last executing test programs: 14.006198902s ago: executing program 3 (id=901): openat$panthor(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x200100000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f000001b600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f000001b640)='./sys\x00', &(0x7f000001b680)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000001b6c0)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2082, 0x0) write(r4, &(0x7f000001b700)='6', 0x1) sched_setaffinity(r2, 0x47, &(0x7f0000019280)=0x7) io_setup(0x8, 0x0) socket(0x2b, 0x6, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8080, 0x7, 0xbb, 0xffffd45d, {{0x8, 0x4, 0x3, 0x0, 0x20, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0xc, 0xd, 0x1, 0x5, [{@local, 0x4}]}]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000192c0)={0x0, 0x0, 0x0, 0x0, 0x4, r7}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000194c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r7, @ANYBLOB="ffff00"/20, @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="00000000000000000000000000000000000005c3f1de7c5d2d890000"], 0x50) read$FUSE(r5, &(0x7f0000019540)={0x2020}, 0x2020) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f000001b580)={0x1, &(0x7f000001b5c0)=[{0x6}]}) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0502103, 0xfffffffffffffffe) 12.584027923s ago: executing program 3 (id=904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000019540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newvlan={0x18, 0x76, 0x1, 0x1, 0x0, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000, 0x0, 0x40}, 0x40000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019280)={0x3, 0xd, &(0x7f0000019680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000019700)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019740)={r2, 0x0, 0xe, 0x0, &(0x7f00000197c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getpgrp(0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810240000007050202", @ANYRES64], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x6) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000200)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) userfaultfd(0x80001) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000019800)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000019b00)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000019b40)={0x2, 0x4e23, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000019b80)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000019bc0)=0x8) r7 = syz_open_dev$sndmidi(&(0x7f0000019c00), 0x2, 0x141102) writev(r7, &(0x7f0000019c40)=[{&(0x7f0000019c80)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000019cc0)=0x80, 0xe, 0x0) 9.991377729s ago: executing program 1 (id=907): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000b80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000cc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d00)=0x6) r3 = syz_open_dev$evdev(0x0, 0x0, 0x101100) fcntl$setstatus(r3, 0x4, 0x42400) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) lstat(&(0x7f00000160c0)='./tracing/file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000162c0)={0x0, &(0x7f00000132c0)={0x18, 0xfffffffffffffff5, 0x3, {0xfffffffffffffaee}}, &(0x7f0000013300)={0x18, 0x0, 0xfffffffffffffffb, {0x7fffffff}}, &(0x7f0000013340)={0x18, 0x0, 0x401, {0xffffffd3}}, &(0x7f0000013380)={0x18, 0x0, 0x9d, {0x4d}}, &(0x7f00000133c0)={0x28, 0xfffffffffffffff5, 0xbdb, {{0x6, 0xd32, 0x0, r0}}}, &(0x7f0000013400)={0x60, 0x0, 0x200, {{0xffffffff, 0x4, 0x7, 0x7, 0x9, 0x4, 0x4, 0x5}}}, &(0x7f0000013480)={0x18, 0x0, 0x2, {0x1}}, &(0x7f00000134c0)={0x13, 0x0, 0xc6d, {'}(\x00'}}, &(0x7f0000013500)={0x20, 0xffffffffffffffda, 0x4705, {0x0, 0x4}}, &(0x7f0000013680)={0x78, 0xffffffffffffffda, 0x8, {0x9, 0xe, 0x0, {0x2, 0x100000001, 0x9, 0x8, 0x9, 0xd, 0x5, 0x7, 0x3, 0x6000, 0x1, 0x0, 0x0, 0x6, 0x1}}}, &(0x7f0000013800)={0x90, 0xfffffffffffffffe, 0x9, {0x5, 0x1, 0xfffffffffffffff7, 0xffffffffffffe89a, 0xfffffff5, 0x6, {0x1, 0x8000000000000000, 0x0, 0xffff, 0x6, 0x3, 0x9, 0xa, 0x7, 0x6000, 0xf, 0x0, 0x0, 0x8000, 0x1}}}, &(0x7f0000000380)=ANY=[@ANYBLOB="d0000000f5ffffff0400000000e39aaeff000000000000000300000000000000030000007f00000023212000000000000400000000000000040000000000000002000000beffffff27250000000000000400000000000000b10000b62cd6abce820f147d0000000000010000000000000023000000000000000300000000000000060000000000000001000000000000000000000000000000000000000000000004000000000000000000000000000200000000000000000002000000000000000a000000400000005d5b7d235e4e2a3a5d28000000000000"], &(0x7f0000015c00)=ANY=[@ANYBLOB="48010000daffffff01f0ffffffffffff010000000000000002000000000000000900000000000000ff0f0000000000000100000000000000030000000000000010000000000000000600000000000000760d0000000000001400000000000000020000000000000000000000ff0f0000040000000040000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000fff90000000000000500000000000000010000000000000005000000000000007b243c5d5d00000005000000000000000100000000000000ffff000000000000ff07000000000000ffffff7f4000000001000000000000000004000000000000020000000000000000000000000000000200000000000000ff0100000000000008000000020000000100000000a0000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0700000000000000000000040000000000000008000000006700000000000008000000"], &(0x7f0000015e80)={0xa0, 0x0, 0x8, {{0x3, 0x3, 0x0, 0x8000, 0xe3, 0x8, {0x5, 0x3, 0x8, 0x5, 0x1, 0x8, 0x1, 0x8, 0xffff5e30, 0xa000, 0x2, 0x0, 0x0, 0x2, 0x3}}, {0x0, 0x3}}}, &(0x7f0000015f40)={0x20, 0xb, 0x3, {0x1, 0x4, 0x7}}, &(0x7f0000016180)={0x130, 0x0, 0x1, {0x5, 0x4f5, 0x0, '\x00', {0x4, 0x1, 0xffff, 0x7fffffff, 0x0, 0x0, 0x8000, '\x00', 0x3, 0x100000000, 0x6, 0x0, {0x7, 0x5738}, {0x5, 0x239}, {0x458d3452, 0xffffff80}, {0x3000000, 0x800}, 0x8d, 0x1, 0x4b}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000d80)='./tracing\x00', &(0x7f0000000dc0)='tracefs\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='- 0 -', 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000001080)={{0x77359400}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) getdents(0xffffffffffffffff, &(0x7f0000011140)=""/219, 0xdb) clock_settime(0x0, &(0x7f00000010c0)) 8.56783874s ago: executing program 1 (id=910): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc1}, &(0x7f00000003c0)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x1a83fea49a0a00b0, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f00000004c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x35, 0x30, 0x63]}, &(0x7f00000005c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000180)={{r3, r4+10000000}}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000780), 0x2, 0x2) readv(r5, &(0x7f00000007c0)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1) readv(r5, &(0x7f0000002740)=[{&(0x7f0000002780)=""/183, 0xb7}], 0x1) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f00000006c0)={0x0, "00112233445566778899aebbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeedf", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000740), &(0x7f0000000d00)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000d40)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000011c0), &(0x7f0000001200)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000001240)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000012c0), &(0x7f0000001300)={'fscrypt:', @desc3}, &(0x7f0000001340)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000013c0), &(0x7f0000001400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x61]}, &(0x7f0000001440)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001540), &(0x7f0000001580)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x62]}, &(0x7f00000015c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001640), &(0x7f0000001680)={'fscrypt:', @auto=[0x65, 0x61, 0x31, 0x30, 0x35, 0x63, 0x62, 0x38, 0x62, 0x39, 0x38, 0x62, 0x37, 0xf, 0x62, 0x39]}, &(0x7f00000016c0)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='\xfep\xb1\xabK-\x03\x00\xe5\x81\xb8}\xe6^\xab:B3\x00\x00\x00\x1e\x9a&rs\xcf\xd9\xde(\xdet|\xd7\x14\xe7\xe7%6\xc5\xf9\xe5\x1cx\xdf\x85\xbe7\x9e*U\x8d \xa8\'\xff\x0fl7-8Jn\x0e\x86:v\xcc9K\xc18\xd7\xc9\xc3F\xef\xd5F\xd6~k:\xf8\xc6E$\x0f\xb3Q\rI\xeb(\r$\x1aP\xaf\x8a\xdcx%j_\xe5\xa1\xb1\xf6Q\xb8\x88\x93c\a\\\xd3\x03\xfc\xba[b~f\xf3\x88', r0) 8.028616697s ago: executing program 1 (id=912): openat$panthor(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x200100000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f000001b600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f000001b640)='./sys\x00', &(0x7f000001b680)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000001b6c0)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2082, 0x0) write(r4, &(0x7f000001b700)='6', 0x1) sched_setaffinity(r2, 0x47, &(0x7f0000019280)=0x7) io_setup(0x8, 0x0) socket(0x2b, 0x6, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8080, 0x7, 0xbb, 0xffffd45d, {{0x8, 0x4, 0x3, 0x0, 0x20, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0xc, 0xd, 0x1, 0x5, [{@local, 0x4}]}]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000192c0)={0x0, 0x0, 0x0, 0x0, 0x4, r7}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000194c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r7, @ANYBLOB="ffff00"/20, @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="00000000000000000000000000000000000005c3f1de7c5d2d890000"], 0x50) read$FUSE(r5, &(0x7f0000019540)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f000001b580)={0x1, &(0x7f000001b5c0)=[{0x6}]}) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x7d3, &(0x7f0000019300)={0x0, 0xab32, 0x80, 0xfffffffe, 0x181, 0x0, r5}) 7.037653911s ago: executing program 1 (id=914): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000480)="3b0da4264a5f6d451ff1db47fa1748af181ad547bd34134c94dc9fb9918326d623b3c949cb048ec1e5cd8ac765f3751e9be711ad1339ccc474fb990300205b8f", 0x40, 0x0, 0x0, &(0x7f0000000300)="2f901f18821b76afa1993cb8b540a1954f6d35e48df6d921470a3e18720e58351b72e54c2a36234cfd740c1bc1fe5d8c148567f8d71e8f08589a8ddd11383b536aef96bd84cc73f4cb72d74b71cc6948def8811e79c41a8390afb165aef085fb7b28ee78605391159e7847d398a778289b2cf1858e57efbecf64684b58a6c84eae8d1b3700ef0f4792fe8fc6b6ada68c96f605912b7145416b2655726d046ac29833440741cb0582923e96fba9c4bfa25c886e9705c21a0eac03c9ba0fc91299b5165126452d9d7405e0ee004e64737329e22133de090b5cefc96e8839e21c9f61c97f1b") syz_open_dev$video4linux(0x0, 0x5, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000240)={0x17, 0x1, 0x1, "14a5593b595ccb9e289f1548f12ec9745f90084a013424cf6dc99d2466980300"}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x13, 0xffffffffffffffff, 0xf9cd8000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000000000000700000d05000100070000006b87fbb3499fe365c45e52060b811b110400b915791bff8ae664ec29"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) setuid(0xee01) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_LMAX={0x8}]}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x7, 0x0, &(0x7f00000001c0)) writev(0xffffffffffffffff, &(0x7f0000000680), 0x0) io_uring_setup(0x18e6, &(0x7f0000000040)={0x0, 0x63d1, 0xc000, 0x4, 0x20002f7}) 5.546246811s ago: executing program 2 (id=916): openat$panthor(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x200100000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f000001b600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f000001b640)='./sys\x00', &(0x7f000001b680)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000001b6c0)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2082, 0x0) write(r4, &(0x7f000001b700)='6', 0x1) sched_setaffinity(r2, 0x47, &(0x7f0000019280)=0x7) io_setup(0x8, 0x0) socket(0x2b, 0x6, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8080, 0x7, 0xbb, 0xffffd45d, {{0x8, 0x4, 0x3, 0x0, 0x20, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0xc, 0xd, 0x1, 0x5, [{@local, 0x4}]}]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000192c0)={0x0, 0x0, 0x0, 0x0, 0x4, r7}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000194c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r7, @ANYBLOB="ffff00"/20, @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="00000000000000000000000000000000000005c3f1de7c5d2d890000"], 0x50) read$FUSE(r5, &(0x7f0000019540)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f000001b580)={0x1, &(0x7f000001b5c0)=[{0x6}]}) io_uring_setup(0x7d3, &(0x7f0000019300)={0x0, 0xab32, 0x80, 0xfffffffe, 0x181, 0x0, r5}) 4.325310094s ago: executing program 0 (id=917): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x35e6}}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0xfffffff6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x10002}], 0x3, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x0, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x40000000, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x0, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1324f499ce9a99e8}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0xfffff156}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000106dbb36ae568d2c"], 0x1c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000e00)='gfs2meta\x00', 0x20c400, 0x0) mq_open(0x0, 0x42, 0x54, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000e40)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./cgroup.cpu/test\x00', 0x777) r3 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000f00)='100', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000f80)='1', 0x1) ioctl$XFS_IOC_BULKSTAT(r4, 0x8040587f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000fc0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) write(r5, &(0x7f0000001000)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x5, 0xbc6c, 0x4936, 0xc2, 0x1, r4, 0x6}, 0x50) connect$netlink(r4, &(0x7f00000010c0)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100), 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000011c0)={0x13, 0x10, 0xfa00, {&(0x7f0000001200), r7, 0x2}}, 0x18) openat$nvram(0xffffffffffffff9c, 0x0, 0x105b00, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 4.103715361s ago: executing program 3 (id=918): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x2000, 0xe7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r1, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="00020c0000000c0002", @ANYRESDEC=r1], 0x0, 0x0, 0x0}, 0x0) 3.347345433s ago: executing program 4 (id=919): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x6, 0x80000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000640)={0x0, r1}) r2 = eventfd2(0xffffffff, 0x800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x0, r2}) 3.120142121s ago: executing program 4 (id=920): mount$tmpfs(0x0, 0x0, 0x0, 0x800004, 0x0) chdir(0x0) socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x4, &(0x7f00000001c0)=[{0x4d, 0x1, 0x83, 0x6}, {0x800, 0x3, 0x80, 0x2}, {0x8, 0x4, 0xff, 0x1b89c685}, {0xa, 0x9, 0x5a, 0x8}]}) statx(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x4000, 0x0, &(0x7f00000003c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='100', 0x3) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) unshare(0x40000000) 2.205081891s ago: executing program 2 (id=921): r0 = syz_open_dev$evdev(&(0x7f000001a5c0), 0x2, 0x400) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f000001a600)=""/155) 2.067685448s ago: executing program 4 (id=922): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000006c0)={0x1, 0x0, [{0x1, 0x2, 0x5, 0x99b, 0x0, 0x28, 0x2}]}) 1.675812637s ago: executing program 4 (id=923): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0xebc0, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x1, 0x2, 0xd4a, 0xffefe879, 0x1, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x2ff, 0x4, 0xd, 0xff, 0x8, 0x7, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0x5, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0xf, 0x7, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0x1, 0x3d01, 0xad10, 0x5, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x6, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x34, 0x9, 0x101, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x63, 0x0, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x0, 0x2, 0x8, 0x6, 0xe51, 0xd2e, 0x401, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x6, 0x2006, 0xfff, 0x4], [0x1, 0x9, 0x6, 0x8, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x800, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x6, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x2, 0x3, 0x101, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x1, 0x2, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x456, 0x800, 0x3, 0x0, 0x3, 0x6000, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x7, 0x1, 0x1, 0x3, 0x296, 0x6, 0x1, 0xf, 0x4, 0x1, 0x7, 0x4, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xe) 1.622367253s ago: executing program 0 (id=924): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000a00)={0x2c, r0, 0x10ada85e65c25349, 0x1, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040040) 1.529198803s ago: executing program 1 (id=925): ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000900)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./dbg\x00', &(0x7f0000000480)='debugfs\x00', 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$poke(0x4, r0, &(0x7f00000001c0), 