last executing test programs: 49.781120102s ago: executing program 4 (id=5): mkdir(0x0, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x6ac81, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x80, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x6000) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 47.979877044s ago: executing program 4 (id=6): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x338, 0xffffffff, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x5, 0x2}, {0x1, 0x5, 0x3}, 0x81, 0x8}}}, {{@ip={@remote, @rand_addr=0x64010102, 0xffffffff, 0xffffff00, 'ipvlan1\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x6, 0x1, 0x9}, 0x0, 0xc0, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x2, 0x2}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xfffffffe, 0x101, 0x4, 0x0, 0x0, "7d2419eac4d08d902c3bd429f399a7bff444f1364b3c26d156a81e0126464f76f04d70759aba14f7357c20a9353a49e5b6e484ab0e4dba2cc0acdda0e1dd503d"}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xfff, 0x2, 0x10, 0xf4a, 0x9, 0x40, 0x8, 0x3]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 47.849048993s ago: executing program 4 (id=8): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xc}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000070000800900010073797a300000000048000000090a010400000000000000000700000008000a4000dd00000900020073797a30000000000900010073797a3000000000080005400000002f04001280080003400000010614000000100001000000000000000000"], 0x90}}, 0x20050800) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r13 = dup(r12) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000e40), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[{@access_uid}]}}) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000300)) ioctl$KVM_RUN(r9, 0xae80, 0x0) r14 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 47.340824765s ago: executing program 4 (id=10): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2003, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0, 0x0, 0xffff0000}]) 46.796818588s ago: executing program 4 (id=13): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000008000080000020073797a5f74756e0000000000000000001400028004000100040004000800020000000000"], 0x40}}, 0x2008040) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYRES32=r0, @ANYBLOB="2a4821caba67c9c44c6306ad97fda4c029f89019cf4a36fd8e1fd2c06350ec210650f7f800d3ef1251e1593afe31dcb5a01da4c1e5ab44c8bb6a03be9fb22a1c0a4384ef5b4d20acb994602a635831f9b60ca79a4f2238042b0b7599f95e8519ab2fd1a5ce2f5d8e8a2f41c82504b13016343eee581d577dfb6334d51d0ba03c879223e91d7469c73c4f8715bdf425b1d43868c2fbd3fe2d8c5fe6c0959164c22b00ef6da8717a84960c6e3d37aad7243735d8084906382546b5e4bb91145e3e20c834c85f4acb54760232ba42e8bc5e03ece115c96a0c0a81c8bba2c4161774d43281d379e7d6d17db061e6ca5bd6ffdbe45f94ae3e5e2ef9ed4e80a258cd0ad3e9500fa84c36a0d8c14d595087cb22da540600eb2f66c0e1b6228bee61bf10df0d111cefe6c140a73d2933742f92e941f8d133a40b29ace138da0d8cb48fa1319a54e102252b959d8590b9d3969f1a3f0559ac2b4ce678d1ba85f2de1ac1ed5b2207485823ed85b488bcc98bfe04bb277e80a02fe8a794c85a5ff0bfcdc5e5ed55448cb4569270f2a40ab714b7d40484c07b0b7d5f6beff95a39d49e271874f8d742e8960b783b07936456d02b1d2b461c154d0d115f089da780e8f2b9d3a17bd0150beb8a5418ff53df18cc1530cef875d96b0c393baa46cb19a0580aef7585264aa5ce8d11bd90da844a00af3474aeef88b2bbfcc5de8c355302d13c0a541533753e84cd04e27fa3aa8e0dbab054f691df00e89a84ebd442b3febe7f38dee4ea4188d39fbf204ee4b94f3bee6759d20710250361bb5ee1e2b9983b909cc7ae9a2dea9ae49024a1e3189bd96a6e7b34b4a93d168e632e9de78c6e4958c2ca6260cf1313f51032dcd8681def82dbeae5ec3bd7928f217ca487482019781f0a0c1e7780741ffbf97522945d229c82660291172937f91e4ddaf562aa6a3ed4df4808b0d7589e0b25835a859d2dcf21cf81a072920bce10a4477d2d5db45644c95a18c1e47c6a9fea38de70a6eda4e9ead6b9be6e294308507b3329fc246d51b8611b5ff7e0750178facee0d6957ebbc3adede84578ccbb9d1c769a1adc65725f759e5c302436815ceafa728aada9614289ed3cbf45bdf34a98645f3ba26bf9d01d2b593e4ab3effbed07fdf5e77bdd3bcbc5ff0af2e0aa41e909867e6653623b8c53da8a0dda32380e43c983f3119077ac0e2fdb28f9128911f064baf4a775416484c351894d2e3cefea41ddf5157a9c1e6960ba4279b5f1e9ff63567faf93bbf8f6082bbe54cfc8b9cebabc4fac626102dd521b8b9dcbdd314f2f2112b23eb40057731a4e638ebcd36baf3640095813e4a1b4db243e17dcdf094d64b7eebc7cf188e8cbb6f853c52c0446b85cb9126c48dab8f1cc24ff684497cf3074b289d73f1a4672c4bbb4fbf586eb3db4f971d679dc27dd564b65fad234a27ffeadf2b49bf0d67e51f008c23181cd6b46f990b87b8beb6941843e1e046be36544814adc129ff928499ad5f29e787d2b50d33af146f7976678855e36c607a75600d6f06261156bce98039e3a1b6d53872e9ac8112b14069587d3b8be6e62459bc0fe65a5ab224db3a92cdb922dbc7e7275a4fb6bd34385abeb0e38037fa3e9ff5c2df35f875ff1345a029a03d5a34f9f44e60865c2091c0c8c79b3b1ab7366f54dec7411fb2fc8ed001cc26dc149eb098c802d7268aa948aa8b2922ca35fd9f98f02d3bb73b4b5c8d03471f4b547263de692d9a1692d607a5bd775f84c74245f317cc31e8abf5b2c10c81d758ad9f5f2cdf6188b6957437e6ce3098ff15830557c88d8b9de29b4807b6270e85558d1cf4e1f7c74540e83e14c62954f3f5ede82c18bc3ebd03d6f68d4e16e76fd7512d0092e6b2096d00e226b52eb5026c874a198a28b9b0da5ee77db79fe5904a7dd3cd4bc9a9e504a5be39b53a1bbb1b6882feca0f93db088442bcb082fa3b8e0edf3442140ef93e7e192709c7774f68cf720dd6e7519972d82cf5edb09260b7d99d07a3a69be24876ae4140543830d5c22b5f2a72294b89d9329e6beb1c1f474f75a06dd64201f2b0bf0e612a6d35d2503dfb001c292f72bfb1ed7d7ef8116e43dcf0e0a9ff124d36ff84286265bf4189ea5ec7a4dd19871581ece2aa02ec70631740b94ddc6fcdddbe7cadca54ec5bafa08a40baa19e3dc7192e2fb9fddfaa18f715ed59bbc5b9305d8bf933e50f2a2bc88be0b9c6efd3cda39daa027c15385173b3bd3f70bc5892e3c8cd449b30ecda586839205ab3bdc43d3de204de0d71105299a0a790478358245c34174d08da627dbeac770368e26c8acd4a315d33c7f21ce297d5975c89bf286af0a27340f9b4631748ffe528f8c102b2d468e16ec73b748f31860bb102e93fa55bd11d02db3d399a76b9ccbd4905502e8b3405ff161e3504fbab94ea8bf321bfc9e7d20243a0fb7596c8310436cdeb41dc2a5d390db977883ab6c95d67cd6e72c0fda6e25ffe499fd026927511507c9fadc8afcfe43b7e38cf5df10dab57de59781db4ba22efc7e617fa5d9f6c4cadb038c496697b0c38689d27e13c377661a447427433dd49a1e7431900f71115bd60d3088f49718dfa31b97ad069b5db735114f99733578e549b7fff282cb20b63e04a949d48c03bf727d9c1e6e027e5aafb6e8af3f39086681b173c3572e2cb5fea7342ac9285e7675fb673cc5451108140e69f355311b01e359ed6829b23804c7671e8024a9216b505fdfb094239dae7b7d1897b5de611550eb7fb36e60fea56f74531615780aefa8564209ed152f74f156896ef2157990d0f149f869d6edeafe232c413500112d54d9995b16f824ff4f5195369c6087fb75e7f8c403c3584c35c23636e5ebbed05fd367c18eaebbf91ccf3e60975920f8a98aaf8998ad6edf63a44943d0c09989035cc5a0c50402b5b1eea960a68c9b8f73874b64753ebf953df133f53d277aa4a9281423b4e2e0099d5c348c7c0c35becc1d69694677f47b8660b17e607a67ecf1dd94c5ee5fa608811aaaf70e8f870c647e28b6024b74103caa56c5a9e0c879c5564d2f1feb33057491e6841c6ce5e7348198d539011f4be2b5352b47da49563db751f92db3e174909bb1d18ff24fa8efe2658aeb7166718d9bcbf96ec6e38ab05a64832ca3e34368b0e824a3bc9fe6da70c6789813dddb48956c5caa713648ba4d4abec105c8749a094a6150d04743a1e3d8eceba3084f2d96e0ac231018d0ef8d47b3d5325652a2f2d3066398bf5877ca7032951e04bee1cf0f9d51f83d71486444fd3257e089dc022169680bcf51e26fdfd5e331e3b6d273937df0822413131ff4e13af214a6c24dcca11b3d0c14a1ab913b74c9eaaa047ae7318abfc3184bc1fc7944fbf5da13083bfc208e76e64d71826ebcb32a820b0d64118fbe530e9536fc3b7a79b18e55b0d199037e7be7eef6e65ca030460912a519da1c354c8802cc2e9e7196b9555c314ea961bfc0920d3ca9d3c44e69207939e4865e93b2c1268b01d48d6acb1527754b0b33762d653c231ebcb25858e1ea9cdab24d013215e241ac8cbeaa1bf2eab288c18ec67319a2a7b57371f9098fdbb8896f0a723c97a281936c0f895284cd452d958a842568bb6e41b614d3d7c6c6f508e97f6e8867aebad45d48c492f5156b3e01b3cb890d62915caed32042dead0843566a7938242b7bcbf6cd0831330868aa30de787e99fb0be4f8a4923e4969f883b28dda0e6be8096d20ea30c3067943da7e8aabb86ca3fa4a9526b2da597e5c4c0cbcb917794213114872be68dc70b56d0a9d2a4ec796e19b7179390fef8088a60fc17d22240f021a9a3f813ae466463195e651f418a56c35741666113fb50dafaf23c8acb170a20198336b56eb3a2331f216e59f163f4f41031f017b08c07d3bf5ebfbf0f2bb8a533da7e55dcd73d121f61e32e867977b16e58eddf5fda820ded09cd81cb0d0f3a1e327536d9a2a8d8a1961591b2c7a080c7edd76fadf20993f9b5b6e0fd6c220f26d59f7174076af1aaba51f5563d875336d7126a0db8b81c8e973e914435bac501db49c94dce7f76a9427b1bcda070368b699d6575ec9e814cd40f6486d2742bfb92afbe5e03b3cffe64b4c328636593c023eeeefa5d689e12c77c71c00d1e8f77ded073cb65c9fc6b4178c0bf9e922e8f57a56753b4f04335e8dc23d61e78bc2d6648ee0d23c4d2ac24dcd92c4d0a13d8f64292b3e5e4d77bc55a96a3fd9a2e579700c402448f10ad03e9aaff922f310be4b5ded62f89f34c0b169f4344d3c8abb7dd190d0b992163e7366e3dee9a2e6f46deeef70738dab3d2b6abbeb33c51a887b4732512ff7ca3f8f5c6b2aec7ac666329173e6d40f13e8ac131b41b77cdc99e8a98b21556ba4721289d44cfae1dca4c6b2d902dd506167add83438a48401f1178c198a8e134357afe603b6eb1020c216be2c70957167740664485f5b9a707840eb5a25a4f67d9f52655e04db68f9d48d02c1acd644257f55d4b4e1400ab784c6d0e40410148b94f700d57e912d96cb9d2fe5e9bf9ff6302e50b03675b418b6fdab897da4f93411d60b5b396dcb836769a2d849cabf00b79c5c387acd3dc127bf2730a48139cc02670d160e3a24370c2c4a66be8194fdc78a5614f10c333b837cb4395e1866a9d2ebff308a16e9ae04f48dc0115960a2d8bc968bf3e0033d2675a8d356b7a423918f1f836057693a31ee8d87e75fdfa7ed083b0ddbccee12f9d1897cae0a05022ace4b2a5b90f97ffb9b64b14c9f90608f6e027b90d64d1e848a24804cd3fe47809a9640cbb3bb6a8fce0c8ac1ab6ce3df2fcc97d4aa8df44715845857fd1f8bc9ce2190c36867194dee3acb7abee492d90e623c2124ced652cca542385bf0efcb9eaa378c56737828aa66ac6f86d9fefe7d0c44302be14b4a68320ccde129341ee2eb2ab839de6bb28c540a5265b8c774071e78837c2d85ae634e831386caa64b04cee26fd3093f0016afcd062d626543ca840de7f632a224136801c25e474915549550fd14f529b5d9f1ef89634cc4379429611715d8bf1293d55ffc5f8322efa54e5b5b941d92a14fa1e632a42f61783bf95f5c033de2aa3d2eb2cfd86aafe588b7352fceddac5e57bfeb744d3fc6b393c28078971bb4fdcc2b346bdeb6ced4f651e06432bd428c737a94f3da7e3c73eb55817491ce43e6d7015ebab975ab733c9bf6834e71f326d9886b2d66110837ddea63483f440102f77a5c20e56257a462e2af360300729c05a5a72089bd589ca3d2e2dc1158648fb5c4f13a83c930ade581c330414ba4610994a2a13f489e3b822b4b8652a956ab9ee67aaf49e2581ada662254eb750113b025fb5957ac49fb20b8af23798b8e06d1fab4de1bb9f65d449f029f158dfd4054f952c1625477776505cbc6b22dac2661636e9483975e9b42f062cfe3994028b46b1e2abc5f3bbe4cdec92999564552c97f45686b7031c886510899813a490ff5a4ec3464d6323a3c9da842630a612913911e04dbf711b1b3c44d96614520a98a8d3d8dcb808e8a6a8144c1686fe3b83446d14c97fd10cb936eb6d8ddccff31745ee9be9a6063b3af4976c372616bc4af55367633683cd7830746f441bf409c66a9c6fbb045f2c5a7dd7285842185fdc185f27b1fd13df232e39e96977ce7339c40869ca667a9607a7c556dbd3693b9e661eba0c1ca116d5d13eeb3ed6bf744e56a613893dbbc667c16884722c2c7cdb8f35d564a4777e7a657450697f2b3396d7d6a3ab719b7746988d02e8160d8657260c733ea97725a628fbd05a41ddf387b", @ANYRES64=r2, @ANYRES64=r0, @ANYRESHEX=r1], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000440)=""/124) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000114000400000000000000000000000000000000010c00028005000100000000000c00068008000200ac14141808000740000000001c0019800800010000040000080001008000000008000100400400004c0018800800"], 0x12c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000c0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x94, &(0x7f0000000700)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x6}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e21, 0xfffffff9, @local, 0x4da}, @in={0x2, 0x4ea3, @broadcast}]}, &(0x7f00000002c0)=0x10) socketpair(0xf, 0x2, 0x1ff, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000040), 0x4436, 0x242000) r7 = syz_open_dev$sndctrl(&(0x7f0000000300), 0xfffffffc, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6c0000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="600001000000000014000300776c616e30000000003e000000000000300016802c000180280001000d0000ffbbbbbbbbbbbb0000000000000000000000000000000000000000000000000000080004008f0400004daf5cb153f204a5350ed250ce8a1977363acf2faff7a7c034bd3f0f4ec6fd741975a8a7833e9ac8634738e9e894"], 0x6c}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x125842, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r10, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) 31.771656616s ago: executing program 32 (id=13): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000008000080000020073797a5f74756e0000000000000000001400028004000100040004000800020000000000"], 0x40}}, 0x2008040) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYRES32=r0, @ANYBLOB="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", @ANYRES64=r2, @ANYRES64=r0, @ANYRESHEX=r1], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000440)=""/124) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000114000400000000000000000000000000000000010c00028005000100000000000c00068008000200ac14141808000740000000001c0019800800010000040000080001008000000008000100400400004c0018800800"], 0x12c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000c0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x94, &(0x7f0000000700)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x6}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e21, 0xfffffff9, @local, 0x4da}, @in={0x2, 0x4ea3, @broadcast}]}, &(0x7f00000002c0)=0x10) socketpair(0xf, 0x2, 0x1ff, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000040), 0x4436, 0x242000) r7 = syz_open_dev$sndctrl(&(0x7f0000000300), 0xfffffffc, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6c0000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="600001000000000014000300776c616e30000000003e000000000000300016802c000180280001000d0000ffbbbbbbbbbbbb0000000000000000000000000000000000000000000000000000080004008f0400004daf5cb153f204a5350ed250ce8a1977363acf2faff7a7c034bd3f0f4ec6fd741975a8a7833e9ac8634738e9e894"], 0x6c}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x125842, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r10, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) 20.915236057s ago: executing program 5 (id=60): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 5.231223782s ago: executing program 5 (id=60): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.684972103s ago: executing program 0 (id=196): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="0300000000000000200012800800010067726500140002"], 0x48}, 0x1, 0x0, 0x0, 0x24040040}, 0x2000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 2.421614316s ago: executing program 0 (id=198): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 1.956877579s ago: executing program 0 (id=200): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c93010000c000500170708000200011207000700"], 0x15) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, 0x0, 0x1040020, 0x0) 1.890473109s ago: executing program 0 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="3c5c583ecd2d036a2762bb626c65640a", 0x10) openat(r0, 0x0, 0xc2802, 0x1a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000200), 0x4) r2 = openat2$dir(0xffffff9c, &(0x7f0000000040)='./debug/failslab/times\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000000)='./debug\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd3d, 0x25cfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0xfd0a, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffe0, 0x7}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x62000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xa, 0x8, "ff000000000000000000000000000200"}) r8 = syz_open_pts(r7, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000002c0)=0x11) write$binfmt_elf64(r6, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x4, 0x9, 0x6, 0x2, 0x3, 0x3, 0x6, 0xb3, 0x40, 0x248, 0x7fff, 0x4, 0x38, 0x1, 0x8, 0x6, 0x1ff}, [{0x7, 0x5, 0x81, 0x200, 0x3, 0xffffffffffffffff, 0x0, 0x100000000}], "919fe5258697eb83817cc640b2f9a092c8b81ba47dcc74cfa365ec52a74abd11779fa946101e185090fc5830bbb29efc430e4142859213e4a210235ed539fee868", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xab9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000180)={r9, 