4.479" path="/89" dev="tmpfs" ino=478 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 168.185489][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.483'. [ 169.321048][ T30] audit: type=1400 audit(1788556447.948:524): avc: denied { ioctl } for pid=7328 comm="syz.3.485" path="socket:[16728]" dev="sockfs" ino=16728 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 169.462927][ T6529] nci: nci_rx_work: unknown MT 0x1 [ 169.739142][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 169.889906][ T9] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 169.891623][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 169.891644][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 169.897766][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.897786][ T9] usb 5-1: Product: syz [ 169.897798][ T9] usb 5-1: Manufacturer: syz [ 169.897810][ T9] usb 5-1: SerialNumber: syz [ 170.098221][ T7356] netlink: 132732 bytes leftover after parsing attributes in process `syz.1.496'. [ 170.176896][ T9] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 170.257850][ T7366] syzkaller0: entered promiscuous mode [ 170.257873][ T7366] syzkaller0: entered allmulticast mode [ 170.380965][ T30] audit: type=1400 audit(1788556449.008:525): avc: denied { read write } for pid=7345 comm="syz.4.491" name="lp0" dev="devtmpfs" ino=2983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 170.381285][ T30] audit: type=1400 audit(1788556449.008:526): avc: denied { open } for pid=7345 comm="syz.4.491" path="/dev/usb/lp0" dev="devtmpfs" ino=2983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 170.432698][ T30] audit: type=1400 audit(1788556449.058:527): avc: denied { read write } for pid=7369 comm="syz.3.500" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 170.433052][ T30] audit: type=1400 audit(1788556449.058:528): avc: denied { open } for pid=7369 comm="syz.3.500" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 170.437192][ T7372] CacheFiles: Failed to register: -95 [ 170.538985][ T30] audit: type=1400 audit(1788556449.158:529): avc: denied { setopt } for pid=7373 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.541187][ T7374] netlink: 32 bytes leftover after parsing attributes in process `syz.3.501'. [ 170.578450][ T5599] usb 5-1: USB disconnect, device number 17 [ 170.589492][ T5599] usblp0: removed [ 170.601992][ T30] audit: type=1400 audit(1788556449.228:530): avc: denied { read } for pid=7373 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.689644][ T7378] netlink: 68 bytes leftover after parsing attributes in process `syz.3.503'. [ 170.702027][ T7378] jffs2: notice: (7378) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 170.727846][ T30] audit: type=1400 audit(1788556449.348:531): avc: denied { setattr } for pid=7377 comm="syz.3.503" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.393627][ T52] Bluetooth: hci0: unexpected event 0x03 length: 7 < 11 [ 171.639477][ T1212] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 171.799099][ T1212] usb 5-1: Using ep0 maxpacket: 16 [ 171.799910][ T1212] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 171.800818][ T1212] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.803115][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.803133][ T1212] usb 5-1: Product: syz [ 171.803144][ T1212] usb 5-1: Manufacturer: syz [ 171.803154][ T1212] usb 5-1: SerialNumber: syz [ 171.808981][ T1212] usb 5-1: config 0 descriptor?? [ 172.358972][ T7338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.789713][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 172.789742][ T30] audit: type=1400 audit(1788556451.418:534): avc: denied { mount } for pid=7423 comm="syz.0.527" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 172.810063][ T30] audit: type=1400 audit(1788556451.438:535): avc: denied { search } for pid=7423 comm="syz.0.527" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 172.813255][ T30] audit: type=1400 audit(1788556451.438:536): avc: denied { search } for pid=7423 comm="syz.0.527" name="per_cpu" dev="tracefs" ino=1676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 172.815737][ T30] audit: type=1400 audit(1788556451.438:537): avc: denied { search } for pid=7423 comm="syz.0.527" name="cpu0" dev="tracefs" ino=1677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 172.815784][ T30] audit: type=1400 audit(1788556451.438:538): avc: denied { read } for pid=7423 comm="syz.0.527" name="trace_pipe_raw" dev="tracefs" ino=1680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 172.815816][ T30] audit: type=1400 audit(1788556451.438:539): avc: denied { open } for pid=7423 comm="syz.0.527" path="/91/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 173.215276][ T30] audit: type=1400 audit(1788556451.838:540): avc: denied { read write } for pid=7430 comm="syz.2.517" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 173.239365][ T30] audit: type=1400 audit(1788556451.838:541): avc: denied { open } for pid=7430 comm="syz.2.517" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 173.591534][ T30] audit: type=1400 audit(1788556452.218:542): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 173.617570][ T7438] netlink: 'syz.1.520': attribute type 3 has an invalid length. [ 173.627043][ T7438] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.520'. [ 174.187615][ T30] audit: type=1400 audit(1788556452.808:543): avc: denied { append } for pid=7447 comm="syz.3.525" name="uprobe_events" dev="tracefs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 174.430968][ T1212] usb 5-1: USB disconnect, device number 18 [ 174.461372][ T7448] event trace: Could not enable event p [ 175.554115][ T7470] FAULT_INJECTION: forcing a failure. [ 175.554115][ T7470] name failslab, interval 1, probability 0, space 0, times 0 [ 175.568058][ T7470] CPU: 1 UID: 0 PID: 7470 Comm: syz.0.532 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.568088][ T7470] Tainted: [L]=SOFTLOCKUP [ 175.568095][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 175.568106][ T7470] Call Trace: [ 175.568113][ T7470] [ 175.568120][ T7470] dump_stack_lvl+0x100/0x190 [ 175.568151][ T7470] should_fail_ex.cold+0x5/0xa [ 175.568176][ T7470] should_failslab+0xc2/0x120 [ 175.568198][ T7470] __kmalloc_cache_noprof+0x91/0x6d0 [ 175.568227][ T7470] ? __might_fault+0xc5/0x140 [ 175.568253][ T7470] ? vmci_ctx_create+0xbb/0x730 [ 175.568278][ T7470] vmci_ctx_create+0xbb/0x730 [ 175.568301][ T7470] vmci_host_unlocked_ioctl+0x2d7/0x2070 [ 175.568331][ T7470] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 175.568360][ T7470] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 175.568383][ T7470] ? do_vfs_ioctl+0x226/0x13e0 [ 175.568413][ T7470] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 175.568440][ T7470] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 175.568463][ T7470] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 175.568486][ T7470] ? __fget_files+0x34/0x3d0 [ 175.568518][ T7470] ? selinux_file_ioctl+0x13b/0x290 [ 175.568534][ T7470] ? selinux_file_ioctl+0xb6/0x290 [ 175.568556][ T7470] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 175.568583][ T7470] __x64_sys_ioctl+0x18e/0x210 [ 175.568610][ T7470] do_syscall_64+0x123/0x790 [ 175.568629][ T7470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.568645][ T7470] RIP: 0033:0x7f898c39e159 [ 175.568658][ T7470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.568672][ T7470] RSP: 002b:00007f898d31b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.568687][ T7470] RAX: ffffffffffffffda RBX: 00007f898c625fa0 RCX: 00007f898c39e159 [ 175.568699][ T7470] RDX: 0000200000000100 RSI: 00000000000007a0 RDI: 0000000000000007 [ 175.568708][ T7470] RBP: 00007f898c435024 R08: 0000000000000000 R09: 0000000000000000 [ 175.568716][ T7470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.568725][ T7470] R13: 00007f898c626038 R14: 00007f898c625fa0 R15: 00007ffcbbeecc78 [ 175.568746][ T7470] [ 175.734546][ T7470] Failed to allocate memory for VMCI context [ 177.356147][ T7486] binder: 7484:7486 ioctl c0306201 0 returned -14 [ 177.407983][ T7492] jffs2: notice: (7492) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 177.531940][ T1212] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 177.689623][ T1212] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 177.701080][ T1212] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.701132][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.722835][ T1212] usb 1-1: config 0 descriptor?? [ 177.736645][ T1212] pwc: Askey VC010 type 2 USB webcam detected. [ 178.168256][ T1212] pwc: recv_control_msg error -32 req 02 val 2b00 [ 