0xfffffffffffffffe) unshare(0x20000000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(r1) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000}) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x6, 0x9, 0xa, 0x3, 0x7, 0x57d7}) syz_clone3(&(0x7f0000000400)={0x1000000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r1], 0x1}, 0x58) wait4(0x0, 0x0, 0x40000000, 0x0) 1.493853127s ago: executing program 4 (id=926): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = fcntl$dupfd(r0, 0x406, r0) recvfrom$inet(r1, 0x0, 0x0, 0x120, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x40c0) 1.432128417s ago: executing program 0 (id=927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x28080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x29) 1.394006784s ago: executing program 0 (id=928): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 1.299107412s ago: executing program 3 (id=929): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000540)={0x19, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300030c000000000700000000000002000900400000000000000000000017030006000000000002000000e2000002000000000000000002000100000000000000050200000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x10) 1.190412311s ago: executing program 0 (id=930): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0x2, 0xd, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x3, 0x0, 0x0, 0x6e6bba, 0x4, {0x6, 0x3c, 0x4, 0xd, 0x0, 0x7, 0x0, @in=@empty, @in=@multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}]}, 0x90}}, 0x0) 1.111080612s ago: executing program 2 (id=931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) getrlimit(0x2, &(0x7f0000000040)) 1.05095387s ago: executing program 0 (id=932): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/kernel/nmi_watchdog\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) write(r0, &(0x7f0000000140)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/watchdog\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0\n', 0x2) write(r1, &(0x7f0000000180)='1\n', 0x2) write(r1, &(0x7f0000000140)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/kernel/watchdog_thresh\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='20\n', 0x3) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000340)=@filename='none\x00', &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0xc) write(r3, &(0x7f0000000140)='0\n', 0x2) write(r3, &(0x7f0000000180)='1\n', 0x2) close(r3) 422.362542ms ago: executing program 2 (id=933): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000400)={[{0xc9e, 0x8, 0x3, 0x87, 0x5, 0xff, 0x9, 0x7, 0x5, 0x1, 0xfe, 0x2, 0xfffffffffffffffd}, {0x3, 0x1, 0x6, 0x0, 0xb8, 0x9, 0x7, 0x5, 0x80, 0x5, 0x1, 0x6, 0x1}, {0x6, 0x5, 0xcf, 0x2, 0x7b, 0x6, 0x30, 0xdb, 0x6, 0x5, 0x5, 0x7, 0x400000009}], 0xae8}) 330.138358ms ago: executing program 3 (id=934): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x80080) 324.761072ms ago: executing program 4 (id=935): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ffffff40e80489680001010203010902200001010080fa0904000002ffffff0007058102000200070502"], 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 272.396554ms ago: executing program 1 (id=936): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, 0x0) 244.160256ms ago: executing program 2 (id=937): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x1c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x42}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 100.300608ms ago: executing program 3 (id=938): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sigaltstack(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000240)=r0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000440)={0xa, 0x4e22, 0x56202325, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000004c0)=0x20a, 0x4) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="ea012351ddc58332fdb2081dbbbe1e347aaa8ec7d8c9738c1a2ab4412ce01f0daf2fcd367a783443fa96baaa893d0666dd21482a2485ef23bfb8a14c917b4ffb8f694566151da0ae7b401ece8598e6cd7b97a58991c0725cee218df6ea0c73adfc6de77514dc15c7c834daa97759b1e88ef28881bbac8495721a6745117b43feb4932a959acc49cf1b5175a73d2c94bfbd01e7f72c0b28", 0x97}], 0x1}}], 0x1, 0x4000001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x3ff}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x3506, 0x0, 0x3, 0xd, 0x80000, 0x7, 0x3}}, 0xe4) close(0xffffffffffffffff) 0s ago: executing program 2 (id=939): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000af0000000300000011"], 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x20) kernel console output (not intermixed with test programs): 11] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=7111 comm=syz.2.342 [ 179.696305][ T5710] libceph: connect (1)[c::]:6789 error -101 [ 179.703728][ T5710] libceph: mon0 (1)[c::]:6789 connect error [ 179.738655][ T7100] FAULT_INJECTION: forcing a failure. [ 179.738655][ T7100] name failslab, interval 1, probability 0, space 0, times 0 [ 179.738688][ T7100] CPU: 0 UID: 0 PID: 7100 Comm: syz.4.339 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.738713][ T7100] Tainted: [L]=SOFTLOCKUP [ 179.738720][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 179.738730][ T7100] Call Trace: [ 179.738739][ T7100] [ 179.738747][ T7100] dump_stack_lvl+0x100/0x190 [ 179.738779][ T7100] should_fail_ex.cold+0x5/0xa [ 179.738805][ T7100] should_failslab+0xc2/0x120 [ 179.738832][ T7100] kmem_cache_alloc_noprof+0x92/0x6a0 [ 179.738856][ T7100] ? audit_log_start+0x29d/0x930 [ 179.738879][ T7100] audit_log_start+0x29d/0x930 [ 179.738901][ T7100] ? __pfx_audit_log_start+0x10/0x10 [ 179.738924][ T7100] ? rcu_read_lock_any_held+0x6a/0x90 [ 179.738956][ T7100] ? find_held_lock+0x2b/0x80 [ 179.738983][ T7100] ? ksys_write+0x190/0x250 [ 179.739005][ T7100] ? ksys_write+0x190/0x250 [ 179.739033][ T7100] audit_seccomp+0x61/0x1f0 [ 179.739064][ T7100] __seccomp_filter+0x88c/0x1130 [ 179.739096][ T7100] ? __pfx___seccomp_filter+0x10/0x10 [ 179.739129][ T7100] ? ksys_write+0x1ac/0x250 [ 179.739150][ T7100] ? __pfx_ksys_write+0x10/0x10 [ 179.739175][ T7100] __seccomp_permit_syscall+0x224/0x2e0 [ 179.739196][ T7100] do_syscall_64+0x591/0x790 [ 179.739225][ T7100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.739244][ T7100] RIP: 0033:0x7fbe50b9e1d9 [ 179.739260][ T7100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.739277][ T7100] RSP: 002b:00007fbe51b43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 179.739294][ T7100] RAX: ffffffffffffffda RBX: 00007fbe50e25fa0 RCX: 00007fbe50b9e1d9 [ 179.739306][ T7100] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 179.739317][ T7100] RBP: 00007fbe51b43090 R08: 0000000000000000 R09: 0000000000000000 [ 179.739327][ T7100] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 179.739338][ T7100] R13: 00007fbe50e26038 R14: 00007fbe50e25fa0 R15: 00007fff7bbd64b8 [ 179.739363][ T7100] [ 179.838627][ T7111] ceph: No mds server is up or the cluster is laggy [ 179.913977][ T7114] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.961949][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 179.981923][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.981976][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.041202][ T10] usb 2-1: config 0 descriptor?? [ 180.114235][ T5703] usb 5-1: USB disconnect, device number 7 [ 180.176700][ T7077] udevd[7077]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.264001][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 180.279115][ T7122] netlink: 256 bytes leftover after parsing attributes in process `syz.3.344'. [ 180.425585][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 180.427737][ T25] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 180.430517][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.440248][ T25] usb 1-1: config 0 descriptor?? [ 180.448983][ T25] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 180.969229][ T7130] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 180.969249][ T7130] netlink: 224 bytes leftover after parsing attributes in process `syz.3.346'. [ 180.972051][ T7073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.011751][ T7073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.036318][ T7130] comedi comedi3: multiq3: I/O base address not correctly aligned [ 181.039037][ T7130] 9pnet_virtio: no channels available for device syz [ 181.041878][ T7130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.346'. [ 181.188409][ T25] usb 1-1: Detected FT232A [ 181.191232][ T7137] SELinux: policydb version 0 does not match my version range 15-35 [ 181.191296][ T7137] SELinux: failed to load policy [ 181.191479][ T25] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 181.222883][ T25] usb 1-1: USB disconnect, device number 6 [ 181.239352][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 181.239743][ T25] ftdi_sio 1-1:0.0: device disconnected [ 181.378390][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.351'. [ 181.381592][ T7145] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 181.381802][ T7145] Error validating options; rc = [-22] [ 181.382788][ T7146] FAULT_INJECTION: forcing a failure. [ 181.382788][ T7146] name failslab, interval 1, probability 0, space 0, times 0 [ 181.382816][ T7146] CPU: 0 UID: 0 PID: 7146 Comm: syz.3.349 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.382842][ T7146] Tainted: [L]=SOFTLOCKUP [ 181.382848][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 181.382858][ T7146] Call Trace: [ 181.382864][ T7146] [ 181.382872][ T7146] dump_stack_lvl+0x100/0x190 [ 181.382907][ T7146] should_fail_ex.cold+0x5/0xa [ 181.382935][ T7146] should_failslab+0xc2/0x120 [ 181.382967][ T7146] __kmalloc_flags_noprof+0x122/0x8e0 [ 181.382990][ T7146] ? alloc_slab_obj_exts+0x6a/0x170 [ 181.383012][ T7146] alloc_slab_obj_exts+0x6a/0x170 [ 181.383032][ T7146] __memcg_slab_post_alloc_hook+0x3fc/0x10c0 [ 181.383060][ T7146] ? kasan_save_track+0x14/0x30 [ 181.383086][ T7146] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 181.383110][ T7146] ? prepare_creds+0x2c/0x950 [ 181.383133][ T7146] prepare_creds+0x2c/0x950 [ 181.383152][ T7146] __sys_setresuid+0x458/0x1280 [ 181.383176][ T7146] do_syscall_64+0x123/0x790 [ 181.383204][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.383223][ T7146] RIP: 0033:0x7f965719e1d9 [ 181.383238][ T7146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.383254][ T7146] RSP: 002b:00007f965809a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 181.383271][ T7146] RAX: ffffffffffffffda RBX: 00007f9657425fa0 RCX: 00007f965719e1d9 [ 181.383283][ T7146] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 181.383294][ T7146] RBP: 00007f9657235888 R08: 0000000000000000 R09: 0000000000000000 [ 181.383304][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.383314][ T7146] R13: 00007f9657426038 R14: 00007f9657425fa0 R15: 00007fffdd599e08 [ 181.383338][ T7146] [ 181.822189][ T5272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 182.114671][ T7170] CIFS mount error: No usable UNC path provided in device string! [ 182.114671][ T7170] [ 182.114723][ T7170] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 183.319526][ T7174] FAULT_INJECTION: forcing a failure. [ 183.319526][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 183.319562][ T7174] CPU: 1 UID: 0 PID: 7174 Comm: syz.0.355 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.319596][ T7174] Tainted: [L]=SOFTLOCKUP [ 183.319604][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 183.319615][ T7174] Call Trace: [ 183.319622][ T7174] [ 183.319630][ T7174] dump_stack_lvl+0x100/0x190 [ 183.319664][ T7174] should_fail_ex.cold+0x5/0xa [ 183.319687][ T7174] ? lock_acquire+0x1d1/0x380 [ 183.319712][ T7174] should_failslab+0xc2/0x120 [ 183.319740][ T7174] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 183.319767][ T7174] ? zswap_store+0xc6d/0x2e70 [ 183.319793][ T7174] zswap_store+0xc6d/0x2e70 [ 183.319824][ T7174] ? __pfx_zswap_store+0x10/0x10 [ 183.319845][ T7174] ? lock_acquire+0x1d1/0x380 [ 183.319866][ T7174] ? do_raw_spin_lock+0x128/0x260 [ 183.319891][ T7174] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 183.319916][ T7174] ? find_held_lock+0x2b/0x80 [ 183.319942][ T7174] ? swap_writeout+0xdd8/0x1b20 [ 183.319962][ T7174] ? swap_writeout+0xdd8/0x1b20 [ 183.319986][ T7174] swap_writeout+0xde0/0x1b20 [ 183.320014][ T7174] shrink_folio_list+0x4ffb/0x5e40 [ 183.320053][ T7174] ? __pfx_shrink_folio_list+0x10/0x10 [ 183.320117][ T7174] ? __lock_acquire+0x5c0/0x1f40 [ 183.320138][ T7174] ? __css_rstat_updated+0x1ce/0x590 [ 183.320164][ T7174] ? __pfx___css_rstat_updated+0x10/0x10 [ 183.320192][ T7174] reclaim_folio_list+0xe9/0x5e0 [ 183.320223][ T7174] ? __pfx_reclaim_folio_list+0x10/0x10 [ 183.320249][ T7174] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 183.320284][ T7174] ? lru_gen_update_size+0x431/0xe20 [ 183.320320][ T7174] ? lru_gen_del_folio+0x382/0x5f0 [ 183.320347][ T7174] reclaim_pages+0x428/0x5e0 [ 183.320378][ T7174] ? __pfx_reclaim_pages+0x10/0x10 [ 183.320403][ T7174] ? find_held_lock+0x2b/0x80 [ 183.320430][ T7174] ? madvise_cold_or_pageout_pte_range+0xb8e/0x27b0 [ 183.320465][ T7174] madvise_cold_or_pageout_pte_range+0x15b5/0x27b0 [ 183.320505][ T7174] ? rcu_read_unlock+0x17/0x60 [ 183.320524][ T7174] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 183.320553][ T7174] ? __mod_zone_page_state+0xdb/0x190 [ 183.320594][ T7174] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 183.320625][ T7174] walk_pgd_range+0xbef/0x1e00 [ 183.320654][ T7174] ? find_held_lock+0x2b/0x80 [ 183.320690][ T7174] ? __pfx_walk_pgd_range+0x10/0x10 [ 183.320714][ T7174] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 183.320747][ T7174] __walk_page_range+0x171/0x850 [ 183.320782][ T7174] walk_page_range_vma_unsafe+0x209/0x8f0 [ 183.320809][ T7174] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 183.320836][ T7174] ? find_held_lock+0x2b/0x80 [ 183.320862][ T7174] ? mlock_drain_local+0x254/0x4e0 [ 183.320882][ T7174] ? mlock_drain_local+0x254/0x4e0 [ 183.320906][ T7174] walk_page_range_vma+0x63/0x90 [ 183.320932][ T7174] madvise_pageout+0x29e/0x5b0 [ 183.320960][ T7174] ? __pfx_madvise_pageout+0x10/0x10 [ 183.321007][ T7174] madvise_vma_behavior+0x48b/0x2350 [ 183.321038][ T7174] ? mas_prev+0xa4/0x100 [ 183.321058][ T7174] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 183.321088][ T7174] ? mas_walk+0x260/0x310 [ 183.321112][ T7174] ? find_vma_prev+0xd8/0x150 [ 183.321138][ T7174] ? __pfx_find_vma_prev+0x10/0x10 [ 183.321169][ T7174] ? __pfx__kstrtoull+0x10/0x10 [ 183.321191][ T7174] ? lock_acquire+0x1d1/0x380 [ 183.321215][ T7174] madvise_walk_vmas+0x30e/0xc50 [ 183.321237][ T7174] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 183.321264][ T7174] ? lock_acquire+0x1d1/0x380 [ 183.321290][ T7174] madvise_do_behavior+0x1ea/0x510 [ 183.321311][ T7174] ? __pfx_madvise_do_behavior+0x10/0x10 [ 183.321330][ T7174] ? down_read+0x13b/0x4c0 [ 183.321360][ T7174] do_madvise+0x238/0x290 [ 183.321376][ T7174] ? __pfx_do_madvise+0x10/0x10 [ 183.321401][ T7174] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 183.321443][ T7174] ? ksys_write+0x1ac/0x250 [ 183.321466][ T7174] ? __pfx_ksys_write+0x10/0x10 [ 183.321493][ T7174] __x64_sys_madvise+0xa9/0x110 [ 183.321510][ T7174] ? lockdep_hardirqs_on+0x7d/0x110 [ 183.321534][ T7174] do_syscall_64+0x123/0x790 [ 183.321563][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.321588][ T7174] RIP: 0033:0x7fd77f79e1d9 [ 183.321604][ T7174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.321621][ T7174] RSP: 002b:00007fd78067a028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 183.321640][ T7174] RAX: ffffffffffffffda RBX: 00007fd77fa25fa0 RCX: 00007fd77f79e1d9 [ 183.321652][ T7174] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 183.321663][ T7174] RBP: 00007fd78067a090 R08: 0000000000000000 R09: 0000000000000000 [ 183.321674][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.321684][ T7174] R13: 00007fd77fa26038 R14: 00007fd77fa25fa0 R15: 00007ffe2d0a5f18 [ 183.321711][ T7174] [ 183.965590][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 183.965686][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 183.968649][ T7172] F2FS-fs: Conflicting test_dummy_encryption options [ 184.144374][ T10] usb 2-1: USB disconnect, device number 9 [ 184.163388][ T31] kauditd_printk_skb: 52 callbacks suppressed [ 184.163406][ T31] audit: type=1400 audit(1791882337.718:898): avc: denied { write } for pid=7176 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.766109][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 185.832494][ T7199] SELinux: policydb version 0 does not match my version range 15-35 [ 185.832538][ T7199] SELinux: failed to load policy [ 185.953542][ T5612] Bluetooth: Frame is too long (len 12, expected len 4) [ 185.956666][ T5612] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 187.323485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 188.143316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 188.746313][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.746363][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.062000][ T7228] CIFS mount error: No usable UNC path provided in device string! [ 189.062000][ T7228] [ 189.062019][ T7228] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 189.855645][ T7230] FAULT_INJECTION: forcing a failure. [ 189.855645][ T7230] name failslab, interval 1, probability 0, space 0, times 0 [ 189.855676][ T7230] CPU: 0 UID: 0 PID: 7230 Comm: syz.1.371 