last executing test programs: 2m46.938343269s ago: executing program 3 (id=3011): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x13, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8cd83, 0x0, 0x0, 0x0, 0x20}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff0000}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8603) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000140)={0x1, 0x2, {0xffffffffffffffff, 0x2, 0x10, 0x3, 0x3ff}, 0x6c}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m43.665228721s ago: executing program 3 (id=3022): syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000400)=0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0xfffffffffffffefd, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008851}, 0x4044801) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x8) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') ioctl$TCSETS(r3, 0x40045431, 0x0) syz_open_pts(r3, 0x2080) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x83, &(0x7f0000000040)={r6, 0x1}, 0x8) 2m40.675811907s ago: executing program 3 (id=3026): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x8, 0x0, &(0x7f0000000b40)=[@decrefs], 0x0, 0x0, 0x0}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) r1 = getpid() (rerun: 64) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e00028042e76623000000000000", 0x2e}], 0x1}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r5) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) (rerun: 32) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4040) 2m39.803480199s ago: executing program 3 (id=3028): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f0000000040)=0x10001, 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) close(r3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff0000000000000140012800b00010062617461647600000300028008000a00", @ANYRES32=0x0, @ANYBLOB="3d990467ee38dc8b0e"], 0x3c}}, 0x0) 2m37.421446065s ago: executing program 3 (id=3034): syz_open_dev$radio(&(0x7f00000001c0), 0x3, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') getdents(r0, &(0x7f0000000040)=""/227, 0xe3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000400007012bbd700000000000017c"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15955565060608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000340)={0x2e09, 0x14, [{0x0, 0x1}, {0xc, 0x1}, {0x8}, {0x5, 0x1}, {0xe}, {0xb, 0x1}, {0x6}, {0x5, 0x1}, {0xd}, {0xa}, {0xf, 0x1}, {0x0, 0x1}, {0xb, 0x1}, {0x1}, {0xc}, {0x4}, {0x7, 0x1}, {0xf}, {0xa, 0x1}, {0x4, 0x1}]}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x100, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x4}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x4}}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x4) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000100)={0x29, 0x4, 0x0, {0x5, 0x2, 0x1, 0x0, [0x0]}}, 0x29) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2000413, &(0x7f0000000540)=ANY=[]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 2m34.903087512s ago: executing program 3 (id=3038): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMAXCID(r1, 0x40047451, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) ioprio_set$pid(0x2, 0x0, 0x0) sync() r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r4, r6, 0x25, 0x4, @void}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500452c00000000002f9078ac1e0001e000000100006558001890780400ec5597dd808e75d490cf54b08adf000000000001000080ff00000000"], 0xfdef) 2m19.554212048s ago: executing program 32 (id=3038): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMAXCID(r1, 0x40047451, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) ioprio_set$pid(0x2, 0x0, 0x0) sync() r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r4, r6, 0x25, 0x4, @void}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500452c00000000002f9078ac1e0001e000000100006558001890780400ec5597dd808e75d490cf54b08adf000000000001000080ff00000000"], 0xfdef) 5.526394893s ago: executing program 5 (id=3806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "080200", "8a36c47a9c625dfaf08ace81c500", '\x00', "362d3017f069109d"}, 0x28) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x2) syz_genetlink_get_family_id$fou(&(0x7f00000011c0), r0) 5.416685779s ago: executing program 4 (id=3807): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[], 0x50) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c38303231"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r5) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0100000000e27000000003000000000000000000", @ANYRES32=0x0], 0x18}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91524fc60", 0x14}], 0x1}, 0x40048820) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x208000c9, 0x101002) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000040)=0xffffffff) 4.716592653s ago: executing program 1 (id=3813): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x0, 0x21, 0x8b, {0x8b, 0x9, "38c0f61cbced5c754ae8833a6672f4b982461ea61d79a411ab53fc1814638f6cf4dd585e92eefeb4fd9bbd8a24e8719e01eea95c54510677293650e187f47e28197b2219b92d39832cfe0f42346202e303e538c7012095a1dd32df9abf0acae15658c015444f281296439eb89a62b72182aed68cf29b072fd081d48e4074f0c8924b3d80d26f0766d8"}}, &(0x7f0000000300)={0x0, 0x3, 0x65, @string={0x65, 0x3, "8636e06020637430397a8d9602c939310d990d26570ab0ed6a5f1aed9bdc2c1a4e4dfd0c56573b61bb6867908e3f3cfefac0aaa364b7e707607ef785ded1256e79e4f8b9795315e5218d9e676b40527ff62d3053a2e1ebd415b9900b80bf9123b9eb15"}}, &(0x7f0000000380)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc5, 0x18, 0x4, 0xdf, "090300", "f1484ce2"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0xc, 0x6, 0x2, 0xfff6, 0x2}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000480)={0x0, 0xe, 0x84, "7dde72b19b28039017c3e42920e823960b0f94c4a2cfa81e7b86b7e5423ffa55d5c03d98a102fb6bd0e6640f862440adef81958629db80d235a8ee3340b632bea2f3004e29e8a0aaa341383ed36127b93bff4025451ceeaa445396f29a6274f311d0fa4e5000625dc1d662cca7e87569795944ed6015b08eb871c46cafa96fa79b44de92"}, &(0x7f0000000540)={0x0, 0xa, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0xc0, 0x2c}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x181}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "d277"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000800)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x17, 0x6}, &(0x7f0000000880)={0x40, 0x19, 0x2, "f93f"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x18}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000200)={0x14, &(0x7f0000000040)={0x40, 0x5, 0x2, {0x2, 0x2}}, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, 0x0, 0x25, 0x0, @void}, 0x10) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0)={0x0, 0x30, 0x45}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.400005329s ago: executing program 5 (id=3814): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socket$nl_crypto(0x10, 0x3, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000480)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x36, 0x36, 0x34, 0x66, 0x30, 0x32, 0x37], 0x2d, [0x31, 0x30, 0x36, 0x62], 0x2d, [0x65, 0x30, 0x32, 0x32], 0x2d, [0x30, 0x34, 0x38, 0x31], 0x2d, [0x66, 0x33, 0x65, 0x63, 0x36, 0x65, 0x38, 0x38]}}}, {@euid_eq}, {@euid_lt}, {@fowner_eq}]}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000000000000001fdff010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000020a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0xc4) 4.390916037s ago: executing program 4 (id=3815): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500006005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.034375756s ago: executing program 2 (id=3816): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)=0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f00000000c0)={0x27, r1, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}}}, &(0x7f0000000b00)=0xe8) r4 = getegid() syz_clone3(&(0x7f0000001040)={0x24000800, &(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)=0x0, {0x3}, &(0x7f0000000ec0)=""/71, 0x47, &(0x7f0000000f40)=""/192, &(0x7f0000001000)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private1}}, &(0x7f00000011c0)=0xe8) getresgid(&(0x7f0000001200)=0x0, &(0x7f0000001240), &(0x7f0000001280)) r8 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001300)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001340)={0x8, 0x1f23, {}, {0xee01}, 0x0, 0xfffffffffffffffc}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001380)={{0x1, 0x1, 0x18, r2, {0x0, 0xee01}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400), 0x0) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) r12 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001480)={{0x1, 0x1, 0x18, r2, {0x0, 0x0}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000114c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000011500)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000011600)=0xe8) getresgid(&(0x7f0000011640), &(0x7f0000011680)=0x0, &(0x7f00000116c0)) r18 = landlock_create_ruleset(&(0x7f0000011700)={0x2, 0x3, 0x1}, 0x18, 0x1) r19 = socket$netlink(0x10, 0x3, 0xf) r20 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r20, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) pipe2$watch_queue(&(0x7f0000011980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r22 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000011a40)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000001c0)="31866cb8ee618ca0cd5698b459c3c621deb4a37e4dccbdc7b6f5a576468075bfbade6b694088232d7bb312c8cf6c47834779610976f069a6277ffadf48cbf83cd6e328439d1675b9d9949848ea7f109a", 0x50}, {&(0x7f0000000240)="d0db5ae1167dbd6fd56e6861", 0xc}, {&(0x7f0000000280)="fd69efa0e5b32833bc7715d525fd8af7b9ab257969729881", 0x18}, {&(0x7f00000002c0)="eaebfc66c448b31f4190fb03f6cbad77617898793d89bc50f4bc8e598b06fff3bce765847499f013e0968eeaaca2ea4a0c14854309b7d6d345b8da5289b6", 0x3e}, {&(0x7f0000000300)="bdfbf14243930c7af6779c23ee5efcc8d1adab5de3879e48aa5a55acef499fa3f4ff3c4ddea4f40ebebe30f752dc5d61da0e03f943a4f3d382f68448769e4d80e4ec23dc9e7464de9097cf7ecf9d860bc89f980c117272d31054f3c7b957e4aa2ad5bdaf12477298f859c4d6a37e6dd762905c", 0x73}, {&(0x7f0000000380)="cc9c1569f05c2e5997669e3c3a479c4b2cd640e5fa213f5e5137f4ca5580f92c953ccbecb2b39ca7383ffbeab046bc7543b48f7f54bf89bfbe4cf5028b0c6f357f88afe8cbff5320a6ae70", 0x4b}, {&(0x7f0000000400)="bbec27c93b", 0x5}, {&(0x7f0000000440)="4889c7bbbffd7fb44a68f911e6f1df2a0d5550fad63e38a6e633a4cce47954005b4aef8a6646498c5bc90f41e385165aa974a0562c0e4898b69c681a056082489a755311677280ef4ab1cbd51948c5340b0dc1b340e3f1365c76e8494b3c7a8ff808ad86d46ab8f98aa002186f39091fdab2c17def753ed638bef5101038cb5e651341aee2312f42224bfa36b2b0f991c689506339fd80d1e7e8a95888ebee72ef22e658bc70fedf703069e43588ab8252eeeb11af7bd43d81e7aa945b14790ef42a91589bbd0529bacf89ded11bf20966f4cda8882651c239e78e22dc99434b67f66bff61d99f54c5", 0xe9}, {&(0x7f0000000540)}], 0x9, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}], 0x140, 0x880}}, {{&(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000d00)="e902c73a9dfa43c34fcaac931dd9775aae107dcf078650fb46423692bb7e51d799b3dbd4cec7cb7a86109b0ae58a748a784ac53d42f6dd6d22945442d116226b5047373194fd933073af13290e6f326d25fded54c8dccbe0af88c041073eaedc7fe419b98953781ae5d4cc44", 0x6c}, {&(0x7f0000000d80)="0efe04f5c2670522ea69d07003c8b364", 0x10}], 0x2, &(0x7f0000011740)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r17}}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @rights={{0x2c, 0x1, 0x1, [r18, r0, r2, r0, r0, r2, r19]}}], 0xe0, 0x10}}, {{0x0, 0x0, &(0x7f0000011940)=[{&(0x7f0000011840)="94375cc5ac00a18dd2c158193cb6ba0e1409e5d353b5a066dbdf0e1f51027a2412308ba7c151c2734c4770aaf4c9e256eaa40fedef273086d3ca957b60eaa5b7fae47665720669e214a1abde6629e78ab63e7ed7de04562beff5de19c24e951151cd9843af90ceeb8b69af0560d7bdaef43f9b6caa32867baa3f45deac7b5ab8d58a8887019f7055e90724a9672ce5549af32dec18549d2c035d93649eff6abe4f0fb96b936cd65d19ba5576a4ba94346eb2944508fd6aa80fa43e34471702e0134fd241ca03539a5f8d325e7b56ab2e80f54d9f", 0xd4}], 0x1, &(0x7f00000119c0)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r21, r0]}}, @rights={{0x30, 0x1, 0x1, [r2, r2, r21, r0, r22, r2, r2, r0]}}], 0x78, 0x4000800}}], 0x3, 0x20048800) 3.81335732s ago: executing program 1 (id=3817): mkdir(&(0x7f0000000000)='./file0\x00', 0x11a) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x30081}, 0x20000010) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f0000000040)=0x10001, 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c00000000fb02907800000000e000030000009078006400d267eade890f07cddeffc6178957ec4a37a722ca92"], 0x0) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='omfs\x00', 0x0, 0x0) 3.607809876s ago: executing program 2 (id=3819): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0x3000, 0xb000}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x25, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000feffffff0000000000000000b7080000000000007b8af8fffffb0000b7080000010000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_netfilter(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRESDEC=0x0], 0xa4}, 0x1, 0x0, 0x0, 0x24000855}, 0x440c0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 3.042934069s ago: executing program 4 (id=3820): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x1c, 0xfffffffffffffffd, &(0x7f0000000000)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000180)=0x80000006, 0x4) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x7) fcntl$notify(r3, 0x402, 0x1000000) socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r4, 0x7}, 0x8) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x4, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) setxattr$incfs_size(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280)=0x2, 0x8, 0x3) 2.860568083s ago: executing program 5 (id=3821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x8000000002) getrlimit(0x6, &(0x7f0000000000)) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x2, @meta={0x88ac92ac, 0x7747dce1, 0x4f62, 0x8971, 0x1e1fdebf}}) socket(0x1e, 0xa, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x42040, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) unshare(0x22020600) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r3, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) 2.18952447s ago: executing program 4 (id=3823): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) inotify_init1(0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=prefer=relative:00']) 2.143229642s ago: executing program 1 (id=3824): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000001200000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) 2.100092006s ago: executing program 0 (id=3825): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "080200", "8a36c47a9c625dfaf08ace81c500", '\x00', "362d3017f069109d"}, 0x28) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x2) syz_genetlink_get_family_id$fou(&(0x7f00000011c0), r0) 1.986828112s ago: executing program 4 (id=3826): r0 = io_uring_setup(0x178e, &(0x7f0000000100)={0x0, 0xf632, 0x1, 0xfffffffe, 0x100001fd}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'team0\x00', 0x2}) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.794100182s ago: executing program 5 (id=3827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0xf1, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000640)=@vmx={0x103, 0x0, 0x2080, {0x50000, 0x100000, {}, 0x0, 0x8}, {"d07ee5110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057ae0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004ced00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100008000", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c918d25766c1d26c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00"}}) 1.542583511s ago: executing program 5 (id=3828): syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x6, 0xc) capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 1.438415349s ago: executing program 1 (id=3829): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x40, 0x107, 0x70bd25, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x16, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) ioctl$sock_SIOCSPGRP(r5, 0x8902, 0xfffffffffffffffc) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$UHID_CREATE2(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000467970af9868398000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000002000000040000000800000008000000db749129fc6669e1d6af8f3d2a052a07c23996d6f96a2280f870e8a9535fd6c9c57e3d368de0b8608738f820355318c0487ea714a7b03f442789d55015142f3a429358dd429ff51ecf7ff5ffffffffe0c9c0c88c8f3d032780554504240afd58ef9b46bbb3eb1ec37d686b1345a91245a932bf246ef40081da06e8f44609359a92aea156adef1161079d46b03d2ac420d44c1ce38ed5d6255e88fc6bd383f3589787873e5ff0ed609ac2ccecf3e175aa4c3a05d51b34cf462aa61757669c54fac4d55c0ff5a6249fbe355ea473edaff7fa4fc803a4e9a9fc"], 0x1f0) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000000000)=0x1000000010) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) ioctl$BLKRRPART(r8, 0x125f, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 1.436079549s ago: executing program 2 (id=3830): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x30081}, 0x20000010) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f0000000040)=0x10001, 