178.248618][ T1212] pwc: recv_control_msg error -32 req 02 val 2700 [ 178.265179][ T1212] pwc: recv_control_msg error -32 req 02 val 2c00 [ 178.279837][ T1212] pwc: recv_control_msg error -32 req 04 val 1000 [ 178.295148][ T1212] pwc: recv_control_msg error -32 req 04 val 1300 [ 178.308326][ T1212] pwc: recv_control_msg error -32 req 04 val 1400 [ 178.326189][ T1212] pwc: recv_control_msg error -32 req 02 val 2000 [ 178.341081][ T1212] pwc: recv_control_msg error -32 req 02 val 2100 [ 178.357438][ T1212] pwc: recv_control_msg error -32 req 04 val 1500 [ 178.589171][ T1212] pwc: recv_control_msg error -71 req 02 val 2400 [ 178.595998][ T1212] pwc: recv_control_msg error -71 req 02 val 2600 [ 178.603195][ T1212] pwc: recv_control_msg error -71 req 02 val 2900 [ 178.609945][ T1212] pwc: recv_control_msg error -71 req 02 val 2800 [ 178.618736][ T1212] pwc: recv_control_msg error -71 req 04 val 1100 [ 178.625509][ T1212] pwc: recv_control_msg error -71 req 04 val 1200 [ 178.634119][ T1212] pwc: Registered as video103. [ 178.649928][ T1212] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 178.670842][ T1212] usb 1-1: USB disconnect, device number 13 [ 179.034151][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 179.034203][ T30] audit: type=1400 audit(1788556457.648:548): avc: denied { create } for pid=7519 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 179.034342][ T30] audit: type=1400 audit(1788556457.658:549): avc: denied { setopt } for pid=7519 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 179.586915][ T7526] syzkaller0: entered promiscuous mode [ 179.586940][ T7526] syzkaller0: entered allmulticast mode [ 179.781430][ T7530] netlink: 'syz.0.551': attribute type 1 has an invalid length. [ 179.949574][ T5599] hid_parser_main: 31 callbacks suppressed [ 179.964370][ T5599] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 180.044175][ T5599] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.087298][ T30] audit: type=1400 audit(1788556458.708:550): avc: denied { read } for pid=7541 comm="syz.2.557" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 180.110541][ T30] audit: type=1400 audit(1788556458.708:551): avc: denied { open } for pid=7541 comm="syz.2.557" path="/94/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 180.110587][ T30] audit: type=1400 audit(1788556458.718:552): avc: denied { ioctl } for pid=7541 comm="syz.2.557" path="/94/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 180.125454][ T7544] device-mapper: ioctl: Invalid target message parameters. [ 180.259192][ T5720] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 180.363540][ T30] audit: type=1400 audit(1788556458.988:553): avc: denied { write } for pid=7547 comm="syz.2.559" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 180.388435][ T30] audit: type=1400 audit(1788556459.008:554): avc: denied { open } for pid=7547 comm="syz.2.559" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 180.426284][ T30] audit: type=1400 audit(1788556459.048:555): avc: denied { ioctl } for pid=7547 comm="syz.2.559" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 180.451791][ T5720] usb 1-1: Using ep0 maxpacket: 32 [ 180.461083][ T5720] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 180.530036][ T5720] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 181.033483][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 181.060031][ T5720] usb 1-1: Product: syz [ 181.074145][ T5720] usb 1-1: Manufacturer: syz [ 181.074164][ T5720] usb 1-1: SerialNumber: syz [ 183.417413][ T5720] usb 1-1: config 0 descriptor?? [ 183.721899][ T5720] usb 1-1: can't set config #0, error -71 [ 183.724753][ T5720] usb 1-1: USB disconnect, device number 14 [ 183.941730][ T7567] 9pnet_fd: p9_fd_create_unix (7567): problem connecting socket: ./file0: -111 [ 183.986434][ T7567] input: syz0 as /devices/virtual/input/input20 [ 184.242311][ T5720] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 184.411180][ T5720] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 184.431951][ T5720] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 184.443566][ T5720] usb 3-1: config 1 interface 0 has no altsetting 0 [ 184.550835][ T5720] usb 3-1: string descriptor 0 read error: -22 [ 184.562412][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.309732][ T5720] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 185.351693][ T5720] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0926:3333.0005/input/input21 [ 185.641226][ T5720] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 185.724619][ T5720] usb 3-1: USB disconnect, device number 19 [ 185.812798][ T7587] netlink: 'syz.4.569': attribute type 1 has an invalid length. [ 186.200749][ T7595] syzkaller0: entered promiscuous mode [ 186.207230][ T7595] syzkaller0: entered allmulticast mode [ 186.844583][ T7609] syzkaller0: entered promiscuous mode [ 186.844614][ T7609] syzkaller0: entered allmulticast mode [ 186.925620][ T30] audit: type=1400 audit(1788556465.548:556): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 187.722847][ T30] audit: type=1400 audit(1788556466.348:557): avc: denied { create } for pid=7626 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.791282][ T30] audit: type=1400 audit(1788556466.418:558): avc: denied { connect } for pid=7626 comm="syz.4.582" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.797390][ T30] audit: type=1400 audit(1788556466.418:559): avc: denied { ioctl } for pid=7626 comm="syz.4.582" path="socket:[17186]" dev="sockfs" ino=17186 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 187.803781][ T30] audit: type=1400 audit(1788556466.428:560): avc: denied { write } for pid=7626 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 187.863397][ T30] audit: type=1400 audit(1788556466.488:561): avc: denied { read } for pid=7630 comm="syz.3.583" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 187.863436][ T30] audit: type=1400 audit(1788556466.488:562): avc: denied { open } for pid=7630 comm="syz.3.583" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 187.937585][ T7636] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 187.945836][ T7636] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 187.979076][ T30] audit: type=1400 audit(1788556466.598:563): avc: denied { ioctl } for pid=7630 comm="syz.3.583" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 188.023617][ T7637] capability: warning: `syz.3.583' uses deprecated v2 capabilities in a way that may be insecure [ 188.199434][ T5720] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 188.373757][ T5720] usb 3-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 188.393304][ T5720] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.403719][ T5720] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 188.403764][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.629757][ T5720] usb-storage 3-1:1.0: USB Mass Storage device detected [ 188.661033][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.661074][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.670014][ T7641] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 190.574175][ T30] audit: type=1400 audit(1788556469.198:564): avc: denied { create } for pid=7655 comm="syz.4.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.613212][ T30] audit: type=1400 audit(1788556469.238:565): avc: denied { setopt } for pid=7655 comm="syz.4.