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.855701][ T7230] Tainted: [L]=SOFTLOCKUP [ 189.855708][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 189.855718][ T7230] Call Trace: [ 189.855724][ T7230] [ 189.855732][ T7230] dump_stack_lvl+0x100/0x190 [ 189.855764][ T7230] should_fail_ex.cold+0x5/0xa [ 189.855790][ T7230] should_failslab+0xc2/0x120 [ 189.855817][ T7230] kmem_cache_alloc_noprof+0x92/0x6a0 [ 189.855841][ T7230] ? do_getname+0x35/0x390 [ 189.855864][ T7230] do_getname+0x35/0x390 [ 189.855884][ T7230] do_fchownat+0xc6/0x1f0 [ 189.855911][ T7230] ? __pfx_do_fchownat+0x10/0x10 [ 189.855936][ T7230] ? ksys_write+0x1ac/0x250 [ 189.855957][ T7230] ? __pfx_ksys_write+0x10/0x10 [ 189.855984][ T7230] __x64_sys_chown+0x7b/0xc0 [ 189.856009][ T7230] ? lockdep_hardirqs_on+0x7d/0x110 [ 189.856034][ T7230] do_syscall_64+0x123/0x790 [ 189.856062][ T7230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.856080][ T7230] RIP: 0033:0x7f05efd9e1d9 [ 189.856094][ T7230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.856111][ T7230] RSP: 002b:00007f05f0caf028 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 189.856129][ T7230] RAX: ffffffffffffffda RBX: 00007f05f0025fa0 RCX: 00007f05efd9e1d9 [ 189.856140][ T7230] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000200000004980 [ 189.856152][ T7230] RBP: 00007f05f0caf090 R08: 0000000000000000 R09: 0000000000000000 [ 189.856163][ T7230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.856173][ T7230] R13: 00007f05f0026038 R14: 00007f05f0025fa0 R15: 00007ffc285b0668 [ 189.856198][ T7230] [ 190.790765][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 190.790884][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 190.793280][ T5624] Bluetooth: hci0: command 0x0406 tx timeout [ 190.794093][ T5626] Bluetooth: hci3: command 0x0405 tx timeout [ 191.121250][ T7225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9488 sclass=netlink_route_socket pid=7225 comm=syz.3.369 [ 192.052526][ T7248] can0: slcan on ptm0. [ 192.123550][ T7256] can0 (unregistered): slcan off ptm0. [ 192.901565][ T7259] xt_connbytes: Forcing CT accounting to be enabled [ 192.954309][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 194.240666][ T7268] CIFS mount error: No usable UNC path provided in device string! [ 194.240666][ T7268] [ 194.240688][ T7268] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 195.243045][ T7285] CIFS mount error: No usable UNC path provided in device string! [ 195.243045][ T7285] [ 195.243066][ T7285] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 196.016997][ T7290] batadv_slave_0: entered promiscuous mode [ 196.341779][ T31] audit: type=1400 audit(1791882349.898:899): avc: denied { write } for pid=7260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.682782][ T31] audit: type=1400 audit(1791882350.238:900): avc: denied { write } for pid=5608 comm="syz-executor" name="90" dev="tmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 196.981913][ T31] audit: type=1400 audit(1791882350.538:901): avc: denied { write } for pid=7295 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.085026][ T31] audit: type=1400 audit(1791882350.648:902): avc: denied { write } for pid=5608 comm="syz-executor" name="90" dev="tmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 197.085434][ T31] audit: type=1400 audit(1791882350.648:903): avc: denied { write } for pid=5608 comm="syz-executor" name="90" dev="tmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 197.085827][ T31] audit: type=1400 audit(1791882350.648:904): avc: denied { write } for pid=5608 comm="syz-executor" name="90" dev="tmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 197.086240][ T31] audit: type=1400 audit(1791882350.648:905): avc: denied { write } for pid=5608 comm="syz-executor" name="90" dev="tmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 197.263587][ T7299] FAULT_INJECTION: forcing a failure. [ 197.263587][ T7299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.263618][ T7299] CPU: 1 UID: 0 PID: 7299 Comm: syz.4.368 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.263643][ T7299] Tainted: [L]=SOFTLOCKUP [ 197.263649][ T7299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 197.263659][ T7299] Call Trace: [ 197.263665][ T7299] [ 197.263672][ T7299] dump_stack_lvl+0x100/0x190 [ 197.263702][ T7299] should_fail_ex.cold+0x5/0xa [ 197.263730][ T7299] _copy_to_user+0x32/0xd0 [ 197.263757][ T7299] simple_read_from_buffer+0xcb/0x170 [ 197.263784][ T7299] proc_fail_nth_read+0x1af/0x230 [ 197.263811][ T7299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.263839][ T7299] ? rw_verify_area+0xce/0x6d0 [ 197.263857][ T7299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.263883][ T7299] vfs_read+0x1e4/0xb40 [ 197.263906][ T7299] ? lock_acquire+0x1d1/0x380 [ 197.263927][ T7299] ? __fget_files+0x34/0x3d0 [ 197.263952][ T7299] ? __pfx_vfs_read+0x10/0x10 [ 197.263971][ T7299] ? find_held_lock+0x2b/0x80 [ 197.263998][ T7299] ? __fget_files+0x215/0x3d0 [ 197.264028][ T7299] ? __fget_files+0x21f/0x3d0 [ 197.264060][ T7299] ksys_read+0x12a/0x250 [ 197.264085][ T7299] ? __pfx_ksys_read+0x10/0x10 [ 197.264115][ T7299] do_syscall_64+0x123/0x790 [ 197.264143][ T7299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.264162][ T7299] RIP: 0033:0x7fbe50b5ea0e [ 197.264177][ T7299] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 197.264194][ T7299] RSP: 002b:00007fbe51b42fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.264211][ T7299] RAX: ffffffffffffffda RBX: 00007fbe51b436c0 RCX: 00007fbe50b5ea0e [ 197.264224][ T7299] RDX: 000000000000000f RSI: 00007fbe51b430a0 RDI: 0000000000000003 [ 197.264234][ T7299] RBP: 00007fbe51b43090 R08: 0000000000000000 R09: 0000000000000000 [ 197.264245][ T7299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.264255][ T7299] R13: 00007fbe50e26038 R14: 00007fbe50e25fa0 R15: 00007fff7bbd64b8 [ 197.264287][ T7299] [ 198.708875][ T7323] bridge_slave_0: left allmulticast mode [ 198.708897][ T7323] bridge_slave_0: left promiscuous mode [ 198.709070][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.928665][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 199.625282][ T31] audit: type=1400 audit(1791882353.188:906): avc: denied { write } for pid=7297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.029107][ T31] audit: type=1400 audit(1791882356.588:907): avc: denied { write } for pid=7337 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.435835][ T7346] CIFS mount error: No usable UNC path provided in device string! [ 203.435835][ T7346] [ 203.435858][ T7346] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 205.943922][ T7358] syzkaller0: entered promiscuous mode [ 205.943945][ T7358] syzkaller0: entered allmulticast mode [ 205.955373][ T7358] tipc: Started in network mode [ 205.955397][ T7358] tipc: Node identity 8665e1204564, cluster identity 4711 [ 205.955513][ T7358] tipc: Enabled bearer , priority 0 [ 205.965768][ T7358] tipc: Resetting bearer [ 206.008069][ T7357] tipc: Resetting bearer [ 206.039145][ T7357] tipc: Disabling bearer [ 206.138369][ T7362] FAULT_INJECTION: forcing a failure. [ 206.138369][ T7362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.138401][ T7362] CPU: 1 UID: 0 PID: 7362 Comm: syz.3.396 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.138427][ T7362] Tainted: [L]=SOFTLOCKUP [ 206.138433][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 206.138444][ T7362] Call Trace: [ 206.138450][ T7362] [ 206.138457][ T7362] dump_stack_lvl+0x100/0x190 [ 206.138488][ T7362] should_fail_ex.cold+0x5/0xa [ 206.138515][ T7362] _copy_to_user+0x32/0xd0 [ 206.138543][ T7362] simple_read_from_buffer+0xcb/0x170 [ 206.138572][ T7362] proc_fail_nth_read+0x1af/0x230 [ 206.138600][ T7362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.138628][ T7362] ? rw_verify_area+0xce/0x6d0 [ 206.138648][ T7362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.138674][ T7362] vfs_read+0x1e4/0xb40 [ 206.138697][ T7362] ? lock_acquire+0x1d1/0x380 [ 206.138718][ T7362] ? __fget_files+0x34/0x3d0 [ 206.138744][ T7362] ? __pfx_vfs_read+0x10/0x10 [ 206.138763][ T7362] ? find_held_lock+0x2b/0x80 [ 206.138791][ T7362] ? __fget_files+0x215/0x3d0 [ 206.138819][ T7362] ? __fget_files+0x21f/0x3d0 [ 206.138852][ T7362] ksys_read+0x12a/0x250 [ 206.138874][ T7362] ? __pfx_ksys_read+0x10/0x10 [ 206.138903][ T7362] do_syscall_64+0x123/0x790 [ 206.138931][ T7362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.138951][ T7362] RIP: 0033:0x7f965715ea0e [ 206.138966][ T7362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 206.138983][ T7362] RSP: 002b:00007f9658099fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.139001][ T7362] RAX: ffffffffffffffda RBX: 00007f965809a6c0 RCX: 00007f965715ea0e [ 206.139013][ T7362] RDX: 000000000000000f RSI: 00007f965809a0a0 RDI: 0000000000000004 [ 206.139023][ T7362] RBP: 00007f965809a090 R08: 0000000000000000 R09: 0000000000000000 [ 206.139033][ T7362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.139043][ T7362] R13: 00007f9657426038 R14: 00007f9657425fa0 R15: 00007fffdd599e08 [ 206.139069][ T7362] [ 206.445913][ T7366] can0: slcan on ptm0. [ 206.573612][ T7366] can0 (unregistered): slcan off ptm0. [ 207.391559][ T7293] batadv_slave_0: left promiscuous mode [ 208.249641][ T7376] overlayfs: failed to clone lowerpath [ 208.284958][ T7376] overlay: Bad value for 'verity' [ 208.488400][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 209.164522][ C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 211.531108][ T7392] CIFS mount error: No usable UNC path provided in device string! [ 211.531108][ T7392] [ 211.531136][ T7392] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 214.228107][ T7402] netlink: 'syz.2.411': attribute type 12 has an invalid length. [ 214.641977][ T31] audit: type=1400 audit(1791882368.198:908): avc: denied { write } for pid=7415 comm="syz.1.416" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 214.643351][ T7416] binder: 7415:7416 ioctl 4018620d 0 returned -22 [ 214.903318][ T190] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 214.934988][ C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 215.062793][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 215.063234][ T10] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 215.203022][ T10] usb 1-1: device descriptor read/64, error -71 [ 215.423615][ C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 215.447574][ T10] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 215.496738][ T7443] mmap: syz.1.423 (7443) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 215.583279][ T10] usb 1-1: device descriptor read/64, error -71 [ 215.693497][ T10] usb usb1-port1: attempt power cycle [ 215.865754][ T7456] netlink: 'syz.3.427': attribute type 1 has an invalid length. [ 215.865768][ T7456] netlink: 224 bytes leftover after parsing attributes in process `syz.3.427'. [ 215.885333][ T5703] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 215.925495][ T7456] comedi comedi3: multiq3: I/O base address not correctly aligned [ 215.926385][ T7456] 9pnet_virtio: no channels available for device syz [ 215.927829][ T7456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.427'. [ 216.033107][ T10] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 216.060732][ T10] usb 1-1: device descriptor read/8, error -71 [ 216.293719][ T10] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 216.317383][ T10] usb 1-1: device descriptor read/8, error -71 [ 216.425869][ T10] usb usb1-port1: unable to enumerate USB device [ 216.493124][ T31] audit: type=1400 audit(1791882370.048:909): avc: denied { ioctl } for pid=7468 comm="syz.4.432" path="socket:[15725]" dev="sockfs" ino=15725 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 216.823235][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 216.963002][ T10] usb 5-1: device descriptor read/64, error -71 [ 216.977068][ T7473] can0: slcan on ptm0. [ 217.001707][ T7476] batadv_slave_0: entered promiscuous mode [ 217.844382][ T7479] batadv_slave_0: left promiscuous mode [ 217.889089][ T31] audit: type=1400 audit(1791882371.448:910): avc: denied { write } for pid=5609 comm="syz-executor" name="97" dev="tmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 217.889142][ T31] audit: type=1400 audit(1791882371.448:911): avc: denied { write } for pid=5609 comm="syz-executor" name="97" dev="tmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 217.913052][ T31] audit: type=1400 audit(1791882371.448:912): avc: denied { write } for pid=5609 comm="syz-executor" name="97" dev="tmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 217.913108][ T31] audit: type=1400 audit(1791882371.448:913): avc: denied { write } for pid=5609 comm="syz-executor" name="97" dev="tmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 217.913141][ T31] audit: type=1400 audit(1791882371.458:914): avc: denied { write } for pid=5609 comm="syz-executor" name="97" dev="tmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 218.013045][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 218.033912][ T7473] can0 (unregistered): slcan off ptm0. [ 218.246894][ T7485] batadv_slave_0: entered promiscuous mode [ 218.283103][ T10] usb 5-1: device descriptor read/64, error -71 [ 218.906831][ T7488] batadv_slave_0: left promiscuous mode [ 218.947137][ T10] usb usb5-port1: attempt power cycle [ 218.981368][ T31] audit: type=1400 audit(1791882372.538:915): avc: denied { write } for pid=5608 comm="syz-executor" name="103" dev="tmpfs" ino=601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 218.981480][ T31] audit: type=1400 audit(1791882372.538:916): avc: denied { write } for pid=5608 comm="syz-executor" name="103" dev="tmpfs" ino=601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 219.282970][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 219.303461][ T10] usb 5-1: device descriptor read/8, error -71 [ 219.327946][ T31] audit: type=1400 audit(1791882372.888:917): avc: denied { write } for pid=7480 comm="syz.3.438" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 219.553719][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 219.762977][ T10] usb 5-1: device not accepting address 11, error -71 [ 219.765161][ T10] usb usb5-port1: unable to enumerate USB device [ 223.453380][ T7520] FAULT_INJECTION: forcing a failure. [ 223.453380][ T7520] name failslab, interval 1, probability 0, space 0, times 0 [ 223.453412][ T7520] CPU: 0 UID: 0 PID: 7520 Comm: syz.1.448 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.453436][ T7520] Tainted: [L]=SOFTLOCKUP [ 223.453442][ T7520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 223.453453][ T7520] Call Trace: [ 223.453459][ T7520] [ 223.453466][ T7520] dump_stack_lvl+0x100/0x190 [ 223.453497][ T7520] should_fail_ex.cold+0x5/0xa [ 223.453524][ T7520] should_failslab+0xc2/0x120 [ 223.453551][ T7520] __kmalloc_noprof+0xfc/0x840 [ 223.453573][ T7520] ? rcu_is_watching+0x13/0xc0 [ 223.453598][ T7520] ? tomoyo_realpath_from_path+0xb6/0x690 [ 223.453632][ T7520] tomoyo_realpath_from_path+0xb6/0x690 [ 223.453665][ T7520] tomoyo_path_number_perm+0x23c/0x580 [ 223.453688][ T7520] ? tomoyo_path_number_perm+0x22e/0x580 [ 223.453713][ T7520] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 223.453747][ T7520] ? __lock_acquire+0x5c0/0x1f40 [ 223.453781][ T7520] ? __fget_files+0x34/0x3d0 [ 223.453810][ T7520] ? find_held_lock+0x2b/0x80 [ 223.453836][ T7520] ? hook_file_ioctl_common+0x140/0x440 [ 223.453861][ T7520] ? __fget_files+0x21f/0x3d0 [ 223.453896][ T7520] security_file_ioctl+0xd3/0x230 [ 223.453923][ T7520] __x64_sys_ioctl+0xb7/0x210 [ 223.453947][ T7520] do_syscall_64+0x123/0x790 [ 223.453976][ T7520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.453994][ T7520] RIP: 0033:0x7f05efd9e1d9 [ 223.454009][ T7520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.454025][ T7520] RSP: 002b:00007f05f0caf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.454044][ T7520] RAX: ffffffffffffffda RBX: 00007f05f0025fa0 RCX: 00007f05efd9e1d9 [ 223.454056][ T7520] RDX: 0000000000000000 RSI: 0000000040086610 RDI: 0000000000000004 [ 223.454067][ T7520] RBP: 00007f05f0caf090 R08: 0000000000000000 R09: 0000000000000000 [ 223.454077][ T7520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.454088][ T7520] R13: 00007f05f0026038 R14: 00007f05f0025fa0 R15: 00007ffc285b0668 [ 223.454114][ T7520] [ 223.455713][ T7520] ERROR: Out of memory at tomoyo_realpath_from_path. [ 223.455740][ T7520] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 223.455756][ T7520] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 225.311305][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 225.311326][ T31] audit: type=1400 audit(1791882378.408:921): avc: denied { audit_write } for pid=7517 comm="syz.3.447" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 225.514011][ T7528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.452'. [ 225.703570][ T7531] can0: slcan on ptm0. [ 225.962991][ T7530] can0 (unregistered): slcan off ptm0. [ 228.000358][ T7550] 9pnet_virtio: no channels available for device syz [ 228.017742][ T7550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.457'. [ 230.225127][ T31] audit: type=1400 audit(1791882383.788:922): avc: denied { create } for pid=7580 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 230.303299][ T31] audit: type=1400 audit(1791882383.868:923): avc: denied { ioctl } for pid=7580 comm="syz.2.464" path="socket:[15881]" dev="sockfs" ino=15881 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 230.332786][ T31] audit: type=1400 audit(1791882383.888:924): avc: denied { bind } for pid=7580 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 230.362216][ T31] audit: type=1400 audit(1791882383.918:925): avc: denied { write } for pid=7588 comm="syz.4.