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c00000000fb02907800000000e000030000009078006400d267eade890f07cddeffc6178957ec4a37a722ca92"], 0x0) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='omfs\x00', 0x0, 0x0) 1.16263456s ago: executing program 2 (id=3833): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x1c, 0xfffffffffffffffd, &(0x7f0000000000)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000180)=0x80000006, 0x4) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x7) fcntl$notify(r3, 0x402, 0x1000000) socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r4, 0x7}, 0x8) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x4, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) setxattr$incfs_size(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280)=0x2, 0x8, 0x3) 1.129093035s ago: executing program 0 (id=3834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x8000000002) getrlimit(0x6, &(0x7f0000000000)) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x2, @meta={0x88ac92ac, 0x7747dce1, 0x4f62, 0x8971, 0x1e1fdebf}}) socket(0x1e, 0xa, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0x1f0, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x42040, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r4, 0x5412, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xf73f728008fec34a}, 0x801) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004002, 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2) 1.031552066s ago: executing program 4 (id=3835): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500ff8005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 986.771311ms ago: executing program 2 (id=3836): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sync() sync() r1 = io_uring_setup(0x2f04, &(0x7f000000c480)={0x0, 0xe8e5, 0x8000, 0xffffffff, 0x33c}) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000080)="bc", 0x1}], 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={0x4000, r1}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = dup2(r3, r2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000240)={0x28, 0x2, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000200)}) close(0x3) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r8, 0x5603, &(0x7f0000000100)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) 812.596911ms ago: executing program 0 (id=3837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x8000000002) getrlimit(0x6, &(0x7f0000000000)) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x2, @meta={0x88ac92ac, 0x7747dce1, 0x4f62, 0x8971, 0x1e1fdebf}}) socket(0x1e, 0xa, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x42040, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) unshare(0x22020600) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r3, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) 500.132328ms ago: executing program 5 (id=3838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @broadcast}, 0x14) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0xffffffffffffff26}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000180)={0x3, {0x7, 0x5, 0x80000001, 0x2, 0x5, 0x3}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b00)=ANY=[@ANYBLOB="f000000010000100feffffff00010000ff01000000000000000000000000000100000000000000000000000000000000000107144e2000050a0000003a000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d46c0000006401010000000000000000000000000000000000000000000200000000000000060031b4f6d863eca336c63dd81912000000000000ffff0000000000001a2508000000000002000000000000005c000000000000000000000000000000ffffffffbfffffff00000000001000001f00000100000000feffffffffffffff02000000fffffffffeffffff2abd7000053500"], 0xf0}, 0x1, 0x0, 0x0, 0x8005}, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000080), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x2, @win={{0xa, 0x2, 0x1000, 0x6}, 0x8, 0xe4c8, 0x0, 0xffffffff, &(0x7f0000000280)="eca6fff0b784fc115f6258cc9edee8fe3f0762e00f431da4b4d956621b340e088f39f78db43b4c2883980d3530facf", 0xf}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 457.274354ms ago: executing program 0 (id=3839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0xf1, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000640)=@vmx={0x103, 0x0, 0x2080, {0x50000, 0x100000, {}, 0x0, 0x8}, {"d07ee51100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057ae0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004ced00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100008000", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c918d25766c1d26c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00"}}) 220.01668ms ago: executing program 0 (id=3840): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000002000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) 81.269918ms ago: executing program 0 (id=3841): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) io_setup(0x1, &(0x7f00000004c0)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x56633bd1cf1d94b2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x8000, 0xffffffffffffffff, 0x2}) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x3f00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=3842): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000001400)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000012c0)='smaps_rollup\x00', 0xd, 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x9, &(0x7f0000000040)={0x7, 0x67}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) kernel console output (not intermixed with test programs): sadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1031.907836][ T29] audit: type=1400 audit(2000000118.780:67267): avc: denied { write } for pid=17165 comm="syz.2.3101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1031.984360][ T29] audit: type=1400 audit(2000000118.780:67268): avc: denied { read } for pid=17165 comm="syz.2.3101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1032.070778][ T29] audit: type=1400 audit(2000000118.780:67270): avc: denied { setopt } for pid=17168 comm="syz.1.3102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1032.137818][ T29] audit: type=1400 audit(2000000118.780:67269): avc: denied { ioctl } for pid=17168 comm="syz.1.3102" path="socket:[60752]" dev="sockfs" ino=60752 ioctlcmd=0x5880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1032.552580][T17179] nbd: socks must be embedded in a SOCK_ITEM attr [ 1032.583766][T17179] block nbd1: shutting down sockets [ 1032.999659][ T792] tipc: Node number set to 1 [ 1033.315622][T17191] netlink: 'syz.1.3107': attribute type 21 has an invalid length. [ 1033.325159][T17191] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.3107'. [ 1033.400552][T17191] netlink: 'syz.1.3107': attribute type 21 has an invalid length. [ 1033.409951][T17191] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.3107'. [ 1033.832620][T17055] veth0_vlan: entered promiscuous mode [ 1033.954401][T17055] veth1_vlan: entered promiscuous mode [ 1034.405583][T17055] veth0_macvtap: entered promiscuous mode [ 1034.445002][T17055] veth1_macvtap: entered promiscuous mode [ 1034.574667][T17055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1034.592123][T17055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1034.664019][ T9625] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.672950][ T9625] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.696396][ T9625] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.726334][ T9625] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.968697][T13805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.001277][T13805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.193240][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.218911][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.457122][T17218] binder: 17208:17218 ioctl c0306201 2000000004c0 returned -14 [ 1035.653183][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3116'. [ 1035.715092][ T1221] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1035.757716][T17222] tipc: Enabling of bearer rejected, already enabled [ 1035.885152][ T1221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1035.917731][T17225] syz_tun: entered allmulticast mode [ 1035.930297][T17225] syz_tun: left allmulticast mode [ 1035.959348][ T1221] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1036.002069][ T1221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.037587][ T1221] usb 5-1: config 0 descriptor?? [ 1036.056675][T17220] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1036.469806][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 1036.469824][ T29] audit: type=1400 audit(2000000123.710:67579): avc: denied { create } for pid=17230 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1036.539094][T10973] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1036.554186][T10973] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1036.566907][T10973] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1036.572522][ T29] audit: type=1400 audit(2000000123.760:67580): avc: denied { read write } for pid=17230 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1036.577194][ T1221] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 1036.607053][ T1221] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 1036.615912][ T1221] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 1036.624576][T10973] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1036.633249][ T1221] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 1036.641789][ T1221] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 1036.651021][T10973] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1036.660130][ T1221] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 1036.670309][ T1221] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 1036.721993][ T1221] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 1036.735146][ T1221] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 1036.747384][ T1221] logitech-djreceiver 0003:046D:C71F.0032: unknown main item tag 0x0 [ 1036.764182][ T1221] usb 5-1: USB disconnect, device number 107 [ 1036.803405][ T29] audit: type=1400 audit(2000000123.760:67581): avc: denied { read write open } for pid=17230 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1036.849586][T17230] lo speed is unknown, defaulting to 1000 [ 1037.071646][ T29] audit: type=1400 audit(2000000123.780:67582): avc: denied { ioctl } for pid=17230 comm="syz-executor" path="socket:[61121]" dev="sockfs" ino=61121 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1037.672698][ T29] audit: type=1400 audit(2000000123.790:67583): avc: denied { ioctl } for pid=17217 comm="syz.4.3113" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1037.827068][ T29] audit: type=1400 audit(2000000123.790:67584): avc: denied { ioctl } for pid=17217 comm="syz.4.3113" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1037.856079][T17230] chnl_net:caif_netlink_parms(): no params data found [ 1037.906610][ T29] audit: type=1400 audit(2000000123.910:67585): avc: denied { ioctl } for pid=17230 comm="syz-executor" path="socket:[61121]" dev="sockfs" ino=61121 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1038.018930][T17242] binder: 17236:17242 ioctl c0306201 2000000004c0 returned -14 [ 1038.745181][ T29] audit: type=1400 audit(2000000123.920:67586): avc: denied { read } for pid=17230 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1038.801363][ T5819] Bluetooth: hci6: command tx timeout [ 1038.902916][ T29] audit: type=1400 audit(2000000123.920:67587): avc: denied { read open } for pid=17230 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1039.001839][ T29] audit: type=1400 audit(2000000123.930:67588): avc: denied { mounton } for pid=17230 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1039.113326][T17255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3122'. [ 1039.505225][T17230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.535845][T17230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.652289][T17230] bridge_slave_0: entered allmulticast mode [ 1039.659202][T17230] bridge_slave_0: entered promiscuous mode [ 1039.782393][T17230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.790837][T17230] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.798070][T17230] bridge_slave_1: entered allmulticast mode [ 1039.841555][T17230] bridge_slave_1: entered promiscuous mode [ 1039.914040][T14130] block nbd0: Possible stuck request ffff888027840000: control (read@0,1024B). Runtime 240 seconds [ 1039.924822][T14130] block nbd0: Possible stuck request ffff888027840200: control (read@1024,1024B). Runtime 240 seconds [ 1039.938368][T14130] block nbd0: Possible stuck request ffff888027840400: control (read@2048,1024B). Runtime 240 seconds [ 1039.950558][T14130] block nbd0: Possible stuck request ffff888027840600: control (read@3072,1024B). Runtime 240 seconds [ 1039.991515][T17230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.017563][T17230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.085668][T17230] team0: Port device team_slave_0 added [ 1040.115258][T17230] team0: Port device team_slave_1 added [ 1040.167174][T17230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.194552][T17230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.289246][T17230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.333955][T17230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.369316][T17230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.401424][T16309] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1040.418932][T17230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.625336][T17269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3127'. [ 1040.728259][T16309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.755661][T16309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.775717][T17230] hsr_slave_0: entered promiscuous mode [ 1040.789112][T17230] hsr_slave_1: entered promiscuous mode [ 1040.796413][T16309] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1040.807126][T17230] debugfs: 'hsr0' already exists in 'hsr' [ 1040.817992][T16309] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1040.826211][T17230] Cannot create hsr debugfs directory [ 1040.837454][T16309] usb 3-1: Manufacturer: syz [ 1040.858215][T16309] usb 3-1: config 0 descriptor?? [ 1040.873741][ T5819] Bluetooth: hci6: command tx timeout [ 1041.313004][T17273] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3128'. [ 1041.331301][T17273] tc_dump_action: action bad kind [ 1041.408439][T17276] syz_tun: entered allmulticast mode [ 1041.423539][T17276] syz_tun: left allmulticast mode [ 1041.515078][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 1041.515095][ T29] audit: type=1400 audit(2000000128.760:67774): avc: denied { ioctl } for pid=17260 comm="syz.2.3125" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1041.559338][ T29] audit: type=1400 audit(2000000128.790:67775): avc: denied { ioctl } for pid=17260 comm="syz.2.3125" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1041.593494][T17230] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1041.605321][T17230] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.615885][T16309] usbhid 3-1:0.0: can't add hid device: -71 [ 1041.626280][T16309] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1041.654498][ T29] audit: type=1400 audit(2000000128.800:67776): avc: denied { ioctl } for pid=17260 comm="syz.2.3125" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1041.692763][T16309] usb 3-1: USB disconnect, device number 109 [ 1041.712579][ T29] audit: type=1400 audit(2000000128.800:67777): avc: denied { ioctl } for pid=17260 comm="syz.2.3125" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1041.740308][ T29] audit: type=1400 audit(2000000128.810:67778): avc: denied { ioctl } for pid=17260 comm="syz.2.3125" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1041.784084][T17230] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1041.798952][T17230] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.847405][T17279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3130'. [ 1041.896011][ T29] audit: type=1400 audit(2000000129.120:67779): avc: denied { read write } for pid=16771 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1041.912750][T17279] tipc: Enabling of bearer rejected, already enabled [ 1041.932216][ T29] audit: type=1400 audit(2000000129.120:67780): avc: denied { read write open } for pid=16771 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1041.963918][ T29] audit: type=1400 audit(2000000129.130:67781): avc: denied { ioctl } for pid=16771 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1041.997504][T17230] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.025693][T17230] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.068126][ T29] audit: type=1400 audit(2000000129.130:67782): avc: denied { create } for pid=17278 comm="syz.4.3130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1042.116668][ T29] audit: type=1400 audit(2000000129.140:67783): avc: denied { create } for pid=17278 