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.723204][ T4916] Bluetooth: hci1: command 0x0406 tx timeout [ 190.723274][ T4916] Bluetooth: hci0: command 0x0406 tx timeout [ 190.723324][ T4916] Bluetooth: hci3: command 0x0406 tx timeout [ 190.723366][ T4916] Bluetooth: hci4: command 0x0406 tx timeout [ 190.725512][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 191.467771][ T6575] usb 3-1: USB disconnect, device number 20 [ 193.167002][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 193.167033][ T30] audit: type=1400 audit(1788556471.788:575): avc: denied { write } for pid=7674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.507031][ T30] audit: type=1400 audit(1788556472.128:576): avc: denied { write } for pid=7705 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.616592][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 193.811172][ T30] audit: type=1400 audit(1788556472.438:577): avc: denied { read append } for pid=7714 comm="syz.0.602" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 193.829118][ T30] audit: type=1400 audit(1788556472.438:578): avc: denied { open } for pid=7714 comm="syz.0.602" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 193.874201][ T30] audit: type=1400 audit(1788556472.498:579): avc: denied { write } for pid=7714 comm="syz.0.602" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 194.063365][ T30] audit: type=1400 audit(1788556472.688:580): avc: denied { mount } for pid=7718 comm="syz.3.603" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 194.521067][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.604'. [ 194.606694][ T30] audit: type=1800 audit(1788556473.218:581): pid=7685 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.594" name="bus" dev="ramfs" ino=18404 res=0 errno=0 [ 194.882959][ T30] audit: type=1400 audit(1788556473.508:582): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 195.022017][ T7731] syzkaller0: entered promiscuous mode [ 195.022045][ T7731] syzkaller0: entered allmulticast mode [ 195.140706][ T7728] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 195.234570][ T30] audit: type=1400 audit(1788556473.858:583): avc: denied { ioctl } for pid=7738 comm="syz.2.610" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 195.260468][ T7739] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 195.276546][ T1212] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 195.462491][ T1212] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 195.464436][ T1212] usb 5-1: config index 0 descriptor too short (expected 88, got 18) [ 195.464456][ T1212] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.464470][ T1212] usb 5-1: config 0 has no interfaces? [ 195.466067][ T1212] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 195.466084][ T1212] usb 5-1: Product: syz [ 195.466098][ T1212] usb 5-1: Manufacturer: syz [ 195.466110][ T1212] usb 5-1: SerialNumber: syz [ 195.468030][ T1212] usb 5-1: config 0 descriptor?? [ 195.674381][ T7731] tipc: Enabled bearer , priority 0 [ 195.675535][ T1212] usb 5-1: USB disconnect, device number 19 [ 195.688694][ T7729] tipc: Resetting bearer [ 195.743959][ T7729] tipc: Disabling bearer [ 196.758546][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 196.767574][ T30] audit: type=1400 audit(1788556475.378:584): avc: denied { bind } for pid=7743 comm="syz.0.612" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.099073][ T5603] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 200.260316][ T5603] usb 5-1: Using ep0 maxpacket: 16 [ 200.267325][ T5603] usb 5-1: New USB device found, idVendor=0ace, idProduct=20ff, bcdDevice= 1.01 [ 200.278357][ T5603] usb 5-1: config 3 has an invalid interface number: 117 but max is 0 [ 200.278397][ T5603] usb 5-1: config 3 has no interface number 0 [ 200.295908][ T5603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.295933][ T5603] usb 5-1: Product: syz [ 200.295952][ T5603] usb 5-1: Manufacturer: syz [ 200.295968][ T5603] usb 5-1: SerialNumber: syz [ 200.550082][ T7790] FAULT_INJECTION: forcing a failure. [ 200.550082][ T7790] name failslab, interval 1, probability 0, space 0, times 0 [ 200.550130][ T7790] CPU: 1 UID: 0 PID: 7790 Comm: syz.4.623 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.550156][ T7790] Tainted: [L]=SOFTLOCKUP [ 200.550161][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 200.550169][ T7790] Call Trace: [ 200.550176][ T7790] [ 200.550182][ T7790] dump_stack_lvl+0x100/0x190 [ 200.550209][ T7790] should_fail_ex.cold+0x5/0xa [ 200.550232][ T7790] should_failslab+0xc2/0x120 [ 200.550252][ T7790] __kmalloc_node_noprof+0xff/0x880 [ 200.550269][ T7790] ? __get_vm_area_node+0x1ff/0x350 [ 200.550288][ T7790] ? __get_vm_area_node+0x22b/0x350 [ 200.550305][ T7790] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 200.550330][ T7790] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 200.550352][ T7790] ? lock_acquire+0x1d1/0x380 [ 200.550373][ T7790] ? security_read_policy+0x105/0x2e0 [ 200.550397][ T7790] ? __mutex_lock+0x26c/0x1bd0 [ 200.550415][ T7790] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 200.550441][ T7790] ? __pfx___mutex_lock+0x10/0x10 [ 200.550460][ T7790] ? security_read_policy+0x105/0x2e0 [ 200.550479][ T7790] vmalloc_user_noprof+0x9e/0xe0 [ 200.550499][ T7790] ? security_read_policy+0x105/0x2e0 [ 200.550519][ T7790] security_read_policy+0x105/0x2e0 [ 200.550539][ T7790] ? __pfx_security_read_policy+0x10/0x10 [ 200.550559][ T7790] ? sel_open_policy+0x15e/0x380 [ 200.550585][ T7790] sel_open_policy+0x18c/0x380 [ 200.550609][ T7790] do_dentry_open+0x6ab/0x14d0 [ 200.550625][ T7790] ? __pfx_sel_open_policy+0x10/0x10 [ 200.550652][ T7790] vfs_open+0x82/0x3f0 [ 200.550674][ T7790] path_openat+0x19fa/0x2440 [ 200.550697][ T7790] ? __pfx_path_openat+0x10/0x10 [ 200.550721][ T7790] do_file_open+0x20e/0x430 [ 200.550747][ T7790] ? __pfx_do_file_open+0x10/0x10 [ 200.550781][ T7790] ? _raw_spin_unlock+0x28/0x50 [ 200.550796][ T7790] ? alloc_fd+0x471/0x7a0 [ 200.550821][ T7790] do_sys_openat2+0x10f/0x1e0 [ 200.550841][ T7790] ? __pfx_do_sys_openat2+0x10/0x10 [ 200.550870][ T7790] __x64_sys_openat+0x12d/0x210 [ 200.550892][ T7790] ? __pfx___x64_sys_openat+0x10/0x10 [ 200.550924][ T7790] do_syscall_64+0x123/0x790 [ 200.550946][ T7790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.550964][ T7790] RIP: 0033:0x7fa573f9e159 [ 200.550980][ T7790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.550995][ T7790] RSP: 002b:00007fa574e9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 200.551014][ T7790] RAX: ffffffffffffffda RBX: 00007fa574225fa0 RCX: 00007fa573f9e159 [ 200.551025][ T7790] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 200.551035][ T7790] RBP: 00007fa574035024 R08: 0000000000000000 R09: 0000000000000000 [ 200.551045][ T7790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.551055][ T7790] R13: 00007fa574226038 R14: 00007fa574225fa0 R15: 00007ffd28593428 [ 200.551077][ T7790] [ 200.556958][ T7790] syz.4.623: vmalloc error: size 282624, failed to allocated page array size 552, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 200.557084][ T7790] CPU: 1 UID: 0 PID: 7790 Comm: syz.4.623 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.557107][ T7790] Tainted: [L]=SOFTLOCKUP [ 200.557113][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 200.557122][ T7790] Call Trace: [ 200.557128][ T7790] [ 200.557135][ T7790] dump_stack_lvl+0x100/0x190 [ 200.557161][ T7790] warn_alloc.cold+0x9e/0xb2 [ 200.557182][ T7790] ? __pfx_warn_alloc+0x10/0x10 [ 200.557205][ T7790] ? dump_stack_lvl+0x17c/0x190 [ 200.557228][ T7790] ? rcu_is_watching+0x13/0xc0 [ 200.557250][ T7790] ? __kasan_kmalloc+0x8a/0xb0 [ 200.557268][ T7790] ? __kmalloc_node_noprof+0x360/0x880 [ 200.557284][ T7790] ? __get_vm_area_node+0x1ff/0x350 [ 200.557301][ T7790] ? __get_vm_area_node+0x22b/0x350 [ 200.557319][ T7790] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 200.557343][ T7790] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 200.557365][ T7790] ? lock_acquire+0x1d1/0x380 [ 200.557386][ T7790] ? security_read_policy+0x105/0x2e0 [ 200.557409][ T7790] ? __mutex_lock+0x26c/0x1bd0 [ 200.557428][ T7790] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 200.557453][ T7790] ? __pfx___mutex_lock+0x10/0x10 [ 200.557472][ T7790] ? security_read_policy+0x105/0x2e0 [ 200.557492][ T7790] vmalloc_user_noprof+0x9e/0xe0 [ 200.557512][ T7790] ? security_read_policy+0x105/0x2e0 [ 200.557533][ T7790] security_read_policy+0x105/0x2e0 [ 200.557552][ T7790] ? __pfx_security_read_policy+0x10/0x10 [ 200.557573][ T7790] ? sel_open_policy+0x15e/0x380 [ 200.557598][ T7790] sel_open_policy+0x18c/0x380 [ 200.557622][ T7790] do_dentry_open+0x6ab/0x14d0 [ 200.557638][ T7790] ? __pfx_sel_open_policy+0x10/0x10 [ 200.557664][ T7790] vfs_open+0x82/0x3f0 [ 200.557687][ T7790] path_openat+0x19fa/0x2440 [ 200.557709][ T7790] ? __pfx_path_openat+0x10/0x10 [ 200.557734][ T7790] do_file_open+0x20e/0x430 [ 200.557761][ T7790] ? __pfx_do_file_open+0x10/0x10 [ 200.557795][ T7790] ? _raw_spin_unlock+0x28/0x50 [ 200.557810][ T7790] ? alloc_fd+0x471/0x7a0 [ 200.557836][ T7790] do_sys_openat2+0x10f/0x1e0 [ 200.557857][ T7790] ? __pfx_do_sys_openat2+0x10/0x10 [ 200.557888][ T7790] __x64_sys_openat+0x12d/0x210 [ 200.557911][ T7790] ? __pfx___x64_sys_openat+0x10/0x10 [ 200.557942][ T7790] do_syscall_64+0x123/0x790 [ 200.557964][ T7790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.557982][ T7790] RIP: 0033:0x7fa573f9e159 [ 200.557996][ T7790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.558010][ T7790] RSP: 002b:00007fa574e9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 200.558026][ T7790] RAX: ffffffffffffffda RBX: 00007fa574225fa0 RCX: 00007fa573f9e159 [ 200.558036][ T7790] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 200.558046][ T7790] RBP: 00007fa574035024 R08: 0000000000000000 R09: 0000000000000000 [ 200.558056][ T7790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.558066][ T7790] R13: 00007fa574226038 R14: 00007fa574225fa0 R15: 00007ffd28593428 [ 200.558088][ T7790] [ 200.566190][ T7790] Mem-Info: [ 200.566201][ T7790] active_anon:11169 inactive_anon:7 isolated_anon:0 [ 200.566201][ T7790] active_file:0 inactive_file:57848 isolated_file:0 [ 200.566201][ T7790] unevictable:0 dirty:314 writeback:0 [ 200.566201][ T7790] slab_reclaimable:7534 slab_unreclaimable:102352 [ 200.566201][ T7790] mapped:30322 shmem:4643 pagetables:1206 [ 200.566201][ T7790] sec_pagetables:0 bounce:0 [ 200.566201][ T7790] kernel_misc_reclaimable:0 [ 200.566201][ T7790] free:1288353 free_pcp:17202 free_cma:0 [ 200.566244][ T7790] Node 0 active_anon:44676kB inactive_anon:28kB active_file:0kB inactive_file:231184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121288kB dirty:1252kB writeback:0kB shmem:18572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12452kB pagetables:4692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 200.566285][ T7790] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 200.566324][ T7790] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.566367][ T7790] lowmem_reserve[]: 0 2470 2470 2470 2470 [ 200.566395][ T7790] Node 0 DMA32 free:1199368kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:44676kB inactive_anon:28kB active_file:0kB inactive_file:231184kB unevictable:0kB writepending:1252kB zspages:0kB present:3129332kB managed:2530224kB mlocked:0kB bounce:0kB free_pcp:68808kB local_pcp:37872kB free_cma:0kB [ 200.566438][ T7790] lowmem_reserve[]: 0 0 0 0 0 [ 200.566465][ T7790] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:76kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.566506][ T7790] lowmem_reserve[]: 0 0 0 0 0 [ 200.566532][ T7790] Node 1 Normal free:3938684kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.566575][ T7790] lowmem_reserve[]: 0 0 0 0 0 [ 200.566600][ T7790] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 200.566690][ T7790] Node 0 DMA32: 116*4kB (UME) 165*8kB (UME) 412*16kB (UME) 591*32kB (UME) 516*64kB (UME) 121*128kB (UME) 35*256kB (UME) 43*512kB (UM) 21*1024kB (UME) 19*2048kB (UME) 252*4096kB (UM) = 1199384kB [ 200.566821][ T7790] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 200.566898][ T7790] Node 1 Normal: 1*4kB (M) 7*8kB (UM) 6*16kB (UM) 7*32kB (UM) 8*64kB (UM) 4*128kB (UM) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3938684kB [ 200.567032][ T7790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 200.567045][ T7790] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 200.567056][ T7790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 200.567068][ T7790] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 200.567080][ T7790] 62487 total pagecache pages [ 200.567086][ T7790] 0 pages in swap cache [ 200.567091][ T7790] Free swap = 124996kB [ 200.567097][ T7790] Total swap = 124996kB [ 200.567103][ T7790] 2097051 pages RAM [ 200.567108][ T7790] 0 pages HighMem/MovableOnly [ 200.567114][ T7790] 432860 pages reserved [ 200.567119][ T7790] 0 pages cma reserved [ 200.668562][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 200.668576][ T30] audit: type=1400 audit(1788556479.288:588): avc: denied { create } for pid=7793 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.690976][ T30] audit: type=1400 audit(1788556479.308:589): avc: denied { setopt } for pid=7793 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.696348][ T30] audit: type=1404 audit(1788556479.318:590): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 200.732526][ T5603] usb-storage 5-1:3.117: USB Mass Storage device detected [ 200.759315][ T30] audit: type=1400 audit(1788556479.368:591): avc: denied { shutdown } for pid=7793 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=0 [ 200.825827][ T7741] Set syz1 is full, maxelem 65536 reached [ 200.879142][ T30] audit: type=1400 audit(1788556479.498:592): avc: denied { read write } for pid=5596 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.934894][ T30] audit: type=1400 audit(1788556479.558:593): avc: denied { allowed } for pid=7798 comm="syz.1.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 200.936736][ T30] audit: type=1400 audit(1788556479.558:594): avc: denied { create } for pid=7798 comm="syz.1.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 200.937599][ T30] audit: type=1400 audit(1788556479.558:595): avc: denied { execmem } for pid=7800 comm="syz.2.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 200.976803][ T5603] usb-storage 5-1:3.117: device ignored [ 201.034320][ T30] audit: type=1400 audit(1788556479.658:596): avc: denied { read write } for pid=5598 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 201.096514][ T30] audit: type=1400 audit(1788556479.718:597): avc: denied { create } for pid=7803 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 201.169849][ T5603] usb 5-1: USB disconnect, device number 20 [ 202.168019][ T7824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.118828][ T7856] bridge0: port 3(syz_tun) entered blocking state [ 204.118922][ T7856] bridge0: port 3(syz_tun) entered disabled state [ 204.119120][ T7856] syz_tun: entered allmulticast mode [ 204.143905][ T7856] syz_tun: entered promiscuous mode [ 204.167207][ T7856] bridge0: port 3(syz_tun) entered blocking state [ 204.167413][ T7856] bridge0: port 3(syz_tun) entered listening state [ 205.677643][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 205.677684][ T30] audit: type=1400 audit(1788556484.298:684): avc: denied { prog_load } for pid=7880 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 205.703490][ T30] audit: type=1400 audit(1788556484.328:685): avc: denied { create } for pid=7880 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 205.705210][ T30] audit: type=1400 audit(1788556484.328:686): avc: denied { prog_load } for pid=7880 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 205.705867][ T30] audit: type=1400 audit(1788556484.328:687): avc: denied { mounton } for pid=7880 comm="syz.2.659" path="/111/sys" dev="tmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 205.711232][ T30] audit: type=1400 audit(1788556484.338:688): avc: denied { read write } for pid=5598 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.797638][ T30] audit: type=1400 audit(1788556484.418:689): avc: denied { read write } for pid=7880 comm="syz.2.659" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 205.885731][ T30] audit: type=1400 audit(1788556484.508:690): avc: denied { mounton } for pid=7884 comm="syz.0.660" path="/124/trace" dev="tmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 205.886406][ T30] audit: type=1400 audit(1788556484.508:691): avc: denied { read write } for pid=7884 comm="syz.0.660" name="video1" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 205.886949][ T30] audit: type=1400 audit(1788556484.508:692): avc: denied { read } for pid=7884 comm="syz.0.660" dev="nsfs" ino=4026532820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 205.894126][ T30] audit: type=1400 audit(1788556484.508:693): avc: denied { read } for pid=7884 comm="syz.0.660" dev="nsfs" ino=4026532820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 206.004943][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 206.687966][ T7907] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 206.702486][ T7907] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 206.876415][ T7913] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 206.918589][ T7913] syzkaller0: entered promiscuous mode [ 206.918625][ T7913] syzkaller0: entered allmulticast mode [ 208.219473][ T7950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.688'. [ 208.960466][ T7963] syzkaller0: entered promiscuous mode [ 208.960491][ T7963] syzkaller0: entered allmulticast mode [ 210.156410][ T7989] syz.0.705 (7989): drop_caches: 2 [ 210.809403][ T30] kauditd_printk_skb: 137 callbacks suppressed [ 210.809430][ T30] audit: type=1400 audit(1788556489.438:831): avc: denied { create } for pid=8001 comm="syz.2.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 210.852954][ T30] audit: type=1400 audit(1788556489.478:832): avc: denied { prog_load } for pid=8001 comm="syz.2.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 210.935936][ T30] audit: type=1400 audit(1788556489.558:833): avc: denied { execmem } for pid=8003 comm="syz.0.