0x1, r6, 0x1000, 0x80000}) futex(0x0, 0x36bf51381f43f77, 0x1, 0x0, 0x0, 0x1) r10 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r10, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x0, 0x700, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x700}) ioctl$vim2m_VIDIOC_STREAMOFF(r10, 0x40045612, &(0x7f0000000000)=0x2) 1.696392269s ago: executing program 1 (id=202): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x810080, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188047680ec59acca0413a1f8482d0000005e140602000000000e00", 0x22}], 0x1}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_opts(r0, 0x0, 0xb, 0x0, &(0x7f0000000280)) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x6, "0600000000640000f5070000000000000000000000000000000000081c00"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x1c, r6, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfd, {{0x12}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x800, "341a7e777fe3ea9f479dc17d5481a0b380036f47e295668d824c9adec2a44a6d"}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)=ANY=[]) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) r10 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r10, 0x0, 0x0) r11 = socket$key(0xf, 0x3, 0x2) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r12, 0x0, 0x0) recvfrom(r4, 0x0, 0xffffffffffffff79, 0x10060, 0x0, 0x0) sendmsg$key(r11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r13 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMDTEST(r13, 0x8050640a, &(0x7f0000000300)={0x0, 0x20000, 0xffffffff, 0x800, 0x1, 0x1000, 0xffffffff, 0x200, 0x0, 0x3, 0x2, 0x9, 0x0, 0x0, 0x0}) 1.641207796s ago: executing program 2 (id=203): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.570514926s ago: executing program 2 (id=204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d93", 0xe6}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a11", 0x1f}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ad", 0x8c}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.434869026s ago: executing program 3 (id=205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x805, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c001000000000000000010000120500010007000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/UDC\x00', 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') 1.264802979s ago: executing program 2 (id=206): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x401}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041094}, 0x40890) 1.263009537s ago: executing program 1 (id=207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) io_uring_setup(0x24, &(0x7f00000000c0)={0x0, 0x871f, 0x8000, 0x1, 0x53}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.257430615s ago: executing program 0 (id=208): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket(0x10, 0x803, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1.048407955s ago: executing program 3 (id=209): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1001, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0}) 1.032231923s ago: executing program 2 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='./sys/bus/nd/drivers/nd_pmem/unbind\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x0, &(0x7f0000000380)='dax=always\x00') 947.685093ms ago: executing program 3 (id=211): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c93010000c000500170708000200011207000700"], 0x15) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, 0x0, 0x1040020, 0x0) 920.448465ms ago: executing program 1 (id=212): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000300)={0x28, 0x2, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000002c0)}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000fc0)={0x48}) 830.367917ms ago: executing program 2 (id=213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 718.01072ms ago: executing program 3 (id=214): sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x8080) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 632.35914ms ago: executing program 1 (id=215): mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1200810, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 381.17569ms ago: executing program 1 (id=216): syz_io_uring_setup(0x141e, &(0x7f0000000380)={0x0, 0xb499, 0x400, 0x2, 0x212}, &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000000)) openat$ublk_ctrl(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001540)={&(0x7f0000000540)=[0x0, 0x5, 0x1000, 0x81, 0x6, 0x0, 0x5, 0x6, 0xffffffff, 0x83, 0x100, 0x5, 0x9, 0xfffffff7, 0x8, 0xb22, 0xdfd, 0x8, 0xb, 0xfffffffc, 0xab, 0x7fff, 0x80000001, 0x5, 0xd, 0x800, 0x9, 0x4, 0xbc9f, 0x7, 0x1, 0x6, 0xffffffff, 0x6, 0x10, 0x5, 0xffffffff, 0x2d800000, 0x40, 0x3, 0x0, 0x0, 0x4, 0x6, 0x4, 0x6, 0x8e37, 0x1, 0x8, 0x1, 0x6, 0x9, 0x1, 0x7946, 0x0, 0x8, 0x8000, 0x80, 0x7, 0x10, 0xe9f4, 0xfffffffa, 0xbaf1, 0x1, 0x8, 0x4, 0x7, 0x12, 0x9, 0x6, 0xffffffff, 0xffffffff, 0x4, 0x5, 0x0, 0x2, 0x4, 0x1, 0x1f65, 0x34b4, 0xfff, 0x1, 0x3, 0x200, 0xfff, 0x80, 0x4, 0x4d, 0x3ff, 0x3, 0xffffffff, 0x7fff, 0x6, 0xffff, 0x1, 0xffffffff, 0x80000000, 0x4, 0x200, 0x9, 0xfffffff9, 0xffff, 0x8001, 0x10001, 0x8, 0xbd6, 0x52, 0x7, 0x9, 0x43e6, 0x6, 0x1ff, 0xe0000000, 0x7, 0xfe2e, 0x8001, 0x3, 0x0, 0x2, 0x3, 0x80000000, 0x2, 0x1, 0x8, 0x3, 0x2, 0xc49, 0xfbfb, 0x101, 0x8001, 0x7fff, 0x4, 0x7, 0x880, 0x2, 0x2, 0x1ff, 0x9, 0xc, 0x6, 0x7, 0x6, 0x3, 0x0, 0x1, 0x3f81, 0x200, 0x4, 0x65, 0x8, 0x8, 0x5, 0x0, 0x7fff, 0x1, 0xfff, 0x2, 0xb9, 0x8, 0x0, 0x1000, 0x4, 0x1, 0x30000, 0x400, 0x7, 0x4, 0x400, 0x8001, 0xff, 0x4, 0x2, 0x80000000, 0xe4, 0x2, 0x3, 0x7ff, 0x7, 0x9, 0x5, 0x8, 0x10, 0x9, 0x4, 0xd4, 0x154a, 0x9, 0x1, 0x4, 0x3ff, 0x4, 0xfffffffc, 0x7f, 0x5, 0x0, 0x5, 0x6, 0x3, 0x57, 0x2, 0x7fc00, 0x2, 0x5, 0x1, 0x4, 0x3, 0x3, 0x400, 0x7fff, 0x5, 0x323, 0x1, 0x6, 0x9, 0x7f, 0x1, 0x8, 0x1ff, 0xfffffffe, 0x2, 0xfffff2ba, 0x9, 0x1, 0x7, 0x5, 0x2, 0xe, 0x1, 0x2ca1, 0x7fff, 0xc, 0x1, 0x7, 0x2, 0x1ff, 0x10, 0x978, 0x7fffffff, 0x8, 0x2, 0x1ad, 0x0, 0x400, 0x10001, 0x5, 0x4, 0xfffff4b3, 0x401, 0x4, 0x4, 0x7, 0x7f, 0x7ff, 0xf0, 0x0, 0x0, 0x8, 0xfffffffb, 0x3, 0x5, 0x0, 0xa, 0x101, 0x1e, 0x4, 0x9, 0x7fff, 0x0, 0x7, 0x6, 0xcb, 0x7, 0x8, 0x7fff, 0x1, 0x6, 0x1, 0x0, 0x7, 0x3, 0x8, 0x7ff, 0x0, 0x6, 0x8, 0xfff, 0x9, 0x3, 0x1, 0x6, 0x8da, 0x7, 0x2, 0x9, 0xa, 0x3, 0x8001, 0x1, 0x9, 0x40, 0x80, 0xfffff44b, 0xc, 0x3, 0x8, 0x8, 0x7, 0x6a12749, 0x9, 0x8, 0x3ff, 0x2, 0xffffffff, 0x3, 0x3ff, 0x1, 0x10001, 0x81, 0x6, 0x5, 0xfffffff4, 0x8, 0xc, 0x81, 0xfffffffc, 0xa, 0x9, 0x9bc, 0x329, 0x9, 0x10000, 0x81, 0x3, 0x50c8, 0x40, 0xeb32, 0x7, 0x7, 0x2, 0x5, 0x35, 0x4, 0x7, 0x4, 0x0, 0x3, 0x0, 0x2, 0x9, 0x4, 0x5, 0xa, 0xc51, 0x0, 0x100, 0x0, 0x8001, 0x1, 0x1000, 0x3, 0x1, 0x3ff, 0x8, 0x3, 0x6, 0x0, 0x8, 0x9, 0x0, 0x2, 0x9, 0x0, 0xf68, 0xffff, 0xfffffff7, 0x7, 0x3ff, 0x9, 0x40, 0x64010000, 0x1, 0x9, 0x80000001, 0x2, 0x6, 0x5, 0xffffffff, 0x1, 0x6, 0x0, 0x7, 0x0, 0x1, 0x401, 0xc90d, 0xfffffffa, 0x2, 0x5fe43153, 0x0, 0x5, 0xf, 0x9, 0x100, 0x2, 0x10000, 0x8, 0x4, 0x6, 0x1ff, 0xfffffff7, 0x0, 0x101, 0xb76, 0xe, 0x8, 0x5, 0x7f, 0x7, 0xf, 0xffff, 0x3, 0xc, 0xff, 0x8, 0x6, 0x6, 0xa, 0x1, 0xe, 0x8, 0x51e8000, 0x7, 0x3a7f, 0xfffffff0, 0xb, 0x3, 0x821, 0x8, 0x70b, 0x0, 0x900, 0x4, 0x0, 0xa3, 0x9, 0x4, 0x8, 0x0, 0x5, 0x1, 0x1, 0x69cd, 0xdb8, 0x9, 0x5, 0x3, 0x75, 0x1, 0xff3b, 0xa5, 0x10000, 0x8f, 0x2, 0x200, 0x3, 0xffffffff, 0x6b, 0xf4, 0x4, 0x3, 0xd, 0x3, 0x1f, 0x9, 0x80000000, 0x8, 0x1, 0x6fea, 0x4, 0xff, 0x18000000, 0x1, 0x6, 0xfffffffe, 0x2, 0x40, 0x4, 0x9, 0x7, 0x7, 0xd, 0x7, 0x3, 0x0, 0x101, 0x3, 0x2, 0x6, 0x5, 0x7, 0xfffffffd, 0x1, 0x8, 0x5, 0x3, 0x0, 0x0, 0x1, 0x9, 0x0, 0x5, 0x3, 0x77e8000, 0x2, 0x80, 0xff, 0x9a38, 0x7, 0x5, 0x18ea, 0xb3, 0x4, 0x8, 0x80000000, 0x4, 0xffffffff, 0x6, 0x6, 0xf, 0x8, 0x3, 0x9, 0x2ad, 0x4, 0x79e2, 0x401, 0x234e, 0x3, 0x8, 0x1, 0x5c1, 0x9, 0x27, 0x0, 0x9, 0x0, 0x1, 0x6, 0x3, 0x80000000, 0xfffffc01, 0x7f, 0xffff7e74, 0x400, 0x3, 0xffffffe7, 0x9, 0x9, 0x1, 0x3326, 0x85, 0x9, 0x5, 0x28c, 0x6, 0x9, 0x4, 0x10000, 0x3, 0xb7bc, 0x1, 0x1, 0x63da, 0xfffffff7, 0x101, 0x2, 0x6, 0x8001, 0x7fffffff, 0xbbb3, 0x6, 0xfffffff7, 0xa, 0x3, 0x2, 0x2, 0x95, 0x23, 0x3, 0x8, 0x1, 0x9, 0x7, 0x9, 0x0, 0x5, 0x7ff, 0xfffffffb, 0x0, 0x9c, 0xb, 0x6, 0x1ff, 0x6, 0x6, 0x9, 0xfff, 0x1, 0x4, 0x7fffffff, 0xfff, 0x6, 0x11, 0x400000, 0x8, 0x667b, 0x80, 0xff, 0x2, 0x20004, 0x7f, 0x400, 0x5, 0x7ff, 0x800, 0x8, 0x400, 0x4, 0x8, 0x8, 0x1, 0x401, 0x2, 0x1ff, 0x3, 0x9, 0x4, 0x1, 0x1, 0x6, 0x5, 0x4, 0x8, 0x9b0f, 0xa, 0x8001, 0x4, 0x4cac, 0x194, 0x81, 0x6721, 0x2, 0x4, 0x4, 0x5, 0xd, 0x4, 0x8001, 0x101, 0x6, 0x7, 0x101, 0x64, 0x35, 0xa531, 0x8, 0x2, 0x4, 0x1, 0x3, 0x5a05, 0x7, 0x0, 0x100, 0x0, 0x0, 0x8, 0x8, 0x8, 0x2, 0x5, 0x6, 0xe9c2, 0x3, 0x1, 0x1, 0x3, 0x1000000, 0x9, 0x10001, 0x0, 0x8001, 0xff, 0x7f, 0x8, 0x81, 0x5, 0x614b5aa0, 0x2, 0xfffffc01, 0x7fffffff, 0x1000, 0x7b30, 0x5, 0x9, 0x0, 0xac8c, 0x7, 0x5, 0x2, 0x65a, 0x8, 0x3, 0xfffffc00, 0x1ef, 0xd, 0x0, 0xd1, 0x2de8, 0x9, 0x6, 0x2, 0x10, 0x80000000, 0x3800, 0x7, 0x80, 0x1, 0x69a, 0x3, 0x2, 0xff, 0x4, 0xfffffffc, 0xfffffffa, 0x8, 0x7fff, 0x7, 0x3, 0x3, 0x4, 0xa, 0x2, 0x0, 0x9, 0x1, 0x7f, 0x8, 0xb, 0x7, 0x401, 0xc, 0x7, 0x1, 0x6, 0x5, 0xe169, 0xfffffff4, 0x2e1, 0x10001, 0x1000, 0x6, 0x4, 0x16, 0x7, 0x3f5, 0x4, 0x8, 0xba9c, 0xc, 0x5, 0xff, 0x7, 0x7, 0x2, 0x0, 0xd, 0x1, 0x1ff, 0x1, 0x8, 0x9, 0x8, 0x3, 0x2, 0x9, 0x8, 0x8, 0xfd, 0x415, 0x4, 0x8, 0x5, 0xa, 0x7, 0xfffffff8, 0x1c000, 0x2, 0x8, 0x9, 0x9, 0x1, 0x10, 0x8, 0x4, 0x6, 0x24e5, 0x2825, 0x2, 0x7, 0xa, 0xd0000000, 0x6, 0x4, 0x7, 0x5, 0x2, 0x7fffffff, 0x77f5, 0x5, 0x3, 0x5f, 0x9, 0x8, 0x0, 0x0, 0x6, 0x7, 0x9, 0x0, 0x7, 0x9, 0x80000000, 0x9, 0x3, 0x2, 0xfffffffb, 0x7, 0x6, 0x98, 0x53e, 0x10000, 0xe000, 0xbb, 0x3, 0x3, 0x0, 0x2, 0x8000, 0x0, 0x3, 0x779e, 0x9, 0x7, 0x1, 0x4, 0x2000000, 0x1, 0xe26, 0x401, 0x3b3e5e83, 0xc6b4, 0x10001, 0x6, 0x8, 0x7, 0x8, 0x0, 0x7, 0xd1, 0xd2, 0xfffffffb, 0x42f, 0x5, 0x0, 0xa, 0x0, 0x797a, 0x1, 0x3, 0x3, 0x9, 0x5, 0x6, 0x9, 0x8c3, 0x7, 0xea, 0x4, 0x2, 0x2, 0x3, 0x6, 0x5, 0xff, 0xfffffe01, 0x5, 0xfffffff3, 0x0, 0x0, 0x8000, 0xe59, 0x8, 0x6, 0x7f, 0x3, 0x401, 0x1, 0x1, 0xf15, 0x7, 0xfffffffc, 0x1, 0x2, 0x12c0c2d4, 0x1, 0xe0, 0x1, 0xfffffffe, 0x4, 0x5, 0x7ff, 0x2, 0x1, 0x5, 0x5930, 0x1000, 0x1, 0x2, 0x3, 0x101, 0x3ff, 0x28f5, 0xb, 0x101, 0x0, 0xfffff801, 0x0, 0xa, 0x1, 0x4000000, 0x5, 0x70, 0x800, 0x9, 0x100, 0x100, 0xfffffff5, 0x7, 0x20, 0x7, 0x1, 0x1, 0x58, 0x2, 0x3, 0x8, 0x5ff, 0x4, 0xdb42, 0x1, 0x9, 0xffffffff, 0xfff, 0x7, 0x9, 0xfd, 0xfac, 0x80000000, 0x1, 0x70547241, 0xf83, 0x7, 0x4, 0x2, 0xfffffff2, 0x3, 0x5, 0x4, 0x6ab5d7db, 0x2, 0x7ff, 0x1, 0x7fffffff, 0x7, 0x10001, 0x401, 0xfffffff7, 0x4, 0x7, 0xa, 0x7, 0x11c, 0x1, 0x5, 0x1, 0x9, 0x7ff, 0x5, 0x101, 0x2, 0xfffffff3, 0x2, 0x6, 0x80, 0xa3fa, 0xffff, 0x7ff, 0x4, 0x6, 0xc, 0x401, 0x1, 0x0, 0x35, 0x5, 0x0, 0x5bffb494, 0x9, 0x0, 0x2, 0x6, 0x6, 0x7], 0x4, 0x400, 0xfffffffb}) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe25, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x310, 0x148, 0x0, 0x148, 0x148, 0x148, 0x278, 0x240, 0x240, 0x278, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@multiport={{0x50}, {0x0, 0x3, [0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e20, 0x4e20, 0x4e20, 0x4e00, 0x4e21, 0x4e22, 0x4e23, 0x4e23, 0x4e21, 0x4e21, 0x4e24], [0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4c, 0x100, 0x2}}}, {{@ip={@local, @remote, 0xff000000, 0xffffff00, 'geneve0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x1, 0x2}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x2, 0x3, 0x1, 0x7}}, @common=@ttl={{0x28}, {0x0, 0xa3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x15, 0x5, 0x7, 0x9, 'snmp\x00', 'syz0\x00', {0xf7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 281.193343ms ago: executing program 3 (id=217): syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1d19"], 0x1c) 110.271613ms ago: executing program 2 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) 51.136843ms ago: executing program 0 (id=219): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x48940) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/84) 335.67µs ago: executing program 3 (id=220): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_ublk_setup_io_uring(0x3f2d, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x40004, 0x3d9}, 0x0, 0x0, &(0x7f0000000700)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffff8}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="9f", 0x1, 0xfc56c1f633c3f573, &(0x7f0000000040)={0xa, 0x4e21, 0xc, @loopback, 0x4000c5f}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 1 (id=221): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1001, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.242' (ED25519) to the list of known hosts. [ 65.870150][ T29] audit: type=1400 audit(1785357988.525:129): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.893903][ T29] audit: type=1400 audit(1785357988.545:130): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.896583][ T5594] cgroup: Unknown subsys name 'net' [ 65.923070][ T29] audit: type=1400 audit(1785357988.575:131): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.067107][ T5594] cgroup: Unknown subsys name 'cpuset' [ 66.075042][ T5594] cgroup: Unknown subsys name 'rlimit' [ 66.183817][ T29] audit: type=1400 audit(1785357988.835:132): avc: denied { setattr } for pid=5594 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.207984][ T29] audit: type=1400 audit(1785357988.835:133): avc: denied { create } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.253908][ T29] audit: type=1400 audit(1785357988.845:134): avc: denied { write } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.274463][ T29] audit: type=1400 audit(1785357988.845:135): avc: denied { read } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.295150][ T29] audit: type=1400 audit(1785357988.865:136): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.320072][ T29] audit: type=1400 audit(1785357988.865:137): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.321355][ T5596] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 66.353248][ T29] audit: type=1400 audit(1785357989.005:138): avc: denied { relabelto } for pid=5596 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 67.370404][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.505359][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.531975][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.540403][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.548113][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.548549][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.556520][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.564282][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.572355][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.579641][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.591070][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.592405][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.600716][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.606733][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.612757][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.621850][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.627518][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.635820][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.643291][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.656559][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.657718][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.664759][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.671604][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.678415][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.684889][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.701107][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.937749][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.944967][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.952147][ T5606] bridge_slave_0: entered allmulticast mode [ 70.958999][ T5606] bridge_slave_0: entered promiscuous mode [ 70.983942][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.991312][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.998897][ T5608] bridge_slave_0: entered allmulticast mode [ 71.005648][ T5608] bridge_slave_0: entered promiscuous mode [ 71.013132][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.016489][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.020399][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.026989][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.033961][ T5606] bridge_slave_1: entered allmulticast mode [ 71.046464][ T5606] bridge_slave_1: entered promiscuous mode [ 71.072094][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.079274][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.086406][ T5608] bridge_slave_1: entered allmulticast mode [ 71.093001][ T5608] bridge_slave_1: entered promiscuous mode [ 71.112436][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.119564][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.126903][ T5607] bridge_slave_0: entered allmulticast mode [ 71.133596][ T5607] bridge_slave_0: entered promiscuous mode [ 71.161040][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.168300][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.175749][ T5607] bridge_slave_1: entered allmulticast mode [ 71.182421][ T5607] bridge_slave_1: entered promiscuous mode [ 71.199301][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.210962][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.221995][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.254697][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.297357][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.321373][ T5608] team0: Port device team_slave_0 added [ 71.335135][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.344319][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.351484][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.358815][ T5609] bridge_slave_0: entered allmulticast mode [ 71.365768][ T5609] bridge_slave_0: entered promiscuous mode [ 71.372604][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.380144][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.387336][ T5618] bridge_slave_0: entered allmulticast mode [ 71.394020][ T5618] bridge_slave_0: entered promiscuous mode [ 71.402197][ T5608] team0: Port device team_slave_1 added [ 71.409506][ T5606] team0: Port device team_slave_0 added [ 71.417100][ T5606] team0: Port device team_slave_1 added [ 71.428984][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.436131][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.443242][ T5609] bridge_slave_1: entered allmulticast mode [ 71.450276][ T5609] bridge_slave_1: entered promiscuous mode [ 71.457071][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.464139][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.471300][ T5618] bridge_slave_1: entered allmulticast mode [ 71.477943][ T5618] bridge_slave_1: entered promiscuous mode [ 71.530871][ T5607] team0: Port device team_slave_0 added [ 71.550334][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.557597][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.583839][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.596451][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.603376][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.629271][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.641589][ T5607] team0: Port device team_slave_1 added [ 71.649067][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.660481][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.674239][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.681292][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.707314][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.718517][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.725592][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.751573][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.755450][ T5614] Bluetooth: hci2: command tx timeout [ 71.762485][ T5625] Bluetooth: hci3: command tx timeout [ 71.762591][ T5625] Bluetooth: hci4: command tx timeout [ 71.768227][ T5614] Bluetooth: hci1: command tx timeout [ 71.784940][ T5611] Bluetooth: hci0: command tx timeout [ 71.805629][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.819074][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.837228][ T5606] hsr_slave_0: entered promiscuous mode [ 71.843599][ T5606] hsr_slave_1: entered promiscuous mode [ 71.876933][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.883903][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.909797][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.941506][ T5618] team0: Port device team_slave_0 added [ 71.947742][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.954939][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.981778][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.993968][ T5609] team0: Port device team_slave_0 added [ 72.009594][ T5608] hsr_slave_0: entered promiscuous mode [ 72.015619][ T5608] hsr_slave_1: entered promiscuous mode [ 72.021491][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 72.027420][ T5608] Cannot create hsr debugfs directory [ 72.034550][ T5618] team0: Port device team_slave_1 added [ 72.046863][ T5609] team0: Port device team_slave_1 added [ 72.097438][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.104488][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.130498][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.148606][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.155665][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.181677][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.203339][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.210349][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.236336][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.251993][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.259108][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.285109][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.326245][ T5607] hsr_slave_0: entered promiscuous mode [ 72.333155][ T5607] hsr_slave_1: entered promiscuous mode [ 72.339248][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 72.345133][ T5607] Cannot create hsr debugfs directory [ 72.459259][ T5618] hsr_slave_0: entered promiscuous mode [ 72.465892][ T5618] hsr_slave_1: entered promiscuous mode [ 72.471784][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 72.477567][ T5618] Cannot create hsr debugfs directory [ 72.491464][ T5609] hsr_slave_0: entered promiscuous mode [ 72.497561][ T5609] hsr_slave_1: entered promiscuous mode [ 72.503390][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 72.509128][ T5609] Cannot create hsr debugfs directory [ 72.706107][ T5606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.720607][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.744056][ T5606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.753026][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.789907][ T5606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.798520][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.814627][ T5606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.824091][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.882416][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.891677][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.905785][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.914099][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.922110][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.932483][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.947325][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.957213][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.003136][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.015688][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.023802][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.032370][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.049557][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.058284][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.066473][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.077379][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.180981][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.191839][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.212296][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.221375][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.232778][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.246949][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.253877][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.263607][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.271840][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.280329][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.330355][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.351985][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.370913][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.378356][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.387820][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.394918][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.405882][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.414856][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.423136][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.432430][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.440612][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.450084][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.458598][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.468138][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.483762][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.490919][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.507848][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.514935][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.633831][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.671049][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.685175][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.713088][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.720259][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.750269][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.757442][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.784266][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.815657][ T5611] Bluetooth: hci2: command tx timeout [ 73.815664][ T5625] Bluetooth: hci3: command tx timeout [ 73.827557][ T5619] Bluetooth: hci0: command tx timeout [ 73.827625][ T5625] Bluetooth: hci1: command tx timeout [ 73.839895][ T5618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.839963][ T5614] Bluetooth: hci4: command tx timeout [ 73.851128][ T5618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.871851][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.879004][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.890158][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.897297][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.941222][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.050170][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.099790][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.106960][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.143097][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.150275][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.463185][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.592286][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.614059][ T5608] veth0_vlan: entered promiscuous mode [ 74.668177][ T5608] veth1_vlan: entered promiscuous mode [ 74.701123][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.818670][ T5618] veth0_vlan: entered promiscuous mode [ 74.848787][ T5608] veth0_macvtap: entered promiscuous mode [ 74.872238][ T5608] veth1_macvtap: entered promiscuous mode [ 74.888278][ T5618] veth1_vlan: entered promiscuous mode [ 74.941805][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.971872][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.983993][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.035712][ T1178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.046598][ T1178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.060549][ T1178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.069654][ T1178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.088431][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.103092][ T5618] veth0_macvtap: entered promiscuous mode [ 75.130799][ T5618] veth1_macvtap: entered promiscuous mode [ 75.197618][ T5606] veth0_vlan: entered promiscuous mode [ 75.204013][ T5607] veth0_vlan: entered promiscuous mode [ 75.217888][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.238764][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.247048][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.261972][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.269956][ T5606] veth1_vlan: entered promiscuous mode [ 75.298731][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.299357][ T5607] veth1_vlan: entered promiscuous mode [ 75.309863][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.315311][ T5609] veth0_vlan: entered promiscuous mode [ 75.332675][ T156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.341835][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 75.341848][ T29] audit: type=1400 audit(1785357997.995:153): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.e4ndF5/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 75.375525][ T1178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.385782][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.388077][ T29] audit: type=1400 audit(1785357997.995:154): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.426876][ T29] audit: type=1400 audit(1785357997.995:155): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.e4ndF5/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.452666][ T29] audit: type=1400 audit(1785357997.995:156): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.478762][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.489480][ T29] audit: type=1400 audit(1785357997.995:157): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.e4ndF5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 75.501632][ T5608] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.517291][ T29] audit: type=1400 audit(1785357998.005:158): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.e4ndF5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 75.537443][ T5609] veth1_vlan: entered promiscuous mode [ 75.560112][ T29] audit: type=1400 audit(1785357998.005:159): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.578528][ T5606] veth0_macvtap: entered promiscuous mode [ 75.591136][ T29] audit: type=1400 audit(1785357998.025:160): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.622118][ T29] audit: type=1400 audit(1785357998.035:161): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="gadgetfs" ino=6966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.650345][ T29] audit: type=1400 