last executing test programs: 2.795201756s ago: executing program 0 (id=3309): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1.998980247s ago: executing program 0 (id=3323): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short={0x2, 0x2}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 1.835416869s ago: executing program 2 (id=3328): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x1c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x93}, 0xe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 1.690756041s ago: executing program 1 (id=3331): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1.625189412s ago: executing program 0 (id=3332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000240)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="09003e41efd4"}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 1.46668935s ago: executing program 1 (id=3333): r0 = socket(0x1, 0x5, 0x0) close(r0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = epoll_create1(0x80000) listen(r1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)={0xc000201c}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)) 1.466365281s ago: executing program 2 (id=3334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000000)={0xe, &(0x7f0000000140)=[{0x13, '\x00', @data=0x2, 0x400080}]}) 1.408646781s ago: executing program 1 (id=3335): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\x8c\xed~\x97\a\xbe\xfb\v1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tmLt,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\x00'/187, &(0x7f0000000c40)='\xec5\xae\r\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xc9\xe1\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbP2$\xbc\xc9\x89\xb5\n\xd0\x9d\x90-i%\xe2\x94\fH\xf1\xed\r\b\x17\x81>\t\xc30-\xe2\xb3\xb0\'f/\xb4Ap\xa5\x8a\xc3\xe9k\xb3F\xfd\xa2<\x03\x94\x7f\xef\xbeV7\xb1\xf2\x85\xafE\xba\x18K\xb4\xde7\xfb\x8ffw\xe7>>\xf5 \x94\xc74(\xcb\xa3,Nw5\x1d^x\xe9\xd3\x85o\x90\xcc\xb1F\x9d\xa3\x90@\xba6\x1c\xbcp\x93?\x86\tS\xe4q\x0f\xba\xe4\xa5\'\x046\xfbN\xcb\x06\x99\xb7\xeaX\x17\xe8\xdeAF\xf8\xa7\x97\xeb\xcc\xc1\a5C\xe2\x13L\x03\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) tkill(r1, 0xb) 1.31989384s ago: executing program 0 (id=3336): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x80, 0x0, 0x0, 0xa, "eaffffff"}, 0x2000000, 0x2, {}, 0x20800}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xc, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 1.238737624s ago: executing program 0 (id=3337): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.141906901s ago: executing program 4 (id=3339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fallocate(r2, 0x1, 0x100000000, 0x10000) 1.070551499s ago: executing program 2 (id=3341): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f0000000900)={0x267, 0x7d, 0xa, {{0x0, 0x24e, 0x3, 0x5, {0x0, 0x9, 0x5}, 0x100000, 0x2, 0x76, 0x2, 0xac, '\xfc\xf98V\x94\xffz\xc1\x9f9\xd4v\vE\xad\x1c\xc8s\xaa\xeel\xc2\xcb\xa8\xb7e\x10\xef\xd5!\xc8lNI\xca\xb0a=5x\xee\xd2\xa6\x7f\x87\xabrM\xc8\x16\xa6d\xa4\x1e%\xb7\v\xb2E\xd80-o\xa8\xed\xf7Lm\x10\x8d\xb1\x96\x1b\xf0\xebZ@\xf8\x01\xf9\x9d#\xca\xec|q\x9d0\xcbb\x18w;]\xber~\r\xa7y}\xbc\x1eS\xcc7\xff\x0f\x16\xce\xc8\xe6\x92DA\x99T\x01\xb4/o\xc0:\x9azy\x9ar\xaaE+I\xd5\f_!~\xaa\xe1\x19X\xfdt\xb9[+\xee-\x1c\x15\xd9\x02\xa2\xedS\x80\xb5\x8aL\x00'/172, 0xac, '\x00\xf7\x88\a\xb0\x9b$\xe5P=\xcemR\xe3\xa2\aP*d],\xed\n\xbd\xa3V\x99\xf6\xf35\x15\a,;%h\xda 9\xfd\xb0\xe3\x1eOBO25\xd5\xffz90\xd9\xc0v\xb9\x02\'\xf3\x8f~\xc9\x19\x84;e\x83 \xb9\x17\x90\"\x19\xce\xcb!\\\x80\r\xb6\xad\x95\x9c\xb6\nL&,\xdc\v\xb3\xff%O;\x13\x10q\x02\xf5\x1a\xeb\x11\x87\xd7\xe5\x8ac_i\x99\xa8\xd5g\xbb\x99\xf8\xdde\xa8\xec_\x03\x90\xf7\x8d\x8c\xb4q~\xc8/ayVB|\x10\xf0\xa3)\x16\xe9X3\x7f\xa8\xb0W\x10:B\xc6g\x89\xd2\xbc\x02\xf8R\xca\x05\xc9\x15^\\E6\xa2T\x9a', 0x0, '', 0xc3, '=\xb1\x16\xe1\xf1u\xf5\xceB!M\x17\x92\x9b]\xc9\xc9\x8f\x12}X\xe8\xc5\xbb\xce\xaf\xddGY\x13\x01EK\xae>\xde\r\xe0\xc5\x98\xd3M\x15\xab\b\xfao\x93D]i#{\xb8\x9a\x0e\xde\xec\xb5\xb9\x93\xbc\xe7\x8eaZp\x9c\xb4\xdaK>\xa9zp\x89\x1bu\xa8\xe9\xa5;\xc2\xbb\x95\xa7\xf3\xd9t\xb8\xadK\x92\x85\xaas\xcc\xefKF\x86\xa8\xfd\xb7\xf2/\x1f\xc0i\xb2VQ\x84Q\xe0\xcc\xc0\x94\x19\x92 f\x95\xb1\xb5\xed\x8b\x0f\xb7I1h4\x1f\x9e{,R\f\xe2\x01\x9a\"\xdb\x96\x97\xa8\x9a\x03\x15\xb6\xd8j6\x9a\xc7\xb7.