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 211.019498][ T30] audit: type=1400 audit(1788556489.648:834): avc: denied { read } for pid=8003 comm="syz.0.710" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 211.239852][ T30] audit: type=1400 audit(1788556489.858:835): avc: denied { read write } for pid=5596 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 211.273830][ T30] audit: type=1400 audit(1788556489.898:836): avc: denied { execmem } for pid=8006 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 211.294063][ T30] audit: type=1400 audit(1788556489.898:837): avc: denied { create } for pid=8008 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 211.319606][ T30] audit: type=1400 audit(1788556489.938:838): avc: denied { create } for pid=8008 comm="syz.0.711" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 211.327494][ T30] audit: type=1400 audit(1788556489.948:839): avc: denied { read write } for pid=5598 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 211.412842][ T30] audit: type=1400 audit(1788556490.038:840): avc: denied { read write } for pid=8011 comm="syz.2.713" name="vbi1" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 215.869250][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 215.869438][ T30] audit: type=1400 audit(1788556494.488:926): avc: denied { read write } for pid=8081 comm="syz.2.738" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 216.377402][ T30] audit: type=1400 audit(1788556494.998:927): avc: denied { read write } for pid=5598 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 216.523662][ T30] audit: type=1400 audit(1788556495.148:928): avc: denied { read write } for pid=8089 comm="syz.3.740" name="vbi5" dev="devtmpfs" ino=978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 216.547552][ T30] audit: type=1400 audit(1788556495.168:929): avc: denied { prog_load } for pid=8089 comm="syz.3.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 216.632307][ T30] audit: type=1400 audit(1788556495.258:930): avc: denied { prog_load } for pid=8089 comm="syz.3.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 216.655929][ T30] audit: type=1400 audit(1788556495.278:931): avc: denied { create } for pid=8089 comm="syz.3.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 216.698277][ T30] audit: type=1400 audit(1788556495.308:932): avc: denied { prog_load } for pid=8089 comm="syz.3.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 216.720154][ T30] audit: type=1400 audit(1788556495.348:933): avc: denied { mounton } for pid=8089 comm="syz.3.740" path="/136/sys" dev="tmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 216.766637][ T30] audit: type=1400 audit(1788556495.388:934): avc: denied { read write } for pid=8089 comm="syz.3.740" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 216.798648][ T30] audit: type=1400 audit(1788556495.418:935): avc: denied { execmem } for pid=8092 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 217.574912][ T6531] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.765437][ T6531] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.903032][ T6531] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.080447][ T6531] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.598813][ T6531] bridge_slave_1: left allmulticast mode [ 218.598859][ T6531] bridge_slave_1: left promiscuous mode [ 218.600202][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.640099][ T6531] bridge_slave_0: left allmulticast mode [ 218.640129][ T6531] bridge_slave_0: left promiscuous mode [ 218.640280][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.252246][ T6531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.281598][ T6531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.296416][ T6531] bond0 (unregistering): Released all slaves [ 219.360233][ C1] bridge0: port 3(syz_tun) entered learning state [ 219.420181][ T6531] tipc: Left network mode [ 220.778258][ T6531] hsr_slave_0: left promiscuous mode [ 220.783815][ T6531] hsr_slave_1: left promiscuous mode [ 220.784521][ T6531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.784543][ T6531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.790262][ T6531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.790866][ T6531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.841965][ T6531] veth1_macvtap: left promiscuous mode [ 220.842034][ T6531] veth0_macvtap: left promiscuous mode [ 220.842113][ T6531] veth1_vlan: left promiscuous mode [ 220.842218][ T6531] veth0_vlan: left promiscuous mode [ 220.880947][ T30] kauditd_printk_skb: 3521 callbacks suppressed [ 220.880986][ T30] audit: type=1400 audit(1788556499.498:4457): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.881019][ T30] audit: type=1400 audit(1788556499.508:4458): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.881050][ T30] audit: type=1400 audit(1788556499.508:4459): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.881080][ T30] audit: type=1400 audit(1788556499.508:4460): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.881108][ T30] audit: type=1400 audit(1788556499.508:4461): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.881137][ T30] audit: type=1400 audit(1788556499.508:4462): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.881166][ T30] audit: type=1400 audit(1788556499.508:4463): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.881195][ T30] audit: type=1400 audit(1788556499.508:4464): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.881223][ T30] audit: type=1400 audit(1788556499.508:4465): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.881252][ T30] audit: type=1400 audit(1788556499.508:4466): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 221.302934][ T6531] team0 (unregistering): Port device team_slave_1 removed [ 221.328977][ T6531] team0 (unregistering): Port device team_slave_0 removed [ 221.763280][ T6531] IPVS: stop unused estimator thread 0... [ 222.654727][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 222.654766][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.654791][ T52] Tainted: [L]=SOFTLOCKUP [ 222.654796][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 222.654806][ T52] Workqueue: hci2 hci_rx_work [ 222.654833][ T52] Call Trace: [ 222.654839][ T52] [ 222.654847][ T52] dump_stack_lvl+0x100/0x190 [ 222.654872][ T52] sysfs_warn_dup.cold+0x1c/0x28 [ 222.654897][ T52] sysfs_create_dir_ns+0x24b/0x2b0 [ 222.654919][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 222.654938][ T52] ? find_held_lock+0x2b/0x80 [ 222.654960][ T52] ? kobject_add_internal+0x25f/0x930 [ 222.654983][ T52] ? kobject_add_internal+0x25f/0x930 [ 222.655008][ T52] ? do_raw_spin_unlock+0x145/0x1e0 [ 222.655031][ T52] kobject_add_internal+0x2c8/0x930 [ 222.655058][ T52] kobject_add+0x16a/0x1e0 [ 222.655080][ T52] ? __pfx_kobject_add+0x10/0x10 [ 222.655102][ T52] ? class_to_subsys+0x10f/0x150 [ 222.655126][ T52] ? kobject_put+0xb9/0x640 [ 222.655146][ T52] ? _raw_spin_unlock+0x28/0x50 [ 222.655168][ T52] device_add+0x294/0x1970 [ 222.655187][ T52] ? __pfx_dev_set_name+0x10/0x10 [ 222.655208][ T52] ? __pfx_device_add+0x10/0x10 [ 222.655227][ T52] ? mgmt_send_event_skb+0x2fb/0x460 [ 222.655251][ T52] hci_conn_add_sysfs+0x1a3/0x260 [ 222.655281][ T52] le_conn_complete_evt+0x122f/0x2130 [ 222.655312][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 222.655337][ T52] ? hci_event_packet+0x186/0xcd0 [ 222.655359][ T52] hci_le_conn_complete_evt+0x23c/0x3a0 [ 222.655378][ T52] ? skb_pull_data+0x15f/0x1e0 [ 222.655401][ T52] hci_le_meta_evt+0x34a/0x5f0 [ 222.655418][ T52] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 222.655438][ T52] hci_event_packet+0x51c/0xcd0 [ 222.655455][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 222.655472][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 222.655493][ T52] ? lockdep_hardirqs_on+0x7d/0x110 [ 222.655515][ T52] hci_rx_work+0x451/0xfc0 [ 222.655551][ T52] process_one_work+0xac7/0x1b10 [ 222.655584][ T52] ? __pfx_process_one_work+0x10/0x10 [ 222.655608][ T52] ? lock_acquire+0x1d1/0x380 [ 222.655631][ T52] ? __pfx_hci_rx_work+0x10/0x10 [ 222.655663][ T52] worker_thread+0x5ef/0xe50 [ 222.655696][ T52] ? kthread+0x13a/0x450 [ 222.655719][ T52] ? __pfx_worker_thread+0x10/0x10 [ 222.655743][ T52] kthread+0x373/0x450 [ 222.655765][ T52] ? __pfx_kthread+0x10/0x10 [ 222.655787][ T52] ret_from_fork+0x730/0xd60 [ 222.655807][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 222.655826][ T52] ? __switch_to+0x800/0x10f0 [ 222.655848][ T52] ? __pfx_kthread+0x10/0x10 [ 222.655870][ T52] ret_from_fork_asm+0x1a/0x30 [ 222.655899][ T52] [ 222.657477][ T52] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 222.657509][ T52] Bluetooth: hci2: failed to register connection device [ 223.863586][ T52] Bluetooth: hci2: hcon ffff8880217c8000 sent 1 < count 53564 [ 223.900828][ T52] Bluetooth: hci2: hcon ffff8880217c8000 sent 0 < count 9 [ 225.073932][ T8185] syzkaller0: entered promiscuous mode [ 225.073963][ T8185] syzkaller0: entered allmulticast mode [ 225.889120][ T30] kauditd_printk_skb: 14534 callbacks suppressed [ 225.889156][ T30] audit: type=1400 audit(1788556504.518:19001): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.916872][ T30] audit: type=1400 audit(1788556504.538:19002): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.940578][ T30] audit: type=1400 audit(1788556504.568:19003): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.940632][ T30] audit: type=1400 audit(1788556504.568:19004): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.940664][ T30] audit: type=1400 audit(1788556504.568:19005): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.940693][ T30] audit: type=1400 audit(1788556504.568:19006): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.950450][ T30] audit: type=1400 audit(1788556504.578:19007): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.950680][ T30] audit: type=1400 audit(1788556504.578:19008): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.950886][ T30] audit: type=1400 audit(1788556504.578:19009): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.951133][ T30] audit: type=1400 audit(1788556504.578:19010): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 227.202141][ T52] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 227.209164][ T52] Bluetooth: hci1: Injecting HCI hardware error event [ 227.210421][ T5611] Bluetooth: hci1: hardware error 0x00 [ 229.279072][ T5611] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 230.899732][ T30] kauditd_printk_skb: 25066 callbacks suppressed [ 230.899772][ T30] audit: type=1400 audit(1788556509.528:44077): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.899803][ T30] audit: type=1400 audit(1788556509.528:44078): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.899832][ T30] audit: type=1400 audit(1788556509.528:44079): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.899860][ T30] audit: type=1400 audit(1788556509.528:44080): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.899890][ T30] audit: type=1400 audit(1788556509.528:44081): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.927273][ T30] audit: type=1400 audit(1788556509.528:44082): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.928822][ T30] audit: type=1400 audit(1788556509.548:44083): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.928858][ T30] audit: type=1400 audit(1788556509.548:44084): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.928887][ T30] audit: type=1400 audit(1788556509.548:44085): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.928916][ T30] audit: type=1400 audit(1788556509.548:44086): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 234.721153][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 234.721198][ C1] bridge0: topology change detected, propagating [ 235.909792][ T30] kauditd_printk_skb: 26957 callbacks suppressed [ 235.909837][ T30] audit: type=1400 audit(1788556514.528:71044): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.909869][ T30] audit: type=1400 audit(1788556514.538:71045): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.909896][ T30] audit: type=1400 audit(1788556514.538:71046): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.909925][ T30] audit: type=1400 audit(1788556514.538:71047): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.909953][ T30] audit: type=1400 audit(1788556514.538:71048): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.909983][ T30] audit: type=1400 audit(1788556514.538:71049): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.917274][ T30] audit: type=1400 audit(1788556514.538:71050): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.917306][ T30] audit: type=1400 audit(1788556514.538:71051): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.917335][ T30] audit: type=1400 audit(1788556514.538:71052): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.917364][ T30] audit: type=1400 audit(1788556514.538:71053): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 239.557824][ T8287] syz_tun (unregistering): left allmulticast mode [ 239.697771][ T115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.761220][ T5984] bridge0: port 3(syz_tun) entered disabled state [ 239.792759][ T5984] syz_tun (unregistering): left allmulticast mode [ 239.792785][ T5984] syz_tun (unregistering): left promiscuous mode [ 239.792905][ T5984] bridge0: port 3(syz_tun) entered disabled state [ 239.929227][ T115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.065477][ T115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.152635][ T115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.300698][ T115] bridge_slave_1: left allmulticast mode [ 240.300737][ T115] bridge_slave_1: left promiscuous mode [ 240.300895][ T115] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.315319][ T115] bridge_slave_0: left allmulticast mode [ 240.315338][ T115] bridge_slave_0: left promiscuous mode [ 240.315524][ T115] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.475803][ T115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.488557][ T115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.501397][ T115] bond0 (unregistering): Released all slaves [ 240.507494][ T115] bond1 (unregistering): left allmulticast mode [ 240.507513][ T115] bond1 (unregistering): left promiscuous mode [ 240.522787][ T115] team0: Port device macvlan2 removed [ 240.534235][ T115] bond1 (unregistering): Released all slaves [ 240.608809][ T115] Uż: left promiscuous mode [ 240.920790][ T30] kauditd_printk_skb: 21796 callbacks suppressed [ 240.922377][ T30] audit: type=1400 audit(1788556519.538:92850): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 240.922410][ T30] audit: type=1400 audit(1788556519.538:92851): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 240.922439][ T30] audit: type=1400 audit(1788556519.538:92852): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 240.922468][ T30] audit: type=1400 audit(1788556519.548:92853): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 240.922497][ T30] audit: type=1400 audit(1788556519.548:92854): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 240.922525][ T30] audit: type=1400 audit(1788556519.548:92855): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 240.922554][ T30] audit: type=1400 audit(1788556519.548:92856): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 240.922583][ T30] audit: type=1400 audit(1788556519.548:92857): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 240.922611][ T30] audit: type=1400 audit(1788556519.548:92858): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 240.922640][ T30] audit: type=1400 audit(1788556519.548:92859): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 241.097263][ T115] hsr_slave_0: left promiscuous mode [ 241.120457][ T115] hsr_slave_1: left promiscuous mode [ 241.121087][ T115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.121101][ T115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.140005][ T115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.140019][ T115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.158012][ T115] veth1_macvtap: left promiscuous mode [ 241.158131][ T115] veth0_macvtap: left promiscuous mode [ 241.158201][ T115] veth1_vlan: left promiscuous mode [ 241.158221][ T115] veth0_vlan: left promiscuous mode [ 241.404722][ T115] team0 (unregistering): Port device team_slave_1 removed [ 241.422925][ T115] team0 (unregistering): Port device team_slave_0 removed [ 241.977063][ T115] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.116740][ T115] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.167326][ T115] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.237461][ T115] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.492820][ T115] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.554268][ T115] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.631787][ T115] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.706350][ T115] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.920422][ T115] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.988536][ T115] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.087181][ T115] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.195408][ T115] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.334538][ T115] bridge_slave_1: left allmulticast mode [ 243.340663][ T115] bridge_slave_1: left promiscuous mode [ 243.348542][ T115] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.358147][ T115] bridge_slave_0: left allmulticast mode [ 