audit(1785357998.035:162): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 75.678829][ T5606] veth1_macvtap: entered promiscuous mode [ 75.715733][ T5607] veth0_macvtap: entered promiscuous mode [ 75.750393][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.768897][ T5607] veth1_macvtap: entered promiscuous mode [ 75.778232][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.787572][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.793707][ T5609] veth0_macvtap: entered promiscuous mode [ 75.804920][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.826382][ T1178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.836044][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.847808][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.859980][ T5609] veth1_macvtap: entered promiscuous mode [ 75.875823][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.887559][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.894998][ T5614] Bluetooth: hci1: command tx timeout [ 75.901052][ T5611] Bluetooth: hci0: command tx timeout [ 75.901236][ T5619] Bluetooth: hci4: command tx timeout [ 75.907718][ T5614] Bluetooth: hci2: command tx timeout [ 75.912828][ T5625] Bluetooth: hci3: command tx timeout [ 75.936678][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.938471][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.949475][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.958208][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.982374][ T156] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.984565][ T5803] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 75.999717][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.015618][ T156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.029783][ T156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.053537][ T156] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.064148][ T156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.073336][ T156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.098400][ T156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.110751][ T156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.149411][ T5803] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 76.158172][ T5803] usb 4-1: config 0 has no interface number 0 [ 76.172087][ T5803] usb 4-1: config 0 interface 41 has no altsetting 0 [ 76.178243][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.192605][ T5803] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 76.193832][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.210574][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.226140][ T5803] usb 4-1: Product: syz [ 76.230621][ T5803] usb 4-1: Manufacturer: syz [ 76.235523][ T5803] usb 4-1: SerialNumber: syz [ 76.257041][ T5803] usb 4-1: config 0 descriptor?? [ 76.281304][ T3305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.291288][ T3305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.325436][ T3305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.344617][ T3305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.374203][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.393953][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.405479][ T189] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.438125][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.461447][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.526743][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.569908][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.695001][ T189] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.939890][ T5803] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 76.959936][ T189] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 76.972578][ T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.988141][ T189] usb 1-1: config 0 descriptor?? [ 77.010370][ T189] pwc: Askey VC010 type 2 USB webcam detected. [ 77.538899][ T189] pwc: recv_control_msg error -32 req 02 val 2b00 [ 77.709433][ T189] pwc: recv_control_msg error -32 req 02 val 2700 [ 77.721550][ T189] pwc: recv_control_msg error -32 req 02 val 2c00 [ 77.976738][ T5625] Bluetooth: hci3: command tx timeout [ 77.982587][ T5611] Bluetooth: hci1: command tx timeout [ 77.982608][ T5619] Bluetooth: hci2: command tx timeout [ 77.982647][ T5619] Bluetooth: hci0: command tx timeout [ 77.988148][ T5614] Bluetooth: hci4: command tx timeout [ 78.014620][ T189] pwc: recv_control_msg error -71 req 04 val 1300 [ 78.061881][ T189] pwc: recv_control_msg error -71 req 04 val 1400 [ 78.079913][ T189] pwc: recv_control_msg error -71 req 02 val 2000 [ 78.107696][ T189] pwc: recv_control_msg error -71 req 02 val 2100 [ 78.114844][ T189] pwc: recv_control_msg error -71 req 04 val 1500 [ 78.125219][ T189] pwc: recv_control_msg error -71 req 02 val 2500 [ 78.133051][ T189] pwc: recv_control_msg error -71 req 02 val 2400 [ 78.140935][ T189] pwc: recv_control_msg error -71 req 02 val 2600 [ 78.153330][ T189] pwc: recv_control_msg error -71 req 02 val 2900 [ 78.186745][ T189] pwc: recv_control_msg error -71 req 02 val 2800 [ 78.194378][ T189] pwc: recv_control_msg error -71 req 04 val 1100 [ 78.219956][ T189] pwc: recv_control_msg error -71 req 04 val 1200 [ 78.261979][ T189] pwc: Registered as video103. [ 78.288791][ T189] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 78.348907][ T189] usb 1-1: USB disconnect, device number 2 [ 78.557472][ T5820] Zero length message leads to an empty skb [ 78.584430][ T5727] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.767130][ T5727] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 78.786871][ T5727] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.802383][ T5727] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.880710][ T5727] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 78.894421][ T5728] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.916035][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.967575][ T5727] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 78.988938][ T5727] usb 2-1: invalid MIDI out EP 0 [ 79.107991][ T5728] usb 3-1: device descriptor read/64, error -71 [ 79.231299][ T5828] Bluetooth: MGMT ver 1.23 [ 79.374639][ T5728] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.429136][ T5853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.449357][ T5852] syzkaller0: entered promiscuous mode [ 79.482308][ T5852] syzkaller0: entered allmulticast mode [ 79.490650][ T5727] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 79.493355][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 79.520386][ T5853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.540606][ T5728] usb 3-1: device descriptor read/64, error -71 [ 79.617806][ T5727] usb 4-1: USB disconnect, device number 2 [ 79.675683][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 79.695794][ T5728] usb usb3-port1: attempt power cycle [ 79.965470][ T5859] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 80.086799][ T5728] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 80.115671][ T5728] usb 3-1: device descriptor read/8, error -71 [ 80.252294][ T5862] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 80.258994][ T5862] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 80.302800][ T5862] vhci_hcd vhci_hcd.0: Device attached [ 80.386091][ T5728] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 80.415778][ T5728] usb 3-1: device descriptor read/8, error -71 [ 80.537657][ T5727] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 80.545256][ T5728] usb usb3-port1: unable to enumerate USB device [ 80.555335][ T5801] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.652324][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 80.652339][ T29] audit: type=1400 audit(1785358003.305:238): avc: denied { create } for pid=5866 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.712974][ T29] audit: type=1400 audit(1785358003.305:239): avc: denied { write } for pid=5866 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.733721][ T5801] usb 1-1: Using ep0 maxpacket: 16 [ 80.812563][ T5801] usb 1-1: unable to get BOS descriptor or descriptor too short [ 80.831252][ T5868] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 80.860910][ T5864] vhci_hcd: connection closed [ 80.962912][ T5801] usb 1-1: no configurations [ 80.963772][ T3305] vhci_hcd vhci_hcd.0: stop threads [ 81.101904][ T5801] usb 1-1: can't read configurations, error -22 [ 81.123288][ T29] audit: type=1400 audit(1785358003.305:240): avc: denied { nlmsg_write } for pid=5866 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.130384][ T3305] vhci_hcd vhci_hcd.0: release socket [ 81.155296][ T5727] usb 33-1: device descriptor read/64, error -71 [ 81.198641][ T3305] vhci_hcd vhci_hcd.0: disconnect device [ 81.521310][ T5727] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 81.732974][ T5712] usb 2-1: USB disconnect, device number 2 [ 81.761804][ T29] audit: type=1400 audit(1785358004.365:241): avc: denied { create } for pid=5874 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.851834][ T5876] comedi comedi4: bad chanlist[0]=0x00004cbe chan=19646 range length=2 [ 82.086920][ T29] audit: type=1400 audit(1785358004.385:242): avc: denied { listen } for pid=5874 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.678194][ T5880] IPVS: set_ctl: invalid protocol: 127 0.0.0.0:20005 [ 82.728480][ T29] audit: type=1400 audit(1785358005.335:243): avc: denied { setopt } for pid=5878 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.174550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 83.559835][ T29] audit: type=1400 audit(1785358005.345:244): avc: denied { create } for pid=5877 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 83.626091][ T29] audit: type=1400 audit(1785358005.355:245): avc: denied { create } for pid=5881 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.671383][ T29] audit: type=1400 audit(1785358005.375:246): avc: denied { write } for pid=5877 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 83.698983][ T29] audit: type=1400 audit(1785358005.375:247): avc: denied { read } for pid=5881 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.744559][ T5705] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 83.836252][ T5894] warning: `syz.2.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.027321][ T5895] binder: 5887:5895 ioctl c0306201 0 returned -14 [ 84.051490][ T5890] binder: 5887:5890 ioctl c0306201 0 returned -14 [ 84.176915][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 84.196652][ T5705] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a1f, bcdDevice= 0.00 [ 84.234514][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.247160][ T5705] usb 1-1: config 0 descriptor?? [ 84.265861][ T5882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.628307][ T5903] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 84.704672][ T189] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 84.740803][ T5705] hid-corsair-void 0003:1B1C:0A1F.0001: unknown main item tag 0x0 [ 84.766630][ T5705] hid-corsair-void 0003:1B1C:0A1F.0001: unknown main item tag 0x0 [ 84.783030][ T5705] hid-corsair-void 0003:1B1C:0A1F.0001: unknown main item tag 0x0 [ 84.802050][ T5705] hid-corsair-void 0003:1B1C:0A1F.0001: unknown main item tag 0x0 [ 84.810266][ T5705] hid-corsair-void 0003:1B1C:0A1F.0001: unknown main item tag 0x0 [ 84.822171][ T5705] hid-corsair-void 0003:1B1C:0A1F.0001: unknown main item tag 0x0 [ 84.830278][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 84.840080][ T5705] hid-corsair-void 0003:1B1C:0A1F.0001: unknown main item tag 0x0 [ 84.848433][ T5705] hid-corsair-void 0003:1B1C:0A1F.0001: unknown main item tag 0x0 [ 84.857035][ T5905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.31'. [ 84.866503][ T5705] hid-corsair-void 0003:1B1C:0A1F.0001: unknown main item tag 0x0 [ 84.875620][ T5705] hid-corsair-void 0003:1B1C:0A1F.0001: unknown main item tag 0x0 [ 84.887106][ T189] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.908362][ T189] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 84.909967][ T5705] hid-corsair-void 0003:1B1C:0A1F.0001: hidraw0: USB HID v0.0e Device [HID 1b1c:0a1f] on usb-dummy_hcd.0-1/input0 [ 84.919760][ T5882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.954533][ T189] usb 2-1: New USB device found, idVendor=045e, idProduct=02f9, bcdDevice= 0.11 [ 84.968050][ T5882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.979471][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.018987][ T189] usb 2-1: config 0 descriptor?? [ 85.514428][ T5727] hid-corsair-void 0003:1B1C:0A1F.0001: failed to request firmware (reason: -71) [ 85.514893][ T189] usb 1-1: USB disconnect, device number 5 [ 85.528047][ T5705] hid-corsair-void 0003:1B1C:0A1F.0001: failed to request battery (reason: -71) [ 85.687286][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 85.687301][ T29] audit: type=1400 audit(1785358008.345:267): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 85.742768][ T29] audit: type=1400 audit(1785358008.385:268): avc: denied { mount } for pid=5900 comm="syz.1.29" name="/" dev="ramfs" ino=8594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 85.844020][ T29] audit: type=1400 audit(1785358008.495:269): avc: denied { name_bind } for pid=5918 comm="syz.2.33" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 85.887649][ T5919] 9p: Bad value for 'wfdno' [ 86.097922][ T189] usb 2-1: USB disconnect, device number 3 [ 86.183838][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 86.200894][ T5927] FAULT_INJECTION: forcing a failure. [ 86.200894][ T5927] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 86.255352][ T5927] CPU: 1 UID: 0 PID: 5927 Comm: syz.2.35 Not tainted syzkaller #0 PREEMPT(full) [ 86.255377][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 86.255386][ T5927] Call Trace: [ 86.255392][ T5927] [ 86.255400][ T5927] dump_stack_lvl+0x100/0x190 [ 86.255426][ T5927] should_fail_ex.cold+0x5/0xa [ 86.255447][ T5927] _copy_from_user+0x2e/0xd0 [ 86.255473][ T5927] __sys_bpf+0x2f5/0x4e80 [ 86.255496][ T5927] ? __pfx___sys_bpf+0x10/0x10 [ 86.255512][ T5927] ? find_held_lock+0x2b/0x80 [ 86.255537][ T5927] ? get_pid_task+0xfc/0x250 [ 86.255562][ T5927] ? get_pid_task+0xfc/0x250 [ 86.255591][ T5927] ? find_held_lock+0x2b/0x80 [ 86.255620][ T5927] ? rcu_read_lock_any_held+0x6a/0xa0 [ 86.255636][ T5927] ? find_held_lock+0x2b/0x80 [ 86.255659][ T5927] ? ksys_write+0x190/0x250 [ 86.255684][ T5927] ? ksys_write+0x190/0x250 [ 86.255723][ T5927] ? fput+0x79/0x100 [ 86.255746][ T5927] ? __x64_sys_bpf+0xce/0x140 [ 86.255762][ T5927] __x64_sys_bpf+0xce/0x140 [ 86.255779][ T5927] ? do_syscall_64+0x90/0x870 [ 86.255799][ T5927] do_syscall_64+0x115/0x870 [ 86.255816][ T5927] ? clear_bhb_loop+0x40/0x90 [ 86.255835][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.255852][ T5927] RIP: 0033:0x7fefd039de99 [ 86.255867][ T5927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.255881][ T5927] RSP: 002b:00007fefd11e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.255898][ T5927] RAX: ffffffffffffffda RBX: 00007fefd0626090 RCX: 00007fefd039de99 [ 86.255909][ T5927] RDX: 0000000000000040 RSI: 0000200000000380 RDI: 0000000000000010 [ 86.255919][ T5927] RBP: 00007fefd11e2090 R08: 0000000000000000 R09: 0000000000000000 [ 86.255928][ T5927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.255937][ T5927] R13: 00007fefd0626128 R14: 00007fefd0626090 R15: 00007ffec26e4d88 [ 86.255963][ T5927] [ 86.594460][ T5801] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 86.684110][ T46] cfg80211: failed to load regulatory.db [ 86.734450][ T5705] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 86.778566][ T5801] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.812531][ T5801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 86.838484][ T5801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 86.844449][ T29] audit: type=1326 audit(1785358009.495:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.2.39" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefd039de99 code=0x0 [ 86.880132][ T5801] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 86.890965][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.903583][ T5705] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 86.908241][ T5801] usb 4-1: Product: syz [ 86.912798][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.927037][ T5705] usb 1-1: Product: syz [ 86.931401][ T5705] usb 1-1: Manufacturer: syz [ 86.936424][ T5705] usb 1-1: SerialNumber: syz [ 86.955272][ T5801] usb 4-1: Manufacturer: syz [ 86.966498][ T5801] usb 4-1: SerialNumber: syz [ 86.967988][ T5705] usb 1-1: config 0 descriptor?? [ 86.998218][ T5801] usb 4-1: config 0 descriptor?? [ 87.000950][ T5705] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 006 [ 87.011589][ T5926] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 87.185348][ T5801] rc_core: IR keymap rc-streamzap not found [ 87.198159][ T5801] Registered IR keymap rc-empty [ 87.222229][ T5801] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 87.239290][ T5926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 87.258131][ T5926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.271769][ T5801] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 87.284281][ T5926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.340723][ T5801] usb 4-1: USB disconnect, device number 3 [ 87.383487][ T5705] (null): failure reading functionality [ 87.439172][ T5705] i2c i2c-1: connected i2c-tiny-usb device [ 88.462115][ T29] audit: type=1400 audit(1785358010.645:271): avc: denied { mmap_zero } for pid=5938 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 88.462511][ T29] audit: type=1400 audit(1785358010.675:272): avc: denied { create } for pid=5938 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 88.912158][ T29] audit: type=1400 audit(1785358011.565:273): avc: denied { create } for pid=5955 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.034547][ T5705] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 89.176994][ T5958] syz.3.42 (5958): /proc/5958/oom_adj is deprecated, please use /proc/5958/oom_score_adj instead. [ 89.212139][ T29] audit: type=1400 audit(1785358011.845:274): avc: denied { create } for pid=5955 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.244137][ T5705] usb 3-1: device descriptor read/64, error -71 [ 89.313553][ T29] audit: type=1400 audit(1785358011.865:275): avc: denied { setopt } for pid=5955 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.437832][ T29] audit: type=1400 audit(1785358011.895:276): avc: denied { write } for pid=5955 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.544475][ T5705] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 89.706168][ T5705] usb 3-1: device descriptor read/64, error -71 [ 89.819780][ T5727] usb 1-1: USB disconnect, device number 6 [ 89.833168][ T5705] usb usb3-port1: attempt power cycle [ 90.213849][ T5705] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 90.341092][ T5705] usb 3-1: device descriptor read/8, error -71 [ 90.538631][ T5968] netlink: 'syz.1.47': attribute type 1 has an invalid length. [ 90.594413][ T5705] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 90.615166][ T5705] usb 3-1: device descriptor read/8, error -71 [ 90.738899][ T5705] usb usb3-port1: unable to enumerate USB device [ 90.868667][ T29] audit: type=1400 audit(1785358013.525:277): avc: denied { read write } for pid=5608 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.912200][ T29] audit: type=1400 audit(1785358013.525:278): avc: denied { open } for pid=5608 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.937180][ T29] audit: type=1400 audit(1785358013.525:279): avc: denied { ioctl } for pid=5608 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.194478][ T29] audit: type=1400 audit(1785358013.735:280): avc: denied { getopt } for pid=5971 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.230092][ T29] audit: type=1400 audit(1785358013.745:281): avc: denied { connect } for pid=5971 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.250991][ T29] audit: type=1400 audit(1785358013.745:282): avc: denied { name_connect } for pid=5971 comm="syz.3.48" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 91.281476][ T29] audit: type=1400 audit(1785358013.885:283): avc: denied { read } for pid=5971 comm="syz.3.48" name="usbmon7" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.996614][ T29] audit: type=1400 audit(1785358014.645:284): avc: denied { create } for pid=5987 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.060535][ T5988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.52'. [ 92.118408][ T29] audit: type=1400 audit(1785358014.775:285): avc: denied { connect } for pid=5989 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.146320][ T5992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.178635][ T29] audit: type=1400 audit(1785358014.775:286): avc: denied { read write } for pid=5991 comm="syz.3.54" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 92.779168][ T5803] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.845198][ T5801] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 92.908747][ T6008] Invalid logical block size (3) [ 93.294449][ T5803] usb 2-1: Using ep0 maxpacket: 32 [ 93.305874][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.317839][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.329219][ T5803] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 93.340201][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.355605][ T5803] usb 2-1: config 0 descriptor?? [ 93.427207][ T5801] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 93.444387][ T5801] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 93.468353][ T5801] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 93.490911][ T5801] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.620868][ T5801] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.630749][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.653957][ T5801] usb 3-1: Product: syz [ 93.662865][ T5801] usb 3-1: Manufacturer: syz [ 93.941138][ T5801] cdc_wdm 3-1:1.0: skipping garbage [ 93.949750][ T5803] hid_parser_main: 470 callbacks suppressed [ 93.969490][ T5803] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 93.976691][ T5801] cdc_wdm 3-1:1.0: skipping garbage [ 93.981937][ T5803] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 93.989912][ T5801] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 93.998138][ T5803] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 94.009458][ T5803] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 94.028949][ T5803] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 94.120198][ T5803] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 94.242135][ T5803] koneplus 0003:1E7D:2D51.0002: couldn't init struct koneplus_device [ 94.335675][ T5803] koneplus 0003:1E7D:2D51.0002: couldn't install mouse [ 94.376154][ T5803] koneplus 0003:1E7D:2D51.0002: probe with driver koneplus failed with error -5 [ 94.711853][ T6018] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 94.718575][ T6018] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.805530][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'. [ 95.176578][ T6018] vhci_hcd vhci_hcd.0: Device attached [ 95.274103][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.283792][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.293537][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.300645][ T5803] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 95.310558][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.318298][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.444573][ T5727] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 95.455447][ T5806] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.627244][ T5727] usb 1-1: Using ep0 maxpacket: 16 [ 95.638820][ T5727] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 95.654553][ T5806] usb 4-1: Using ep0 maxpacket: 16 [ 95.656682][ T5727] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 95.709028][ T5727] usb 1-1: config 166 has no interface number 0 [ 95.722072][ T5806] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.724504][ T6020] vhci_hcd: connection closed [ 95.743326][ T5727] usb 1-1: config 166 has no interface number 1 [ 95.764057][ T13] vhci_hcd vhci_hcd.3: stop threads [ 95.777279][ T5806] usb 4-1: no configurations [ 95.781951][ T13] vhci_hcd vhci_hcd.3: release socket [ 95.793597][ T5806] usb 4-1: can't read configurations, error -22 [ 95.801466][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 95.817336][ T5727] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 95.834432][ T5803] usb 39-1: device descriptor read/64, error -71 [ 95.843651][ T5727] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 95.859842][ T138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.873243][ T5727] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 95.885011][ T5727] usb 1-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 95.897594][ T5727] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 95.909393][ T5727] usb 1-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 95.920103][ T5727] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 95.931631][ T5727] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 95.943083][ T5727] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 95.956684][ T5727] usb 1-1: config 166 interface 177 has no altsetting 0 [ 95.963769][ T5727] usb 1-1: config 166 interface 34 has no altsetting 0 [ 95.974892][ T5727] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 95.984242][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.987893][ T189] usb 3-1: USB disconnect, device number 10 [ 95.992762][ T5727] usb 1-1: Product: syz [ 96.003207][ T5727] usb 1-1: Manufacturer: syz [ 96.008160][ T5727] usb 1-1: SerialNumber: syz [ 96.017920][ T138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.032699][ T5803] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 96.115315][ T138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.244715][ T5801] usb 2-1: USB disconnect, device number 4 [ 96.264114][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 96.264128][ T29] audit: type=1400 audit(1785358018.915:299): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 96.365037][ T138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.375589][ T29] audit: type=1400 audit(1785358018.965:300): avc: denied { setopt } for pid=6025 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.493129][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.518763][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.527074][ T6028] bridge_slave_0: entered allmulticast mode [ 96.535335][ T6028] bridge_slave_0: entered promiscuous mode [ 96.559039][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.63'. [ 96.574179][ T29] audit: type=1400 audit(1785358019.225:301): avc: denied { create } for pid=6049 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.601783][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.610193][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.617742][ T29] audit: type=1400 audit(1785358019.255:302): avc: denied { connect } for pid=6049 comm="syz.1.63" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.639971][ T6050] nvme_fabrics: missing parameter 'transport=%s' [ 96.647554][ T5727] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 96.647732][ T6028] bridge_slave_1: entered allmulticast mode [ 96.655319][ T6050] nvme_fabrics: missing parameter 'nqn=%s' [ 96.674705][ T29] audit: type=1400 audit(1785358019.255:303): avc: denied { getopt } for pid=6049 comm="syz.1.63" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.724211][ T29] audit: type=1400 audit(1785358019.325:304): avc: denied { read write } for pid=6051 comm="syz.3.64" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 96.760538][ T29] audit: type=1400 audit(1785358019.325:305): avc: denied { open } for pid=6051 comm="syz.3.64" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 96.781339][ T6028] bridge_slave_1: entered promiscuous mode [ 96.960206][ T5727] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 97.074700][ T6068] process 'syz.2.66' launched './file1' with NULL argv: empty string added [ 97.485056][ T5614] Bluetooth: hci5: command tx timeout [ 97.504860][ T29] audit: type=1400 audit(1785358019.745:306): avc: denied { execute_no_trans } for pid=6060 comm="syz.2.66" path="/15/file1" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.545720][ T6028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.553574][ T29] audit: type=1400 audit(1785358020.155:307): avc: denied { create } for pid=6025 comm="syz.0.61" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.571602][ T6028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.599762][ T29] audit: type=1400 audit(1785358020.255:308): avc: denied { search } for pid=5272 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.742064][ T5727] ums-realtek 1-1:166.34: probe with driver ums-realtek failed with error -5 [ 97.774474][ T5727] uvcvideo 1-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 97.782291][ T5727] uvcvideo 1-1:166.34: No valid video chain found. [ 97.846642][ T5727] usb 1-1: USB disconnect, device number 7 [ 97.847078][ T6028] team0: Port device team_slave_0 added [ 97.860960][ T6074] synth uevent: /bus/platform/drivers/intel_xhci_usb_sw: unknown uevent action string [ 97.910268][ T6028] team0: Port device team_slave_1 added [ 97.947564][ T6079] FAULT_INJECTION: forcing a failure. [ 97.947564][ T6079] name failslab, interval 1, probability 0, space 0, times 0 [ 97.966456][ T6079] CPU: 1 UID: 0 PID: 6079 Comm: syz.3.68 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.966488][ T6079] Tainted: [L]=SOFTLOCKUP [ 97.966493][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 97.966501][ T6079] Call Trace: [ 97.966506][ T6079] [ 97.966511][ T6079] dump_stack_lvl+0x100/0x190 [ 97.966534][ T6079] should_fail_ex.cold+0x5/0xa [ 97.966552][ T6079] should_failslab+0xc2/0x120 [ 97.966571][ T6079] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 97.966590][ T6079] ? proc_alloc_inode+0x25/0x200 [ 97.966606][ T6079] ? __pfx_proc_alloc_inode+0x10/0x10 [ 97.966622][ T6079] proc_alloc_inode+0x25/0x200 [ 97.966653][ T6079] alloc_inode+0x68/0x250 [ 97.966674][ T6079] new_inode+0x22/0x1c0 [ 97.966695][ T6079] proc_pid_make_inode+0x22/0x160 [ 97.966711][ T6079] proc_ns_dir_lookup+0x25b/0x390 [ 97.966726][ T6079] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 97.966741][ T6079] path_openat+0x241f/0x4280 [ 97.966765][ T6079] ? __pfx_path_openat+0x10/0x10 [ 97.966786][ T6079] do_file_open+0x20e/0x430 [ 97.966802][ T6079] ? __pfx_do_file_open+0x10/0x10 [ 97.966824][ T6079] ? __pfx_kfree_link+0x10/0x10 [ 97.966852][ T6079] ? alloc_fd+0x471/0x7a0 [ 97.966868][ T6079] ? do_getname+0x191/0x390 [ 97.966888][ T6079] do_sys_openat2+0x10f/0x1e0 [ 97.966907][ T6079] ? __pfx_do_sys_openat2+0x10/0x10 [ 97.966925][ T6079] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 97.966943][ T6079] ? __fget_files+0x21f/0x3d0 [ 97.966961][ T6079] __x64_sys_openat+0x12d/0x210 [ 97.966980][ T6079] ? __pfx___x64_sys_openat+0x10/0x10 [ 97.966997][ T6079] ? ksys_write+0x1ac/0x250 [ 97.967025][ T6079] do_syscall_64+0x115/0x870 [ 97.967040][ T6079] ? clear_bhb_loop+0x40/0x90 [ 