comm="syz.4.3130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1042.117744][T17230] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.213628][T17230] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.261778][T17282] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3131'. [ 1042.920302][T17295] binder: 17283:17295 ioctl c0046209 0 returned -22 [ 1043.157865][ T5819] Bluetooth: hci6: command tx timeout [ 1043.581286][T17230] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1043.718746][T17230] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1043.779801][T17230] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1044.136426][T17230] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1044.642576][T17308] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3138'. [ 1045.204657][ T5819] Bluetooth: hci6: command tx timeout [ 1045.261265][ T5810] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1045.471280][ T5810] usb 5-1: Using ep0 maxpacket: 16 [ 1045.520326][ T5810] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1045.542554][ T5810] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1045.573840][ T5810] usb 5-1: Product: syz [ 1045.589033][ T5810] usb 5-1: Manufacturer: syz [ 1045.621494][ T5810] usb 5-1: SerialNumber: syz [ 1045.649734][ T5810] usb 5-1: config 0 descriptor?? [ 1045.743315][T17230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.818018][T17230] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.850938][T16309] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1045.853363][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.865600][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.926764][ T5810] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1045.945742][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.952970][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.996385][T17320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3141'. [ 1046.030748][T16309] usb 6-1: Using ep0 maxpacket: 16 [ 1046.083628][T16309] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1046.111879][T17320] tipc: Started in network mode [ 1046.116777][T17320] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1046.127558][T16309] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1046.151197][T16309] usb 6-1: Product: syz [ 1046.153873][ T5810] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 1046.155375][T16309] usb 6-1: Manufacturer: syz [ 1046.155393][T16309] usb 6-1: SerialNumber: syz [ 1046.176707][ T5810] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 1046.187889][ T5810] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 1046.195886][T17320] tipc: Enabled bearer , priority 10 [ 1046.215244][T16309] usb 6-1: config 0 descriptor?? [ 1046.294727][ T5810] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 1046.413791][ T5810] usb 5-1: USB disconnect, device number 108 [ 1046.615454][T17325] netlink: 'syz.2.3139': attribute type 21 has an invalid length. [ 1046.618618][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 1046.618633][ T29] audit: type=1400 audit(2000000133.860:68007): avc: denied { ioctl } for pid=17317 comm="syz.5.3140" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1046.655035][T17325] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.3139'. [ 1046.669020][ T29] audit: type=1400 audit(2000000133.910:68008): avc: denied { ioctl } for pid=17317 comm="syz.5.3140" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1046.670847][T16309] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 1046.748147][T17326] netlink: 'syz.2.3139': attribute type 21 has an invalid length. [ 1046.757960][T16309] peak_usb 6-1:0.0: unable to read PCAN-Chip USB firmware info (err -32) [ 1046.768313][T17326] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.3139'. [ 1046.861178][ T29] audit: type=1400 audit(2000000133.910:68009): avc: denied { ioctl } for pid=17317 comm="syz.5.3140" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1046.941198][T16309] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -32 [ 1046.985854][ T29] audit: type=1400 audit(2000000134.140:68010): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1047.059147][ T29] audit: type=1400 audit(2000000134.220:68011): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1047.147406][ T29] audit: type=1400 audit(2000000134.280:68012): avc: denied { sys_module } for pid=17230 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1047.220845][T16309] tipc: Node number set to 1 [ 1047.301419][ T29] audit: type=1400 audit(2000000134.280:68013): avc: denied { module_request } for pid=17230 comm="syz-executor" kmod="nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1047.563347][ T29] audit: type=1400 audit(2000000134.370:68014): avc: denied { read write } for pid=16324 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1047.700744][ T29] audit: type=1400 audit(2000000134.370:68015): avc: denied { read write open } for pid=16324 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1047.785395][ T29] audit: type=1400 audit(2000000134.380:68016): avc: denied { ioctl } for pid=16324 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1048.000857][ T5924] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1048.151048][ T5924] usb 5-1: device descriptor read/64, error -71 [ 1048.418632][T17230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.461340][ T5924] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1048.740781][ T5924] usb 5-1: device descriptor read/64, error -71 [ 1048.856547][T14329] usb 6-1: USB disconnect, device number 2 [ 1048.873424][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1048.972909][ T5924] usb usb5-port1: attempt power cycle [ 1049.007349][T17230] veth0_vlan: entered promiscuous mode [ 1049.170058][T17230] veth1_vlan: entered promiscuous mode [ 1049.441258][ T5924] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1049.447909][T17230] veth0_macvtap: entered promiscuous mode [ 1049.474226][ T5924] usb 5-1: device descriptor read/8, error -71 [ 1049.653760][T16309] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1049.740913][ T5924] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1049.843146][ T5924] usb 5-1: device descriptor read/8, error -71 [ 1049.998333][T16309] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.004905][T17230] veth1_macvtap: entered promiscuous mode [ 1050.011980][ T5924] usb usb5-port1: unable to enumerate USB device [ 1050.021915][T16309] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1050.032078][T16309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.075872][T16309] usb 6-1: config 0 descriptor?? [ 1050.125771][T17230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.155751][T17230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.162093][T16309] pwc: Askey VC010 type 2 USB webcam detected. [ 1050.221536][ T77] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.230344][ T77] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.281580][ T77] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.315299][ T77] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.615681][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.665370][ T9627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.674056][ T9627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.705070][T16309] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1050.710286][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.724369][T16309] pwc: recv_control_msg error -32 req 02 val 2700 [ 1050.952058][ T5819] Bluetooth: hci5: command 0x0406 tx timeout [ 1051.177510][T17370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3153'. [ 1051.200827][T16309] pwc: recv_control_msg error -32 req 04 val 1000 [ 1051.236555][T16309] pwc: recv_control_msg error -32 req 04 val 1300 [ 1051.249318][T16309] pwc: recv_control_msg error -32 req 04 val 1400 [ 1051.281349][T14329] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1051.296494][T16309] pwc: recv_control_msg error -32 req 02 val 2000 [ 1051.328544][T16309] pwc: recv_control_msg error -32 req 02 val 2100 [ 1051.522237][T16309] pwc: recv_control_msg error -32 req 04 val 1500 [ 1051.527378][T14329] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 1051.581817][T14329] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.717684][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 1051.717718][ T29] audit: type=1400 audit(2000000138.860:68306): avc: denied { prog_load } for pid=17374 comm="syz.1.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1051.801463][T14329] usb 5-1: config 0 has no interface number 0 [ 1051.878375][T16309] pwc: recv_control_msg error -32 req 02 val 2500 [ 1051.886430][T14329] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1051.892747][T16309] pwc: recv_control_msg error -32 req 02 val 2400 [ 1051.922393][T14329] usb 5-1: config 0 interface 168 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 1051.940923][ T29] audit: type=1400 audit(2000000138.860:68307): avc: denied { bpf } for pid=17374 comm="syz.1.3118" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1051.964319][T14329] usb 5-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1051.980281][T14329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.996848][T16309] pwc: recv_control_msg error -32 req 02 val 2600 [ 1052.007658][T14329] usb 5-1: config 0 descriptor?? [ 1052.010773][ T29] audit: type=1400 audit(2000000138.870:68308): avc: denied { prog_load } for pid=17374 comm="syz.1.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1052.038894][T14329] HFC-S_USB 5-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1052.061013][ T29] audit: type=1400 audit(2000000138.870:68309): avc: denied { perfmon } for pid=17374 comm="syz.1.3118" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1052.087258][T16309] pwc: recv_control_msg error -32 req 02 val 2900 [ 1052.102826][ T29] audit: type=1400 audit(2000000138.880:68310): avc: denied { perfmon } for pid=17374 comm="syz.1.3118" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1052.172261][ T29] audit: type=1400 audit(2000000138.880:68311): avc: denied { perfmon } for pid=17374 comm="syz.1.3118" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1052.273422][ T29] audit: type=1400 audit(2000000138.890:68312): avc: denied { perfmon } for pid=17374 comm="syz.1.3118" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1052.311923][T14329] usb 5-1: USB disconnect, device number 113 [ 1052.348407][T16309] pwc: recv_control_msg error -71 req 04 val 1100 [ 1052.363578][T16309] pwc: recv_control_msg error -71 req 04 val 1200 [ 1052.366286][ T29] audit: type=1400 audit(2000000138.890:68313): avc: denied { bpf } for pid=17374 comm="syz.1.3118" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1052.381170][T16309] pwc: Registered as video103. [ 1052.426825][T16309] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input46 [ 1052.465833][ T29] audit: type=1400 audit(2000000139.120:68314): avc: denied { ioctl } for pid=17352 comm="syz.5.3148" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1052.480374][T16309] usb 6-1: USB disconnect, device number 3 [ 1052.582946][T17382] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1053.177186][T17391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.191073][T16309] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1053.191828][ T9] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1053.244312][T17391] bridge_slave_0 (unregistering): left allmulticast mode [ 1053.261069][T17391] bridge_slave_0 (unregistering): left promiscuous mode [ 1053.271526][T17391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.360769][T16309] usb 2-1: Using ep0 maxpacket: 16 [ 1053.371348][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1053.431832][ T9] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1053.447691][T16309] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1053.452296][ T9] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1053.470864][T16309] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1053.479071][T16309] usb 2-1: Product: syz [ 1053.492672][ T9] usb 3-1: Product: syz [ 1053.496872][ T9] usb 3-1: Manufacturer: syz [ 1053.519472][ T9] usb 3-1: SerialNumber: syz [ 1053.529881][T16309] usb 2-1: Manufacturer: syz [ 1053.538585][ T9] usb 3-1: config 0 descriptor?? [ 1053.559221][T16309] usb 2-1: SerialNumber: syz [ 1053.599091][T16309] usb 2-1: config 0 descriptor?? [ 1053.748233][T17398] netlink: 'syz.5.3162': attribute type 1 has an invalid length. [ 1053.782547][T17398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1053.791261][T14329] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1053.804277][ T9] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1053.850068][T16309] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v179 fw v199.70.214 (1 channels) [ 1053.957448][T14329] usb 5-1: device descriptor read/64, error -71 [ 1054.011936][ T9] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1054.037018][ T9] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1054.059367][T16309] peak_usb 2-1:0.0 can1: sending command failure: -22 [ 1054.096669][T16309] peak_usb 2-1:0.0 can1: sending command failure: -22 [ 1054.105921][ T9] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1054.137515][T16309] peak_usb 2-1:0.0 can1: sending command failure: -22 [ 1054.221824][T14329] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1054.248943][ T9] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 1054.291951][T16309] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 1054.301338][ T5810] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1054.327366][ T9] usb 3-1: USB disconnect, device number 110 [ 1054.364406][T16309] usb 2-1: USB disconnect, device number 102 [ 1054.401985][T14329] usb 5-1: device descriptor read/64, error -71 [ 1054.531230][T14329] usb usb5-port1: attempt power cycle [ 1054.891410][T14329] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1054.945302][T14329] usb 5-1: device descriptor read/8, error -71 [ 1055.261774][T14329] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1055.626291][T14329] usb 5-1: device descriptor read/8, error -71 [ 1055.744012][T14329] usb usb5-port1: unable to enumerate USB device [ 1055.958841][T17417] binder: 17405:17417 ioctl c0046209 0 returned -22 [ 1056.325381][T17419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1056.722397][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 1056.722413][ T29] audit: type=1400 audit(2000000143.970:68764): avc: denied { map_create } for pid=17418 comm="syz.2.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1056.836422][ T29] audit: type=1400 audit(2000000143.970:68765): avc: denied { map_read map_write } for pid=17418 comm="syz.2.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1056.914531][ T29] audit: type=1400 audit(2000000144.000:68766): avc: denied { read write } for pid=17230 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1056.992033][ T29] audit: type=1400 audit(2000000144.000:68767): avc: denied { read write open } for pid=17230 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1057.048445][ T29] audit: type=1400 audit(2000000144.000:68768): avc: denied { ioctl } for pid=17230 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1057.197756][ T29] audit: type=1400 audit(2000000144.010:68769): avc: denied { prog_load } for pid=17418 comm="syz.2.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1057.555476][ T29] audit: type=1400 audit(2000000144.010:68770): avc: denied { bpf } for pid=17418 comm="syz.2.3167" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1057.614118][T17432] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1057.630949][ T29] audit: type=1400 audit(2000000144.010:68771): avc: denied { perfmon } for pid=17418 comm="syz.2.3167" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1057.660350][ T29] audit: type=1400 audit(2000000144.010:68772): avc: denied { prog_load } for pid=17418 comm="syz.2.