243.365092][ T115] bridge_slave_0: left promiscuous mode [ 243.370985][ T115] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.386628][ T115] bridge_slave_1: left allmulticast mode [ 243.392387][ T115] bridge_slave_1: left promiscuous mode [ 243.398097][ T115] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.408821][ T115] bridge_slave_0: left allmulticast mode [ 243.422100][ T115] bridge_slave_0: left promiscuous mode [ 243.422258][ T115] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.444959][ T115] bridge_slave_1: left allmulticast mode [ 243.444990][ T115] bridge_slave_1: left promiscuous mode [ 243.445109][ T115] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.457773][ T115] bridge_slave_0: left allmulticast mode [ 243.457788][ T115] bridge_slave_0: left promiscuous mode [ 243.457902][ T115] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.653752][ T115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.672802][ T115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.682531][ T115] bond0 (unregistering): Released all slaves [ 243.766954][ T115] bond1 (unregistering): (slave geneve2): Releasing active interface [ 243.804323][ T115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.817785][ T115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.828555][ T115] bond0 (unregistering): Released all slaves [ 243.833173][ T115] bond1 (unregistering): Released all slaves [ 243.945159][ T115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.956947][ T115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.966819][ T115] bond0 (unregistering): Released all slaves [ 244.073243][ T115] tipc: Left network mode [ 244.329417][ T31] INFO: task kworker/1:0:25 blocked for more than 143 seconds. [ 244.329450][ T31] Tainted: G L syzkaller #0 [ 244.329473][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.329483][ T31] task:kworker/1:0 state:D stack:24352 pid:25 tgid:25 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 244.329544][ T31] Workqueue: events_freezable mmc_rescan [ 244.329577][ T31] Call Trace: [ 244.329586][ T31] [ 244.329600][ T31] __schedule+0x1259/0x6920 [ 244.329623][ T31] ? lock_acquire+0x1d1/0x380 [ 244.329651][ T31] ? mark_held_locks+0x40/0x70 [ 244.329672][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 244.329693][ T31] ? lockdep_hardirqs_on+0x7d/0x110 [ 244.329719][ T31] ? __pfx___schedule+0x10/0x10 [ 244.329738][ T31] ? find_held_lock+0x2b/0x80 [ 244.329766][ T31] ? schedule+0x225/0x2c0 [ 244.329791][ T31] schedule+0xdd/0x2c0 [ 244.329811][ T31] schedule_timeout+0x1b2/0x280 [ 244.329846][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 244.329884][ T31] ? mark_held_locks+0x40/0x70 [ 244.329908][ T31] __wait_for_common+0x2e7/0x4c0 [ 244.329930][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 244.329963][ T31] ? __pfx___wait_for_commo ** replaying previous printk message ** [ 244.329963][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 244.329988][ T31] ? led_trigger_event+0x61/0x270 [ 244.330022][ T31] mmc_wait_for_req_done+0xcd/0x3d0 [ 244.330055][ T31] mmc_wait_for_req+0x207/0x2c0 [ 244.330082][ T31] mmc_wait_for_cmd+0x154/0x200 [ 244.330108][ T31] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 244.330149][ T31] ? __pfx_mmc_wait_done+0x10/0x10 [ 244.330177][ T31] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 244.330209][ T31] mmc_send_io_op_cond+0x128/0x2f0 [ 244.330237][ T31] ? __pfx_mmc_send_io_op_cond+0x10/0x10 [ 244.330271][ T31] ? __pfx_usleep_range_state+0x10/0x10 [ 244.330304][ T31] mmc_attach_sdio+0xd0/0xec0 [ 244.330331][ T31] ? mmc_send_if_cond_pcie+0x20e/0x370 [ 244.330353][ T31] ? __pfx_mmc_send_if_cond_pcie+0x10/0x10 [ 244.330386][ T31] ? __pfx_mmc_go_idle+0x10/0x10 [ 244.330411][ T31] ? mmc_sw_reset+0x98/0xd0 [ 244.330433][ T31] ? __pfx_mmc_attach_sdio+0x10/0x10 [ 244.330461][ T31] ? mmc_attach_sd_uhs2+0x2d0/0x590 [ 244.330489][ T31] mmc_rescan+0xd2b/0x11c0 [ 244.330526][ T31] process_one_work+0xac7/0x1b10 [ 244.330567][ T31] ? __pfx_process_one_work+0x10/0x10 [ 244.330597][ T31] ? lock_acquire+0x1d1/0x380 [ 244.330626][ T31] ? __pfx_mmc_rescan+0x10/0x10 [ 244.330656][ T31] worker_thread+0x5ef/0xe50 [ 244.330694][ T31] ? kthread+0x13a/0x450 [ 244.330719][ T31] ? __pfx_worker_thread+0x10/0x10 [ 244.330746][ T31] kthread+0x373/0x450 [ 244.330771][ T31] ? __pfx_kthread+0x10/0x10 [ 244.330797][ T31] ret_from_fork+0x730/0xd60 [ 244.402556][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 244.402587][ T31] ? __switch_to+0x800/0x10f0 [ 244.429081][ T31] ? __pfx_kthread+0x10/0x10 [ 244.429112][ T31] ret_from_fork_asm+0x1a/0x30 [ 244.429141][ T31] [ 244.429154][ T31] INFO: task kworker/1:1:44 blocked for more than 143 seconds. [ 244.429169][ T31] Tainted: G L syzkaller #0 [ 244.429178][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.429185][ T31] task:kworker/1:1 state:D stack:25816 pid:44 tgid:44 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 244.429235][ T31] Workqueue: usb_hub_wq hub_event [ 244.429255][ T31] Call Trace: [ 244.429260][ T31] [ 244.429269][ T31] __schedule+0x1259/0x6920 [ 244.429286][ T31] ? lock_acquire+0x1d1/0x380 [ 244.429309][ T31] ? mark_held_locks+0x40/0x70 [ 244.429325][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 244.429346][ T31] ? lockdep_hardirqs_on+0x7d/0x110 [ 244.429366][ T31] ? __pfx___schedule+0x10/0x10 [ 244.429381][ T31] ? find_held_lock+0x2b/0x80 [ 244.429403][ T31] ? schedule+0x225/0x2c0 [ 244.429422][ T31] schedule+0xdd/0x2c0 [ 244.429438][ T31] schedule_timeout+0x1b2/0x280 [ 244.429461][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 244.429492][ T31] ? mark_held_locks+0x40/0x70 [ 244.429511][ T31] __wait_for_common+0x2e7/0x4c0 [ 244.429529][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 244.429555][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 244.429572][ T31] ? __flush_work+0x4ca/0xcb0 [ 244.429596][ T31] ? find_held_lock+0x2b/0x80 [ 244.429617][ T31] ? __flush_work+0x928/0xcb0 [ 244.429639][ T31] ? __flush_work+0x928/0xcb0 [ 244.429664][ T31] ? __flush_work+0x4ca/0xcb0 [ 244.429687][ T31] __flush_work+0x7c7/0xcb0 [ 244.429711][ T31] ? __timer_delete+0xd1/0x1b0 [ 244.429736][ T31] ? __pfx___flush_work+0x10/0x10 [ 244.429762][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 244.429790][ T31] ? __pfx___might_resched+0x10/0x10 [ 244.429805][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 244.429820][ T31] ? usb_hcd_flush_endpoint+0x359/0x400 [ 244.429846][ T31] cancel_delayed_work_sync+0xd1/0xf0 [ 244.429865][ T31] mmc_stop_host+0xe9/0x400 [ 244.429889][ T31] mmc_remove_host+0x15/0x60 [ 244.429912][ T31] vub300_disconnect+0x12d/0x170 [ 244.429936][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 244.429962][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 244.429983][ T31] device_remove+0x12a/0x180 [ 244.430008][ T31] device_release_driver_internal+0x44e/0x620 [ 244.430030][ T31] bus_remove_device+0x2bc/0x560 [ 244.430055][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 244.430076][ T31] ? __pfx_device_remove_attrs+0x10/0x10 [ 244.430105][ T31] device_del+0x376/0x9b0 [ 244.430132][ T31] ? __pfx_device_del+0x10/0x10 [ 244.430154][ T31] ? kobject_put+0xb9/0x640 [ 244.430181][ T31] usb_disable_device+0x367/0x810 [ 244.430206][ T31] usb_disconnect+0x2e2/0x9a0 [ 244.430229][ T31] hub_event+0x1bb1/0x4420 [ 244.430271][ T31] ? __lock_acquire+0x4c5/0x1ec0 [ 244.430291][ T31] ? __pfx_hub_event+0x10/0x10 [ 244.430309][ T31] ? mark_lock+0xea0/0x1020 [ 244.430327][ T31] ? lock_acquire+0x1d1/0x380 [ 244.430347][ T31] ? process_one_work+0xa2c/0x1b10 [ 244.430371][ T31] ? process_one_work+0x906/0x1b10 [ 244.430393][ T31] ? process_one_work+0x906/0x1b10 [ 244.430420][ T31] process_one_work+0xac7/0x1b10 [ 244.430452][ T31] ? __pfx_process_one_work+0x10/0x10 [ 244.430476][ T31] ? lock_acquire+0x1d1/0x380 [ 244.430501][ T31] ? __pfx_hub_event+0x10/0x10 [ 244.435148][ T31] worker_thread+0x5ef/0xe50 [ 244.435182][ T31] ? kthread+0x13a/0x450 [ 244.435202][ T31] ? __pfx_worker_thread+0x10/0x10 [ 244.435224][ T31] kthread+0x373/0x450 [ 244.435244][ T31] ? __pfx_kthread+0x10/0x10 [ 244.435267][ T31] ret_from_fork+0x730/0xd60 [ 244.435286][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 244.435304][ T31] ? __switch_to+0x800/0x10f0 [ 244.435326][ T31] ? __pfx_kthread+0x10/0x10 [ 244.435353][ T31] ret_from_fork_asm+0x1a/0x30 [ 244.435381][ T31] [ 244.435732][ T31] [ 244.435732][ T31] Showing all locks held in the system: [ 244.435740][ T31] locks held by pool_workqueue_/3: 1, last CPU#0: [ 244.435752][ T31] #0: ffffffff8edf7f68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 244.435801][ T31] locks held by pr/ttyS0/16: 