\xe2\x8a:K\x1bm\x96\x1b\xf0D\xf1\b\xfd\x8cX \xa5O\x12~(\x8cmM\x96\x10\vQ\x0e\xb5\xd28|A\n\b\x04'}, 0x4, 'GPL\x00', 0xee01}}, 0x267) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 1.033732141s ago: executing program 2 (id=3343): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r0, 0x2) accept4(r0, 0x0, 0x0, 0x80800) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 926.113406ms ago: executing program 4 (id=3344): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x4) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r0, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000240)=""/229, 0xe5, 0x40010010, 0x0, 0x0) 826.62769ms ago: executing program 4 (id=3345): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x17b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020, 0x0, 0x1], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [r4, 0x0, 0x0, r5], [0x2b8], [], [0x3f]}) 799.526464ms ago: executing program 3 (id=3346): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/198, 0xc6}], 0x1, 0x7, 0x9) unshare(0x2a000600) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000280)=ANY=[], 0x8, 0x0) msgsnd(r1, &(0x7f0000000440)=ANY=[], 0x401, 0x0) msgrcv(r1, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) 786.2628ms ago: executing program 1 (id=3347): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ftruncate(r1, 0x800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 751.701755ms ago: executing program 4 (id=3348): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000300)=ANY=[], 0x0) 703.883663ms ago: executing program 3 (id=3349): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f0000000140)='./file0\x00', 0xc) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 689.598111ms ago: executing program 4 (id=3350): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80b04) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2000008, 0xc1}) pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0x0, 0x8000000000008, 0x4, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x8000021000000021, 0x0, 0x0, 0x3, 0x0, 0x401, 0x0, 0x3}, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 680.093442ms ago: executing program 1 (id=3351): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000680)=0x522, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x8000000000000000, 0x1, 0x2a8, 0x3, 0xc39, 0x8, 0x8, 0xffff, 0x2, 0x7b1, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x3ff, 0x3ff, 0x7, 0x7, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x5, 0x4, 0x7, 0x406, 0x3, 0x5, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x0, 0x3, 0x4]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 538.163869ms ago: executing program 3 (id=3352): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 389.420101ms ago: executing program 1 (id=3353): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0xfe}}) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00006fc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xd70, 0x1f280, 0x0, 0x399}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') io_uring_enter(r0, 0x100, 0x9abe, 0x1f, 0x0, 0x0) 313.481063ms ago: executing program 3 (id=3354): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x4855}, 0x24000052) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c000280050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) 259.330639ms ago: executing program 0 (id=3355): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0xbf, 0x8, 0x8, 0x1, 0x0, 0x4, 0xf27, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x5, 0x413, 0x69, 0x2, 0x6, 0x6, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x5}) 124.619207ms ago: executing program 2 (id=3356): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 123.781698ms ago: executing program 3 (id=3357): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) 2.108744ms ago: executing program 3 (id=3358): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000012640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0x400000000008, 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) 1.863506ms ago: executing program 2 (id=3359): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @random="6735dcc79fc5"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 0s ago: executing program 4 (id=3360): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000300)=0x8000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x0, r2, 0x1}, 0x10) kernel console output (not intermixed with test programs): 25 using dummy_hcd [ 223.541926][ T5736] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.568126][ T5736] usb 5-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00 [ 223.588223][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.619505][ T5736] usb 5-1: config 0 descriptor?? [ 223.652032][ T11] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 223.709311][ T11] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 223.817282][ T9883] overlayfs: failed to clone upperpath [ 224.039916][ T9890] netlink: 'syz.1.1592': attribute type 1 has an invalid length. [ 224.040205][ T5736] ntrig 0003:1B96:000D.0019: collection stack underflow [ 224.076398][ T5736] ntrig 0003:1B96:000D.0019: item 0 2 0 12 parsing failed [ 224.102623][ T5736] ntrig 0003:1B96:000D.0019: parse failed [ 224.114986][ T9890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.126617][ T5736] ntrig 0003:1B96:000D.0019: probe with driver ntrig failed with error -22 [ 224.168403][ T9893] 9pnet: p9_errstr2errno: server reported unknown error Ð [ 224.183442][ T9894] bond1: (slave geneve2): making interface the new active one [ 224.196292][ T9894] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 224.261507][ T191] usb 5-1: USB disconnect, device number 25 [ 224.308141][ T9897] fuse: Bad value for 'fd' [ 224.428466][ T5614] Bluetooth: hci4: unexpected event for opcode 0x200c [ 224.533255][ T9913] overlayfs: failed to clone upperpath [ 224.548918][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 224.808449][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1606'. [ 224.830091][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1606'. [ 224.963358][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1606'. [ 224.985810][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1606'. [ 225.185932][ T9927] netlink: 'syz.4.1617': attribute type 6 has an invalid length. [ 225.215466][ T9927] netlink: 'syz.4.1617': attribute type 7 has an invalid length. [ 225.241259][ T9927] netlink: 'syz.4.1617': attribute type 8 has an invalid length. [ 225.267503][ T9927] netlink: 'syz.4.1617': attribute type 15 has an invalid length. [ 225.637075][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 225.637090][ T29] audit: type=1326 audit(1783338776.735:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9940 comm="syz.3.1612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f062a59de59 code=0x0 [ 226.120366][ T9955] Process accounting resumed [ 226.190926][ T9963] fuse: Bad value for 'fd' [ 226.454661][ T9978] fuse: Bad value for 'fd' [ 226.552164][ T9987] netlink: 'syz.2.1629': attribute type 16 has an invalid length. [ 226.566189][ T9982] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.575261][ T9987] netlink: 'syz.2.1629': attribute type 17 has an invalid length. [ 226.624517][ T9982] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.639389][ T9991] netlink: 'syz.4.1634': attribute type 1 has an invalid length. [ 226.694085][ T9994] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 226.731461][ T9987] sit0: left promiscuous mode [ 226.756483][ T9994] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 226.792230][ T9987] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.799443][ T9987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.812885][ T9987] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.820060][ T9987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.852408][ T9987] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 226.873193][ T9994] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 226.883232][ T9994] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 226.893212][ T9994] overlayfs: d_ino too big (330, ino=9223372036854777555, xinobits=3) [ 226.903045][ T9994] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 226.905313][ T9991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.927527][ T9994] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 226.970383][ T9994] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 226.999788][ T9994] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 227.023992][ T9995] bond0: (slave geneve2): making interface the new active one [ 227.044124][ T9994] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 227.078222][ T9994] overlayfs: d_ino too big (dev, ino=4611686018427387923, xinobits=3) [ 227.102276][ T9995] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 227.124010][ T9994] overlayfs: d_ino too big (kernel, ino=4611686018427387911, xinobits=3) [ 228.157351][T10030] netlink: 'syz.3.1651': attribute type 1 has an invalid length. [ 228.195988][T10030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.252733][T10030] bond1: (slave geneve2): making interface the new active one [ 228.264731][T10030] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 228.387948][T10040] fuse: Bad value for 'fd' [ 228.529454][T10050] input: syz1 as /devices/virtual/input/input33 [ 228.702938][ T29] audit: type=1400 audit(1783338779.805:570): avc: denied { name_connect } for pid=10057 comm="syz.4.1663" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 228.911911][T10062] Bluetooth: hci0: service_discovery: too big uuid_count value 33022 [ 229.092727][ T29] audit: type=1400 audit(1783338780.185:571): avc: denied { setopt } for pid=10067 comm="syz.0.