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1057.692401][T17432] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1057.747851][T17432] netlink: 35 bytes leftover after parsing attributes in process `syz.4.3170'. [ 1058.011783][T16309] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 1058.254105][T16309] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1058.280814][T16309] usb 6-1: config 0 has no interface number 0 [ 1058.302218][T16309] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1058.351683][T16309] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1058.392281][T16309] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1058.422013][T16309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.466590][T16309] usb 6-1: config 0 descriptor?? [ 1058.511870][T17451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3176'. [ 1058.531177][T17437] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1058.581109][T16309] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1058.599079][T17454] team0 (unregistering): Port device team_slave_0 removed [ 1058.638743][T17454] team0 (unregistering): Port device team_slave_1 removed [ 1058.668678][T17451] tipc: Enabling of bearer rejected, already enabled [ 1059.355971][T17469] binder: 17457:17469 ioctl c0046209 0 returned -22 [ 1059.753956][T17467] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3172'. [ 1059.770810][T16309] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1059.881854][T17470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.895377][T17470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.950992][T16309] usb 3-1: device descriptor read/64, error -71 [ 1059.979760][T17467] bridge_slave_1: left allmulticast mode [ 1059.979786][T17467] bridge_slave_1: left promiscuous mode [ 1059.979937][T17467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.038325][T17467] bridge_slave_0: left allmulticast mode [ 1060.038352][T17467] bridge_slave_0: left promiscuous mode [ 1060.038505][T17467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.039511][ T792] usb 6-1: USB disconnect, device number 5 [ 1060.039628][ C1] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1060.216037][T16309] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1060.725139][T16309] usb 3-1: device descriptor read/64, error -71 [ 1060.831009][T16309] usb usb3-port1: attempt power cycle [ 1061.140805][ T792] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1061.201378][T16309] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1061.242889][T16309] usb 3-1: device descriptor read/8, error -71 [ 1061.306274][T17481] netlink: 'syz.0.3185': attribute type 30 has an invalid length. [ 1061.337842][ T792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.357739][ T792] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1061.374663][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.390324][ T792] usb 2-1: config 0 descriptor?? [ 1061.403044][ T792] pwc: Askey VC010 type 2 USB webcam detected. [ 1061.500807][T16309] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1061.555801][T17478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3184'. [ 1061.621618][T16309] usb 3-1: device descriptor read/8, error -71 [ 1061.732442][T16309] usb usb3-port1: unable to enumerate USB device [ 1061.739495][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 1061.739514][ T29] audit: type=1400 audit(2000000148.980:69087): avc: denied { ioctl } for pid=17459 comm="syz.2.3180" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1061.854605][ T29] audit: type=1400 audit(2000000149.100:69088): avc: denied { ioctl } for pid=17475 comm="syz.1.3183" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1061.880143][ T792] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1061.886926][ T29] audit: type=1400 audit(2000000149.100:69089): avc: denied { ioctl } for pid=17475 comm="syz.1.3183" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1062.867490][ T792] pwc: recv_control_msg error -32 req 02 val 2700 [ 1062.874527][ T29] audit: type=1400 audit(2000000149.100:69090): avc: denied { ioctl } for pid=17475 comm="syz.1.3183" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1062.994836][ T792] pwc: recv_control_msg error -32 req 04 val 1000 [ 1063.007311][ T29] audit: type=1400 audit(2000000149.140:69091): avc: denied { ioctl } for pid=17475 comm="syz.1.3183" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1063.074460][ T792] pwc: recv_control_msg error -32 req 04 val 1300 [ 1063.110806][ T792] pwc: recv_control_msg error -32 req 04 val 1400 [ 1063.131058][ T792] pwc: recv_control_msg error -32 req 02 val 2000 [ 1063.160807][ T792] pwc: recv_control_msg error -32 req 02 val 2100 [ 1063.161290][ T29] audit: type=1400 audit(2000000149.170:69092): avc: denied { ioctl } for pid=17475 comm="syz.1.3183" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1063.192383][ T792] pwc: recv_control_msg error -32 req 04 val 1500 [ 1063.205637][ T29] audit: type=1400 audit(2000000149.200:69093): avc: denied { read write } for pid=17486 comm="syz.0.3186" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1063.205760][ T792] pwc: recv_control_msg error -32 req 02 val 2500 [ 1063.233163][ T29] audit: type=1400 audit(2000000150.150:69094): avc: denied { read write open } for pid=17486 comm="syz.0.3186" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1063.309045][ T792] pwc: recv_control_msg error -32 req 02 val 2400 [ 1063.623161][ T792] pwc: recv_control_msg error -32 req 02 val 2600 [ 1063.634221][ T792] pwc: recv_control_msg error -32 req 02 val 2900 [ 1063.698933][ T29] audit: type=1400 audit(2000000150.150:69095): avc: denied { ioctl } for pid=17486 comm="syz.0.3186" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1063.726384][T17476] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1063.815313][ T792] pwc: recv_control_msg error -71 req 02 val 2800 [ 1063.832582][ T792] pwc: recv_control_msg error -71 req 04 val 1100 [ 1063.848283][ T792] pwc: recv_control_msg error -71 req 04 val 1200 [ 1063.902819][ T792] pwc: Registered as video103. [ 1063.952625][ T792] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input47 [ 1064.027445][ T792] usb 2-1: USB disconnect, device number 103 [ 1064.250050][T17505] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3191'. [ 1064.333952][T17505] tipc: Started in network mode [ 1064.350886][T17505] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1064.376582][T17505] tipc: Enabled bearer , priority 10 [ 1064.699774][T17510] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3192'. [ 1064.711225][T17510] tc_dump_action: action bad kind [ 1065.295344][ T10] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1065.370917][ T1221] tipc: Node number set to 1 [ 1065.571305][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1065.585003][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 1065.621840][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.661828][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1065.756780][ T10] usb 6-1: string descriptor 0 read error: -22 [ 1065.764593][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1065.791380][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.829758][ T10] usb 6-1: 0:2 : does not exist [ 1066.250635][T17530] binder: 17522:17530 ioctl c0306201 2000000004c0 returned -14 [ 1066.747261][ T10] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1066.762139][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 1066.762157][ T29] audit: type=1400 audit(2000000154.010:69368): avc: denied { create } for pid=17536 comm="syz.2.3201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 1066.784237][ T10] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1066.855743][ T10] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 1066.857203][ T29] audit: type=1400 audit(2000000154.090:69369): avc: denied { read } for pid=17536 comm="syz.2.3201" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1066.977603][ T29] audit: type=1400 audit(2000000154.090:69370): avc: denied { create } for pid=17536 comm="syz.2.3201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1067.004263][ T10] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1067.083214][ T29] audit: type=1400 audit(2000000154.100:69371): avc: denied { read write } for pid=16324 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1067.155940][ T10] usb 6-1: USB disconnect, device number 6 [ 1067.176406][ T29] audit: type=1400 audit(2000000154.140:69372): avc: denied { create } for pid=17536 comm="syz.2.3201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 1067.272812][ T29] audit: type=1400 audit(2000000154.260:69373): avc: denied { read write } for pid=16020 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1067.369296][ T29] audit: type=1400 audit(2000000154.270:69374): avc: denied { read } for pid=17539 comm="syz.4.3203" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1067.470744][ T29] audit: type=1400 audit(2000000154.280:69375): avc: denied { create } for pid=17539 comm="syz.4.3203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 1067.505671][ T29] audit: type=1400 audit(2000000154.280:69376): avc: denied { create } for pid=17539 comm="syz.4.3203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 1067.817595][ T29] audit: type=1400 audit(2000000154.280:69377): avc: denied { create } for pid=17539 comm="syz.4.3203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 1068.854837][T17579] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1069.991624][T14130] block nbd0: Possible stuck request ffff888027840000: control (read@0,1024B). Runtime 270 seconds [ 1070.002404][T14130] block nbd0: Possible stuck request ffff888027840200: control (read@1024,1024B). Runtime 270 seconds [ 1070.013382][T14130] block nbd0: Possible stuck request ffff888027840400: control (read@2048,1024B). Runtime 270 seconds [ 1070.026770][T14130] block nbd0: Possible stuck request ffff888027840600: control (read@3072,1024B). Runtime 270 seconds [ 1071.015774][ T5178] udevd[5178]: worker [14235] /devices/virtual/block/nbd0 timeout; kill it [ 1071.046142][ T5178] udevd[5178]: seq 19665 '/devices/virtual/block/nbd0' killed [ 1071.236420][T17616] trusted_key: encrypted_key: insufficient parameters specified [ 1071.799539][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 1071.799551][ T29] audit: type=1400 audit(2000000159.040:69534): avc: denied { create } for pid=17623 comm="syz.4.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 1071.920798][ T29] audit: type=1400 audit(2000000159.100:69535): avc: denied { read write } for pid=16324 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1072.028897][ T29] audit: type=1400 audit(2000000159.200:69536): avc: denied { read write } for pid=17625 comm="syz.1.3235" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 1072.126488][ T29] audit: type=1400 audit(2000000159.210:69537): avc: denied { create } for pid=17625 comm="syz.1.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 1072.148662][ T29] audit: type=1400 audit(2000000159.210:69538): avc: denied { read } for pid=17625 comm="syz.1.3235" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1072.214250][ T29] audit: type=1400 audit(2000000159.230:69539): avc: denied { read } for pid=17627 comm="syz.2.3233" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 1072.254782][ T29] audit: type=1400 audit(2000000159.270:69540): avc: denied { create } for pid=17625 comm="syz.1.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 1072.275447][ T29] audit: type=1400 audit(2000000159.320:69541): avc: denied { create } for pid=17625 comm="syz.1.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1072.297426][ T29] audit: type=1400 audit(2000000159.330:69542): avc: denied { write } for pid=17625 comm="syz.1.3235" name="ipv6_route" dev="proc" ino=4026534320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 1072.323121][ T29] audit: type=1400 audit(2000000159.350:69543): avc: denied { read write } for pid=16020 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1074.373159][T17679] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.3251'. [ 1074.395105][T17679] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.3251'. [ 1074.622156][T17691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3255'. [ 1074.635513][T17691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.679295][T17691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.757640][T17696] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1076.551369][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 1076.575770][T17739] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 1076.665243][T17739] macsec1: entered allmulticast mode [ 1076.696459][T17739] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 1076.818265][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 1076.818284][ T29] audit: type=1400 audit(2000000164.020:69728): avc: denied { prog_load } for pid=17746 comm="syz.1.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1076.925766][ T29] audit: type=1400 audit(2000000164.020:69729): avc: denied { read write } for pid=17055 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1077.071332][ T29] audit: type=1400 audit(2000000164.040:69730): avc: denied { read } for pid=17747 comm="syz.2.3276" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1077.121826][ T29] audit: type=1400 audit(2000000164.040:69731): avc: denied { create } for pid=17747 comm="syz.2.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 1077.154168][ T29] audit: type=1400 audit(2000000164.090:69732): avc: denied { read } for pid=17747 comm="syz.2.3276" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1077.235668][ T29] audit: type=1400 audit(2000000164.100:69733): avc: denied { create } for pid=17747 comm="syz.2.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1077.296848][ T29] audit: type=1400 audit(2000000164.100:69734): avc: denied { map_create } for pid=17747 comm="syz.2.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1077.352060][ T29] audit: type=1400 audit(2000000164.110:69735): avc: denied { map_create } for pid=17747 comm="syz.2.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1077.396705][ T29] audit: type=1400 audit(2000000164.110:69736): avc: denied { prog_load } for pid=17747 comm="syz.2.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1077.461357][ T29] audit: type=1400 audit(2000000164.130:69737): avc: denied { read write } for pid=17230 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1077.634741][T17764] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3282'. [ 1077.663710][T17764] tc_dump_action: action bad kind [ 1077.732976][T17766] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3283'. [ 1079.026117][T17796] netlink: 'syz.1.3294': attribute type 1 has an invalid length. [ 1079.059376][T17796] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1079.073961][T17794] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3295'. [ 1079.114574][T17794] tc_dump_action: action bad kind [ 1079.559334][T17808] lo speed is unknown, defaulting to 1000 [ 1079.653148][T17813] netlink: 'syz.4.3299': attribute type 6 has an invalid length. [ 1079.663517][T17813] netlink: 'syz.4.3299': attribute type 6 has an invalid length. [ 1079.882652][T17817] netlink: 'syz.2.3301': attribute type 30 has an invalid length. [ 1080.030313][T17823] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.3304'. [ 1080.134153][T17823] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.3304'. [ 1080.473654][T17834] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1081.069533][T17853] netlink: 'syz.1.3315': attribute type 30 has an invalid length. [ 1081.369736][T17860] FAULT_INJECTION: forcing a failure. [ 1081.369736][T17860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1081.405350][T17860] CPU: 1 UID: 0 PID: 17860 Comm: syz.5.3320 Tainted: G L syzkaller #0 PREEMPT(full) [ 1081.405380][T17860] Tainted: [L]=SOFTLOCKUP [ 1081.405386][T17860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1081.405397][T17860] Call Trace: [ 1081.405403][T17860] [ 1081.405410][T17860] dump_stack_lvl+0x100/0x190 [ 1081.405445][T17860] should_fail_ex.cold+0x5/0xa [ 1081.405470][T17860] _copy_to_user+0x32/0xd0 [ 1081.405492][T17860] snd_pcm_oss_read2+0x294/0x400 [ 1081.405517][T17860] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 1081.405546][T17860] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 1081.405573][T17860] ? snd_pcm_oss_prepare+0x11e/0x240 [ 1081.405597][T17860] snd_pcm_oss_read+0x5aa/0x730 [ 1081.405621][T17860] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1081.405645][T17860] vfs_read+0x1e4/0xb30 [ 1081.405667][T17860] ? __pfx_vfs_read+0x10/0x10 [ 1081.405682][T17860] ? find_held_lock+0x2b/0x80 [ 1081.405706][T17860] ? __fget_files+0x215/0x3d0 [ 1081.405724][T17860] ? __fget_files+0x215/0x3d0 [ 1081.405743][T17860] ? __fget_files+0x21f/0x3d0 [ 1081.405765][T17860] ksys_read+0x12a/0x250 [ 1081.405780][T17860] ? __pfx_ksys_read+0x10/0x10 [ 1081.405803][T17860] do_syscall_64+0x106/0xf80 [ 1081.405819][T17860] ? clear_bhb_loop+0x40/0x90 [ 1081.405840][T17860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.405863][T17860] RIP: 0033:0x7fc0c8b9c819 [ 1081.405877][T17860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.405893][T17860] RSP: 002b:00007fc0c9a2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1081.405909][T17860] RAX: ffffffffffffffda RBX: 00007fc0c8e15fa0 RCX: 00007fc0c8b9c819 [ 1081.405920][T17860] RDX: 00000000200021d5 RSI: 00002000000011c0 RDI: 0000000000000003 [ 1081.405931][T17860] RBP: 00007fc0c9a2a090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.405941][T17860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.405951][T17860] R13: 00007fc0c8e16038 R14: 00007fc0c8e15fa0 R15: 00007fff1332a3c8 [ 1081.405976][T17860] [ 1081.838600][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 1081.838616][ T29] audit: type=1400 audit(2000000169.080:69977): avc: denied { read write } for pid=16020 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1081.925769][ T29] audit: type=1400 audit(2000000169.170:69978): avc: denied { name_bind } for pid=17871 comm="syz.5.3324" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 1082.058798][ T29] audit: type=1400 audit(2000000169.300:69979): avc: denied { read write } for pid=16020 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1082.208388][ T29] audit: type=1400 audit(2000000169.450:69980): avc: denied { read write } for pid=17875 comm="syz.2.3326" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 1082.298955][ T29] audit: type=1400 audit(2000000169.480:69981): avc: denied { create } for pid=17875 comm="syz.2.