97.967057][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.967071][ T6079] RIP: 0033:0x7f70fe55e6ce [ 97.967084][ T6079] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.967096][ T6079] RSP: 002b:00007f70ff3b8f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.967111][ T6079] RAX: ffffffffffffffda RBX: 00007f70ff3b96c0 RCX: 00007f70fe55e6ce [ 97.967119][ T6079] RDX: 0000000000000000 RSI: 00007f70fe6335ea RDI: ffffffffffffff9c [ 97.967128][ T6079] RBP: 00007f70ff3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 97.967136][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.967144][ T6079] R13: 00007f70fe826128 R14: 00007f70fe826090 R15: 00007fff4bd97cc8 [ 97.967163][ T6079] [ 98.021025][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.231382][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.258258][ T6028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.319357][ T138] bridge_slave_1: left allmulticast mode [ 98.338382][ T138] bridge_slave_1: left promiscuous mode [ 98.346797][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.364916][ T138] bridge_slave_0: left allmulticast mode [ 98.378972][ T138] bridge_slave_0: left promiscuous mode [ 98.390595][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.788207][ T138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.801379][ T138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.811856][ T138] bond0 (unregistering): Released all slaves [ 98.832542][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.839615][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.866319][ T6028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.920253][ T6104] ======================================================= [ 98.920253][ T6104] WARNING: The mand mount option has been deprecated and [ 98.920253][ T6104] and is ignored by this kernel. Remove the mand [ 98.920253][ T6104] option from the mount to silence this warning. [ 98.920253][ T6104] ======================================================= [ 98.922165][ T6078] could not set up IPv6 listen sock [ 99.058197][ T6110] netlink: 'syz.2.73': attribute type 10 has an invalid length. [ 99.113988][ T6028] hsr_slave_0: entered promiscuous mode [ 99.121932][ T6028] hsr_slave_1: entered promiscuous mode [ 99.164835][ T6028] debugfs: 'hsr0' already exists in 'hsr' [ 99.167750][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 99.178585][ T6028] Cannot create hsr debugfs directory [ 99.193664][ T6117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6117 comm=syz.1.74 [ 99.212572][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.221770][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.277861][ T6110] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.286090][ T6110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.295086][ T6110] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.302256][ T6110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.317318][ T6110] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 99.367571][ T6112] bridge_slave_1: left allmulticast mode [ 99.373469][ T6112] bridge_slave_1: left promiscuous mode [ 99.382272][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.392060][ T6112] bridge_slave_0: left allmulticast mode [ 99.402297][ T6112] bridge_slave_0: left promiscuous mode [ 99.409333][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.431237][ T6112] bond0: (slave bridge0): Releasing backup interface [ 99.495637][ T5614] Bluetooth: hci5: command tx timeout [ 99.504916][ T5806] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 99.524557][ T5727] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 99.714399][ T5727] usb 3-1: Using ep0 maxpacket: 16 [ 99.721762][ T5727] usb 3-1: config 1 has an invalid interface number: 135 but max is 0 [ 99.738487][ T5727] usb 3-1: config 1 has no interface number 0 [ 99.759685][ T5806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.893447][ T5806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.009348][ T5806] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 100.120810][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.159502][ T5727] usb 3-1: config 1 interface 135 has no altsetting 0 [ 100.168302][ T5727] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=25.a5 [ 100.181474][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.194014][ T5727] usb 3-1: Product: syz [ 100.204410][ T5727] usb 3-1: Manufacturer: syz [ 100.206973][ T5806] usb 1-1: config 0 descriptor?? [ 100.236201][ T5727] usb 3-1: SerialNumber: syz [ 100.254816][ T5727] kalmia 3-1:1.135: probe with driver kalmia failed with error -22 [ 100.288544][ T5727] option 3-1:1.135: GSM modem (1-port) converter detected [ 100.333095][ T138] hsr_slave_0: left promiscuous mode [ 100.340875][ T138] hsr_slave_1: left promiscuous mode [ 100.348651][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.359146][ T138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.373228][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.382445][ T138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.403559][ T138] veth1_macvtap: left promiscuous mode [ 100.410198][ T138] veth0_macvtap: left promiscuous mode [ 100.419245][ T138] veth1_vlan: left promiscuous mode [ 100.426171][ T138] veth0_vlan: left promiscuous mode [ 100.578022][ T5727] usb 3-1: USB disconnect, device number 11 [ 100.599767][ T5727] option 3-1:1.135: device disconnected [ 100.683512][ T5806] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 100.692958][ T5806] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 100.703711][ T138] team0 (unregistering): Port device team_slave_1 removed [ 100.705990][ T5806] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 100.718129][ T5806] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 100.725247][ T5806] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 100.725675][ T138] team0 (unregistering): Port device team_slave_0 removed [ 100.732117][ T5806] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 100.754416][ T5806] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 100.767036][ T5806] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 100.774559][ T5705] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.926382][ T5705] usb 4-1: device descriptor read/64, error -71 [ 100.997946][ T6028] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.049522][ T6028] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.077449][ T6028] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.104920][ T6116] sg_read: process 51 (syz.0.75) changed security contexts after opening file descriptor, this is not allowed. [ 101.144449][ T5806] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 101.145902][ T6028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.171906][ T5806] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 101.195316][ T5705] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 101.214291][ T6028] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.238983][ T6028] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.248743][ T5806] pyra 0003:1E7D:2CF6.0003: probe with driver pyra failed with error -71 [ 101.266582][ T6028] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.290127][ T5806] usb 1-1: USB disconnect, device number 8 [ 101.319374][ T6028] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.344837][ T5705] usb 4-1: device descriptor read/64, error -71 [ 101.407589][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 101.407603][ T29] audit: type=1400 audit(1785358024.065:337): avc: denied { mount } for pid=6159 comm="syz.1.81" name="/" dev="configfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 101.505999][ T5705] usb usb4-port1: attempt power cycle [ 101.516534][ T29] audit: type=1400 audit(1785358024.095:338): avc: denied { search } for pid=6159 comm="syz.1.81" name="/" dev="configfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.538864][ T29] audit: type=1400 audit(1785358024.095:339): avc: denied { search } for pid=6159 comm="syz.1.81" name="usb_gadget" dev="configfs" ino=1353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.564468][ T5727] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 101.571739][ T6028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.582262][ T5614] Bluetooth: hci5: command tx timeout [ 101.632565][ T6028] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.670363][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.677498][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.704098][ T29] audit: type=1400 audit(1785358024.355:340): avc: denied { write } for pid=6148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.763669][ T5727] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 101.775266][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.782435][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.797028][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.819689][ T29] audit: type=1400 audit(1785358024.475:341): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 101.848156][ T5727] usb 3-1: Product: syz [ 101.857945][ T5727] usb 3-1: Manufacturer: syz [ 101.866005][ T5705] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 101.874886][ T5727] usb 3-1: SerialNumber: syz [ 101.890227][ T29] audit: type=1400 audit(1785358024.505:342): avc: denied { write } for pid=6175 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.921818][ T5727] usb 3-1: config 0 descriptor?? [ 101.929545][ T5705] usb 4-1: device descriptor read/8, error -71 [ 101.948974][ T5727] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 012 [ 102.090787][ T6185] FAULT_INJECTION: forcing a failure. [ 102.090787][ T6185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.125573][ T6185] CPU: 0 UID: 0 PID: 6185 Comm: syz.0.85 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.125603][ T6185] Tainted: [L]=SOFTLOCKUP [ 102.125610][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.125619][ T6185] Call Trace: [ 102.125625][ T6185] [ 102.125631][ T6185] dump_stack_lvl+0x100/0x190 [ 102.125659][ T6185] should_fail_ex.cold+0x5/0xa [ 102.125681][ T6185] _copy_from_user+0x2e/0xd0 [ 102.125705][ T6185] copy_msghdr_from_user+0x9f/0x4c0 [ 102.125734][ T6185] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 102.125778][ T6185] ___sys_sendmsg+0x106/0x1e0 [ 102.125807][ T6185] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.125832][ T6185] ? __lock_acquire+0x49f/0x1a40 [ 102.125853][ T6185] ? get_pid_task+0x106/0x250 [ 102.125908][ T6185] __sys_sendmsg+0x160/0x210 [ 102.125930][ T6185] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.125964][ T6185] do_syscall_64+0x115/0x870 [ 102.125983][ T6185] ? clear_bhb_loop+0x40/0x90 [ 102.126004][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.126021][ T6185] RIP: 0033:0x7f528a39de99 [ 102.126036][ T6185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.126052][ T6185] RSP: 002b:00007f528b1c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.126068][ T6185] RAX: ffffffffffffffda RBX: 00007f528a625fa0 RCX: 00007f528a39de99 [ 102.126079][ T6185] RDX: 0000000020000090 RSI: 00002000000000c0 RDI: 0000000000000003 [ 102.126089][ T6185] RBP: 00007f528b1c5090 R08: 0000000000000000 R09: 0000000000000000 [ 102.126099][ T6185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.126108][ T6185] R13: 00007f528a626038 R14: 00007f528a625fa0 R15: 00007ffeba686f48 [ 102.126130][ T6185] [ 102.356831][ T5727] (null): failure reading functionality [ 102.389808][ T5705] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 102.411668][ T5727] i2c i2c-1: connected i2c-tiny-usb device [ 102.419866][ T5705] usb 4-1: device descriptor read/8, error -71 [ 102.538949][ T6201] futex_wake_op: syz.0.86 tries to shift op by 144; fix this program [ 102.578957][ T29] audit: type=1400 audit(1785358025.215:343): avc: denied { write } for pid=6192 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 102.606282][ T5705] usb usb4-port1: unable to enumerate USB device [ 102.972729][ T29] audit: type=1400 audit(1785358025.615:344): avc: denied { write } for pid=6198 comm="syz.1.87" name="dbroot" dev="configfs" ino=10475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 103.026740][ T5727] usb 3-1: USB disconnect, device number 12 [ 103.033155][ T29] audit: type=1400 audit(1785358025.615:345): avc: denied { open } for pid=6198 comm="syz.1.87" path="/25/my_configfs/target/dbroot" dev="configfs" ino=10475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 103.092804][ T29] audit: type=1400 audit(1785358025.655:346): avc: denied { watch } for pid=6157 comm="syz.2.82" path="/19/file0" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 103.267193][ T6028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.510499][ T6028] veth0_vlan: entered promiscuous mode [ 103.522004][ T6028] veth1_vlan: entered promiscuous mode [ 103.554669][ T5803] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 103.569926][ T6028] veth0_macvtap: entered promiscuous mode [ 103.580702][ T6028] veth1_macvtap: entered promiscuous mode [ 103.611941][ T6028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.637896][ T6028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.651201][ T6028] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 103.672550][ T5614] Bluetooth: hci5: command tx timeout [ 103.684558][ T5727] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.689036][ T6028] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 103.727042][ T5803] usb 1-1: Using ep0 maxpacket: 16 [ 103.733311][ T6028] wireguard: wg0: Could not create IPv4 socket [ 103.743560][ T5803] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.760191][ T5803] usb 1-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 103.785370][ T6028] wireguard: wg1: Could not create IPv4 socket [ 103.806196][ T6028] wireguard: wg2: Could not create IPv4 socket [ 103.818215][ T5803] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 103.844113][ T6234] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 103.850774][ T6234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.866574][ T5727] usb 2-1: device descriptor read/64, error -71 [ 103.878636][ T5803] usb 1-1: string descriptor 0 read error: -22 [ 103.889798][ T5803] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 103.900847][ T6234] vhci_hcd vhci_hcd.0: Device attached [ 103.907131][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.957733][ T5803] usb 1-1: interface 2 not found [ 104.125458][ T5705] usb 1-1: USB disconnect, device number 9 [ 104.164834][ T46] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 104.172993][ T5727] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.204505][ T5806] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 104.324571][ T5727] usb 2-1: device descriptor read/64, error -71 [ 104.344804][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 104.352123][ T6235] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 104.360321][ T156] vhci_hcd vhci_hcd.3: stop threads [ 104.365137][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 104.365910][ T156] vhci_hcd vhci_hcd.3: release socket [ 104.382187][ T156] vhci_hcd vhci_hcd.3: disconnect device [ 104.386790][ T46] usb 4-1: no configurations [ 104.392843][ T46] usb 4-1: can't read configurations, error -22 [ 104.399616][ T5712] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 104.436506][ T5727] usb usb2-port1: attempt power cycle [ 104.565779][ T5712] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.576790][ T5712] usb 3-1: config 0 has no interfaces? [ 104.584027][ T5712] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 104.593297][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.601356][ T5712] usb 3-1: Product: syz [ 104.605551][ T5712] usb 3-1: Manufacturer: syz [ 104.610148][ T5712] usb 3-1: SerialNumber: syz [ 104.617688][ T5712] usb 3-1: config 0 descriptor?? [ 104.696823][ T5803] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5803 comm: kworker/0:6) [ 104.784648][ T5727] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 104.815420][ T5727] usb 2-1: device descriptor read/8, error -71 [ 104.823980][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.832993][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.841449][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.850213][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.859291][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.868547][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.877836][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.887434][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.896634][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.905378][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.958802][ T5803] usb 3-1: USB disconnect, device number 13 [ 105.074415][ T5727] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 105.095560][ T5727] usb 2-1: device descriptor read/8, error -71 [ 105.207569][ T5727] usb usb2-port1: unable to enumerate USB device [ 105.545450][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.554466][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.565945][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.579848][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.591576][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.116034][ T5705] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 106.299317][ T5705] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.314518][ T46] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 106.345113][ T5705] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.380252][ T5705] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 106.411420][ T5705] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 106.417474][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 106.417491][ T29] audit: type=1400 audit(2000000000.430:372): avc: denied { call } for pid=6304 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 106.438468][ T5705] usb 1-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 106.486392][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.505806][ T5705] usb 1-1: Product: syz [ 106.534477][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 106.547778][ T5705] usb 1-1: Manufacturer: syz [ 106.562020][ T46] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 106.577346][ T5705] usb 1-1: SerialNumber: syz [ 106.594301][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.648330][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.688855][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 106.728660][ T46] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 106.752164][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.804240][ T46] usb 3-1: config 0 descriptor?? [ 106.963091][ T6316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.104'. [ 107.191246][ T6262] Failed to initialize the IGMP autojoin socket (err -2) [ 107.216507][ T6315] syz.1.104 uses obsolete (PF_INET,SOCK_PACKET) [ 107.332281][ T138] bridge_slave_1: left allmulticast mode [ 107.348067][ T138] bridge_slave_1: left promiscuous mode [ 107.367694][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.406739][ T138] bridge_slave_0: left allmulticast mode [ 107.424064][ T138] bridge_slave_0: left promiscuous mode [ 107.435777][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.655357][ T5614] Bluetooth: hci1: command tx timeout [ 108.891360][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 108.956434][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 109.101648][ T46] usb 3-1: USB disconnect, device number 14 [ 109.386035][ T138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.603055][ T5705] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 109.604702][ T5806] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 109.617515][ T29] audit: type=1400 audit(2000000003.610:373): avc: denied { write } for pid=6322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.624503][ T5705] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 109.716591][ T138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.736068][ T5614] Bluetooth: hci1: command tx timeout [ 109.761319][ T138] bond0 (unregistering): Released all slaves [ 109.769184][ T5705] usb 1-1: 0:2 : does not exist [ 109.873990][ T29] audit: type=1400 audit(2000000003.880:374): avc: denied { write } for pid=6345 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.062419][ T5705] usb 1-1: USB disconnect, device number 10 [ 110.123871][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.338088][ T138] hsr_slave_0: left promiscuous mode [ 110.464688][ T5705] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 110.619145][ T138] hsr_slave_1: left promiscuous mode [ 110.628942][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.638198][ T138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.647187][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.655316][ T138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.666251][ T29] audit: type=1400 audit(2000000004.680:375): avc: denied { mount } for pid=6358 comm="syz.1.110" name="/" dev="autofs" ino=12143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 110.703945][ T138] veth1_macvtap: left promiscuous mode [ 110.710260][ T138] veth0_macvtap: left promiscuous mode [ 110.716167][ T138] veth1_vlan: left promiscuous mode [ 110.723343][ T138] veth0_vlan: left promiscuous mode [ 110.784389][ T5705] usb 1-1: Using ep0 maxpacket: 32 [ 110.801427][ T6361] hub 8-0:1.0: USB hub found [ 110.807032][ T6361] hub 8-0:1.0: 1 port detected [ 110.815005][ T29] audit: type=1400 audit(2000000004.800:376): avc: denied { write } for pid=6358 comm="syz.1.110" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 110.816591][ T5705] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 110.865920][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.881757][ T5705] usb 1-1: Product: syz [ 110.886083][ T5705] usb 1-1: Manufacturer: syz [ 110.897019][ T5705] usb 1-1: SerialNumber: syz [ 110.920914][ T5705] usb 1-1: config 0 descriptor?? [ 111.167333][ T138] team0 (unregistering): Port device team_slave_1 removed [ 111.191890][ T138] team0 (unregistering): Port device team_slave_0 removed [ 111.250314][ T5705] snd-usb-6fire 1-1:0.0: unable to receive device firmware state. [ 111.263912][ T5705] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -121 [ 111.423608][ T6356] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 111.433056][ T6356] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 111.443586][ T6356] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 111.466831][ T29] audit: type=1800 audit(2000000005.430:377): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.3.109" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 111.641434][ T29] audit: type=1400 audit(2000000005.430:378): avc: denied { firmware_load } for pid=6353 comm="syz.3.109" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 111.678135][ T29] audit: type=1400 audit(2000000005.450:379): avc: denied { firmware_load } for pid=6353 comm="syz.3.109" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 111.819934][ T5614] Bluetooth: hci1: command tx timeout [ 112.034431][ T5801] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 112.107679][ T6381] PKCS8: Unsupported PKCS#8 version [ 112.397975][ T5705] usb 1-1: USB disconnect, device number 11 [ 112.413261][ T29] audit: type=1400 audit(2000000006.420:380): avc: denied { setopt } for pid=6384 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.437536][ T29] audit: type=1400 audit(2000000006.440:381): avc: denied { read } for pid=6384 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.475089][ T5801] usb 2-1: Using ep0 maxpacket: 16 [ 112.490235][ T5801] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 112.500497][ T29] audit: type=1400 audit(2000000006.500:382): avc: denied { write } for pid=6384 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.521630][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 112.530917][ T5801] usb 2-1: Product: syz [ 112.535927][ T5801] usb 2-1: Manufacturer: syz [ 112.540583][ T5801] usb 2-1: SerialNumber: syz [ 112.548723][ T5801] usb 2-1: config 0 descriptor?? [ 112.563621][ T5801] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 112.650305][ T6262] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.668983][ T6262] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.675683][ T29] audit: type=1400 audit(2000000006.680:383): avc: denied { write } for pid=6367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.677622][ T6262] bridge_slave_0: entered allmulticast mode [ 112.719845][ T6262] bridge_slave_0: entered promiscuous mode [ 112.730397][ T29] audit: type=1400 audit(2000000006.740:384): avc: denied { ioctl } for pid=6391 comm="syz.2.116" path="socket:[11192]" dev="sockfs" ino=11192 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.761598][ T5801] usb 2-1: USB disconnect, device number 9 [ 112.764861][ T6262] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.786020][ T6262] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.793339][ T6262] bridge_slave_1: entered allmulticast mode [ 112.801189][ T6262] bridge_slave_1: entered promiscuous mode [ 112.874170][ T29] audit: type=1400 audit(2000000006.880:385): avc: denied { write } for pid=6400 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.913977][ T6262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.937262][ T6262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.070170][ T6262] team0: Port device team_slave_0 added [ 113.202946][ T6262] team0: Port device team_slave_1 added [ 113.744098][ T29] audit: type=1400 audit(2000000007.750:386): avc: denied { mounton } for pid=6414 comm="syz.1.118" path="/33/file0" dev="tmpfs" ino=205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.835577][ T6262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.862855][ T6262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.921426][ T5614] Bluetooth: hci1: command tx timeout [ 113.992949][ T6262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.072025][ T6262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.086938][ T6262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.114918][ T6419] Bluetooth: MGMT ver 1.23 [ 114.166635][ T6262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.256728][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 114.266272][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 114.275574][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 114.284540][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 114.293545][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 114.303682][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 114.312797][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 114.321886][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 114.330963][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 114.340059][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 114.575437][ T6262] hsr_slave_0: entered promiscuous mode [ 114.635270][ T6442] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5618] was attempted by ""[6442] [ 115.044557][ T6262] hsr_slave_1: entered promiscuous mode [ 116.247621][ T6493] dummy_hcd dummy_hcd.0: remove, state 4 [ 116.258952][ T6493] usb usb1: USB disconnect, device number 1 [ 116.388764][ T6493] dummy_hcd dummy_hcd.0: stopped [ 116.420680][ T6493] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 116.577172][ T6500] kvm: kvm [6499]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 116.588894][ T6500] kvm: kvm [6499]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 116.617459][ T6262] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 116.653877][ T6262] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.672791][ T6262] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 116.688866][ T6262] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.706860][ T6262] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 116.726784][ T6262] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.737867][ T6262] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 116.768440][ T6262] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.939465][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 116.939484][ T29] audit: type=1400 audit(2000000010.950:404): avc: denied { setopt } for pid=6516 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.005727][ T29] audit: type=1400 audit(2000000010.980:405): avc: denied { listen } for pid=6516 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.069811][ T29] audit: type=1400 audit(2000000010.980:406): avc: denied { accept } for pid=6516 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.152148][ T29] audit: type=1400 audit(2000000011.040:407): avc: denied { ioctl } for pid=6516 comm="syz.3.147" path="socket:[12889]" dev="sockfs" ino=12889 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.240103][ T29] audit: type=1400 audit(2000000011.250:408): avc: denied { ioctl } for pid=6525 comm="syz.1.150" path="socket:[12919]" dev="sockfs" ino=12919 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 117.269765][ T6262] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.323927][ T29] audit: type=1400 audit(2000000011.280:409): avc: denied { write } for pid=6525 comm="syz.1.150" path="socket:[12919]" dev="sockfs" ino=12919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 117.362968][ T6272] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.370127][ T6272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.428114][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.435304][ T6288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.460445][ T29] audit: type=1400 audit(2000000011.470:410): avc: denied { map } for pid=6528 comm="syz.1.152" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 117.830991][ T29] audit: type=1400 audit(2000000011.840:411): avc: denied { create } for pid=6543 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.915546][ T29] audit: type=1400 audit(2000000011.870:412): avc: denied { write } for pid=6543 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.999053][ T29] audit: type=1400 audit(2000000011.890:413): avc: denied { read } for pid=6543 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 118.280772][ T5614] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 118.293200][ T5614] CPU: 1 UID: 0 PID: 5614 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.293234][ T5614] Tainted: [L]=SOFTLOCKUP [ 118.293241][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 118.293254][ T5614] Workqueue: hci0 hci_rx_work [ 118.293278][ T5614] Call Trace: [ 118.293284][ T5614] [ 118.293291][ T5614] dump_stack_lvl+0x100/0x190 [ 118.293318][ T5614] sysfs_warn_dup.cold+0x1c/0x28 [ 118.293348][ T5614] sysfs_create_dir_ns+0x24b/0x2b0 [ 118.293381][ T5614] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 118.293409][ T5614] ? find_held_lock+0x2b/0x80 [ 118.293438][ T5614] ? kobject_add_internal+0x25f/0x930 [ 118.293464][ T5614] ? kobject_add_internal+0x25f/0x930 [ 118.293493][ T5614] ? do_raw_spin_unlock+0x145/0x1e0 [ 118.293521][ T5614] kobject_add_internal+0x2c8/0x930 [ 118.293551][ T5614] kobject_add+0x16a/0x1e0 [ 118.293574][ T5614] ? __pfx_kobject_add+0x10/0x10 [ 118.293597][ T5614] ? class_to_subsys+0x10f/0x150 [ 118.293629][ T5614] ? kobject_put+0xb9/0x640 [ 118.293652][ T5614] ? _raw_spin_unlock+0x28/0x50 [ 118.293686][ T5614] device_add+0x294/0x1970 [ 118.293713][ T5614] ? __pfx_dev_set_name+0x10/0x10 [ 118.293743][ T5614] ? __pfx_device_add+0x10/0x10 [ 118.293768][ T5614] ? mgmt_send_event_skb+0x2fb/0x460 [ 118.293796][ T5614] hci_conn_add_sysfs+0x1a3/0x260 [ 118.293824][ T5614] le_conn_complete_evt+0x11eb/0x1f60 [ 118.293852][ T5614] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 118.293870][ T5614] ? hci_event_packet+0x186/0xcd0 [ 118.293887][ T5614] ? hci_event_packet+0x186/0xcd0 [ 118.293912][ T5614] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 118.293934][ T5614] ? skb_pull_data+0x15f/0x1e0 [ 118.293965][ T5614] hci_le_meta_evt+0x34a/0x5f0 [ 118.293987][ T5614] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 118.294011][ T5614] hci_event_packet+0x51c/0xcd0 [ 118.294031][ T5614] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 118.294053][ T5614] ? __pfx_hci_event_packet+0x10/0x10 [ 118.294075][ T5614] ? kcov_remote_start+0x384/0x670 [ 118.294097][ T5614] ? lockdep_hardirqs_on+0x78/0x100 [ 118.294123][ T5614] hci_rx_work+0x451/0xfc0 [ 118.294147][ T5614] process_one_work+0xa23/0x1940 [ 118.294186][ T5614] ? __pfx_process_one_work+0x10/0x10 [ 118.294216][ T5614] ? __pfx_hci_rx_work+0x10/0x10 [ 118.294239][ T5614] worker_thread+0x5ef/0xe50 [ 118.294270][ T5614] ? kthread+0x13a/0x450 [ 118.294288][ T5614] ? __pfx_worker_thread+0x10/0x10 [ 118.294308][ T5614] kthread+0x370/0x450 [ 118.294327][ T5614] ? __pfx_kthread+0x10/0x10 [ 118.294344][ T5614] ret_from_fork+0x72b/0xd50 [ 118.294368][ T5614] ? __pfx_ret_from_fork+0x10/0x10 [ 118.294392][ T5614] ? __switch_to+0x800/0x10f0 [ 118.294411][ T5614] ? __pfx_kthread+0x10/0x10 [ 118.294429][ T5614] ret_from_fork_asm+0x1a/0x30 [ 118.294467][ T5614] [ 118.565509][ T5614] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 118.579716][ T5614] Bluetooth: hci0: failed to register connection device [ 118.676101][ T6569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.740162][ T6571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.938848][ T6262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.455018][ T6594] tipc: Started in network mode [ 119.467185][ T6594] tipc: Node identity da198ec8dc7a, cluster identity 4711 [ 119.489079][ T6594] tipc: Enabled bearer , priority 0 [ 119.520427][ T6601] syzkaller0: entered promiscuous mode [ 119.536154][ T6601] syzkaller0: entered allmulticast mode [ 119.562249][ T6594] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 119.619414][ T6606] __nla_validate_parse: 1 callbacks suppressed [ 119.619431][ T6606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.169'. [ 119.709695][ T6594] tipc: Resetting bearer [ 119.768723][ T6593] tipc: Resetting bearer [ 119.807647][ T6593] tipc: Disabling bearer [ 119.840456][ T6610] syzkaller0: entered promiscuous mode [ 119.854495][ T6610] syzkaller0: entered allmulticast mode [ 119.862990][ T6262] veth0_vlan: entered promiscuous mode [ 119.920494][ T6262] veth1_vlan: entered promiscuous mode [ 120.128471][ T6262] veth0_macvtap: entered promiscuous mode [ 120.177935][ T6623] ./sys/bus/nd/drivers/nd_pmem/unbind: Can't lookup blockdev [ 120.188547][ T6262] veth1_macvtap: entered promiscuous mode [ 120.312364][ T6262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.343022][ T6627] netlink: 'syz.0.175': attribute type 10 has an invalid length. [ 120.369165][ T6262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.399893][ T6262] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 120.457309][ T6262] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 120.492085][ T6262] wireguard: wg0: Could not create IPv4 socket [ 120.512306][ T6262] wireguard: wg1: Could not create IPv4 socket [ 120.532526][ T6262] wireguard: wg2: Could not create IPv4 socket [ 121.582534][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 121.593828][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.607952][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.617684][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.626002][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.971427][ T6685] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 122.106239][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 122.106254][ T29] audit: type=1400 audit(2000000016.120:424): avc: denied { read append } for pid=6688 comm="syz.1.188" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.202326][ T29] audit: type=1400 audit(2000000016.150:425): avc: denied { open } for pid=6688 comm="syz.1.188" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.234259][ T6689] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 122.259861][ T6689] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 122.375479][ T6668] Failed to initialize the IGMP autojoin socket (err -2) [ 122.412243][ T6689] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 122.423092][ T6689] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 122.441950][ T6689] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.458792][ T6689] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.477392][ T6689] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.496804][ T6689] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.514505][ T6689] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.524680][ T6689] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.552981][ T6689] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 122.559284][ T6689] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 122.573130][ T6689] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 122.588095][ T6689] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 122.595564][ T6689] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 122.617678][ T6689] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 122.754635][ T29] audit: type=1400 audit(2000000016.760:426): avc: denied { write } for pid=6697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.884980][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 122.907766][ T5727] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 122.946592][ T29] audit: type=1400 audit(2000000016.960:427): avc: denied { write } for pid=6716 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.209379][ T29] audit: type=1400 audit(2000000017.210:428): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 123.215083][ T5727] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 123.265771][ T5727] usb 3-1: config 0 has no interface number 0 [ 123.271942][ T5727] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 123.288513][ T5727] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 123.346963][ T5727] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 123.487148][ T5727] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 123.497082][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 123.512160][ T5727] usb 3-1: Product: syz [ 123.516771][ T5727] usb 3-1: SerialNumber: syz [ 123.536301][ T5727] usb 3-1: config 0 descriptor?? [ 123.554974][ T5727] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 123.588564][ T6734] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6734 comm=syz.0.196 [ 123.606649][ T5727] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input7 [ 123.613210][ T6734] netlink: 'syz.0.196': attribute type 1 has an invalid length. [ 123.626197][ T6734] netlink: 'syz.0.196': attribute type 2 has an invalid length. [ 123.637890][ T6734] netlink: 240 bytes leftover after parsing attributes in process `syz.0.196'. [ 123.658708][ T29] audit: type=1400 audit(2000000017.670:429): avc: denied { read } for pid=4962 comm="acpid" name="event4" dev="devtmpfs" ino=2872 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.746908][ T29] audit: type=1400 audit(2000000017.670:430): avc: denied { open } for pid=4962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2872 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.797814][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.806523][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.815402][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.823244][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.831532][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.837834][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.198'. [ 123.840872][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.855538][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.862689][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.869902][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.877382][ T5727] usb 3-1: USB disconnect, device number 15 [ 123.881085][ T29] audit: type=1400 audit(2000000017.670:431): avc: denied { ioctl } for pid=4962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2872 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.883311][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.915037][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 124.017667][ T5727] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 124.041917][ T6740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.092337][ T29] audit: type=1400 audit(2000000018.090:432): avc: denied { write } for pid=6729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.189949][ T29] audit: type=1400 audit(2000000018.190:433): avc: denied { ioctl } for pid=6750 comm="syz.1.199" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 124.224285][ T6751] input: syz1 as /devices/virtual/input/input8 [ 124.249923][ T5611] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 124.295848][ T5611] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.454626][ T5611] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.534456][ T5611] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.617253][ T5611] Bluetooth: hci1: command 0x041b tx timeout [ 124.624838][ T5611] Bluetooth: hci4: command 0x0c1a tx timeout [ 124.673339][ T6556] Set syz0 is full, maxelem 65536 reached [ 124.866299][ T6668] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 124.894033][ T6668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.927273][ T6668] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 124.982275][ T6668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.001545][ T6668] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 125.035791][ T6668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.067851][ T6668] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 125.105683][ T6668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.341655][ T5611] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 125.401048][ T6800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.585299][ T6809] netlink: 'syz.3.214': attribute type 1 has an invalid length. [ 125.724238][ T6809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.803899][ T6815] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 126.036532][ T5611] Bluetooth: hci2: unexpected subevent 0x19 length: 24 < 28 [ 126.239228][ T6844] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 126.251328][ T6844] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 126.259752][ T6844] CPU: 1 UID: 0 PID: 6844 Comm: syz.0.219 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.270526][ T6844] Tainted: [L]=SOFTLOCKUP [ 126.274857][ T6844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 126.284921][ T6844] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 126.290414][ T6844] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 126.310035][ T6844] RSP: 0018:ffffc90003ac7b48 EFLAGS: 00010246 [ 126.316147][ T6844] RAX: dffffc0000000000 RBX: ffff88802bbecc00 RCX: ffffc90003cb9000 [ 126.324124][ T6844] RDX: 0000000000000000 RSI: ffffffff87d0cf47 RDI: ffff88802bbed290 [ 126.332228][ T6844] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000005 [ 126.340211][ T6844] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888035658050 [ 126.348196][ T6844] R13: 0000000000000000 R14: ffff8880271894f1 R15: ffff888027189008 [ 126.356172][ T6844] FS: 00007f528b1c56c0(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 126.365116][ T6844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.371711][ T6844] CR2: 00007f70fe589000 CR3: 000000004e96a000 CR4: 00000000003526f0 [ 126.379694][ T6844] Call Trace: [ 126.382977][ T6844] [ 126.385917][ T6844] gadget_bind_driver+0x4ac/0xbf0 [ 126.390970][ T6844] ? __pfx_gadget_bind_driver+0x10/0x10 [ 126.396637][ T6844] really_probe+0x241/0xa60 [ 126.401155][ T6844] __driver_probe_device+0x20e/0x450 [ 126.406452][ T6844] driver_probe_device+0x4a/0x140 [ 126.411499][ T6844] __driver_attach+0x21f/0x5b0 [ 126.416278][ T6844] ? __pfx___driver_attach+0x10/0x10 [ 126.421575][ T6844] bus_for_each_dev+0x13e/0x1d0 [ 126.426431][ T6844] ? __pfx_bus_for_each_dev+0x10/0x10 [ 126.431828][ T6844] ? bus_add_driver+0x2b5/0x5b0 [ 126.436686][ T6844] bus_add_driver+0x305/0x5b0 [ 126.441377][ T6844] driver_register+0x1e2/0x360 [ 126.446158][ T6844] ? rcu_is_watching+0x12/0xc0 [ 126.450950][ T6844] usb_gadget_register_driver_owner+0x132/0x210 [ 126.455781][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 126.457211][ T6844] raw_ioctl+0x1a85/0x2b80 [ 126.470383][ T6844] ? __pfx_raw_ioctl+0x10/0x10 [ 126.475166][ T6844] ? selinux_file_ioctl+0x13b/0x290 [ 126.480373][ T6844] ? selinux_file_ioctl+0xb6/0x290 [ 126.485493][ T6844] ? __pfx_raw_ioctl+0x10/0x10 [ 126.490252][ T6844] __x64_sys_ioctl+0x18e/0x210 [ 126.495012][ T6844] do_syscall_64+0x115/0x870 [ 126.499583][ T6844] ? clear_bhb_loop+0x40/0x90 [ 126.504277][ T6844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.510168][ T6844] RIP: 0033:0x7f528a39db2b [ 126.514565][ T6844] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 126.534155][ T6844] RSP: 002b:00007f528b1c2f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.542549][ T6844] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f528a39db2b [ 126.550499][ T6844] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 126.558449][ T6844] RBP: 00007f528b1c3fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 126.566402][ T6844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.574349][ T6844] R13: 0000200000000280 R14: 0000000000000002 R15: 0000000000000000 [ 126.582304][ T6844] [ 126.585315][ T6844] Modules linked in: [ 126.590125][ T6844] ---[ end trace 0000000000000000 ]--- [ 126.601659][ T5611] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.607712][ T5611] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.607780][ T6844] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 126.624388][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.646211][ T6844] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 126.666552][ T6844] RSP: 0018:ffffc90003ac7b48 EFLAGS: 00010246 [ 126.673100][ T6844] RAX: dffffc0000000000 RBX: ffff88802bbecc00 RCX: ffffc90003cb9000 [ 126.683153][ T6844] RDX: 0000000000000000 RSI: ffffffff87d0cf47 RDI: ffff88802bbed290 [ 126.691205][ T6844] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000005 [ 126.700226][ T5611] Bluetooth: hci1: command 0x041b tx timeout [ 126.706298][ T5614] Bluetooth: hci4: command 0x0c1a tx timeout [ 126.712324][ T6844] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888035658050 [ 126.720452][ T6844] R13: 0000000000000000 R14: ffff8880271894f1 R15: ffff888027189008 [ 126.728645][ T6844] FS: 00007f528b1c56c0(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 126.737628][ T6844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.744219][ T6844] CR2: 00007f1a8a01ad58 CR3: 000000004e96a000 CR4: 00000000003526f0 [ 126.753520][ T6860] ftl_cs: FTL header not found. [ 126.764416][ T6844] Kernel panic - not syncing: Fatal exception [ 126.770768][ T6844] Kernel Offset: disabled [ 126.775091][ T6844] Rebooting in 86400 seconds..