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 230.445738][ T7591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.445763][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.496163][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 230.602667][ T7596] CIFS mount error: No usable UNC path provided in device string! [ 230.602667][ T7596] [ 230.602689][ T7596] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 231.083862][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 231.088696][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.088718][ T9] usb 4-1: Product: syz [ 231.088731][ T9] usb 4-1: Manufacturer: syz [ 231.088745][ T9] usb 4-1: SerialNumber: syz [ 231.192451][ T31] audit: type=1400 audit(1791882384.748:926): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 231.230947][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 232.336162][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 232.341999][ T7603] netlink: 'syz.1.469': attribute type 1 has an invalid length. [ 232.342012][ T7603] netlink: 224 bytes leftover after parsing attributes in process `syz.1.469'. [ 232.381647][ T9] ath9k_htc: Failed to initialize the device [ 232.394032][ T7603] comedi comedi3: multiq3: I/O base address not correctly aligned [ 232.396781][ T7603] 9pnet_virtio: no channels available for device syz [ 232.397403][ T7603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.469'. [ 232.473408][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 232.800612][ T7583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.874845][ T7583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.966390][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.999410][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.001487][ T7618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.001834][ T7618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.760232][ T7628] tipc: Enabling of bearer rejected, failed to enable media [ 234.111415][ T7638] CIFS mount error: No usable UNC path provided in device string! [ 234.111415][ T7638] [ 234.111471][ T7638] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 234.588654][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 234.719482][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 234.733584][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 234.740108][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 234.811903][ T9] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 234.811925][ T9] usb 2-1: config 0 has no interface number 0 [ 234.811945][ T9] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 234.840919][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.840944][ T9] usb 2-1: Product: syz [ 234.840957][ T9] usb 2-1: Manufacturer: syz [ 234.840965][ T9] usb 2-1: SerialNumber: syz [ 234.870226][ T9] usb 2-1: config 0 descriptor?? [ 234.878004][ T4939] usb 4-1: USB disconnect, device number 5 [ 234.879191][ T7629] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 235.075487][ T31] audit: type=1400 audit(1791882388.638:927): avc: denied { create } for pid=7644 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 235.096022][ T7629] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 235.129012][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 235.129197][ T9] asix 2-1:0.188: probe with driver asix failed with error -32 [ 236.381437][ T7665] comedi comedi3: multiq3: I/O base address not correctly aligned [ 236.396206][ T7665] 9pnet_virtio: no channels available for device syz [ 236.410138][ T7665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.482'. [ 237.279317][ T7668] FAULT_INJECTION: forcing a failure. [ 237.279317][ T7668] name failslab, interval 1, probability 0, space 0, times 0 [ 237.279349][ T7668] CPU: 1 UID: 0 PID: 7668 Comm: syz.0.477 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.279374][ T7668] Tainted: [L]=SOFTLOCKUP [ 237.279380][ T7668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 237.279391][ T7668] Call Trace: [ 237.279398][ T7668] [ 237.279405][ T7668] dump_stack_lvl+0x100/0x190 [ 237.279437][ T7668] should_fail_ex.cold+0x5/0xa [ 237.279463][ T7668] should_failslab+0xc2/0x120 [ 237.279490][ T7668] kmem_cache_alloc_noprof+0x92/0x6a0 [ 237.279514][ T7668] ? do_getname+0x35/0x390 [ 237.279537][ T7668] do_getname+0x35/0x390 [ 237.279558][ T7668] __x64_sys_unlink+0x36/0x70 [ 237.279576][ T7668] do_syscall_64+0x123/0x790 [ 237.279604][ T7668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.279623][ T7668] RIP: 0033:0x7fd77f79e1d9 [ 237.279638][ T7668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.279661][ T7668] RSP: 002b:00007fd78067a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 237.279679][ T7668] RAX: ffffffffffffffda RBX: 00007fd77fa25fa0 RCX: 00007fd77f79e1d9 [ 237.279691][ T7668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000640 [ 237.279702][ T7668] RBP: 00007fd78067a090 R08: 0000000000000000 R09: 0000000000000000 [ 237.279713][ T7668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.279724][ T7668] R13: 00007fd77fa26038 R14: 00007fd77fa25fa0 R15: 00007ffe2d0a5f18 [ 237.279748][ T7668] [ 237.585465][ T4939] usb 2-1: USB disconnect, device number 10 [ 237.692784][ T7670] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 237.692808][ T7670] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 237.737401][ T7676] FAULT_INJECTION: forcing a failure. [ 237.737401][ T7676] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 237.737432][ T7676] CPU: 0 UID: 0 PID: 7676 Comm: syz.1.485 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.737457][ T7676] Tainted: [L]=SOFTLOCKUP [ 237.737463][ T7676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 237.737473][ T7676] Call Trace: [ 237.737479][ T7676] [ 237.737486][ T7676] dump_stack_lvl+0x100/0x190 [ 237.737517][ T7676] should_fail_ex.cold+0x5/0xa [ 237.737538][ T7676] ? prepare_alloc_pages+0x16d/0x5b0 [ 237.737566][ T7676] should_fail_alloc_page+0xeb/0x140 [ 237.737593][ T7676] prepare_alloc_pages+0x1f0/0x5b0 [ 237.737623][ T7676] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 237.737647][ T7676] ? lock_acquire+0x1d1/0x380 [ 237.737668][ T7676] ? page_table_check_set+0x11d/0x580 [ 237.737696][ T7676] ? find_held_lock+0x2b/0x80 [ 237.737720][ T7676] ? page_table_check_set+0x30f/0x580 [ 237.737745][ T7676] ? page_table_check_set+0x30f/0x580 [ 237.737774][ T7676] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 237.737793][ T7676] ? page_table_check_set+0x31e/0x580 [ 237.737820][ T7676] ? __page_table_check_ptes_set+0x1d5/0x530 [ 237.737847][ T7676] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 237.737874][ T7676] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 237.737900][ T7676] ? xas_find+0x32c/0x8e0 [ 237.737928][ T7676] ? find_held_lock+0x2b/0x80 [ 237.737950][ T7676] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.737973][ T7676] ? policy_nodemask+0xed/0x4f0 [ 237.738000][ T7676] alloc_pages_mpol+0x201/0x550 [ 237.738026][ T7676] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 237.738057][ T7676] folio_alloc_mpol_noprof+0x36/0x260 [ 237.738075][ T7676] vma_alloc_folio_noprof+0xed/0x1d0 [ 237.738093][ T7676] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 237.738117][ T7676] do_anonymous_page+0xac9/0x2050 [ 237.738149][ T7676] ? __pfx_do_anonymous_page+0x10/0x10 [ 237.738164][ T7676] ? rcu_read_unlock+0x2d/0xb0 [ 237.738180][ T7676] ? rcu_read_unlock+0x2d/0xb0 [ 237.738196][ T7676] ? __pte_offset_map+0x179/0x310 [ 237.738221][ T7676] __handle_mm_fault+0x1ff3/0x2f60 [ 237.738241][ T7676] ? lock_vma_under_rcu+0x11d/0x590 [ 237.738266][ T7676] ? __pfx___handle_mm_fault+0x10/0x10 [ 237.738287][ T7676] ? lock_vma_under_rcu+0x17c/0x590 [ 237.738326][ T7676] handle_mm_fault+0x363/0xa20 [ 237.738347][ T7676] do_user_addr_fault+0x59c/0x12f0 [ 237.738376][ T7676] exc_page_fault+0x6f/0xd0 [ 237.738399][ T7676] asm_exc_page_fault+0x26/0x30 [ 237.738414][ T7676] RIP: 0033:0x7f05efc5f74b [ 237.738427][ T7676] Code: 00 00 00 48 8d 3d 1d b1 1a 00 48 89 c1 31 c0 e8 bb 2d ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 51 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 237.738442][ T7676] RSP: 002b:00007f05f0cadfa0 EFLAGS: 00010206 [ 237.738456][ T7676] RAX: 0000000000000000 RBX: 00007f05f0025fa0 RCX: 0000000000000000 [ 237.738467][ T7676] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000140 [ 237.738477][ T7676] RBP: 00007f05f0caf090 R08: 0000000000000000 R09: 0000000000000000 [ 237.738486][ T7676] R10: 0000200000000140 R11: 0000000000000000 R12: 0000000000000001 [ 237.738496][ T7676] R13: 00007f05f0026038 R14: 00007f05f0025fa0 R15: 00007ffc285b0668 [ 237.738519][ T7676] [ 237.738670][ T7676] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 238.774184][ T7681] syzkaller0: entered promiscuous mode [ 238.774203][ T7681] syzkaller0: entered allmulticast mode [ 238.787440][ T7681] tipc: Enabled bearer , priority 0 [ 238.811632][ T7681] tipc: Resetting bearer [ 238.815160][ T7678] tipc: Resetting bearer [ 238.828861][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 238.942299][ T7686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.942602][ T7686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.956989][ T7678] tipc: Disabling bearer [ 239.143283][ T4939] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 240.056092][ T4939] usb 4-1: Using ep0 maxpacket: 16 [ 240.056679][ T4939] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 240.057682][ T4939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.057708][ T4939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.057727][ T4939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 240.057760][ T4939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.069613][ T4939] usb 4-1: config 0 descriptor?? [ 240.276801][ T4939] usbhid 4-1:0.0: can't add hid device: -71 [ 240.276892][ T4939] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 240.286387][ T4939] usb 4-1: USB disconnect, device number 6 [ 240.965792][ T7698] FAULT_INJECTION: forcing a failure. [ 240.965792][ T7698] name failslab, interval 1, probability 0, space 0, times 0 [ 240.965824][ T7698] CPU: 0 UID: 0 PID: 7698 Comm: syz.0.489 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.965847][ T7698] Tainted: [L]=SOFTLOCKUP [ 240.965854][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 240.965863][ T7698] Call Trace: [ 240.965870][ T7698] [ 240.965878][ T7698] dump_stack_lvl+0x100/0x190 [ 240.965910][ T7698] should_fail_ex.cold+0x5/0xa [ 240.965936][ T7698] should_failslab+0xc2/0x120 [ 240.965964][ T7698] __kmalloc_cache_noprof+0x91/0x6d0 [ 240.965985][ T7698] ? refill_pi_state_cache+0x91/0x260 [ 240.966009][ T7698] refill_pi_state_cache+0x91/0x260 [ 240.966029][ T7698] futex_lock_pi+0x17d/0x7e0 [ 240.966052][ T7698] ? __pfx_futex_lock_pi+0x10/0x10 [ 240.966071][ T7698] ? __lock_acquire+0x5c0/0x1f40 [ 240.966134][ T7698] ? __pfx_futex_wake_mark+0x10/0x10 [ 240.966160][ T7698] ? rcu_read_lock_any_held+0x6a/0x90 [ 240.966188][ T7698] ? find_held_lock+0x2b/0x80 [ 240.966214][ T7698] ? ksys_write+0x190/0x250 [ 240.966240][ T7698] do_futex+0x371/0x440 [ 240.966268][ T7698] ? __pfx_do_futex+0x10/0x10 [ 240.966295][ T7698] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 240.966326][ T7698] __x64_sys_futex+0x34f/0x4d0 [ 240.966354][ T7698] ? fput+0x7c/0x100 [ 240.966378][ T7698] ? __pfx___x64_sys_futex+0x10/0x10 [ 240.966403][ T7698] ? ksys_write+0x1ac/0x250 [ 240.966424][ T7698] ? __pfx_ksys_write+0x10/0x10 [ 240.966454][ T7698] do_syscall_64+0x123/0x790 [ 240.966483][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.966502][ T7698] RIP: 0033:0x7fd77f79e1d9 [ 240.966517][ T7698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.966534][ T7698] RSP: 002b:00007fd78067a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 240.966553][ T7698] RAX: ffffffffffffffda RBX: 00007fd77fa25fa0 RCX: 00007fd77f79e1d9 [ 240.966565][ T7698] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000200000000000 [ 240.966576][ T7698] RBP: 00007fd78067a090 R08: 0000000000000000 R09: 0000000000000001 [ 240.966587][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.966597][ T7698] R13: 00007fd77fa26038 R14: 00007fd77fa25fa0 R15: 00007ffe2d0a5f18 [ 240.966622][ T7698] [ 241.273171][ T7692] debugfs: out of free dentries, can not create file 'invlpg' [ 241.759121][ T7712] 9pnet_virtio: no channels available for device syz [ 241.769789][ T7712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.493'. [ 241.827691][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 241.860844][ T31] audit: type=1400 audit(1791882395.418:928): avc: denied { write } for pid=7718 comm="syz.4.499" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 241.864815][ T7719] random: crng reseeded on system resumption [ 241.886066][ T31] audit: type=1400 audit(1791882395.428:929): avc: denied { open } for pid=7718 comm="syz.4.499" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 241.986323][ T7719] netlink: 'syz.4.499': attribute type 10 has an invalid length. [ 241.986345][ T7719] openvswitch: netlink: Flow key attr not present in new flow. [ 241.989261][ T31] audit: type=1400 audit(1791882395.548:930): avc: denied { ioctl } for pid=7718 comm="syz.4.499" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 244.615374][ T7735] SELinux: policydb version 0 does not match my version range 15-35 [ 244.615419][ T7735] SELinux: failed to load policy [ 244.628096][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 245.854217][ T7745] 9pnet_virtio: no channels available for device syz [ 245.854821][ T7745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.510'. [ 246.207910][ T7751] CIFS mount error: No usable UNC path provided in device string! [ 246.207910][ T7751] [ 246.207933][ T7751] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 246.997955][ T7755] netlink: 'syz.2.514': attribute type 1 has an invalid length. [ 247.028168][ T7755] bond1: entered promiscuous mode [ 247.028483][ T7755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.106277][ T7755] ipvlan2: entered allmulticast mode [ 247.106299][ T7755] bond1: entered allmulticast mode [ 247.177000][ T7755] bond1: (slave bridge1): making interface the new active one [ 247.177023][ T7755] bridge1: entered promiscuous mode [ 247.177194][ T7755] bridge1: entered allmulticast mode [ 247.202020][ T7755] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 248.464957][ T7768] SELinux: policydb version 0 does not match my version range 15-35 [ 248.465003][ T7768] SELinux: failed to load policy [ 248.627827][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'. [ 248.929761][ T4125] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 249.236430][ T7790] comedi comedi3: multiq3: I/O base address not correctly aligned [ 249.239990][ T7790] 9pnet_virtio: no channels available for device syz [ 249.245845][ T7790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.521'. [ 250.292689][ T7798] CIFS mount error: No usable UNC path provided in device string! [ 250.292689][ T7798] [ 250.292711][ T7798] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 250.584896][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.584944][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.958041][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.526'. [ 251.307982][ T7810] CIFS mount error: No usable UNC path provided in device string! [ 251.307982][ T7810] [ 251.308004][ T7810] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 251.633033][ T4939] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 251.800498][ T4939] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 251.821836][ T4939] usb 2-1: config 243 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 251.822122][ T4939] usb 2-1: config 243 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 251.832630][ T4939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.832652][ T4939] usb 2-1: Product: syz [ 251.832663][ T4939] usb 2-1: Manufacturer: syz [ 251.832675][ T4939] usb 2-1: SerialNumber: syz [ 251.911683][ T4939] ums-sddr09 2-1:243.0: USB Mass Storage device detected [ 251.982752][ T4939] ums-sddr09 2-1:243.