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 1082.390762][ T29] audit: type=1400 audit(2000000169.480:69982): avc: denied { read } for pid=17875 comm="syz.2.3326" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1082.464329][ T29] audit: type=1400 audit(2000000169.500:69983): avc: denied { read write } for pid=16324 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1082.540014][ T29] audit: type=1400 audit(2000000169.570:69984): avc: denied { read write } for pid=17230 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1082.625334][ T29] audit: type=1400 audit(2000000169.710:69986): avc: denied { create } for pid=17875 comm="syz.2.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 1082.678784][ T29] audit: type=1400 audit(2000000169.700:69985): avc: denied { prog_load } for pid=17879 comm="syz.4.3327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1083.516788][T17902] FAULT_INJECTION: forcing a failure. [ 1083.516788][T17902] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1083.531751][T17902] CPU: 1 UID: 0 PID: 17902 Comm: syz.5.3335 Tainted: G L syzkaller #0 PREEMPT(full) [ 1083.531771][T17902] Tainted: [L]=SOFTLOCKUP [ 1083.531775][T17902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1083.531781][T17902] Call Trace: [ 1083.531785][T17902] [ 1083.531790][T17902] dump_stack_lvl+0x100/0x190 [ 1083.531820][T17902] should_fail_ex.cold+0x5/0xa [ 1083.531833][T17902] ? prepare_alloc_pages+0x16d/0x5f0 [ 1083.531847][T17902] should_fail_alloc_page+0xeb/0x140 [ 1083.531860][T17902] prepare_alloc_pages+0x1f0/0x5f0 [ 1083.531876][T17902] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1083.531893][T17902] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 1083.531914][T17902] ? __lock_acquire+0x4a5/0x2630 [ 1083.531926][T17902] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1083.531947][T17902] ? do_raw_spin_lock+0x128/0x260 [ 1083.531962][T17902] ? __lock_acquire+0x4a5/0x2630 [ 1083.531974][T17902] ? do_raw_spin_unlock+0x145/0x1e0 [ 1083.531987][T17902] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1083.532005][T17902] ? policy_nodemask+0xed/0x4f0 [ 1083.532017][T17902] alloc_pages_mpol+0x1fb/0x550 [ 1083.532029][T17902] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1083.532045][T17902] folio_alloc_mpol_noprof+0x36/0x340 [ 1083.532059][T17902] vma_alloc_folio_noprof+0xed/0x1d0 [ 1083.532073][T17902] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1083.532095][T17902] do_anonymous_page+0xb3a/0x1fb0 [ 1083.532117][T17902] __handle_mm_fault+0x1d48/0x2b60 [ 1083.532134][T17902] ? mt_find+0x45e/0x8e0 [ 1083.532147][T17902] ? __pfx___handle_mm_fault+0x10/0x10 [ 1083.532164][T17902] ? __pfx_mt_find+0x10/0x10 [ 1083.532183][T17902] ? find_vma+0xbf/0x140 [ 1083.532193][T17902] ? __pfx_find_vma+0x10/0x10 [ 1083.532205][T17902] handle_mm_fault+0x36d/0xa20 [ 1083.532223][T17902] do_user_addr_fault+0x74c/0x12f0 [ 1083.532240][T17902] exc_page_fault+0x6f/0xd0 [ 1083.532258][T17902] asm_exc_page_fault+0x26/0x30 [ 1083.532269][T17902] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1083.532284][T17902] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1083.532294][T17902] RSP: 0018:ffffc9000d5a7bc8 EFLAGS: 00050206 [ 1083.532304][T17902] RAX: 0000000000000001 RBX: 00000000000000fe RCX: 00000000000000fe [ 1083.532311][T17902] RDX: 0000000000000001 RSI: ffff88802ace8000 RDI: 00002000000011c0 [ 1083.532317][T17902] RBP: 00002000000011c0 R08: 0000000000000000 R09: ffffed100559d01f [ 1083.532324][T17902] R10: ffff88802ace80fd R11: 0000000000000000 R12: ffff88802ace8000 [ 1083.532330][T17902] R13: 00002000000012be R14: 00007ffffffff000 R15: 0000000000000000 [ 1083.532344][T17902] _copy_to_user+0xa4/0xd0 [ 1083.532358][T17902] snd_pcm_oss_read2+0x294/0x400 [ 1083.532374][T17902] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 1083.532387][T17902] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 1083.532404][T17902] ? snd_pcm_oss_prepare+0x11e/0x240 [ 1083.532418][T17902] snd_pcm_oss_read+0x5aa/0x730 [ 1083.532434][T17902] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1083.532448][T17902] vfs_read+0x1e4/0xb30 [ 1083.532460][T17902] ? __pfx_vfs_read+0x10/0x10 [ 1083.532469][T17902] ? find_held_lock+0x2b/0x80 [ 1083.532484][T17902] ? __fget_files+0x215/0x3d0 [ 1083.532495][T17902] ? __fget_files+0x215/0x3d0 [ 1083.532509][T17902] ? __fget_files+0x21f/0x3d0 [ 1083.532525][T17902] ksys_read+0x12a/0x250 [ 1083.532535][T17902] ? __pfx_ksys_read+0x10/0x10 [ 1083.532549][T17902] do_syscall_64+0x106/0xf80 [ 1083.532559][T17902] ? clear_bhb_loop+0x40/0x90 [ 1083.532573][T17902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.532584][T17902] RIP: 0033:0x7fc0c8b9c819 [ 1083.532593][T17902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.532602][T17902] RSP: 002b:00007fc0c9a2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1083.532612][T17902] RAX: ffffffffffffffda RBX: 00007fc0c8e15fa0 RCX: 00007fc0c8b9c819 [ 1083.532618][T17902] RDX: 00000000200021d5 RSI: 00002000000011c0 RDI: 0000000000000003 [ 1083.532624][T17902] RBP: 00007fc0c9a2a090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.532630][T17902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.532636][T17902] R13: 00007fc0c8e16038 R14: 00007fc0c8e15fa0 R15: 00007fff1332a3c8 [ 1083.532650][T17902] [ 1086.115403][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3347'. [ 1086.227298][T10973] Bluetooth: hci6: unexpected subevent 0x10 length: 28 > 2 [ 1086.536674][T17939] netlink: 'syz.2.3349': attribute type 30 has an invalid length. [ 1086.807687][T17946] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1086.889505][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 1086.889523][ T29] audit: type=1400 audit(2000000174.130:70129): avc: denied { read write } for pid=17055 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1086.975865][ T29] audit: type=1400 audit(2000000174.220:70130): avc: denied { prog_load } for pid=17949 comm="syz.5.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1087.013495][ T29] audit: type=1400 audit(2000000174.220:70131): avc: denied { create } for pid=17948 comm="syz.1.3354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1087.038812][ T29] audit: type=1400 audit(2000000174.230:70132): avc: denied { read } for pid=17948 comm="syz.1.3354" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 1087.053706][T17952] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1087.079231][T16771] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1087.088244][T17952] audit: audit_lost=989 audit_rate_limit=0 audit_backlog_limit=64 [ 1087.090066][T16771] audit: audit_lost=990 audit_rate_limit=0 audit_backlog_limit=64 [ 1087.109063][ T29] audit: type=1400 audit(2000000174.230:70133): avc: denied { read write } for pid=17948 comm="syz.1.3354" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 1087.111821][T17952] audit: backlog limit exceeded [ 1087.624572][T17970] block device autoloading is deprecated and will be removed. [ 1088.353308][T17987] netlink: 'syz.2.3367': attribute type 30 has an invalid length. [ 1089.981610][T10973] Bluetooth: hci6: unexpected subevent 0x10 length: 28 > 2 [ 1090.224097][T18032] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3383'. [ 1090.246764][T18032] tc_dump_action: action bad kind [ 1091.009683][T18045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=18045 comm=syz.5.3389 [ 1091.964226][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 1091.964251][ T29] audit: type=1400 audit(2000000179.210:70402): avc: denied { create } for pid=18058 comm="syz.4.3394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1091.994114][ T29] audit: type=1400 audit(2000000179.240:70403): avc: denied { read write } for pid=18060 comm="syz.5.3395" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1092.026607][ T29] audit: type=1400 audit(2000000179.270:70404): avc: denied { read write } for pid=18060 comm="syz.5.3395" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1092.103249][ T29] audit: type=1400 audit(2000000179.350:70405): avc: denied { read write } for pid=17230 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1092.183231][ T29] audit: type=1400 audit(2000000179.430:70406): avc: denied { read write } for pid=16771 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1092.258809][ T29] audit: type=1400 audit(2000000179.460:70407): avc: denied { bpf } for pid=18062 comm="syz.1.3396" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 1092.307201][T10973] Bluetooth: hci6: unexpected subevent 0x10 length: 28 > 2 [ 1092.310489][ T29] audit: type=1400 audit(2000000179.490:70408): avc: denied { read write } for pid=17230 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1092.421185][ T29] audit: type=1400 audit(2000000179.550:70409): avc: denied { read write } for pid=18064 comm="syz.1.3398" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1092.446731][ T29] audit: type=1400 audit(2000000179.650:70410): avc: denied { read write } for pid=16324 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1092.540759][ T29] audit: type=1400 audit(2000000179.780:70411): avc: denied { name_bind } for pid=18068 comm="syz.4.3399" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 1093.250151][T18076] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3401'. [ 1093.289686][T18076] tc_dump_action: action bad kind [ 1094.713220][T18109] FAULT_INJECTION: forcing a failure. [ 1094.713220][T18109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1094.726485][T18109] CPU: 1 UID: 0 PID: 18109 Comm: syz.1.3409 Tainted: G L syzkaller #0 PREEMPT(full) [ 1094.726508][T18109] Tainted: [L]=SOFTLOCKUP [ 1094.726512][T18109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1094.726519][T18109] Call Trace: [ 1094.726524][T18109] [ 1094.726530][T18109] dump_stack_lvl+0x100/0x190 [ 1094.726554][T18109] should_fail_ex.cold+0x5/0xa [ 1094.726571][T18109] _copy_to_user+0x32/0xd0 [ 1094.726586][T18109] snd_pcm_oss_read2+0x294/0x400 [ 1094.726602][T18109] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 1094.726615][T18109] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 1094.726635][T18109] snd_pcm_oss_read+0x5aa/0x730 [ 1094.726650][T18109] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1094.726664][T18109] vfs_read+0x1e4/0xb30 [ 1094.726677][T18109] ? __pfx_vfs_read+0x10/0x10 [ 1094.726686][T18109] ? find_held_lock+0x2b/0x80 [ 1094.726701][T18109] ? __fget_files+0x215/0x3d0 [ 1094.726712][T18109] ? __fget_files+0x215/0x3d0 [ 1094.726726][T18109] ? __fget_files+0x21f/0x3d0 [ 1094.726742][T18109] ksys_read+0x12a/0x250 [ 1094.726753][T18109] ? __pfx_ksys_read+0x10/0x10 [ 1094.726768][T18109] do_syscall_64+0x106/0xf80 [ 1094.726780][T18109] ? clear_bhb_loop+0x40/0x90 [ 1094.726794][T18109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.726806][T18109] RIP: 0033:0x7f680f19c819 [ 1094.726816][T18109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.726827][T18109] RSP: 002b:00007f68100ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1094.726837][T18109] RAX: ffffffffffffffda RBX: 00007f680f415fa0 RCX: 00007f680f19c819 [ 1094.726844][T18109] RDX: 00000000200021d5 RSI: 00002000000011c0 RDI: 0000000000000003 [ 1094.726850][T18109] RBP: 00007f68100ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.726857][T18109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.726863][T18109] R13: 00007f680f416038 R14: 00007f680f415fa0 R15: 00007fff7fe1ef48 [ 1094.726876][T18109] [ 1097.157680][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 1097.157695][ T29] audit: type=1400 audit(2000000184.140:70620): avc: denied { mount } for pid=18156 comm="syz.2.3430" name="/" dev="ramfs" ino=64306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 1097.336363][ T29] audit: type=1400 audit(2000000184.150:70621): avc: denied { map_create } for pid=18156 comm="syz.2.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1097.403581][ T29] audit: type=1400 audit(2000000184.150:70622): avc: denied { prog_load } for pid=18156 comm="syz.2.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1097.551505][ T29] audit: type=1400 audit(2000000184.510:70623): avc: denied { read } for pid=18163 comm="syz.1.3431" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1097.651413][ T29] audit: type=1400 audit(2000000184.540:70624): avc: denied { create } for pid=18163 comm="syz.1.3431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 1097.733340][ T29] audit: type=1400 audit(2000000184.540:70625): avc: denied { read } for pid=18163 comm="syz.1.3431" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1097.817431][ T29] audit: type=1400 audit(2000000184.540:70626): avc: denied { create } for pid=18163 comm="syz.1.3431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1097.886193][ T29] audit: type=1400 audit(2000000184.540:70627): avc: denied { map_create } for pid=18163 comm="syz.1.3431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1097.973718][ T29] audit: type=1400 audit(2000000184.540:70628): avc: denied { map_create } for pid=18163 comm="syz.1.3431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1098.021847][ T29] audit: type=1400 audit(2000000184.540:70629): avc: denied { prog_load } for pid=18163 comm="syz.1.3431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1100.077963][T14130] block nbd0: Possible stuck request ffff888027840000: control (read@0,1024B). Runtime 300 seconds [ 1100.088850][T14130] block nbd0: Possible stuck request ffff888027840200: control (read@1024,1024B). Runtime 300 seconds [ 1100.102105][T14130] block nbd0: Possible stuck request ffff888027840400: control (read@2048,1024B). Runtime 300 seconds [ 1100.114535][T14130] block nbd0: Possible stuck request ffff888027840600: control (read@3072,1024B). Runtime 300 seconds [ 1100.407404][T18225] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3456'. [ 1102.136747][T18250] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3466'. [ 1102.168975][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 1102.168989][ T29] audit: type=1400 audit(2000000189.410:70792): avc: denied { read write } for pid=16020 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1102.261903][T18250] tc_dump_action: action bad kind [ 1102.269918][ T29] audit: type=1400 audit(2000000189.510:70793): avc: denied { prog_load } for pid=18248 comm="syz.4.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1102.389310][ T29] audit: type=1400 audit(2000000189.510:70794): avc: denied { prog_load } for pid=18248 comm="syz.4.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1102.468042][ T29] audit: type=1400 audit(2000000189.600:70795): avc: denied { read write } for pid=18251 comm="syz.0.3468" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1102.546615][ T29] audit: type=1400 audit(2000000189.620:70796): avc: denied { create } for pid=18251 comm="syz.0.3468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1102.628747][T18261] netlink: 'syz.4.3470': attribute type 13 has an invalid length. [ 1102.641351][ T29] audit: type=1400 audit(2000000189.620:70797): avc: denied { read write } for pid=16324 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1102.829276][ T29] audit: type=1400 audit(2000000189.630:70798): avc: denied { read write } for pid=18255 comm="syz.5.3467" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1102.935616][ T29] audit: type=1400 audit(2000000189.630:70799): avc: denied { write } for pid=18255 comm="syz.5.3467" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 1103.013872][ T29] audit: type=1400 audit(2000000189.690:70800): avc: denied { create } for pid=18251 comm="syz.0.3468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=0 [ 1103.082478][ T29] audit: type=1400 audit(2000000189.690:70801): avc: denied { read append } for pid=18251 comm="syz.0.3468" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1103.243114][T18268] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3472'. [ 1104.814907][T18299] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3481'. [ 1104.858718][T18299] tc_dump_action: action bad kind [ 1105.034234][T10973] Bluetooth: hci6: unexpected subevent 0x10 length: 28 > 2 [ 1105.506344][T18318] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1105.663159][T18325] netlink: 'syz.0.3489': attribute type 10 has an invalid length. [ 1105.688894][T18325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.732396][T18325] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1105.789902][T18326] netlink: 'syz.0.3489': attribute type 10 has an invalid length. [ 1105.843661][T18326] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3489'. [ 1105.884535][T18326] batadv0: entered promiscuous mode [ 1105.904708][T18326] batadv0: entered allmulticast mode [ 1106.182536][T18326] bond0: (slave batadv0): Releasing backup interface [ 1106.193585][T18332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3492'. [ 1106.207070][T18326] bridge0: port 3(batadv0) entered blocking state [ 1106.245496][T18326] bridge0: port 3(batadv0) entered disabled state [ 1106.747356][T15512] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1106.757710][T15512] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1107.173252][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 1107.173269][ T29] audit: type=1400 audit(2000000194.420:71016): avc: denied { create } for pid=18345 comm="syz.0.3496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 1107.217612][ T29] audit: type=1400 audit(2000000194.420:71017): avc: denied { create } for pid=18345 comm="syz.0.3496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 1107.277922][ T29] audit: type=1400 audit(2000000194.420:71018): avc: denied { execmem } for pid=18345 comm="syz.0.3496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1107.367639][ T29] audit: type=1400 audit(2000000194.420:71019): avc: denied { read } for pid=18345 comm="syz.0.3496" dev="nsfs" ino=4026533250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 1107.515394][ T29] audit: type=1400 audit(2000000194.420:71020): avc: denied { mounton } for pid=18345 comm="syz.0.3496" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 1107.628327][ T29] audit: type=1400 audit(2000000194.520:71021): avc: denied { read write } for pid=18345 comm="syz.0.3496" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1107.781278][ T29] audit: type=1400 audit(2000000194.520:71022): avc: denied { name_bind } for pid=18351 comm="syz.5.3499" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 1107.901038][ T29] audit: type=1400 audit(2000000194.580:71023): avc: denied { read write } for pid=18351 comm="syz.5.3499" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 1108.026858][ T29] audit: type=1400 audit(2000000194.850:71024): avc: denied { read write } for pid=16020 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1108.167634][ T29] audit: type=1400 audit(2000000195.080:71025): avc: denied { read write } for pid=16324 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1108.572138][T18369] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3503'. [ 1108.618718][T18369] tc_dump_action: action bad kind [ 1108.921573][T18376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3505'. [ 1109.109101][T13267] udevd[13267]: setting mode of /dev/gsmtty55 to 020600 failed: No such file or directory [ 1109.157736][T13267] udevd[13267]: setting owner of /dev/gsmtty55 to uid=0, gid=0 failed: No such file or directory [ 1109.737113][T18390] FAULT_INJECTION: forcing a failure. [ 1109.737113][T18390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.806987][T18392] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.3513'. [ 1109.871407][T18390] CPU: 1 UID: 0 PID: 18390 Comm: syz.1.3512 Tainted: G L syzkaller #0 PREEMPT(full) [ 1109.871437][T18390] Tainted: [L]=SOFTLOCKUP [ 1109.871444][T18390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1109.871453][T18390] Call Trace: [ 1109.871459][T18390] [ 1109.871466][T18390] dump_stack_lvl+0x100/0x190 [ 1109.871499][T18390] should_fail_ex.cold+0x5/0xa [ 1109.871522][T18390] _copy_to_user+0x32/0xd0 [ 1109.871543][T18390] snd_pcm_oss_read2+0x294/0x400 [ 1109.871566][T18390] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 1109.871586][T18390] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 1109.871619][T18390] snd_pcm_oss_read+0x5aa/0x730 [ 1109.871644][T18390] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1109.871667][T18390] vfs_read+0x1e4/0xb30 [ 1109.871694][T18390] ? __pfx_vfs_read+0x10/0x10 [ 1109.871708][T18390] ? find_held_lock+0x2b/0x80 [ 1109.871729][T18390] ? __fget_files+0x215/0x3d0 [ 1109.871747][T18390] ? __fget_files+0x215/0x3d0 [ 1109.871768][T18390] ? __fget_files+0x21f/0x3d0 [ 1109.871791][T18390] ksys_read+0x12a/0x250 [ 1109.871806][T18390] ? __pfx_ksys_read+0x10/0x10 [ 1109.871828][T18390] do_syscall_64+0x106/0xf80 [ 1109.871845][T18390] ? clear_bhb_loop+0x40/0x90 [ 1109.871867][T18390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.871885][T18390] RIP: 0033:0x7f680f19c819 [ 1109.871900][T18390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.871916][T18390] RSP: 002b:00007f68100ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1109.871933][T18390] RAX: ffffffffffffffda RBX: 00007f680f415fa0 RCX: 00007f680f19c819 [ 1109.871944][T18390] RDX: 00000000200021d5 RSI: 00002000000011c0 RDI: 0000000000000003 [ 1109.871955][T18390] RBP: 00007f68100ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.871965][T18390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.871974][T18390] R13: 00007f680f416038 R14: 00007f680f415fa0 R15: 00007fff7fe1ef48 [ 1109.871995][T18390] [ 1110.328347][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1111.376839][T18422] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3520'. [ 1111.386903][T18422] tc_dump_action: action bad kind [ 1112.354175][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 1112.354193][ T29] audit: type=1400 audit(2000000199.600:71158): avc: denied { read write } for pid=17055 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1112.481958][ T29] audit: type=1400 audit(2000000199.690:71159): avc: denied { read write } for pid=16020 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1112.587684][ T29] audit: type=1400 audit(2000000199.830:71160): avc: denied { execmem } for pid=18433 comm="syz.2.3524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1112.648862][ T29] audit: type=1400 audit(2000000199.830:71161): avc: denied { read write } for pid=16324 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1112.724118][ T29] audit: type=1400 audit(2000000199.860:71162): avc: denied { read write } for pid=18430 comm="syz.1.3525" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 1112.776910][ T29] audit: type=1400 audit(2000000199.860:71163): avc: denied { create } for pid=18430 comm="syz.1.3525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 1112.832916][ T29] audit: type=1400 audit(2000000199.870:71164): avc: denied { prog_load } for pid=18433 comm="syz.2.3524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1113.093770][ T29] audit: type=1400 audit(2000000199.890:71165): avc: denied { name_bind } for pid=18433 comm="syz.2.3524" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 1113.143205][ T29] audit: type=1400 audit(2000000199.890:71166): avc: denied { read } for pid=18433 comm="syz.2.3524" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1113.183036][ T29] audit: type=1400 audit(2000000199.920:71167): avc: denied { write } for pid=18436 comm="syz.5.3526" name="udp6" dev="proc" ino=4026533465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 1114.515459][T18464] netlink: 'syz.4.3535': attribute type 4 has an invalid length. [ 1114.568940][T18467] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3536'. [ 1114.579164][T18467] tc_dump_action: action bad kind [ 1114.807882][T18471] FAULT_INJECTION: forcing a failure. [ 1114.807882][T18471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1114.846099][T18471] CPU: 0 UID: 0 PID: 18471 Comm: syz.0.3538 Tainted: G L syzkaller #0 PREEMPT(full) [ 1114.846127][T18471] Tainted: [L]=SOFTLOCKUP [ 1114.846133][T18471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1114.846143][T18471] Call Trace: [ 1114.846149][T18471] [ 1114.846155][T18471] dump_stack_lvl+0x100/0x190 [ 1114.846189][T18471] should_fail_ex.cold+0x5/0xa [ 1114.846211][T18471] _copy_from_user+0x2e/0xd0 [ 1114.846233][T18471] kstrtouint_from_user+0xd6/0x1d0 [ 1114.846258][T18471] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1114.846282][T18471] ? __lock_acquire+0x4a5/0x2630 [ 1114.846305][T18471] ? lock_acquire+0x1cf/0x380 [ 1114.846328][T18471] proc_fail_nth_write+0x83/0x220 [ 1114.846355][T18471] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1114.846389][T18471] vfs_write+0x2aa/0x1070 [ 1114.846408][T18471] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1114.846436][T18471] ? __pfx_vfs_write+0x10/0x10 [ 1114.846453][T18471] ? __fget_files+0x215/0x3d0 [ 1114.846479][T18471] ? __fget_files+0x21f/0x3d0 [ 1114.846506][T18471] ksys_write+0x12a/0x250 [ 1114.846522][T18471] ? __pfx_ksys_write+0x10/0x10 [ 1114.846547][T18471] do_syscall_64+0x106/0xf80 [ 1114.846571][T18471] ? clear_bhb_loop+0x40/0x90 [ 1114.846593][T18471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.846612][T18471] RIP: 0033:0x7f2a0655d04e [ 1114.846627][T18471] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1114.846643][T18471] RSP: 002b:00007f2a07445fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1114.846662][T18471] RAX: ffffffffffffffda RBX: 00007f2a074466c0 RCX: 00007f2a0655d04e [ 1114.846673][T18471] RDX: 0000000000000001 RSI: 00007f2a074460a0 RDI: 0000000000000003 [ 1114.846683][T18471] RBP: 00007f2a07446090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.846690][T18471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.846696][T18471] R13: 00007f2a06816038 R14: 00007f2a06815fa0 R15: 00007ffe150e9c88 [ 1114.846711][T18471] [ 1117.436471][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 1117.436487][ T29] audit: type=1400 audit(2000000204.680:71407): avc: denied { read write } for pid=16020 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1117.496209][ T29] audit: type=1400 audit(2000000204.740:71408): avc: denied { prog_load } for pid=18525 comm="syz.2.3560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1117.519591][ T29] audit: type=1400 audit(2000000204.740:71409): avc: denied { create } for pid=18525 comm="syz.2.3560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 1117.554378][ T29] audit: type=1400 audit(2000000204.800:71410): avc: denied { read write } for pid=16324 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1117.608869][ T29] audit: type=1400 audit(2000000204.850:71411): avc: denied { read write } for pid=16771 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1117.707850][ T29] audit: type=1400 audit(2000000204.900:71412): avc: denied { read write } for pid=17230 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1118.006410][ T29] audit: type=1400 audit(2000000204.930:71413): avc: denied { read write } for pid=17055 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1118.102618][ T29] audit: type=1400 audit(2000000204.990:71414): avc: denied { create } for pid=18525 comm="syz.2.3560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 1118.158653][ T29] audit: type=1400 audit(2000000204.990:71415): avc: denied { create } for pid=18525 comm="syz.2.3560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 1118.214299][ T29] audit: type=1400 audit(2000000205.000:71416): avc: denied { create } for pid=18525 comm="syz.2.3560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 1119.700817][T10973] Bluetooth: hci6: unexpected subevent 0x10 length: 28 > 2 [ 1121.548205][T18613] FAULT_INJECTION: forcing a failure. [ 1121.548205][T18613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1121.573629][T18613] CPU: 1 UID: 0 PID: 18613 Comm: syz.4.3592 Tainted: G L syzkaller #0 PREEMPT(full) [ 1121.573658][T18613] Tainted: [L]=SOFTLOCKUP [ 1121.573664][T18613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1121.573672][T18613] Call Trace: [ 1121.573676][T18613] [ 1121.573682][T18613] dump_stack_lvl+0x100/0x190 [ 1121.573716][T18613] should_fail_ex.cold+0x5/0xa [ 1121.573735][T18613] _copy_to_user+0x32/0xd0 [ 1121.573749][T18613] snd_pcm_oss_read2+0x294/0x400 [ 1121.573767][T18613] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 1121.573787][T18613] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 1121.573817][T18613] snd_pcm_oss_read+0x5aa/0x730 [ 1121.573841][T18613] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1121.573856][T18613] vfs_read+0x1e4/0xb30 [ 1121.573868][T18613] ? __pfx_vfs_read+0x10/0x10 [ 1121.573877][T18613] ? find_held_lock+0x2b/0x80 [ 1121.573891][T18613] ? __fget_files+0x215/0x3d0 [ 1121.573903][T18613] ? __fget_files+0x215/0x3d0 [ 1121.573917][T18613] ? __fget_files+0x21f/0x3d0 [ 1121.573933][T18613] ksys_read+0x12a/0x250 [ 1121.573943][T18613] ? __pfx_ksys_read+0x10/0x10 [ 1121.573957][T18613] do_syscall_64+0x106/0xf80 [ 1121.573968][T18613] ? clear_bhb_loop+0x40/0x90 [ 1121.573981][T18613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.573993][T18613] RIP: 0033:0x7f20a1f9c819 [ 1121.574002][T18613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.574013][T18613] RSP: 002b:00007f20a2d9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1121.574024][T18613] RAX: ffffffffffffffda RBX: 00007f20a2215fa0 RCX: 00007f20a1f9c819 [ 1121.574030][T18613] RDX: 00000000200021d5 RSI: 00002000000011c0 RDI: 0000000000000003 [ 1121.574037][T18613] RBP: 00007f20a2d9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.574043][T18613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1121.574049][T18613] R13: 00007f20a2216038 R14: 00007f20a2215fa0 R15: 00007ffcd0950478 [ 1121.574064][T18613] [ 1122.446321][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 1122.446341][ T29] audit: type=1400 audit(2000000209.690:71626): avc: denied { write } for pid=18628 comm="syz.5.3596" name="ipv6_route" dev="proc" ino=4026533478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 1122.523114][ T29] audit: type=1400 audit(2000000209.770:71627): avc: denied { prog_load } for pid=18633 comm="syz.1.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1122.558023][ T29] audit: type=1400 audit(2000000209.790:71628): avc: denied { create } for pid=18633 comm="syz.1.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 1122.749154][ T29] audit: type=1400 audit(2000000209.800:71629): avc: denied { read write } for pid=16324 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1122.829125][ T29] audit: type=1400 audit(2000000209.900:71630): avc: denied { create } for pid=18633 comm="syz.1.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 1122.879008][ T29] audit: type=1400 audit(2000000209.910:71631): avc: denied { create } for pid=18633 comm="syz.1.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 1122.919323][ T29] audit: type=1400 audit(2000000209.920:71632): avc: denied { create } for pid=18633 comm="syz.1.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 1122.998575][ T29] audit: type=1400 audit(2000000209.930:71633): avc: denied { read write } for pid=18633 comm="syz.1.3598" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 1123.255987][ T29] audit: type=1400 audit(2000000209.990:71634): avc: denied { read write } for pid=17055 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1123.381404][ T29] audit: type=1400 audit(2000000210.070:71635): avc: denied { read } for pid=18633 comm="syz.1.3598" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 1123.742724][T18648] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3602'. [ 1123.864097][T18648] tc_dump_action: action bad kind [ 1124.588630][T18662] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3609'. [ 1124.707622][T18669] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3607'. [ 1125.877914][T18691] xt_SECMARK: invalid mode: 2 [ 1127.335323][T18712] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3622'. [ 1127.490883][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 1127.490900][ T29] audit: type=1400 audit(2000000214.730:71792): avc: denied { read } for pid=18716 comm="syz.5.3624" dev="nsfs" ino=4026533330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 1127.543580][ T29] audit: type=1400 audit(2000000214.740:71793): avc: denied { execmem } for pid=18716 comm="syz.5.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1127.649799][ T29] audit: type=1400 audit(2000000214.750:71794): avc: denied { create } for pid=18716 comm="syz.5.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 1127.722105][ T29] audit: type=1400 audit(2000000214.770:71795): avc: denied { read write } for pid=16020 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1127.781842][ T29] audit: type=1400 audit(2000000214.780:71796): avc: denied { read } for pid=18716 comm="syz.5.3624" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1128.186721][ T29] audit: type=1400 audit(2000000214.780:71797): avc: denied { create } for pid=18716 comm="syz.5.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1128.311755][ T29] audit: type=1400 audit(2000000214.780:71798): avc: denied { create } for pid=18716 comm="syz.5.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1128.363817][ T29] audit: type=1400 audit(2000000214.790:71799): avc: denied { create } for pid=18716 comm="syz.5.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 1128.402955][ T29] audit: type=1400 audit(2000000214.830:71800): avc: denied { create } for pid=18716 comm="syz.5.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1128.426450][ T29] audit: type=1400 audit(2000000214.850:71801): avc: denied { read } for pid=18716 comm="syz.5.3624" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1128.713754][T18745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3632'. [ 1129.401716][T18754] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.3635'. [ 1129.528116][T18754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18754 comm=syz.4.3635 [ 1129.571387][T18754] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.3635'. [ 1130.156393][T14130] block nbd0: Possible stuck request ffff888027840000: control (read@0,1024B). Runtime 330 seconds [ 1130.167217][T14130] block nbd0: Possible stuck request ffff888027840200: control (read@1024,1024B). Runtime 330 seconds [ 1130.182684][T14130] block nbd0: Possible stuck request ffff888027840400: control (read@2048,1024B). Runtime 330 seconds [ 1130.193739][T14130] block nbd0: Possible stuck request ffff888027840600: control (read@3072,1024B). Runtime 330 seconds [ 1132.502170][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 1132.502187][ T29] audit: type=1400 audit(2000000219.750:72013): avc: denied { name_bind } for pid=18805 comm="syz.0.3651" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 1132.549131][ T29] audit: type=1400 audit(2000000219.750:72014): avc: denied { create } for pid=18805 comm="syz.0.