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 229.777106][ T29] audit: type=1400 audit(1783338780.875:572): avc: denied { mount } for pid=10090 comm="syz.2.1676" name="/" dev="rpc_pipefs" ino=26301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 230.625959][T10111] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1693'. [ 230.706159][T10109] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10112] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10109] [ 230.807378][T10120] netlink: 'syz.3.1686': attribute type 16 has an invalid length. [ 230.838582][T10120] netlink: 'syz.3.1686': attribute type 17 has an invalid length. [ 231.099477][T10120] bridge0: port 3(syz_tun) entered blocking state [ 231.106584][T10120] bridge0: port 3(syz_tun) entered listening state [ 231.278252][T10120] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.285986][T10120] bridge0: port 1(bridge_slave_0) entered listening state [ 231.302507][T10120] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.310309][T10120] bridge0: port 2(bridge_slave_1) entered listening state [ 231.353509][T10120] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 231.778700][ T30] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 231.786332][ T805] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 231.958845][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 231.965369][ T805] usb 5-1: config 0 has no interfaces? [ 231.975963][ T30] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 231.985437][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.996831][ T805] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 232.006172][ T805] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 232.015016][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.025324][ T805] usb 5-1: Product: syz [ 232.029574][ T805] usb 5-1: Manufacturer: syz [ 232.034164][ T805] usb 5-1: SerialNumber: syz [ 232.039888][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.052059][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.064135][ T805] usb 5-1: config 0 descriptor?? [ 232.084573][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.100543][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.125193][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.138479][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.149777][ T30] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 232.159351][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 232.167487][ T30] usb 4-1: SerialNumber: syz [ 232.180530][ T30] usb 4-1: config 0 descriptor?? [ 232.198020][ T30] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input34 [ 232.286474][ T805] usb 5-1: USB disconnect, device number 26 [ 232.456578][ T4963] bcm5974 4-1:0.0: could not read from device [ 232.515066][ T4963] bcm5974 4-1:0.0: could not read from device [ 232.515371][ T30] usb 4-1: USB disconnect, device number 26 [ 232.543079][ T4963] bcm5974 4-1:0.0: could not read from device [ 232.558150][T10151] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10151 comm=syz.0.1701 [ 232.589119][ T4963] bcm5974 4-1:0.0: could not read from device [ 232.652584][ T29] audit: type=1400 audit(1783338783.755:573): avc: denied { read } for pid=10153 comm="syz.1.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 233.295714][T10166] netlink: 'syz.4.1710': attribute type 21 has an invalid length. [ 233.322509][T10166] netlink: 'syz.4.1710': attribute type 22 has an invalid length. [ 233.338303][T10166] netlink: 'syz.4.1710': attribute type 23 has an invalid length. [ 233.347070][T10166] netlink: 'syz.4.1710': attribute type 25 has an invalid length. [ 233.362289][T10166] netlink: 'syz.4.1710': attribute type 26 has an invalid length. [ 233.371331][T10166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1710'. [ 233.417952][T10169] 9pnet: p9_errstr2errno: server reported unknown error [ 234.265383][T10191] netdevsim netdevsim1 netdevsim2: IPsec offload requires 128 bit authentication [ 234.411162][ T805] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 234.578768][ T805] usb 4-1: Using ep0 maxpacket: 16 [ 234.593181][ T805] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 234.608696][ T805] usb 4-1: config 0 has no interface number 0 [ 234.620997][ T805] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 234.642421][ T805] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 234.664299][ T805] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 234.685425][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.710830][ T805] usb 4-1: Product: syz [ 234.718856][ T805] usb 4-1: Manufacturer: syz [ 234.730934][ T805] usb 4-1: SerialNumber: syz [ 234.769376][ T805] usb 4-1: config 0 descriptor?? [ 234.785868][T10189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 234.797551][T10189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 235.046568][T10189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 235.073192][T10189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 235.090891][ T11] IPVS: starting estimator thread 0... [ 235.203207][T10206] IPVS: using max 51 ests per chain, 