2, last CPU#1: [ 244.435812][ T31] #0: ffffffff8edd8338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 244.435852][ T31] #1: ffffffff9bc64c78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 244.435896][ T31] locks held by kworker/1:0/25: 2, on CPU#1: [ 244.435907][ T31] #0: ffff88801c056140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 244.435951][ T31] #1: ffffc900001f7d08 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 244.435996][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 244.436006][ T31] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 244.436052][ T31] locks held by kworker/1:1/44: 5, on CPU#1: [ 244.436063][ T31] #0: ffff8880226d8940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 244.436108][ T31] #1: ffffc90000b47d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 244.436151][ T31] #2: ffff88802b0851d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 244.436189][ T31] #3: ffff888026ecb1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 244.436226][ T31] #4: ffff8880226b61a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 244.436268][ T31] locks held by kworker/u8:5/115: 5, on CPU#0: [ 244.436278][ T31] #0: ffff88801d2d8940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 244.436322][ T31] #1: ffffc9000267fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 244.436370][ T31] #2: ffffffff90cb6aa8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 244.436409][ T31] #3: ffffffff90ccf580 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x4d/0x360 [ 244.436448][ T31] #4: ffff888055af07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_stop+0xc5/0x2f0 [ 244.436497][ T31] locks held by kworker/u8:7/1282: 3, on CPU#0: [ 244.436508][ T31] #0: ffff88801e315140 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 244.436551][ T31] #1: ffffc900055c7d08 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 244.436606][ T31] #2: ffffffff90ccf580 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xb9/0x640 [ 244.436660][ T31] locks held by dhcpcd/5261: 2, last CPU#0: [ 244.436671][ T31] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: security_sid_to_context_core+0x21f/0x700 [ 244.436709][ T31] #1: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: sidtab_sid2str_get+0x84/0x670 [ 244.436747][ T31] locks held by getty/5352: 2, on CPU#1: [ 244.436757][ T31] #0: ffff88803420b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 244.441135][ T31] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 244.441185][ T31] locks held by kworker/u8:12/6529: 5, last CPU#0: [ 244.441197][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 244.441241][ T31] #1: ffffc9001c1dfd08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 244.441285][ T31] #2: ffffffff8ec7ca50 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 244.441328][ T31] #3: ffffffff8ef40280 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xb5/0x270 [ 244.441378][ T31] #4: ffffffff8ec9c340 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 244.441424][ T31] [ 244.441428][ T31] ============================================= [ 244.441428][ T31] [ 244.441435][ T31] NMI backtrace for cpu 0 [ 244.441447][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 244.441467][ T31] Tainted: [L]=SOFTLOCKUP [ 244.441473][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 244.441482][ T31] Call Trace: [ 244.441487][ T31] [ 244.441493][ T31] dump_stack_lvl+0x100/0x190 [ 244.441516][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 244.441542][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 244.441562][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 244.441591][ T31] sys_info+0x141/0x190 [ 244.441611][ T31] watchdog+0xcb1/0x1030 [ 244.441632][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 244.441649][ T31] ? __pfx_watchdog+0x10/0x10 [ 244.441667][ T31] ? __kthread_parkme+0x18f/0x230 [ 244.441687][ T31] ? kthread+0x13a/0x450 [ 244.441706][ T31] ? __pfx_watchdog+0x10/0x10 [ 244.441721][ T31] kthread+0x373/0x450 [ 244.441740][ T31] ? __pfx_kthread+0x10/0x10 [ 244.441761][ T31] ret_from_fork+0x730/0xd60 [ 244.441779][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 244.441797][ T31] ? __switch_to+0x800/0x10f0 [ 244.441818][ T31] ? __pfx_kthread+0x10/0x10 [ 244.441840][ T31] ret_from_fork_asm+0x1a/0x30 [ 244.441868][ T31] [ 244.441882][ T31] Sending NMI from CPU 0 to CPUs 1: [ 244.441901][ C1] NMI backtrace for cpu 1 [ 244.441913][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.441932][ C1] Tainted: [L]=SOFTLOCKUP [ 244.441936][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 244.441944][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 244.441965][ C1] Code: e7 5b fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 cd 1d 23 06 e8 38 0b cf fc eb a2 e8 c1 0b [ 244.441978][ C1] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 244.441990][ C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 244.441999][ C1] RDX: 00000000000003fd RSI: ffffffff85b00860 RDI: ffffffff9bc64ca0 [ 244.442008][ C1] RBP: ffffffff9bc64c60 R08: 0000000000000001 R09: 000000000000001f [ 244.442017][ C1] R10: 0000000000000000 R11: 205d313354202020 R12: 0000000000000000 [ 244.442025][ C1] R13: 0000000000000020 R14: fffffbfff378c9e9 R15: dffffc0000000000 [ 244.442035][ C1] FS: 0000000000000000(0000) GS:ffff888123c60000(0000) knlGS:0000000000000000 [ 244.442049][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.442058][ C1] CR2: 000056550b838bf0 CR3: 000000007734e000 CR4: 00000000003526f0 [ 244.442067][ C1] Call Trace: [ 244.442071][ C1] [ 244.442077][ C1] wait_for_lsr+0x13a/0x210 [ 244.442093][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 244.442109][ C1] __serial8250_console_fifo_write+0xa5/0x290 [ 244.442123][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 244.442144][ C1] serial8250_console_write+0xf46/0x1330 [ 244.442162][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 244.442179][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 244.442201][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 244.442224][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 244.442245][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 244.442265][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 244.442284][ C1] ? do_raw_spin_lock+0xd0/0x260 [ 244.442303][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 244.442320][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 244.442334][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 244.442353][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 244.442375][ C1] nbcon_kthread_func+0x613/0x7d0 [ 244.442397][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 244.442418][ C1] ? __kthread_parkme+0x18f/0x230 [ 244.442435][ C1] ? kthread+0x13a/0x450 [ 244.442451][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 244.442470][ C1] kthread+0x373/0x450 [ 244.442486][ C1] ? __pfx_kthread+0x10/0x10 [ 244.442503][ C1] ret_from_fork+0x730/0xd60 [ 244.442518][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 244.442533][ C1] ? __switch_to+0x800/0x10f0 [ 244.442550][ C1] ? __pfx_kthread+0x10/0x10 [ 244.442569][ C1] ret_from_fork_asm+0x1a/0x30 [ 244.442588][ C1] [ 244.450394][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 245.768968][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 245.779631][ T31] Tainted: [L]=SOFTLOCKUP [ 245.783934][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 245.793966][ T31] Call Trace: [ 245.797227][ T31] [ 245.800141][ T31] dump_stack_lvl+0x100/0x190 [ 245.804814][ T31] vpanic+0x553/0x970 [ 245.808777][ T31] ? __pfx_vpanic+0x10/0x10 [ 245.813266][ T31] panic+0xd1/0xe0 [ 245.816973][ T31] ? __pfx_panic+0x10/0x10 [ 245.821374][ T31] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 245.827519][ T31] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 245.833671][ T31] ? watchdog.cold+0x1ec/0x234 [ 245.838418][ T31] watchdog.cold+0x1fd/0x234 [ 245.842993][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 245.848783][ T31] ? __pfx_watchdog+0x10/0x10 [ 245.853442][ T31] ? __kthread_parkme+0x18f/0x230 [ 245.858451][ T31] ? kthread+0x13a/0x450 [ 245.862679][ T31] ? __pfx_watchdog+0x10/0x10 [ 245.867337][ T31] kthread+0x373/0x450 [ 245.871390][ T31] ? __pfx_kthread+0x10/0x10 [ 245.875968][ T31] ret_from_fork+0x730/0xd60 [ 245.880541][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 245.885637][ T31] ? __switch_to+0x800/0x10f0 [ 245.890301][ T31] ? __pfx_kthread+0x10/0x10 [ 245.894883][ T31] ret_from_fork_asm+0x1a/0x30 [ 245.899637][ T31] [ 245.902834][ T31] Kernel Offset: disabled [ 245.907135][ T31] Rebooting in 86400 seconds..