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1132.583486][ T29] audit: type=1400 audit(2000000219.740:72012): avc: denied { create } for pid=18805 comm="syz.0.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 1132.674222][ T29] audit: type=1400 audit(2000000219.790:72015): avc: denied { create } for pid=18805 comm="syz.0.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 1132.734602][ T29] audit: type=1400 audit(2000000219.790:72016): avc: denied { create } for pid=18805 comm="syz.0.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 1132.775122][ T29] audit: type=1400 audit(2000000219.790:72017): avc: denied { create } for pid=18805 comm="syz.0.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 1132.811351][ T29] audit: type=1400 audit(2000000219.820:72018): avc: denied { create } for pid=18805 comm="syz.0.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1132.875771][ T29] audit: type=1400 audit(2000000219.820:72019): avc: denied { create } for pid=18805 comm="syz.0.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 1132.929301][ T29] audit: type=1400 audit(2000000219.830:72020): avc: denied { read write } for pid=16020 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1132.955853][ T29] audit: type=1400 audit(2000000219.870:72021): avc: denied { read write } for pid=16771 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1137.664575][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 1137.664592][ T29] audit: type=1400 audit(2000000224.910:72159): avc: denied { read write } for pid=18886 comm="syz.5.3681" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1137.724489][ T29] audit: type=1400 audit(2000000224.950:72160): avc: denied { read } for pid=18886 comm="syz.5.3681" dev="nsfs" ino=4026533330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 1137.767628][ T29] audit: type=1400 audit(2000000224.970:72161): avc: denied { read write } for pid=16771 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1137.793598][ T29] audit: type=1400 audit(2000000225.000:72162): avc: denied { read write } for pid=18890 comm="syz.2.3680" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1137.836660][ T29] audit: type=1400 audit(2000000225.000:72163): avc: denied { map_create } for pid=18890 comm="syz.2.3680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1137.856449][ T29] audit: type=1400 audit(2000000225.000:72164): avc: denied { prog_load } for pid=18890 comm="syz.2.3680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1137.882591][ T29] audit: type=1400 audit(2000000225.000:72165): avc: denied { read } for pid=18878 comm="syz.1.3678" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1137.907280][ T29] audit: type=1400 audit(2000000225.000:72166): avc: denied { module_request } for pid=18878 comm="syz.1.3678" kmod="ip6t_icmp" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 1137.932556][ T29] audit: type=1400 audit(2000000225.000:72167): avc: denied { map_create } for pid=18878 comm="syz.1.3678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1137.953775][ T29] audit: type=1400 audit(2000000225.010:72168): avc: denied { read write } for pid=18878 comm="syz.1.3678" name="vbi6" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 1139.962321][T18928] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1139.998781][T18928] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1140.335170][T18942] kAFS: unable to lookup cell '' [ 1141.190299][T18953] ip6erspan0: entered allmulticast mode [ 1142.445075][T18968] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3707'. [ 1142.495341][T18968] tc_dump_action: action bad kind [ 1142.690022][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 1142.690040][ T29] audit: type=1400 audit(2000000229.930:72305): avc: denied { create } for pid=18970 comm="syz.1.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 1142.789875][ T29] audit: type=1400 audit(2000000229.970:72306): avc: denied { read write } for pid=18970 comm="syz.1.3709" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1142.858034][ T29] audit: type=1400 audit(2000000229.970:72307): avc: denied { create } for pid=18970 comm="syz.1.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1142.951656][ T29] audit: type=1400 audit(2000000229.970:72308): avc: denied { create } for pid=18970 comm="syz.1.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1143.063366][ T29] audit: type=1400 audit(2000000229.970:72309): avc: denied { create } for pid=18970 comm="syz.1.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1143.151295][ T29] audit: type=1400 audit(2000000229.970:72310): avc: denied { read write } for pid=18970 comm="syz.1.3709" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1143.190790][T10973] Bluetooth: hci4: command 0x0406 tx timeout [ 1143.283702][ T29] audit: type=1400 audit(2000000230.000:72311): avc: denied { read write } for pid=16324 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1143.375869][ T29] audit: type=1400 audit(2000000230.080:72312): avc: denied { read write } for pid=18972 comm="syz.0.3710" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 1143.451379][ T29] audit: type=1400 audit(2000000230.090:72313): avc: denied { create } for pid=18972 comm="syz.0.3710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 1143.521299][ T29] audit: type=1400 audit(2000000230.130:72314): avc: denied { read } for pid=18972 comm="syz.0.3710" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1144.497887][T19010] FAULT_INJECTION: forcing a failure. [ 1144.497887][T19010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1144.603171][T19010] CPU: 1 UID: 0 PID: 19010 Comm: syz.4.3725 Tainted: G L syzkaller #0 PREEMPT(full) [ 1144.603199][T19010] Tainted: [L]=SOFTLOCKUP [ 1144.603205][T19010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1144.603215][T19010] Call Trace: [ 1144.603221][T19010] [ 1144.603228][T19010] dump_stack_lvl+0x100/0x190 [ 1144.603252][T19010] should_fail_ex.cold+0x5/0xa [ 1144.603268][T19010] _copy_to_user+0x32/0xd0 [ 1144.603283][T19010] snd_pcm_oss_read2+0x294/0x400 [ 1144.603298][T19010] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 1144.603311][T19010] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 1144.603332][T19010] snd_pcm_oss_read+0x5aa/0x730 [ 1144.603352][T19010] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1144.603366][T19010] vfs_read+0x1e4/0xb30 [ 1144.603380][T19010] ? __pfx_vfs_read+0x10/0x10 [ 1144.603389][T19010] ? find_held_lock+0x2b/0x80 [ 1144.603404][T19010] ? __fget_files+0x215/0x3d0 [ 1144.603415][T19010] ? __fget_files+0x215/0x3d0 [ 1144.603430][T19010] ? __fget_files+0x21f/0x3d0 [ 1144.603445][T19010] ksys_read+0x12a/0x250 [ 1144.603455][T19010] ? __pfx_ksys_read+0x10/0x10 [ 1144.603470][T19010] do_syscall_64+0x106/0xf80 [ 1144.603480][T19010] ? clear_bhb_loop+0x40/0x90 [ 1144.603494][T19010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.603505][T19010] RIP: 0033:0x7f20a1f9c819 [ 1144.603515][T19010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.603525][T19010] RSP: 002b:00007f20a2d9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1144.603536][T19010] RAX: ffffffffffffffda RBX: 00007f20a2215fa0 RCX: 00007f20a1f9c819 [ 1144.603543][T19010] RDX: 00000000200021d5 RSI: 00002000000011c0 RDI: 0000000000000003 [ 1144.603549][T19010] RBP: 00007f20a2d9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.603555][T19010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1144.603562][T19010] R13: 00007f20a2216038 R14: 00007f20a2215fa0 R15: 00007ffcd0950478 [ 1144.603576][T19010] [ 1144.897873][T19021] trusted_key: encrypted_key: insufficient parameters specified [ 1145.982486][T19043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53264 sclass=netlink_route_socket pid=19043 comm=syz.2.3736 [ 1146.380495][T19051] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3738'. [ 1146.430482][T19051] tc_dump_action: action bad kind [ 1147.725552][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 1147.725569][ T29] audit: type=1400 audit(2000000490.968:72535): avc: denied { read } for pid=19076 comm="syz.5.3747" name="event3" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 1147.825660][ T29] audit: type=1400 audit(2000000491.008:72536): avc: denied { read write } for pid=16324 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1147.918721][ T29] audit: type=1400 audit(2000000491.128:72537): avc: denied { read write } for pid=16771 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1148.024769][ T29] audit: type=1400 audit(2000000491.228:72538): avc: denied { mounton } for pid=19083 comm="syz.2.3749" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 1148.163924][ T29] audit: type=1400 audit(2000000491.248:72539): avc: denied { read write } for pid=17055 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1148.243979][T18952] Bluetooth: hci0: command 0x0406 tx timeout [ 1148.259954][ T29] audit: type=1400 audit(2000000491.268:72540): avc: denied { map_create } for pid=19083 comm="syz.2.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1148.421603][ T29] audit: type=1400 audit(2000000491.268:72541): avc: denied { read write } for pid=19082 comm="syz.4.3751" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1148.559795][ T29] audit: type=1400 audit(2000000491.308:72542): avc: denied { prog_load } for pid=19082 comm="syz.4.3751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1148.651162][ T29] audit: type=1400 audit(2000000491.328:72543): avc: denied { read } for pid=19083 comm="syz.2.3749" dev="nsfs" ino=4026534057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 1148.726054][ T29] audit: type=1400 audit(2000000491.368:72544): avc: denied { read write } for pid=19081 comm="syz.1.3750" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 1150.809608][T19145] FAULT_INJECTION: forcing a failure. [ 1150.809608][T19145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1150.827402][T19145] CPU: 1 UID: 0 PID: 19145 Comm: syz.1.3773 Tainted: G L syzkaller #0 PREEMPT(full) [ 1150.827431][T19145] Tainted: [L]=SOFTLOCKUP [ 1150.827436][T19145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1150.827445][T19145] Call Trace: [ 1150.827451][T19145] [ 1150.827457][T19145] dump_stack_lvl+0x100/0x190 [ 1150.827489][T19145] should_fail_ex.cold+0x5/0xa [ 1150.827512][T19145] _copy_to_user+0x32/0xd0 [ 1150.827532][T19145] snd_pcm_oss_read2+0x294/0x400 [ 1150.827556][T19145] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 1150.827575][T19145] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 1150.827611][T19145] snd_pcm_oss_read+0x5aa/0x730 [ 1150.827634][T19145] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1150.827656][T19145] vfs_read+0x1e4/0xb30 [ 1150.827677][T19145] ? __pfx_vfs_read+0x10/0x10 [ 1150.827691][T19145] ? find_held_lock+0x2b/0x80 [ 1150.827714][T19145] ? __fget_files+0x215/0x3d0 [ 1150.827733][T19145] ? __fget_files+0x215/0x3d0 [ 1150.827757][T19145] ? __fget_files+0x21f/0x3d0 [ 1150.827785][T19145] ksys_read+0x12a/0x250 [ 1150.827802][T19145] ? __pfx_ksys_read+0x10/0x10 [ 1150.827826][T19145] do_syscall_64+0x106/0xf80 [ 1150.827844][T19145] ? clear_bhb_loop+0x40/0x90 [ 1150.827866][T19145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.827884][T19145] RIP: 0033:0x7f680f19c819 [ 1150.827899][T19145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.827916][T19145] RSP: 002b:00007f68100ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1150.827934][T19145] RAX: ffffffffffffffda RBX: 00007f680f415fa0 RCX: 00007f680f19c819 [ 1150.827946][T19145] RDX: 00000000200021d5 RSI: 00002000000011c0 RDI: 0000000000000003 [ 1150.827957][T19145] RBP: 00007f68100ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.827967][T19145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1150.827977][T19145] R13: 00007f680f416038 R14: 00007f680f415fa0 R15: 00007fff7fe1ef48 [ 1150.828003][T19145] [ 1152.421900][T19178] FAULT_INJECTION: forcing a failure. [ 1152.421900][T19178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1152.435515][T19178] CPU: 1 UID: 0 PID: 19178 Comm: syz.4.3786 Tainted: G L syzkaller #0 PREEMPT(full) [ 1152.435542][T19178] Tainted: [L]=SOFTLOCKUP [ 1152.435548][T19178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1152.435557][T19178] Call Trace: [ 1152.435562][T19178] [ 1152.435568][T19178] dump_stack_lvl+0x100/0x190 [ 1152.435601][T19178] should_fail_ex.cold+0x5/0xa [ 1152.435623][T19178] _copy_to_user+0x32/0xd0 [ 1152.435644][T19178] snd_pcm_oss_read2+0x294/0x400 [ 1152.435672][T19178] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 1152.435690][T19178] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 1152.435719][T19178] snd_pcm_oss_read+0x5aa/0x730 [ 1152.435742][T19178] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1152.435762][T19178] vfs_read+0x1e4/0xb30 [ 1152.435781][T19178] ? __pfx_vfs_read+0x10/0x10 [ 1152.435796][T19178] ? find_held_lock+0x2b/0x80 [ 1152.435819][T19178] ? __fget_files+0x215/0x3d0 [ 1152.435838][T19178] ? __fget_files+0x215/0x3d0 [ 1152.435863][T19178] ? __fget_files+0x21f/0x3d0 [ 1152.435890][T19178] ksys_read+0x12a/0x250 [ 1152.435907][T19178] ? __pfx_ksys_read+0x10/0x10 [ 1152.435931][T19178] do_syscall_64+0x106/0xf80 [ 1152.435948][T19178] ? clear_bhb_loop+0x40/0x90 [ 1152.435970][T19178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.435988][T19178] RIP: 0033:0x7f20a1f9c819 [ 1152.436003][T19178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.436020][T19178] RSP: 002b:00007f20a2d9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1152.436038][T19178] RAX: ffffffffffffffda RBX: 00007f20a2215fa0 RCX: 00007f20a1f9c819 [ 1152.436050][T19178] RDX: 00000000200021d5 RSI: 00002000000011c0 RDI: 0000000000000003 [ 1152.436060][T19178] RBP: 00007f20a2d9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1152.436071][T19178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1152.436081][T19178] R13: 00007f20a2216038 R14: 00007f20a2215fa0 R15: 00007ffcd0950478 [ 1152.436106][T19178] [ 1152.782293][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 1152.782312][ T29] audit: type=1400 audit(2000000495.968:72794): avc: denied { execmem } for pid=19179 comm="syz.1.3787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1152.921125][ T29] audit: type=1400 audit(2000000495.978:72795): avc: denied { create } for pid=19179 comm="syz.1.3787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 1153.015739][ T29] audit: type=1400 audit(2000000495.978:72796): avc: denied { create } for pid=19179 comm="syz.1.3787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 1153.079615][ T29] audit: type=1400 audit(2000000495.978:72797): avc: denied { create } for pid=19179 comm="syz.1.3787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1153.108773][T19197] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1153.112965][T17230] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1153.119580][T16771] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1153.133565][T19198] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1153.134233][T19197] audit: audit_lost=991 audit_rate_limit=0 audit_backlog_limit=64 [ 1153.140077][T19198] audit: audit_lost=992 audit_rate_limit=0 audit_backlog_limit=64 [ 1154.483233][T19224] FAULT_INJECTION: forcing a failure. [ 1154.483233][T19224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1154.521419][T19224] CPU: 1 UID: 0 PID: 19224 Comm: syz.4.3804 Tainted: G L syzkaller #0 PREEMPT(full) [ 1154.521448][T19224] Tainted: [L]=SOFTLOCKUP [ 1154.521454][T19224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1154.521463][T19224] Call Trace: [ 1154.521469][T19224] [ 1154.521476][T19224] dump_stack_lvl+0x100/0x190 [ 1154.521508][T19224] should_fail_ex.cold+0x5/0xa [ 1154.521529][T19224] _copy_to_user+0x32/0xd0 [ 1154.521551][T19224] snd_pcm_oss_read2+0x294/0x400 [ 1154.521576][T19224] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 1154.521597][T19224] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 1154.521632][T19224] snd_pcm_oss_read+0x5aa/0x730 [ 1154.521658][T19224] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1154.521680][T19224] vfs_read+0x1e4/0xb30 [ 1154.521702][T19224] ? __pfx_vfs_read+0x10/0x10 [ 1154.521716][T19224] ? find_held_lock+0x2b/0x80 [ 1154.521739][T19224] ? __fget_files+0x215/0x3d0 [ 1154.521759][T19224] ? __fget_files+0x215/0x3d0 [ 1154.521783][T19224] ? __fget_files+0x21f/0x3d0 [ 1154.521810][T19224] ksys_read+0x12a/0x250 [ 1154.521827][T19224] ? __pfx_ksys_read+0x10/0x10 [ 1154.521851][T19224] do_syscall_64+0x106/0xf80 [ 1154.521869][T19224] ? clear_bhb_loop+0x40/0x90 [ 1154.521891][T19224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.521907][T19224] RIP: 0033:0x7f20a1f9c819 [ 1154.521922][T19224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.521936][T19224] RSP: 