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 251.982752][ T4939] Please send a copy of this message to and [ 252.090639][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.090988][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.108478][ T4939] ums-sddr09 2-1:243.0: probe with driver ums-sddr09 failed with error -22 [ 252.150089][ T9] usb 2-1: USB disconnect, device number 11 [ 252.207480][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 252.211313][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 252.834600][ T7832] comedi comedi3: multiq3: I/O base address not correctly aligned [ 252.837729][ T7832] 9pnet_virtio: no channels available for device syz [ 252.843468][ T7832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.534'. [ 253.836757][ T7840] overlayfs: overlapping lowerdir path [ 255.860157][ T7854] CIFS mount error: No usable UNC path provided in device string! [ 255.860157][ T7854] [ 255.860179][ T7854] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 256.169759][ T7851] SELinux: policydb version 0 does not match my version range 15-35 [ 256.169805][ T7851] SELinux: failed to load policy [ 258.751152][ T7876] comedi comedi3: multiq3: I/O base address not correctly aligned [ 258.754627][ T7876] 9pnet_virtio: no channels available for device syz [ 258.759940][ T7876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.549'. [ 260.540059][ T31] audit: type=1400 audit(1791882414.098:931): avc: denied { ioctl } for pid=7885 comm="syz.0.540" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 260.644982][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'. [ 260.812945][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 260.963102][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 260.965561][ T25] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 260.968732][ T25] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 260.968784][ T25] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 260.968871][ T25] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 260.968923][ T25] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 260.968976][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 260.990338][ T25] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 260.990380][ T25] usb 1-1: Product: syz [ 260.990395][ T25] usb 1-1: Manufacturer: syz [ 260.990440][ T25] usb 1-1: SerialNumber: syz [ 261.200983][ T25] usb 1-1: config 0 descriptor?? [ 261.258810][ T25] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 261.284831][ T25] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 261.388751][ T7902] FAULT_INJECTION: forcing a failure. [ 261.388751][ T7902] name failslab, interval 1, probability 0, space 0, times 0 [ 261.388788][ T7902] CPU: 0 UID: 0 PID: 7902 Comm: syz.4.545 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.388813][ T7902] Tainted: [L]=SOFTLOCKUP [ 261.388819][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 261.388830][ T7902] Call Trace: [ 261.388836][ T7902] [ 261.388843][ T7902] dump_stack_lvl+0x100/0x190 [ 261.388875][ T7902] should_fail_ex.cold+0x5/0xa [ 261.388901][ T7902] should_failslab+0xc2/0x120 [ 261.388928][ T7902] __kmalloc_cache_noprof+0x91/0x6d0 [ 261.388948][ T7902] ? __do_sys_mincore+0x120/0x6c0 [ 261.388970][ T7902] __do_sys_mincore+0x120/0x6c0 [ 261.388996][ T7902] do_syscall_64+0x123/0x790 [ 261.389025][ T7902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.389043][ T7902] RIP: 0033:0x7fbe50b9e1d9 [ 261.389058][ T7902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.389078][ T7902] RSP: 002b:00007fbe51b01028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 261.389095][ T7902] RAX: ffffffffffffffda RBX: 00007fbe50e26180 RCX: 00007fbe50b9e1d9 [ 261.389107][ T7902] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 00002000003ca000 [ 261.389118][ T7902] RBP: 00007fbe51b01090 R08: 0000000000000000 R09: 0000000000000000 [ 261.389129][ T7902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.389139][ T7902] R13: 00007fbe50e26218 R14: 00007fbe50e26180 R15: 00007fff7bbd64b8 [ 261.389164][ T7902] [ 261.588572][ T31] audit: type=1400 audit(1791882415.148:932): avc: denied { write } for pid=7905 comm="syz.4.556" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 261.597243][ T9] usb 1-1: USB disconnect, device number 11 [ 261.597358][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 261.602554][ T7887] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 261.638875][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 261.674934][ T7909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.299507][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 263.113707][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 263.263677][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.264868][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 263.264894][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 263.264920][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 263.264945][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.264979][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.269227][ T25] usb 5-1: config 0 descriptor?? [ 263.269835][ T7918] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 263.486635][ T31] audit: type=1400 audit(1791882417.048:933): avc: denied { node_bind } for pid=7916 comm="syz.4.558" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 265.655373][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 265.655458][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 265.684789][ T25] usb 5-1: USB disconnect, device number 12 [ 265.963138][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 266.238300][ T9] usb 1-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 266.318602][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.336117][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.658793][ T9] usb 1-1: selecting invalid altsetting 1 [ 266.658817][ T9] comedi comedi5: could not switch to alternate setting 1 [ 266.658831][ T9] usbduxfast 1-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 266.846198][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.571'. [ 266.901940][ T5829] usb 1-1: USB disconnect, device number 12 [ 267.555802][ T5829] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 267.703666][ T5829] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 267.707144][ T5829] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 267.707167][ T5829] usb 2-1: Product: syz [ 267.707181][ T5829] usb 2-1: Manufacturer: syz [ 267.707195][ T5829] usb 2-1: SerialNumber: syz [ 267.710630][ T5829] usb 2-1: config 0 descriptor?? [ 269.399660][ T7982] Cannot find add_set index 2 as target [ 270.951548][ T5829] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 270.951585][ T5829] peak_usb 2-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 271.114080][ T5829] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 271.131299][ T5829] usb 2-1: USB disconnect, device number 12 [ 271.831010][ T31] audit: type=1400 audit(1791882425.388:934): avc: denied { map } for pid=8014 comm="syz.0.589" path="/106/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 272.963196][ T5829] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 273.040568][ T31] audit: type=1400 audit(1791882426.598:935): avc: denied { ioctl } for pid=8025 comm="syz.2.592" path="socket:[17494]" dev="sockfs" ino=17494 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 273.113238][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 273.113743][ T5829] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 273.117177][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.117204][ T5829] usb 1-1: Product: syz [ 273.117217][ T5829] usb 1-1: Manufacturer: syz [ 273.117229][ T5829] usb 1-1: SerialNumber: syz [ 273.122664][ T5829] usb 1-1: config 0 descriptor?? [ 273.174746][ T5829] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 273.483494][ T8019] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 273.484578][ T8019] exFAT-fs (nullb0): invalid boot record signature [ 273.484591][ T8019] exFAT-fs (nullb0): failed to read boot sector [ 273.484601][ T8019] exFAT-fs (nullb0): failed to recognize exfat type [ 273.485611][ T5829] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 273.595004][ T5829] usb 1-1: USB disconnect, device number 13 [ 273.858648][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 278.194862][ T8054] overlay: filesystem on ./bus not supported as upperdir [ 279.147069][ T8065] netlink: 'syz.1.607': attribute type 4 has an invalid length. [ 280.136118][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.605'. [ 280.154064][ T31] audit: type=1400 audit(1791882433.688:936): avc: denied { read } for pid=8076 comm="syz.2.605" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 280.325851][ T31] audit: type=1400 audit(1791882433.888:937): avc: denied { create } for pid=8080 comm="syz.4.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 280.358389][ T31] audit: type=1400 audit(1791882433.918:938): avc: denied { setopt } for pid=8080 comm="syz.4.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 280.833147][ T31] audit: type=1400 audit(1791882434.368:939): avc: denied { create } for pid=8082 comm="syz.1.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 280.833309][ T31] audit: type=1400 audit(1791882434.368:940): avc: denied { read } for pid=8082 comm="syz.1.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 282.929567][ T8102] batadv_slave_0: entered promiscuous mode [ 283.804300][ T8106] batadv_slave_0: left promiscuous mode [ 283.859537][ T31] audit: type=1400 audit(1791882437.418:941): avc: denied { write } for pid=5607 comm="syz-executor" name="112" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 283.859586][ T31] audit: type=1400 audit(1791882437.418:942): avc: denied { write } for pid=5607 comm="syz-executor" name="112" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 283.889691][ T31] audit: type=1400 audit(1791882437.448:943): avc: denied { write } for pid=5607 comm="syz-executor" name="112" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 284.089677][ T31] audit: type=1400 audit(1791882437.648:944): avc: denied { write } for pid=5607 comm="syz-executor" name="112" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 284.152628][ T8107] warning: `syz.3.614' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 284.267860][ T31] audit: type=1400 audit(1791882437.808:945): avc: denied { write } for pid=5607 comm="syz-executor" name="112" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 284.555103][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 284.561915][ T8110] SELinux: policydb version 0 does not match my version range 15-35 [ 284.561943][ T8110] SELinux: failed to load policy [ 286.058291][ T8136] netlink: 72 bytes leftover after parsing attributes in process `syz.0.618'. [ 286.074057][ T8136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.618'. [ 286.093663][ T8136] netlink: 'syz.0.618': attribute type 4 has an invalid length. [ 286.093709][ T8136] netlink: 17 bytes leftover after parsing attributes in process `syz.0.618'. [ 286.466302][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 286.466333][ T31] audit: type=1400 audit(1791882440.028:947): avc: denied { read } for pid=8128 comm="syz.0.618" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 286.476151][ T8129] 0x000000000003-0x000000010003 : "" [ 287.125655][ T8129] ftl_cs: FTL header not found. [ 287.284808][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 288.167565][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 288.313879][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 288.314627][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 288.317249][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 288.317277][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 288.319329][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.319355][ T9] usb 4-1: Product: syz [ 288.319370][ T9] usb 4-1: Manufacturer: syz [ 288.319383][ T9] usb 4-1: SerialNumber: syz [ 288.386790][ T9] usb 4-1: config 0 descriptor?? [ 288.399365][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 288.399399][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 288.526204][ T8151] can0: slcan on ptm0. [ 288.695809][ T8151] can0 (unregistered): slcan off ptm0. [ 290.326322][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 290.341597][ T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 290.384082][ T9] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 290.384101][ T9] em28xx 4-1:0.0: No AC97 audio processor [ 290.433588][ T8161] batadv_slave_0: entered promiscuous mode [ 291.485890][ T8164] batadv_slave_0: left promiscuous mode [ 291.580195][ T31] audit: type=1400 audit(1791882445.138:948): avc: denied { write } for pid=5609 comm="syz-executor" name="138" dev="tmpfs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 291.602426][ T9] usb 4-1: USB disconnect, device number 7 [ 291.603529][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 291.619679][ T9] em28xx: Freeing device [ 295.078905][ T8182] CIFS mount error: No usable UNC path provided in device string! [ 295.078905][ T8182] [ 295.078973][ T8182] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 295.956182][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 295.987362][ T8187] batadv_slave_0: entered promiscuous mode [ 296.666572][ T8192] batadv_slave_0: left promiscuous mode [ 296.667836][ T31] audit: type=1400 audit(1791882450.228:949): avc: denied { write } for pid=5607 comm="syz-executor" name="115" dev="tmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 296.668961][ T31] audit: type=1400 audit(1791882450.228:950): avc: denied { write } for pid=5607 comm="syz-executor" name="115" dev="tmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 296.957201][ T31] audit: type=1400 audit(1791882450.518:951): avc: denied { write } for pid=5607 comm="syz-executor" name="115" dev="tmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 296.957666][ T31] audit: type=1400 audit(1791882450.518:952): avc: denied { write } for pid=5607 comm="syz-executor" name="115" dev="tmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 296.958174][ T31] audit: type=1400 audit(1791882450.518:953): avc: denied { write } for pid=5607 comm="syz-executor" name="115" dev="tmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 298.216860][ T31] audit: type=1400 audit(1791882451.778:954): avc: denied { write } for pid=8154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.065268][ T31] audit: type=1400 audit(1791882452.628:955): avc: denied { write } for pid=8215 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.313567][ T31] audit: type=1400 audit(1791882452.878:956): avc: denied { write } for pid=5609 comm="syz-executor" name="138" dev="tmpfs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 299.317139][ T31] audit: type=1400 audit(1791882452.878:957): avc: denied { write } for pid=5609 comm="syz-executor" name="138" dev="tmpfs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 299.317608][ T31] audit: type=1400 audit(1791882452.878:958): avc: denied { write } for pid=5609 comm="syz-executor" name="138" dev="tmpfs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 299.591152][ T8235] SELinux: policydb version 0 does not match my version range 15-35 [ 299.591230][ T8235] SELinux: failed to load policy [ 300.962814][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'. [ 301.681996][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 301.682012][ T31] audit: type=1400 audit(1791882455.238:962): avc: denied { write } for pid=8265 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.643570][ T5829] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 303.807420][ T5829] usb 4-1: Using ep0 maxpacket: 8 [ 303.810143][ T5829] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 303.832713][ T5829] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 303.832791][ T5829] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.832843][ T5829] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 303.869353][ T5829] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 303.869412][ T5829] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.869533][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.937674][ T8287] batadv_slave_0: entered promiscuous mode [ 304.330466][ T8286] batadv_slave_0: left promiscuous mode [ 304.339416][ T31] audit: type=1400 audit(1791882457.898:963): avc: denied { setopt } for pid=8277 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 304.442607][ T31] audit: type=1400 audit(1791882457.998:964): avc: denied { write } for pid=5610 comm="syz-executor" name="116" dev="tmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 304.471336][ T31] audit: type=1400 audit(1791882458.028:965): avc: denied { write } for pid=5610 comm="syz-executor" name="116" dev="tmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 304.471382][ T31] audit: type=1400 audit(1791882458.028:966): avc: denied { write } for pid=5610 comm="syz-executor" name="116" dev="tmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 304.471418][ T31] audit: type=1400 audit(1791882458.028:967): avc: denied { write } for pid=5610 comm="syz-executor" name="116" dev="tmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 305.795856][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 307.019950][ T8311] comedi comedi3: multiq3: I/O base address not correctly aligned [ 307.034972][ T8311] 9pnet_virtio: no channels available for device syz [ 307.044677][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.661'. [ 308.045863][ T5829] usb 4-1: usb_control_msg returned -71 [ 308.045904][ T5829] usbtmc 4-1:16.0: can't read capabilities [ 308.063667][ T5829] usb 4-1: USB disconnect, device number 8 [ 308.100395][ T8315] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 308.100419][ T8315] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 308.332049][ T8324] CIFS mount error: No usable UNC path provided in device string! [ 308.332049][ T8324] [ 308.332101][ T8324] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 309.170619][ T8331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.178330][ T3301] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 309.196866][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'. [ 