002b:00007f20a2d9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1154.521952][T19224] RAX: ffffffffffffffda RBX: 00007f20a2215fa0 RCX: 00007f20a1f9c819 [ 1154.521962][T19224] RDX: 00000000200021d5 RSI: 00002000000011c0 RDI: 0000000000000003 [ 1154.521972][T19224] RBP: 00007f20a2d9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.521981][T19224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1154.521990][T19224] R13: 00007f20a2216038 R14: 00007f20a2215fa0 R15: 00007ffcd0950478 [ 1154.522013][T19224] [ 1155.182861][T19239] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3809'. [ 1155.192372][T19239] tc_dump_action: action bad kind [ 1155.268165][T19243] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=19243 comm=syz.2.3811 [ 1155.284784][T19243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3811'. [ 1155.463863][T19249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3811'. [ 1156.374410][T15512] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 1156.409538][T15512] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 1156.444784][T15512] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 1156.494616][T15512] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 1157.670943][T19279] FAULT_INJECTION: forcing a failure. [ 1157.670943][T19279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1157.687553][T19279] CPU: 1 UID: 0 PID: 19279 Comm: syz.0.3822 Tainted: G L syzkaller #0 PREEMPT(full) [ 1157.687582][T19279] Tainted: [L]=SOFTLOCKUP [ 1157.687589][T19279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1157.687599][T19279] Call Trace: [ 1157.687606][T19279] [ 1157.687614][T19279] dump_stack_lvl+0x100/0x190 [ 1157.687648][T19279] should_fail_ex.cold+0x5/0xa [ 1157.687673][T19279] _copy_to_user+0x32/0xd0 [ 1157.687696][T19279] snd_pcm_oss_read2+0x294/0x400 [ 1157.687722][T19279] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 1157.687743][T19279] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 1157.687777][T19279] snd_pcm_oss_read+0x5aa/0x730 [ 1157.687802][T19279] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1157.687825][T19279] vfs_read+0x1e4/0xb30 [ 1157.687847][T19279] ? __pfx_vfs_read+0x10/0x10 [ 1157.687862][T19279] ? find_held_lock+0x2b/0x80 [ 1157.687885][T19279] ? __fget_files+0x215/0x3d0 [ 1157.687905][T19279] ? __fget_files+0x215/0x3d0 [ 1157.687935][T19279] ? __fget_files+0x21f/0x3d0 [ 1157.687962][T19279] ksys_read+0x12a/0x250 [ 1157.687979][T19279] ? __pfx_ksys_read+0x10/0x10 [ 1157.688004][T19279] do_syscall_64+0x106/0xf80 [ 1157.688021][T19279] ? clear_bhb_loop+0x40/0x90 [ 1157.688044][T19279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.688061][T19279] RIP: 0033:0x7f2a0659c819 [ 1157.688076][T19279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.688093][T19279] RSP: 002b:00007f2a07446028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1157.688111][T19279] RAX: ffffffffffffffda RBX: 00007f2a06815fa0 RCX: 00007f2a0659c819 [ 1157.688123][T19279] RDX: 00000000200021d5 RSI: 00002000000011c0 RDI: 0000000000000003 [ 1157.688134][T19279] RBP: 00007f2a07446090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.688144][T19279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1157.688154][T19279] R13: 00007f2a06816038 R14: 00007f2a06815fa0 R15: 00007ffe150e9c88 [ 1157.688178][T19279] [ 1157.928798][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 1157.928817][ T29] audit: type=1400 audit(2000000501.148:73031): avc: denied { read write } for pid=16324 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1158.025859][ T29] audit: type=1400 audit(2000000501.268:73032): avc: denied { read write } for pid=16771 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1158.050513][ T29] audit: type=1400 audit(2000000501.268:73033): avc: denied { read write } for pid=17230 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1158.079837][ T29] audit: type=1400 audit(2000000501.318:73034): avc: denied { mounton } for pid=19281 comm="syz.4.3823" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 1158.180714][ T29] audit: type=1400 audit(2000000501.418:73035): avc: denied { read write } for pid=16324 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1158.257422][ T29] audit: type=1400 audit(2000000501.478:73036): avc: denied { create } for pid=19276 comm="syz.5.3821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1158.306446][ T29] audit: type=1400 audit(2000000501.488:73037): avc: denied { write } for pid=19276 comm="syz.5.3821" name="ipv6_route" dev="proc" ino=4026533478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 1158.394244][ T29] audit: type=1400 audit(2000000501.638:73038): avc: denied { allowed } for pid=19287 comm="syz.4.3826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 1158.439318][ T29] audit: type=1400 audit(2000000501.668:73039): avc: denied { read write } for pid=17055 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1158.496057][ T29] audit: type=1400 audit(2000000501.668:73040): avc: denied { read write } for pid=19287 comm="syz.4.3826" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1158.968151][T19301] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1160.252059][ T30] INFO: task syz.3.3038:16879 blocked for more than 143 seconds. [ 1160.259861][T14130] block nbd0: Possible stuck request ffff888027840000: control (read@0,1024B). Runtime 360 seconds [ 1160.270759][T14130] block nbd0: Possible stuck request ffff888027840200: control (read@1024,1024B). Runtime 360 seconds [ 1160.281809][T14130] block nbd0: Possible stuck request ffff888027840400: control (read@2048,1024B). Runtime 360 seconds [ 1160.292820][T14130] block nbd0: Possible stuck request ffff888027840600: control (read@3072,1024B). Runtime 360 seconds [ 1160.303867][ T30] Tainted: G L syzkaller #0 [ 1160.311495][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1160.320765][ T30] task:syz.3.3038 state:D stack:28136 pid:16879 tgid:16873 ppid:5814 task_flags:0x400040 flags:0x00080002 [ 1160.334485][ T30] Call Trace: [ 1160.337828][ T30] [ 1160.342306][ T30] __schedule+0xfee/0x6120 [ 1160.346834][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1160.352832][ T30] ? __pfx___schedule+0x10/0x10 [ 1160.357787][ T30] ? find_held_lock+0x2b/0x80 [ 1160.362580][ T30] ? schedule+0x2bf/0x390 [ 1160.366970][ T30] schedule+0xdd/0x390 [ 1160.371188][ T30] schedule_preempt_disabled+0x13/0x30 [ 1160.376733][ T30] __mutex_lock+0xc9a/0x1b90 [ 1160.381440][ T30] ? sync_bdevs+0x153/0x480 [ 1160.386008][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1160.392259][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1160.397969][ T30] ? iput.part.0+0x1a0/0xf50 [ 1160.402676][ T30] ? sync_bdevs+0x153/0x480 [ 1160.407237][ T30] sync_bdevs+0x153/0x480 [ 1160.411665][ T30] ksys_sync+0xb0/0xf0 [ 1160.415830][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1160.420706][ T30] ? do_syscall_64+0x95/0xf80 [ 1160.425526][ T30] __do_sys_sync+0xe/0x20 [ 1160.430296][ T30] do_syscall_64+0x106/0xf80 [ 1160.435336][ T30] ? clear_bhb_loop+0x40/0x90 [ 1160.440115][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.446298][ T30] RIP: 0033:0x7f0d5379c819 [ 1160.454310][ T30] RSP: 002b:00007f0d546bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1160.474306][ T30] RAX: ffffffffffffffda RBX: 00007f0d53a16180 RCX: 00007f0d5379c819 [ 1160.482782][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1160.552300][ T30] RBP: 00007f0d53a16180 R08: 0000000000000000 R09: 0000000000000000 [ 1160.603318][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1160.639597][ T30] R13: 00007f0d53a16218 R14: 00007f0d53a16180 R15: 00007ffe5a4b7478 [ 1160.695647][ T30] [ 1160.769272][ T30] [ 1160.769272][ T30] Showing all locks held in the system: [ 1160.783409][ T30] 1 lock held by khungtaskd/30: [ 1160.788842][ T30] #0: ffffffff8e7e7920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1160.803611][ T30] 2 locks held by getty/5566: [ 1160.808813][ T30] #0: ffff888038f520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1160.819254][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1160.845711][ T30] 1 lock held by udevd/14235: [ 1160.850431][ T30] #0: ffff888027783358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1160.875158][ T30] 1 lock held by syz.3.3038/16879: [ 1160.880286][ T30] #0: ffff888027783358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1160.889899][ T30] 1 lock held by syz.2.3836/19313: [ 1160.895054][ T30] #0: ffff888027783358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1160.905140][ T30] 1 lock held by syz.2.3836/19317: [ 1160.910252][ T30] #0: ffff888027783358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1160.919866][ T30] [ 1160.922241][ T30] ============================================= [ 1160.922241][ T30] [ 1160.935781][ T30] NMI backtrace for cpu 1 [ 1160.935800][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1160.935824][ T30] Tainted: [L]=SOFTLOCKUP [ 1160.935831][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1160.935842][ T30] Call Trace: [ 1160.935849][ T30] [ 1160.935856][ T30] dump_stack_lvl+0x100/0x190 [ 1160.935893][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1160.935914][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1160.935933][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1160.935961][ T30] sys_info+0x141/0x190 [ 1160.935981][ T30] watchdog+0xd25/0x1050 [ 1160.936014][ T30] ? __pfx_watchdog+0x10/0x10 [ 1160.936040][ T30] ? __kthread_parkme+0x18c/0x230 [ 1160.936072][ T30] ? kthread+0x13a/0x450 [ 1160.936088][ T30] ? __pfx_watchdog+0x10/0x10 [ 1160.936111][ T30] kthread+0x370/0x450 [ 1160.936128][ T30] ? __pfx_kthread+0x10/0x10 [ 1160.936148][ T30] ret_from_fork+0x754/0xd80 [ 1160.936168][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1160.936188][ T30] ? __switch_to+0x7b4/0x1120 [ 1160.936210][ T30] ? __pfx_kthread+0x10/0x10 [ 1160.936228][ T30] ret_from_fork_asm+0x1a/0x30 [ 1160.936262][ T30] [ 1160.936270][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1161.062522][ C0] NMI backtrace for cpu 0 [ 1161.062544][ C0] CPU: 0 UID: 0 PID: 15512 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1161.062565][ C0] Tainted: [L]=SOFTLOCKUP [ 1161.062570][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1161.062581][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 1161.062600][ C0] RIP: 0010:rcu_is_watching+0x71/0xc0 [ 1161.062620][ C0] Code: e0 c8 12 8e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 <8b> 03 c1 e8 02 83 e0 01 65 ff 0d 80 08 21 12 74 07 5b 5d c3 cc cc [ 1161.062633][ C0] RSP: 0018:ffffc9000e01ed68 EFLAGS: 00000246 [ 1161.062644][ C0] RAX: 0000000000000003 RBX: ffff8880b8433ce8 RCX: 0000000000000002 [ 1161.062653][ C0] RDX: 0000000000000000 RSI: ffffffff8c1b1e20 RDI: ffffffff8e12c8e0 [ 1161.062662][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1161.062671][ C0] R10: 0000000000000200 R11: 000000000009e299 R12: 0000000000000002 [ 1161.062679][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1161.062688][ C0] FS: 0000000000000000(0000) GS:ffff888124338000(0000) knlGS:0000000000000000 [ 1161.062703][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1161.062712][ C0] CR2: 00007fc0c8de92f8 CR3: 000000000e598000 CR4: 00000000003526f0 [ 1161.062721][ C0] Call Trace: [ 1161.062726][ C0] [ 1161.062733][ C0] lock_acquire+0x317/0x380 [ 1161.062747][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 1161.062764][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 1161.062781][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1161.062800][ C0] unwind_next_frame+0xd1/0x1ea0 [ 1161.062815][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 1161.062831][ C0] ? ieee80211_bss_info_update+0x310/0xab0 [ 1161.062850][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1161.062868][ C0] arch_stack_walk+0x94/0xf0 [ 1161.062886][ C0] ? ieee80211_bss_info_update+0x310/0xab0 [ 1161.062904][ C0] ? cfg80211_inform_single_bss_data+0x557/0x1e20 [ 1161.062924][ C0] stack_trace_save+0x8e/0xc0 [ 1161.062941][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1161.062961][ C0] kasan_save_stack+0x30/0x50 [ 1161.062981][ C0] ? kasan_save_stack+0x30/0x50 [ 1161.062999][ C0] ? kasan_save_track+0x14/0x30 [ 1161.063017][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1161.063035][ C0] ? __kmalloc_noprof+0x301/0x850 [ 1161.063054][ C0] ? cfg80211_inform_single_bss_data+0x557/0x1e20 [ 1161.063074][ C0] ? cfg80211_inform_bss_data+0x237/0x3a00 [ 1161.063093][ C0] ? cfg80211_inform_bss_frame_data+0x247/0x790 [ 1161.063112][ C0] ? ieee80211_bss_info_update+0x310/0xab0 [ 1161.063141][ C0] kasan_save_track+0x14/0x30 [ 1161.063160][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1161.063179][ C0] __kmalloc_noprof+0x301/0x850 [ 1161.063198][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1161.063219][ C0] cfg80211_inform_single_bss_data+0x557/0x1e20 [ 1161.063242][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1161.063269][ C0] ? ieee802_11_parse_elems_full+0x177/0x3720 [ 1161.063288][ C0] ? stack_trace_save+0x8e/0xc0 [ 1161.063307][ C0] ? cfg80211_inform_bss_data+0x237/0x3a00 [ 1161.063326][ C0] cfg80211_inform_bss_data+0x237/0x3a00 [ 1161.063345][ C0] ? kasan_save_stack+0x3f/0x50 [ 1161.063364][ C0] ? kasan_save_track+0x14/0x30 [ 1161.063382][ C0] ? __kmalloc_noprof+0x301/0x850 [ 1161.063400][ C0] ? ieee802_11_parse_elems_full+0x177/0x3720 [ 1161.063417][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xc8d/0x2f80 [ 1161.063433][ C0] ? ieee80211_iface_work+0xbff/0x13d0 [ 1161.063456][ C0] ? cfg80211_wiphy_work+0x446/0x5c0 [ 1161.063468][ C0] ? process_one_work+0xa23/0x19a0 [ 1161.063483][ C0] ? worker_thread+0x5ef/0xe50 [ 1161.063496][ C0] ? kthread+0x370/0x450 [ 1161.063509][ C0] ? ret_from_fork+0x754/0xd80 [ 1161.063522][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1161.063540][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1161.063562][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1161.063581][ C0] ? _ieee802_11_parse_elems_full+0x5cf/0x49e0 [ 1161.063605][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1161.063620][ C0] ? ieee802_11_parse_elems_full+0xed5/0x3720 [ 1161.063640][ C0] cfg80211_inform_bss_frame_data+0x247/0x790 [ 1161.063663][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 1161.063680][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1161.063699][ C0] ? find_held_lock+0x2b/0x80 [ 1161.063716][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x18df/0x2f80 [ 1161.063733][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x18df/0x2f80 [ 1161.063751][ C0] ieee80211_ibss_rx_queued_mgmt+0x1919/0x2f80 [ 1161.063769][ C0] ? lock_acquire+0x1cf/0x380 [ 1161.063785][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1161.063803][ C0] ? rcu_is_watching+0x12/0xc0 [ 1161.063818][ C0] ? trace_contention_end+0x140/0x180 [ 1161.063839][ C0] ? kcov_remote_start+0x374/0x660 [ 1161.063859][ C0] ieee80211_iface_work+0xbff/0x13d0 [ 1161.063878][ C0] cfg80211_wiphy_work+0x446/0x5c0 [ 1161.063893][ C0] process_one_work+0xa23/0x19a0 [ 1161.063918][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1161.063935][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 1161.063949][ C0] worker_thread+0x5ef/0xe50 [ 1161.063967][ C0] ? kthread+0x13a/0x450 [ 1161.063979][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1161.063993][ C0] kthread+0x370/0x450 [ 1161.064005][ C0] ? __pfx_kthread+0x10/0x10 [ 1161.064019][ C0] ret_from_fork+0x754/0xd80 [ 1161.064033][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1161.064052][ C0] ? __switch_to+0x7b4/0x1120 [ 1161.064069][ C0] ? __pfx_kthread+0x10/0x10 [ 1161.064083][ C0] ret_from_fork_asm+0x1a/0x30 [ 1161.064103][ C0] [ 1161.619782][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1161.626639][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1161.637302][ T30] Tainted: [L]=SOFTLOCKUP [ 1161.641607][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1161.651643][ T30] Call Trace: [ 1161.654916][ T30] [ 1161.657862][ T30] dump_stack_lvl+0x100/0x190 [ 1161.662552][ T30] vpanic+0x552/0x970 [ 1161.666519][ T30] ? __pfx_vpanic+0x10/0x10 [ 1161.671004][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1161.677153][ T30] panic+0xd1/0xe0 [ 1161.680853][ T30] ? __pfx_panic+0x10/0x10 [ 1161.685258][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1161.691397][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1161.697533][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1161.703668][ T30] ? watchdog.cold+0x198/0x1ca [ 1161.708416][ T30] ? watchdog+0xd35/0x1050 [ 1161.712817][ T30] watchdog.cold+0x1a9/0x1ca [ 1161.717397][ T30] ? __pfx_watchdog+0x10/0x10 [ 1161.722058][ T30] ? __kthread_parkme+0x18c/0x230 [ 1161.727072][ T30] ? kthread+0x13a/0x450 [ 1161.731293][ T30] ? __pfx_watchdog+0x10/0x10 [ 1161.735960][ T30] kthread+0x370/0x450 [ 1161.740005][ T30] ? __pfx_kthread+0x10/0x10 [ 1161.744574][ T30] ret_from_fork+0x754/0xd80 [ 1161.749146][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1161.754241][ T30] ? __switch_to+0x7b4/0x1120 [ 1161.758900][ T30] ? __pfx_kthread+0x10/0x10 [ 1161.763471][ T30] ret_from_fork_asm+0x1a/0x30 [ 1161.768232][ T30] [ 1161.771512][ T30] Kernel Offset: disabled [ 1161.775811][ T30] Rebooting in 86400 seconds..