311.566146][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.566196][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.641117][ T8338] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 313.753366][ T4939] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 313.862938][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 313.922932][ T4939] usb 1-1: Invalid ep0 maxpacket: 32 [ 314.023183][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 314.023768][ T25] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 314.024638][ T25] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 314.024660][ T25] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 314.024678][ T25] usb 2-1: config 0 has no interface number 0 [ 314.024709][ T25] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 314.024732][ T25] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 314.024753][ T25] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 314.025750][ T25] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 314.025770][ T25] usb 2-1: Product: syz [ 314.029471][ T25] usb 2-1: config 0 descriptor?? [ 314.092569][ T4939] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 314.438178][ T4939] usb 1-1: Invalid ep0 maxpacket: 32 [ 314.438911][ T4939] usb usb1-port1: attempt power cycle [ 314.472731][ T8355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.672'. [ 314.472751][ T8355] tipc: Invalid UDP bearer configuration [ 314.472784][ T8355] tipc: Enabling of bearer rejected, failed to enable media [ 314.795133][ T8359] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 315.128024][ T4939] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 315.216058][ T4939] usb 1-1: Invalid ep0 maxpacket: 32 [ 315.306220][ T5710] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 315.438058][ T4939] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 315.452993][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 315.454582][ T5710] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 315.458753][ T5710] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 315.458885][ T5710] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 315.458908][ T5710] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.494067][ T4939] usb 1-1: Invalid ep0 maxpacket: 32 [ 315.494371][ T4939] usb usb1-port1: unable to enumerate USB device [ 315.534135][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.534162][ T5710] usb 4-1: Product: syz [ 315.534180][ T5710] usb 4-1: Manufacturer: syz [ 315.534193][ T5710] usb 4-1: SerialNumber: syz [ 315.539998][ T5710] usb 4-1: config 0 descriptor?? [ 316.154252][ T31] audit: type=1400 audit(1791882469.718:968): avc: denied { write } for pid=8368 comm="syz.4.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 316.154465][ T5710] gs_usb 4-1:0.0: Configuring for 162 interfaces [ 316.266327][ T8375] xt_connbytes: Forcing CT accounting to be enabled [ 316.272981][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'. [ 316.624583][ T25] usb 2-1: USB disconnect, device number 13 [ 317.962579][ T5710] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT) [ 317.963044][ T5710] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 317.992794][ T8385] geneve1: entered promiscuous mode [ 319.745769][ T9] usb 4-1: USB disconnect, device number 9 [ 320.864689][ T8398] netlink: 20 bytes leftover after parsing attributes in process `syz.1.683'. [ 321.109073][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 321.179671][ T31] audit: type=1400 audit(1791882474.738:969): avc: denied { cmd } for pid=8388 comm="iou-wrk-8402" path="socket:[18978]" dev="sockfs" ino=18978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 321.805273][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 322.368282][ T8417] CIFS mount error: No usable UNC path provided in device string! [ 322.368282][ T8417] [ 322.368325][ T8417] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 323.180348][ T8420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.688'. [ 324.215537][ T31] audit: type=1326 audit(1791882477.398:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.3.690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f965719e1d9 code=0x0 [ 326.349075][ T8437] FAULT_INJECTION: forcing a failure. [ 326.349075][ T8437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.349097][ T8437] CPU: 1 UID: 0 PID: 8437 Comm: syz.1.694 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.349112][ T8437] Tainted: [L]=SOFTLOCKUP [ 326.349116][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 326.349122][ T8437] Call Trace: [ 326.349126][ T8437] [ 326.349131][ T8437] dump_stack_lvl+0x100/0x190 [ 326.349150][ T8437] should_fail_ex.cold+0x5/0xa [ 326.349166][ T8437] _copy_from_user+0x2e/0xd0 [ 326.349183][ T8437] copy_msghdr_from_user+0x9f/0x4c0 [ 326.349200][ T8437] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 326.349218][ T8437] ? lock_acquire+0x1d1/0x380 [ 326.349230][ T8437] ? get_pid_task+0x2a/0x250 [ 326.349252][ T8437] ___sys_sendmsg+0x106/0x1e0 [ 326.349267][ T8437] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.349282][ T8437] ? get_pid_task+0x106/0x250 [ 326.349302][ T8437] ? find_held_lock+0x2b/0x80 [ 326.349326][ T8437] __sys_sendmsg+0x160/0x210 [ 326.349338][ T8437] ? __pfx___sys_sendmsg+0x10/0x10 [ 326.349356][ T8437] do_syscall_64+0x123/0x790 [ 326.349373][ T8437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.349384][ T8437] RIP: 0033:0x7f05efd9e1d9 [ 326.349393][ T8437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.349404][ T8437] RSP: 002b:00007f05f0caf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.349415][ T8437] RAX: ffffffffffffffda RBX: 00007f05f0025fa0 RCX: 00007f05efd9e1d9 [ 326.349422][ T8437] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 326.349428][ T8437] RBP: 00007f05f0caf090 R08: 0000000000000000 R09: 0000000000000000 [ 326.349435][ T8437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.349441][ T8437] R13: 00007f05f0026038 R14: 00007f05f0025fa0 R15: 00007ffc285b0668 [ 326.349455][ T8437] [ 327.883232][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 327.969289][ T31] audit: type=1400 audit(1791882481.528:971): avc: denied { append } for pid=8455 comm="syz.3.691" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 327.983397][ T31] audit: type=1400 audit(1791882481.538:972): avc: denied { setopt } for pid=8455 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 329.356248][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 329.360277][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.360306][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.365328][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.365350][ T10] usb 2-1: Product: syz [ 329.365362][ T10] usb 2-1: Manufacturer: syz [ 329.365374][ T10] usb 2-1: SerialNumber: syz [ 329.665261][ T8469] CIFS mount error: No usable UNC path provided in device string! [ 329.665261][ T8469] [ 329.665302][ T8469] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 330.339751][ T10] cdc_ncm 2-1:1.0: bind() failure [ 330.361174][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 330.361222][ T10] cdc_ncm 2-1:1.1: bind() failure [ 330.384159][ T10] usb 2-1: USB disconnect, device number 14 [ 331.161618][ T8484] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 331.161644][ T8484] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 332.314089][ T43] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 334.401214][ T31] audit: type=1400 audit(1791882487.958:973): avc: denied { write } for pid=5606 comm="syz-executor" name="130" dev="tmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 334.431261][ T31] audit: type=1400 audit(1791882487.988:974): avc: denied { write } for pid=5606 comm="syz-executor" name="130" dev="tmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 334.682281][ T31] audit: type=1400 audit(1791882488.238:975): avc: denied { write } for pid=5606 comm="syz-executor" name="130" dev="tmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 334.682319][ T31] audit: type=1400 audit(1791882488.238:976): avc: denied { write } for pid=5606 comm="syz-executor" name="130" dev="tmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 334.682339][ T31] audit: type=1400 audit(1791882488.238:977): avc: denied { write } for pid=5606 comm="syz-executor" name="130" dev="tmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 335.516202][ T31] audit: type=1400 audit(1791882489.078:978): avc: denied { ioctl } for pid=8521 comm="syz.4.713" path="socket:[18282]" dev="sockfs" ino=18282 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 336.812140][ T8541] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 336.812140][ T8541] [ 336.812288][ T8541] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 336.812373][ T8541] CIFS: Attempting to mount //127.0.0.1/share [ 336.815750][ T8541] CIFS: VFS: Error connecting to socket. Aborting operation. [ 336.815799][ T8541] CIFS: VFS: cifs_mount failed w/return code = -111 [ 337.379699][ T8550] xt_MASQUERADE: bad rangesize 20224 [ 337.573785][ T8553] netlink: 'syz.2.721': attribute type 4 has an invalid length. [ 339.157881][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 339.474224][ T31] audit: type=1400 audit(1791882493.038:979): avc: denied { execute } for pid=8562 comm="syz.4.725" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 341.143836][ T8481] syz.0.697 (8481): drop_caches: 1 [ 341.300640][ T31] audit: type=1400 audit(1791882494.858:980): avc: denied { write } for pid=8571 comm="syz.3.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 341.300657][ T8572] netlink: 16 bytes leftover after parsing attributes in process `syz.3.727'. [ 341.474798][ T31] audit: type=1400 audit(1791882495.038:981): avc: denied { getopt } for pid=8578 comm="syz.3.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 341.505102][ T31] audit: type=1400 audit(1791882495.068:982): avc: denied { append } for pid=8579 comm="syz.0.730" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 341.745610][ T8592] CIFS mount error: No usable UNC path provided in device string! [ 341.745610][ T8592] [ 341.745663][ T8592] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 342.283097][ C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 343.058008][ T8610] fsa4480 0-0042: error -ENODEV: FSA4480 not found [ 343.083567][ T8610] i2c i2c-0: new_device: Instantiated device fsa4480 at 0x42 [ 343.396420][ T8611] CIFS mount error: No usable UNC path provided in device string! [ 343.396420][ T8611] [ 343.396455][ T8611] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 343.896390][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'. [ 344.805997][ T5710] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 345.169396][ T8630] batadv_slave_0: entered promiscuous mode [ 345.843978][ T8629] batadv_slave_0: left promiscuous mode [ 345.863010][ T31] audit: type=1400 audit(1791882499.418:983): avc: denied { setopt } for pid=8626 comm="syz.4.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 345.890716][ T8631] tipc: Cannot configure node identity twice [ 345.901227][ T31] audit: type=1400 audit(1791882499.458:984): avc: denied { read } for pid=8626 comm="syz.4.742" path="socket:[19370]" dev="sockfs" ino=19370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 346.019062][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 346.181326][ T31] audit: type=1400 audit(1791882499.738:985): avc: denied { write } for pid=5609 comm="syz-executor" name="159" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 348.593827][ T8666] CIFS mount error: No usable UNC path provided in device string! [ 348.593827][ T8666] [ 348.593867][ T8666] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 349.421387][ T31] audit: type=1400 audit(1791882502.978:986): avc: denied { write } for pid=5609 comm="syz-executor" name="159" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 349.434449][ T31] audit: type=1400 audit(1791882502.998:987): avc: denied { write } for pid=5609 comm="syz-executor" name="159" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 349.434496][ T31] audit: type=1400 audit(1791882502.998:988): avc: denied { write } for pid=5609 comm="syz-executor" name="159" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 349.435729][ T31] audit: type=1400 audit(1791882502.998:989): avc: denied { write } for pid=5609 comm="syz-executor" name="159" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 349.692987][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 350.955896][ T8677] batadv_slave_0: entered promiscuous mode [ 350.965535][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 351.477476][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 351.616624][ T31] audit: type=1400 audit(1791882505.178:990): avc: denied { write } for pid=5609 comm="syz-executor" name="161" dev="tmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 351.656207][ T31] audit: type=1400 audit(1791882505.218:991): avc: denied { write } for pid=5609 comm="syz-executor" name="161" dev="tmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 351.656257][ T31] audit: type=1400 audit(1791882505.218:992): avc: denied { write } for pid=5609 comm="syz-executor" name="161" dev="tmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 351.656301][ T31] audit: type=1400 audit(1791882505.218:993): avc: denied { write } for pid=5609 comm="syz-executor" name="161" dev="tmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 351.659564][ T31] audit: type=1400 audit(1791882505.218:994): avc: denied { write } for pid=5609 comm="syz-executor" name="161" dev="tmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 352.002145][ T8688] capability: warning: `syz.0.754' uses deprecated v2 capabilities in a way that may be insecure [ 353.354167][ T8706] CIFS mount error: No usable UNC path provided in device string! [ 353.354167][ T8706] [ 353.354189][ T8706] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 355.453379][ T8723] syzkaller0: entered promiscuous mode [ 355.453395][ T8723] syzkaller0: entered allmulticast mode [ 355.765828][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.771'. [ 355.851512][ T31] audit: type=1400 audit(1791882509.408:995): avc: denied { create } for pid=8731 comm="syz.3.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.872792][ T31] audit: type=1400 audit(1791882509.428:996): avc: denied { bind } for pid=8731 comm="syz.3.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.899057][ T31] audit: type=1400 audit(1791882509.458:997): avc: denied { write } for pid=8731 comm="syz.3.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 356.824777][ T31] audit: type=1400 audit(1791882510.388:998): avc: denied { getopt } for pid=8725 comm="syz.2.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 356.893128][ T31] audit: type=1400 audit(1791882510.458:999): avc: denied { ioctl } for pid=8731 comm="syz.3.772" path="/165/proc/kmsg" dev="proc" ino=4026532047 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 357.392823][ T8679] batadv_slave_0: left promiscuous mode [ 357.393745][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'. [ 357.432960][ T8740] ipvlan2: entered allmulticast mode [ 357.432981][ T8740] virt_wifi0: entered allmulticast mode [ 357.434497][ T8740] batman_adv: batadv0: Adding interface: ipvlan2 [ 357.434512][ T8740] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.434624][ T8740] batman_adv: batadv0: Interface activated: ipvlan2 [ 357.625479][ T8748] CIFS mount error: No usable UNC path provided in device string! [ 357.625479][ T8748] [ 357.625499][ T8748] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 358.652078][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 361.350452][ T8764] syz.4.774 (8764) used greatest stack depth: 16872 bytes left [ 362.068338][ T8771] syzkaller0: entered promiscuous mode [ 362.068361][ T8771] syzkaller0: entered allmulticast mode [ 363.146202][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 364.485683][ T8772] syz.1.781 (8772): drop_caches: 1 [ 365.134558][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'. [ 365.278818][ T8818] nbd: couldn't find device at index -2146435068 [ 365.666605][ T31] audit: type=1400 audit(1791882519.208:1000): avc: denied { setopt } for pid=8819 comm="syz.3.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 367.598723][ T8838] syzkaller0: entered promiscuous mode [ 367.598745][ T8838] syzkaller0: entered allmulticast mode [ 368.607731][ T8872] syzkaller0: entered promiscuous mode [ 368.607755][ T8872] syzkaller0: entered allmulticast mode [ 369.227465][ T8879] syzkaller0: entered promiscuous mode [ 369.227481][ T8879] syzkaller0: entered allmulticast mode [ 369.468687][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.813'. [ 371.245171][ T8918] 9pnet_virtio: no channels available for device syz [ 371.246281][ T8918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.823'. [ 371.396462][ T8922] 9pnet_virtio: no channels available for device syz [ 371.397305][ T8922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.825'. [ 372.199220][ T8881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.259559][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.259610][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.604203][ T8940] CIFS mount error: No usable UNC path provided in device string! [ 373.604203][ T8940] [ 373.604218][ T8940] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 373.951882][ T4939] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 375.248253][ T4939] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 375.274904][ T4939] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 375.274946][ T4939] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 375.274972][ T4939] usb 1-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.275008][ T4939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.491910][ T4939] usb 1-1: USB disconnect, device number 18 [ 376.154086][ T8964] netlink: 'syz.0.840': attribute type 32 has an invalid length. [ 376.259169][ T31] audit: type=1400 audit(1791882529.818:1001): avc: denied { write } for pid=5606 comm="syz-executor" name="153" dev="tmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 376.363907][ T8971] tipc: Enabling of bearer rejected, failed to enable media [ 376.500905][ T8974] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 376.500979][ T8974] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 376.514345][ T8975] jffs2: notice: (8975) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 376.542665][ T31] audit: type=1400 audit(1791882530.108:1002): avc: denied { mounton } for pid=8973 comm="syz.1.839" path="/150/file0" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 376.556795][ T31] audit: type=1400 audit(1791882530.108:1003): avc: denied { write } for pid=8973 comm="syz.1.839" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 376.563840][ T31] audit: type=1400 audit(1791882530.108:1004): avc: denied { add_name } for pid=8973 comm="syz.1.839" name="blkio.bfq.idle_time" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 376.565403][ T31] audit: type=1400 audit(1791882530.108:1005): avc: denied { create } for pid=8973 comm="syz.1.839" name="blkio.bfq.idle_time" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 376.639457][ T31] audit: type=1400 audit(1791882530.198:1006): avc: denied { read append open } for pid=8973 comm="syz.1.839" path="/150/file0/blkio.bfq.idle_time" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 381.191039][ T31] audit: type=1326 audit(1791882534.368:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.3.848" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f965719e1d9 code=0x0 [ 381.305816][ T9002] batadv_slave_0: entered promiscuous mode [ 381.306612][ T9000] batadv_slave_0: entered promiscuous mode [ 382.309937][ T8999] batadv_slave_0: left promiscuous mode [ 382.375301][ T31] audit: type=1400 audit(1791882535.938:1008): avc: denied { write } for pid=5606 comm="syz-executor" name="153" dev="tmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 382.379743][ T31] audit: type=1400 audit(1791882535.938:1009): avc: denied { write } for pid=5606 comm="syz-executor" name="153" dev="tmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 382.380574][ T31] audit: type=1400 audit(1791882535.938:1010): avc: denied { write } for pid=5606 comm="syz-executor" name="153" dev="tmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 382.381013][ T9001] batadv_slave_0: left promiscuous mode [ 382.410238][ T31] audit: type=1400 audit(1791882535.968:1011): avc: denied { write } for pid=5606 comm="syz-executor" name="153" dev="tmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 382.500168][ T31] audit: type=1400 audit(1791882536.058:1012): avc: denied { write } for pid=5608 comm="syz-executor" name="210" dev="tmpfs" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 382.684225][ T31] audit: type=1400 audit(1791882536.248:1013): avc: denied { write } for pid=5607 comm="syz-executor" name="151" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 382.920035][ T31] audit: type=1400 audit(1791882536.478:1014): avc: denied { write } for pid=5608 comm="syz-executor" name="210" dev="tmpfs" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 382.920453][ T31] audit: type=1400 audit(1791882536.478:1015): avc: denied { write } for pid=5608 comm="syz-executor" name="210" dev="tmpfs" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 382.920845][ T31] audit: type=1400 audit(1791882536.478:1016): avc: denied { write } for pid=5608 comm="syz-executor" name="210" dev="tmpfs" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 382.921259][ T31] audit: type=1400 audit(1791882536.478:1017): avc: denied { write } for pid=5608 comm="syz-executor" name="210" dev="tmpfs" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 383.086793][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 383.244908][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 383.262940][ T10] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 383.273560][ T10] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 383.273609][ T10] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 383.273634][ T10] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 383.273659][ T10] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 383.276144][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.276165][ T10] usb 5-1: Product: syz [ 383.276177][ T10] usb 5-1: Manufacturer: syz [ 383.276190][ T10] usb 5-1: SerialNumber: syz [ 383.286623][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 383.332399][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input9 [ 383.343184][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'. [ 383.621678][ T9025] input: syz0 as /devices/virtual/input/input11 [ 383.676961][ T10] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 383.676986][ T10] (id 0x00) [ 383.784051][ T10] rc_core: IR keymap rc-imon-pad not found [ 383.784061][ T10] Registered IR keymap rc-empty [ 383.784104][ T10] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 383.784115][ T10] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 383.826777][ T9034] batadv_slave_0: entered promiscuous mode [ 383.935808][ T10] imon:send_packet: packet tx failed (-71) [ 383.954232][ T10] imon 5-1:155.0: remote input dev register failed [ 383.954355][ T10] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 384.003328][ T10] imon 5-1:155.0: unable to initialize intf0, err 0 [ 384.003342][ T10] imon:imon_probe: failed to initialize context! [ 384.003348][ T10] imon 5-1:155.0: unable to register, err -19 [ 384.014873][ T10] usb 5-1: USB disconnect, device number 13 [ 384.816690][ T9033] batadv_slave_0: left promiscuous mode [ 387.275308][ T9056] batadv_slave_0: entered promiscuous mode [ 387.909624][ T9059] batadv_slave_0: left promiscuous mode [ 387.982212][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 387.982229][ T31] audit: type=1400 audit(1791882541.538:1027): avc: denied { write } for pid=5608 comm="syz-executor" name="216" dev="tmpfs" ino=1244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 389.019537][ T31] audit: type=1400 audit(1791882542.578:1028): avc: denied { write } for pid=5610 comm="syz-executor" name="152" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 389.690675][ T31] audit: type=1400 audit(1791882543.248:1029): avc: denied { write } for pid=5610 comm="syz-executor" name="152" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 390.646534][ T31] audit: type=1400 audit(1791882544.208:1030): avc: denied { write } for pid=5610 comm="syz-executor" name="152" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 390.646993][ T31] audit: type=1400 audit(1791882544.208:1031): avc: denied { write } for pid=5610 comm="syz-executor" name="152" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 390.647469][ T31] audit: type=1400 audit(1791882544.208:1032): avc: denied { write } for pid=5610 comm="syz-executor" name="152" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 391.014801][ T31] audit: type=1400 audit(1791882544.578:1033): avc: denied { write } for pid=5608 comm="syz-executor" name="216" dev="tmpfs" ino=1244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 391.015228][ T31] audit: type=1400 audit(1791882544.578:1034): avc: denied { write } for pid=5608 comm="syz-executor" name="216" dev="tmpfs" ino=1244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 391.015595][ T31] audit: type=1400 audit(1791882544.578:1035): avc: denied { write } for pid=5608 comm="syz-executor" name="216" dev="tmpfs" ino=1244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 391.015985][ T31] audit: type=1400 audit(1791882544.578:1036): avc: denied { write } for pid=5608 comm="syz-executor" name="216" dev="tmpfs" ino=1244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 391.159614][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 391.315822][ T9081] FAULT_INJECTION: forcing a failure. [ 391.315822][ T9081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.315855][ T9081] CPU: 0 UID: 0 PID: 9081 Comm: syz.1.876 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.315878][ T9081] Tainted: [L]=SOFTLOCKUP [ 391.315885][ T9081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 391.315894][ T9081] Call Trace: [ 391.315900][ T9081] [ 391.315907][ T9081] dump_stack_lvl+0x100/0x190 [ 391.315939][ T9081] should_fail_ex.cold+0x5/0xa [ 391.315965][ T9081] strncpy_from_user+0x3b/0x2d0 [ 391.315996][ T9081] __do_sys_request_key+0xac/0x3c0 [ 391.316018][ T9081] ? __pfx___do_sys_request_key+0x10/0x10 [ 391.316037][ T9081] ? ksys_write+0x1ac/0x250 [ 391.316068][ T9081] do_syscall_64+0x123/0x790 [ 391.316098][ T9081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.316117][ T9081] RIP: 0033:0x7f05efd9e1d9 [ 391.316131][ T9081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.316148][ T9081] RSP: 002b:00007f05f0caf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 391.316166][ T9081] RAX: ffffffffffffffda RBX: 00007f05f0025fa0 RCX: 00007f05efd9e1d9 [ 391.316179][ T9081] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000040 [ 391.316190][ T9081] RBP: 00007f05f0caf090 R08: 0000000000000000 R09: 0000000000000000 [ 391.316200][ T9081] R10: 0000000002d56ee3 R11: 0000000000000246 R12: 0000000000000001 [ 391.316212][ T9081] R13: 00007f05f0026038 R14: 00007f05f0025fa0 R15: 00007ffc285b0668 [ 391.316244][ T9081] [ 391.555318][ T9088] syzkaller0: entered promiscuous mode [ 391.555340][ T9088] syzkaller0: entered allmulticast mode [ 391.557691][ T9088] tipc: Enabling of bearer rejected, failed to enable media [ 393.020983][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 393.021002][ T31] audit: type=1326 audit(1791882546.178:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.0.879" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd77f79e1d9 code=0x0 [ 393.662917][ T31] audit: type=1400 audit(1791882547.208:1040): avc: denied { name_bind } for pid=9101 comm="syz.1.883" src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 393.853343][ T5618] Bluetooth: hci0: adv larger than maximum supported [ 393.853363][ T5618] Bluetooth: hci0: adv larger than maximum supported [ 393.853377][ T5618] Bluetooth: hci0: Malformed LE Event: 0x0d [ 394.215312][ T31] audit: type=1400 audit(1791882547.778:1041): avc: denied { create } for pid=9101 comm="syz.1.883" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 394.533285][ T31] audit: type=1400 audit(1791882548.088:1042): avc: denied { write } for pid=9101 comm="syz.1.883" name="file0" dev="tmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 394.543025][ T31] audit: type=1400 audit(1791882548.088:1043): avc: denied { open } for pid=9101 comm="syz.1.883" path="/158/file0" dev="tmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 396.728996][ T9123] fuse: Bad value for 'fd' [ 396.932290][ T31] audit: type=1400 audit(1791882550.488:1044): avc: denied { unlink } for pid=5607 comm="syz-executor" name="file0" dev="tmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 397.007641][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 397.040559][ T9136] netlink: 'syz.4.890': attribute type 1 has an invalid length. [ 397.040572][ T9136] netlink: 224 bytes leftover after parsing attributes in process `syz.4.890'. [ 397.135393][ T9139] comedi comedi3: multiq3: I/O base address not correctly aligned [ 397.142682][ T9139] 9pnet_virtio: no channels available for device syz [ 397.162158][ T31] audit: type=1400 audit(1791882550.698:1045): avc: denied { name_bind } for pid=9128 comm="syz.0.880" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 397.507792][ T9132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.531055][ T9132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.683172][ T4939] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 399.469595][ T9151] CIFS mount error: No usable UNC path provided in device string! [ 399.469595][ T9151] [ 399.469666][ T9151] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 400.003897][ T9130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.890'. [ 400.742900][ T4939] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 400.806710][ T9166] fuse: Bad value for 'fd' [ 401.434199][ T31] audit: type=1326 audit(1791882554.998:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.2.899" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1cef9e1d9 code=0x0 [ 401.500669][ T9168] SELinux: policydb version 0 does not match my version range 15-35 [ 401.500698][ T9168] SELinux: failed to load policy [ 401.511177][ T4939] usb 2-1: Using ep0 maxpacket: 32 [ 401.521884][ T4939] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 401.523067][ T4939] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 401.523108][ T4939] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 401.523138][ T4939] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.523162][ T4939] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 401.581630][ T4939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.581655][ T4939] usb 2-1: Product: syz [ 401.581669][ T4939] usb 2-1: Manufacturer: syz [ 401.581683][ T4939] usb 2-1: SerialNumber: syz [ 401.614904][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 401.632451][ T4939] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input12 [ 401.647876][ T9174] can0: slcan on ptm1. [ 401.813183][ T9174] can0 (unregistered): slcan off ptm1. [ 402.003183][ T4939] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 402.003204][ T4939] (id 0x00) [ 403.018661][ T31] audit: type=1326 audit(1791882556.158:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.3.901" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f965719e1d9 code=0x0 [ 405.138868][ T4939] rc_core: IR keymap rc-imon-pad not found [ 405.138896][ T4939] Registered IR keymap rc-empty [ 405.146655][ T4939] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 405.146677][ T4939] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 405.481059][ T4939] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 405.482251][ T4939] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input13 [ 405.552421][ T4939] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:15> initialized [ 405.696875][ T10] usb 2-1: USB disconnect, device number 15 [ 407.201845][ T31] audit: type=1400 audit(1791882560.758:1048): avc: denied { write } for pid=9190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.212724][ T9219] netlink: 56 bytes leftover after parsing attributes in process `syz.4.908'. [ 407.370926][ T31] audit: type=1400 audit(1791882560.928:1049): avc: denied { write } for pid=9226 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.649276][ T31] audit: type=1326 audit(1791882561.818:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9239 comm="syz.1.912" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05efd9e1d9 code=0x0 [ 410.167116][ T31] audit: type=1400 audit(1791882563.728:1051): avc: denied { write } for pid=9230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.273109][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 410.443523][ T25] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 410.444560][ T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 410.444578][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 410.444593][ T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 410.450888][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.450912][ T25] usb 4-1: Product: syz [ 410.450927][ T25] usb 4-1: Manufacturer: syz [ 410.450942][ T25] usb 4-1: SerialNumber: syz [ 410.458750][ T9252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 410.458848][ T9252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 410.496384][ C1] port100 4-1:1.0: NFC: Urb failure (status -71) [ 410.501618][ C1] port100 4-1:1.0: NFC: Urb failure (status -71) [ 410.507859][ T25] port100 4-1:1.0: NFC: Could not get supported command types [ 410.531357][ T31] audit: type=1400 audit(1791882564.098:1052): avc: denied { write } for pid=9259 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.743677][ T9261] ip_tables: iptables: counters copy to user failed while replacing table [ 410.984559][ T5710] usb 4-1: USB disconnect, device number 11 [ 411.453808][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 411.672139][ T9268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=9268 comm=syz.4.915 [ 412.585481][ T4939] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 413.179591][ T31] audit: type=1326 audit(1791882566.738:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9279 comm="syz.2.916" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1cef9e1d9 code=0x0 [ 413.251236][ T9282] FAULT_INJECTION: forcing a failure. [ 413.251236][ T9282] name failslab, interval 1, probability 0, space 0, times 0 [ 413.251258][ T9282] CPU: 1 UID: 0 PID: 9282 Comm: syz.4.920 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.251275][ T9282] Tainted: [L]=SOFTLOCKUP [ 413.251279][ T9282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 413.251287][ T9282] Call Trace: [ 413.251291][ T9282] [ 413.251296][ T9282] dump_stack_lvl+0x100/0x190 [ 413.251316][ T9282] should_fail_ex.cold+0x5/0xa [ 413.251334][ T9282] should_failslab+0xc2/0x120 [ 413.251352][ T9282] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 413.251369][ T9282] ? devinet_init_net+0xf1/0x8d0 [ 413.251386][ T9282] kmemdup_noprof+0x29/0x60 [ 413.251400][ T9282] devinet_init_net+0xf1/0x8d0 [ 413.251415][ T9282] ? __pfx_devinet_init_net+0x10/0x10 [ 413.251429][ T9282] ops_init+0x1e2/0x5f0 [ 413.251444][ T9282] setup_net+0x118/0x3a0 [ 413.251457][ T9282] ? __pfx_setup_net+0x10/0x10 [ 413.251474][ T9282] copy_net_ns+0x345/0x7a0 [ 413.251489][ T9282] create_new_namespaces+0x3ea/0xac0 [ 413.251505][ T9282] unshare_nsproxy_namespaces+0xf2/0x220 [ 413.251520][ T9282] ksys_unshare+0x4a2/0xb30 [ 413.251534][ T9282] ? __pfx_ksys_unshare+0x10/0x10 [ 413.251554][ T9282] __x64_sys_unshare+0x31/0x40 [ 413.251568][ T9282] do_syscall_64+0x123/0x790 [ 413.251585][ T9282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.251596][ T9282] RIP: 0033:0x7fbe50b9e1d9 [ 413.251605][ T9282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.251616][ T9282] RSP: 002b:00007fbe51b43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 413.251627][ T9282] RAX: ffffffffffffffda RBX: 00007fbe50e25fa0 RCX: 00007fbe50b9e1d9 [ 413.251634][ T9282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 413.251640][ T9282] RBP: 00007fbe50c35888 R08: 0000000000000000 R09: 0000000000000000 [ 413.251647][ T9282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.251654][ T9282] R13: 00007fbe50e26038 R14: 00007fbe50e25fa0 R15: 00007fff7bbd64b8 [ 413.251669][ T9282] [ 413.281188][ T4939] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 413.292641][ T4939] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 413.292670][ T4939] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.296187][ T4939] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 413.296207][ T4939] usb 4-1: Product: syz [ 413.296219][ T4939] usb 4-1: Manufacturer: syz [ 413.347472][ T4939] hub 4-1:4.0: USB hub found [ 413.605874][ T4939] hub 4-1:4.0: 2 ports detected [ 413.812922][ T4939] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 413.851456][ T4939] usb 4-1: USB disconnect, device number 12 [ 414.070478][ T9288] input: syz1 as /devices/virtual/input/input14 [ 414.293128][ T31] audit: type=1400 audit(1791882567.858:1054): avc: denied { read } for pid=9292 comm="syz.4.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 414.492155][ T9295] capability: warning: `syz.1.925' uses 32-bit capabilities (legacy support in use) [ 415.483856][ T9318] smpboot: CPU 1 is now offline [ 415.549524][ T9331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9331 comm=syz.2.937 [ 415.789420][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 416.611050][ T9323] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 416.612030][ T9274] ------------[ cut here ]------------ [ 416.612036][ T9274] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 416.612042][ T9274] WARNING: kernel/sched/sched.h:1665 at update_rq_clock+0x40a/0xd20, CPU#0: syz.1.914/9274 [ 416.641345][ T9274] Modules linked in: [ 416.645227][ T9274] CPU: 0 UID: 0 PID: 9274 Comm: syz.1.914 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.655961][ T9274] Tainted: [L]=SOFTLOCKUP [ 416.660257][ T9274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 416.670282][ T9274] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 416.675816][ T9274] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 48 f3 ff 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 416.695393][ T9274] RSP: 0018:ffffc900072f6878 EFLAGS: 00010046 [ 416.701430][ T9274] RAX: 0000000000000000 RBX: ffff8880b833bf00 RCX: 0000000000000001 [ 416.709369][ T9274] RDX: 0000000000000046 RSI: ffffffff8e3bd2cb RDI: ffffffff8c625580 [ 416.717310][ T9274] RBP: ffffc900072f6a18 R08: 0000000000000001 R09: 0000000000000001 [ 416.725257][ T9274] R10: ffff8880b823ca98 R11: 0000006100022800 R12: ffffffff92459904 [ 416.733198][ T9274] R13: ffff8880b833cde0 R14: ffff8880b833bf00 R15: 0000000000000001 [ 416.741138][ T9274] FS: 00007f05f0caf6c0(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 416.750037][ T9274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.756598][ T9274] CR2: 00007fc5e83184e8 CR3: 00000000782ac000 CR4: 00000000003526f0 [ 416.764540][ T9274] Call Trace: [ 416.767793][ T9274] [ 416.770699][ T9274] __schedule+0x1c69/0x6920 [ 416.775176][ T9274] ? __lock_acquire+0x5c0/0x1f40 [ 416.780092][ T9274] ? __pfx___schedule+0x10/0x10 [ 416.784922][ T9274] ? mark_held_locks+0x40/0x70 [ 416.789658][ T9274] preempt_schedule_irq+0x4e/0x90 [ 416.794663][ T9274] irqentry_exit+0x205/0xa10 [ 416.799227][ T9274] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 416.805191][ T9274] RIP: 0010:memcg1_commit_charge+0x103/0x160 [ 416.811163][ T9274] Code: 75 1a 9c 58 f6 c4 02 75 3b 5b 5d 41 5c c3 cc cc cc cc e8 f0 0e 8c ff e9 2a ff ff ff e8 c6 0c 8c ff 9c 58 f6 c4 02 75 2f fb 5b <5d> 41 5c e9 55 16 4f 09 48 c7 c6 80 62 05 8c 48 89 df e8 26 4f d8 [ 416.830752][ T9274] RSP: 0018:ffffc900072f6b30 EFLAGS: 00000246 [ 416.836808][ T9274] RAX: 0000000000000002 RBX: ffffea000137bbc0 RCX: 0000000000000040 [ 416.844761][ T9274] RDX: 0000000000000000 RSI: ffffffff8e3e3486 RDI: ffffffff8c625580 [ 416.852721][ T9274] RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000000 [ 416.860674][ T9274] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801ea90000 [ 416.868624][ T9274] R13: 0000000000000cc0 R14: ffffea000137bbc0 R15: 0000000000000000 [ 416.876580][ T9274] charge_memcg+0xe4/0x210 [ 416.880972][ T9274] __mem_cgroup_charge+0x2b/0x1c0 [ 416.885969][ T9274] shmem_alloc_and_add_folio+0x451/0xd40 [ 416.891574][ T9274] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 416.897696][ T9274] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 416.903647][ T9274] shmem_get_folio_gfp+0x75b/0x1980 [ 416.908816][ T9274] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 416.914416][ T9274] ? vm_normal_page+0x1d1/0x380 [ 416.919238][ T9274] ? __pfx_vm_normal_page+0x10/0x10 [ 416.924409][ T9274] shmem_write_begin+0x1a4/0x420 [ 416.929316][ T9274] ? __pfx_shmem_write_begin+0x10/0x10 [ 416.934754][ T9274] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 416.941586][ T9274] generic_perform_write+0x292/0xa40 [ 416.946858][ T9274] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 416.952654][ T9274] ? __pfx_generic_perform_write+0x10/0x10 [ 416.958443][ T9274] ? file_update_time_flags+0x38c/0x520 [ 416.963972][ T9274] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 416.969759][ T9274] shmem_file_write_iter+0x10e/0x140 [ 416.975018][ T9274] __kernel_write_iter+0x2ac/0x930 [ 416.980105][ T9274] ? __pfx___kernel_write_iter+0x10/0x10 [ 416.985709][ T9274] ? __up_read+0x333/0x980 [ 416.990101][ T9274] ? dump_user_range+0x65e/0xad0 [ 416.995017][ T9274] ? copy_mc_enhanced_fast_string+0x6/0xf [ 417.000709][ T9274] dump_user_range+0x3f9/0xad0 [ 417.005455][ T9274] ? __pfx_dump_user_range+0x10/0x10 [ 417.010716][ T9274] ? __pfx_writenote+0x10/0x10 [ 417.015457][ T9274] ? elf_core_dump+0x1f25/0x3d20 [ 417.020368][ T9274] elf_core_dump+0x2d68/0x3d20 [ 417.025113][ T9274] ? __pfx_elf_core_dump+0x10/0x10 [ 417.030195][ T9274] ? kasan_save_stack+0x3f/0x50 [ 417.035046][ T9274] ? kasan_save_stack+0x30/0x50 [ 417.039868][ T9274] ? kasan_save_track+0x14/0x30 [ 417.044699][ T9274] ? __kasan_kmalloc+0xaa/0xb0 [ 417.049434][ T9274] ? vfs_coredump+0x21f6/0x54a0 [ 417.054255][ T9274] ? get_signal+0x1f2a/0x21e0 [ 417.058900][ T9274] ? arch_do_signal_or_restart+0x91/0x7e0 [ 417.064944][ T9274] ? 0xffffffffff600000 [ 417.069090][ T9274] ? lock_acquire+0x1d1/0x380 [ 417.073736][ T9274] ? get_signal+0x1f2a/0x21e0 [ 417.078387][ T9274] ? vfs_coredump+0x281a/0x54a0 [ 417.083208][ T9274] vfs_coredump+0x281a/0x54a0 [ 417.087866][ T9274] ? __pfx_vfs_coredump+0x10/0x10 [ 417.092876][ T9274] ? __lock_acquire+0x5c0/0x1f40 [ 417.097806][ T9274] ? __lock_acquire+0x5c0/0x1f40 [ 417.102730][ T9274] ? lock_acquire+0x1d1/0x380 [ 417.107382][ T9274] ? unwind_next_frame+0xbd/0x2090 [ 417.112475][ T9274] ? lock_acquire+0x1d1/0x380 [ 417.117129][ T9274] ? bpf_ksym_find+0x128/0x1c0 [ 417.121878][ T9274] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 417.128018][ T9274] ? arch_stack_walk+0xa6/0xf0 [ 417.132761][ T9274] ? __sigqueue_free+0xbe/0x2a0 [ 417.137592][ T9274] ? stack_trace_save+0x8e/0xc0 [ 417.142412][ T9274] ? __pfx_stack_trace_save+0x10/0x10 [ 417.147752][ T9274] ? stack_depot_save_flags+0x27/0x9f0 [ 417.153450][ T9274] ? __lock_acquire+0x5c0/0x1f40 [ 417.158391][ T9274] ? proc_coredump_connector+0x2d3/0x4f0 [ 417.164000][ T9274] ? __pfx_proc_coredump_connector+0x10/0x10 [ 417.169961][ T9274] ? rcu_is_watching+0x13/0xc0 [ 417.174705][ T9274] get_signal+0x1f2a/0x21e0 [ 417.179189][ T9274] ? __pfx_get_signal+0x10/0x10 [ 417.184012][ T9274] ? __pfx_force_sig_fault+0x10/0x10 [ 417.189278][ T9274] arch_do_signal_or_restart+0x91/0x7e0 [ 417.194802][ T9274] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 417.200936][ T9274] irqentry_exit+0x402/0xa10 [ 417.205503][ T9274] asm_exc_page_fault+0x26/0x30 [ 417.210321][ T9274] RIP: 0033:0x0 [ 417.213751][ T9274] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 417.221079][ T9274] RSP: 002b:00002000000004c8 EFLAGS: 00010217 [ 417.227111][ T9274] RAX: 0000000000000000 RBX: 00007f05f0025fa0 RCX: 00007f05efd9e1d9 [ 417.235051][ T9274] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000020000 [ 417.242998][ T9274] RBP: 00007f05efe35888 R08: 0000200000000300 R09: 0000200000000300 [ 417.250936][ T9274] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 417.258874][ T9274] R13: 00007f05f0026038 R14: 00007f05f0025fa0 R15: 00007ffc285b0668 [ 417.266824][ T9274] [ 417.269821][ T9274] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 417.277071][ T9274] CPU: 0 UID: 0 PID: 9274 Comm: syz.1.914 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.287795][ T9274] Tainted: [L]=SOFTLOCKUP [ 417.292088][ T9274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 417.302109][ T9274] Call Trace: [ 417.305368][ T9274] [ 417.308278][ T9274] dump_stack_lvl+0x100/0x190 [ 417.312931][ T9274] vpanic+0x553/0x970 [ 417.316882][ T9274] ? __pfx_vpanic+0x10/0x10 [ 417.321360][ T9274] panic+0xd1/0xe0 [ 417.325051][ T9274] ? __pfx_panic+0x10/0x10 [ 417.329444][ T9274] check_panic_on_warn.cold+0x19/0x34 [ 417.334794][ T9274] ? update_rq_clock+0x40a/0xd20 [ 417.339704][ T9274] __warn.cold+0x191/0x318 [ 417.344524][ T9274] __report_bug+0x30f/0x440 [ 417.349001][ T9274] ? update_rq_clock+0x40a/0xd20 [ 417.353917][ T9274] ? __pfx___report_bug+0x10/0x10 [ 417.358912][ T9274] ? pick_eevdf+0x23e/0x880 [ 417.363403][ T9274] ? update_rq_clock+0x40a/0xd20 [ 417.368315][ T9274] report_bug+0xb3/0x220 [ 417.372531][ T9274] ? update_rq_clock+0x40a/0xd20 [ 417.377443][ T9274] handle_bug+0x16a/0x2a0 [ 417.381741][ T9274] exc_invalid_op+0x17/0x50 [ 417.386222][ T9274] asm_exc_invalid_op+0x1a/0x20 [ 417.391040][ T9274] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 417.396559][ T9274] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 48 f3 ff 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 417.416140][ T9274] RSP: 0018:ffffc900072f6878 EFLAGS: 00010046 [ 417.422175][ T9274] RAX: 0000000000000000 RBX: ffff8880b833bf00 RCX: 0000000000000001 [ 417.430115][ T9274] RDX: 0000000000000046 RSI: ffffffff8e3bd2cb RDI: ffffffff8c625580 [ 417.438053][ T9274] RBP: ffffc900072f6a18 R08: 0000000000000001 R09: 0000000000000001 [ 417.445993][ T9274] R10: ffff8880b823ca98 R11: 0000006100022800 R12: ffffffff92459904 [ 417.453938][ T9274] R13: ffff8880b833cde0 R14: ffff8880b833bf00 R15: 0000000000000001 [ 417.461889][ T9274] ? update_rq_clock+0x9c/0xd20 [ 417.466720][ T9274] __schedule+0x1c69/0x6920 [ 417.471195][ T9274] ? __lock_acquire+0x5c0/0x1f40 [ 417.476117][ T9274] ? __pfx___schedule+0x10/0x10 [ 417.480945][ T9274] ? mark_held_locks+0x40/0x70 [ 417.485681][ T9274] preempt_schedule_irq+0x4e/0x90 [ 417.490678][ T9274] irqentry_exit+0x205/0xa10 [ 417.495243][ T9274] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 417.501199][ T9274] RIP: 0010:memcg1_commit_charge+0x103/0x160 [ 417.507153][ T9274] Code: 75 1a 9c 58 f6 c4 02 75 3b 5b 5d 41 5c c3 cc cc cc cc e8 f0 0e 8c ff e9 2a ff ff ff e8 c6 0c 8c ff 9c 58 f6 c4 02 75 2f fb 5b <5d> 41 5c e9 55 16 4f 09 48 c7 c6 80 62 05 8c 48 89 df e8 26 4f d8 [ 417.526908][ T9274] RSP: 0018:ffffc900072f6b30 EFLAGS: 00000246 [ 417.532953][ T9274] RAX: 0000000000000002 RBX: ffffea000137bbc0 RCX: 0000000000000040 [ 417.540893][ T9274] RDX: 0000000000000000 RSI: ffffffff8e3e3486 RDI: ffffffff8c625580 [ 417.548833][ T9274] RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000000 [ 417.556787][ T9274] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801ea90000 [ 417.564738][ T9274] R13: 0000000000000cc0 R14: ffffea000137bbc0 R15: 0000000000000000 [ 417.572698][ T9274] charge_memcg+0xe4/0x210 [ 417.577098][ T9274] __mem_cgroup_charge+0x2b/0x1c0 [ 417.582108][ T9274] shmem_alloc_and_add_folio+0x451/0xd40 [ 417.587717][ T9274] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 417.593840][ T9274] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 417.599791][ T9274] shmem_get_folio_gfp+0x75b/0x1980 [ 417.604963][ T9274] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 417.610564][ T9274] ? vm_normal_page+0x1d1/0x380 [ 417.615394][ T9274] ? __pfx_vm_normal_page+0x10/0x10 [ 417.620576][ T9274] shmem_write_begin+0x1a4/0x420 [ 417.625508][ T9274] ? __pfx_shmem_write_begin+0x10/0x10 [ 417.630952][ T9274] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 417.637782][ T9274] generic_perform_write+0x292/0xa40 [ 417.643043][ T9274] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 417.648825][ T9274] ? __pfx_generic_perform_write+0x10/0x10 [ 417.654608][ T9274] ? file_update_time_flags+0x38c/0x520 [ 417.660130][ T9274] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 417.665910][ T9274] shmem_file_write_iter+0x10e/0x140 [ 417.671168][ T9274] __kernel_write_iter+0x2ac/0x930 [ 417.676251][ T9274] ? __pfx___kernel_write_iter+0x10/0x10 [ 417.681865][ T9274] ? __up_read+0x333/0x980 [ 417.686273][ T9274] ? dump_user_range+0x65e/0xad0 [ 417.691187][ T9274] ? copy_mc_enhanced_fast_string+0x6/0xf [ 417.696887][ T9274] dump_user_range+0x3f9/0xad0 [ 417.701625][ T9274] ? __pfx_dump_user_range+0x10/0x10 [ 417.706887][ T9274] ? __pfx_writenote+0x10/0x10 [ 417.711634][ T9274] ? elf_core_dump+0x1f25/0x3d20 [ 417.716550][ T9274] elf_core_dump+0x2d68/0x3d20 [ 417.721313][ T9274] ? __pfx_elf_core_dump+0x10/0x10 [ 417.726399][ T9274] ? kasan_save_stack+0x3f/0x50 [ 417.731233][ T9274] ? kasan_save_stack+0x30/0x50 [ 417.736061][ T9274] ? kasan_save_track+0x14/0x30 [ 417.740881][ T9274] ? __kasan_kmalloc+0xaa/0xb0 [ 417.745623][ T9274] ? vfs_coredump+0x21f6/0x54a0 [ 417.750445][ T9274] ? get_signal+0x1f2a/0x21e0 [ 417.755090][ T9274] ? arch_do_signal_or_restart+0x91/0x7e0 [ 417.760786][ T9274] ? 0xffffffffff600000 [ 417.764931][ T9274] ? lock_acquire+0x1d1/0x380 [ 417.769578][ T9274] ? get_signal+0x1f2a/0x21e0 [ 417.774231][ T9274] ? vfs_coredump+0x281a/0x54a0 [ 417.779051][ T9274] vfs_coredump+0x281a/0x54a0 [ 417.783705][ T9274] ? __pfx_vfs_coredump+0x10/0x10 [ 417.788700][ T9274] ? __lock_acquire+0x5c0/0x1f40 [ 417.793613][ T9274] ? __lock_acquire+0x5c0/0x1f40 [ 417.798532][ T9274] ? lock_acquire+0x1d1/0x380 [ 417.803180][ T9274] ? unwind_next_frame+0xbd/0x2090 [ 417.808266][ T9274] ? lock_acquire+0x1d1/0x380 [ 417.812918][ T9274] ? bpf_ksym_find+0x128/0x1c0 [ 417.817650][ T9274] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 417.823778][ T9274] ? arch_stack_walk+0xa6/0xf0 [ 417.828518][ T9274] ? __sigqueue_free+0xbe/0x2a0 [ 417.833341][ T9274] ? stack_trace_save+0x8e/0xc0 [ 417.838161][ T9274] ? __pfx_stack_trace_save+0x10/0x10 [ 417.843502][ T9274] ? stack_depot_save_flags+0x27/0x9f0 [ 417.848930][ T9274] ? __lock_acquire+0x5c0/0x1f40 [ 417.853859][ T9274] ? proc_coredump_connector+0x2d3/0x4f0 [ 417.859464][ T9274] ? __pfx_proc_coredump_connector+0x10/0x10 [ 417.865441][ T9274] ? rcu_is_watching+0x13/0xc0 [ 417.870186][ T9274] get_signal+0x1f2a/0x21e0 [ 417.874679][ T9274] ? __pfx_get_signal+0x10/0x10 [ 417.879524][ T9274] ? __pfx_force_sig_fault+0x10/0x10 [ 417.884797][ T9274] arch_do_signal_or_restart+0x91/0x7e0 [ 417.890328][ T9274] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 417.896472][ T9274] irqentry_exit+0x402/0xa10 [ 417.901045][ T9274] asm_exc_page_fault+0x26/0x30 [ 417.905868][ T9274] RIP: 0033:0x0 [ 417.909299][ T9274] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 417.916635][ T9274] RSP: 002b:00002000000004c8 EFLAGS: 00010217 [ 417.922670][ T9274] RAX: 0000000000000000 RBX: 00007f05f0025fa0 RCX: 00007f05efd9e1d9 [ 417.930610][ T9274] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000020000 [ 417.938554][ T9274] RBP: 00007f05efe35888 R08: 0000200000000300 R09: 0000200000000300 [ 417.946492][ T9274] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 417.954437][ T9274] R13: 00007f05f0026038 R14: 00007f05f0025fa0 R15: 00007ffc285b0668 [ 417.962411][ T9274] [ 417.965521][ T9274] Kernel Offset: disabled [ 417.969828][ T9274] Rebooting in 86400 seconds..