122400 per kthread [ 235.309994][ T805] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 235.702793][ T29] audit: type=1400 audit(1783338786.805:574): avc: denied { ioctl } for pid=10217 comm="syz.0.1728" path="socket:[26559]" dev="sockfs" ino=26559 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 235.778190][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 235.788393][T10222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1730'. [ 236.130619][ T805] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 236.151600][ T805] asix 4-1:0.34: probe with driver asix failed with error -71 [ 236.165511][ T805] usb 4-1: USB disconnect, device number 27 [ 236.293985][ T29] audit: type=1400 audit(1783338787.395:575): avc: denied { write } for pid=10229 comm="syz.1.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.564055][T10245] GUP no longer grows the stack in syz.0.1740 (10245): 200000004000-20000000a000 (200000002000) [ 236.576004][T10245] CPU: 0 UID: 0 PID: 10245 Comm: syz.0.1740 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.576034][T10245] Tainted: [L]=SOFTLOCKUP [ 236.576040][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 236.576050][T10245] Call Trace: [ 236.576057][T10245] [ 236.576064][T10245] dump_stack_lvl+0x100/0x190 [ 236.576090][T10245] gup_vma_lookup.cold+0x83/0x96 [ 236.576116][T10245] __get_user_pages+0x241/0x32a0 [ 236.576146][T10245] ? find_held_lock+0x2b/0x80 [ 236.576168][T10245] ? mtree_load+0x311/0xa90 [ 236.576192][T10245] ? __pfx___get_user_pages+0x10/0x10 [ 236.576220][T10245] get_user_pages_remote+0x3d2/0xb10 [ 236.576240][T10245] ? mas_root_expand+0x6f0/0x750 [ 236.576267][T10245] ? __pfx_get_user_pages_remote+0x10/0x10 [ 236.576297][T10245] __access_remote_vm+0x3bb/0x890 [ 236.576320][T10245] ? __pfx___access_remote_vm+0x10/0x10 [ 236.576338][T10245] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 236.576361][T10245] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 236.576388][T10245] proc_pid_cmdline_read+0x552/0x9a0 [ 236.576414][T10245] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 236.576439][T10245] ? rw_verify_area+0xce/0x6d0 [ 236.576461][T10245] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 236.576483][T10245] vfs_readv+0x5d8/0x8d0 [ 236.576511][T10245] ? __pfx_vfs_readv+0x10/0x10 [ 236.576551][T10245] ? __fget_files+0x21f/0x3d0 [ 236.576582][T10245] ? do_preadv+0x1ac/0x270 [ 236.576601][T10245] do_preadv+0x1ac/0x270 [ 236.576622][T10245] ? __pfx_do_preadv+0x10/0x10 [ 236.576651][T10245] do_syscall_64+0x115/0x870 [ 236.576674][T10245] ? clear_bhb_loop+0x40/0x90 [ 236.576696][T10245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.576714][T10245] RIP: 0033:0x7f763d79de59 [ 236.576729][T10245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.576745][T10245] RSP: 002b:00007f763e656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 236.576762][T10245] RAX: ffffffffffffffda RBX: 00007f763da25fa0 RCX: 00007f763d79de59 [ 236.576773][T10245] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 236.576783][T10245] RBP: 00007f763d833e6f R08: 00000000fffffff9 R09: 0000000000000000 [ 236.576793][T10245] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 236.576803][T10245] R13: 00007f763da26038 R14: 00007f763da25fa0 R15: 00007fffe2c34a88 [ 236.576827][T10245] [ 236.883771][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1741'. [ 237.121119][T10262] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=10262 comm=syz.3.1746 [ 237.174999][T10262] netlink: 'syz.3.1746': attribute type 12 has an invalid length. [ 237.252046][T10262] netlink: 'syz.3.1746': attribute type 29 has an invalid length. [ 237.267565][T10262] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1746'. [ 237.278003][T10262] netlink: 'syz.3.1746': attribute type 1 has an invalid length. [ 237.285858][T10262] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1746'. [ 237.521449][ T805] Process accounting resumed [ 237.617117][T10281] Process accounting resumed [ 237.643802][ T5614] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 237.643957][ T5614] Bluetooth: hci3: Malformed LE Event: 0x02 [ 237.848928][ T191] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 238.002882][ T191] usb 5-1: config 1 interface 0 has no altsetting 0 [ 238.003522][T10311] fuse: Bad value for 'fd' [ 238.014526][ T191] usb 5-1: string descriptor 0 read error: -22 [ 238.021983][ T191] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40 [ 238.049153][ T191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.281733][T10324] overlayfs: failed to clone upperpath [ 238.496557][T10334] netlink: 'syz.2.1779': attribute type 12 has an invalid length. [ 238.509169][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'. [ 238.520966][T10334] netlink: 'syz.2.1779': attribute type 12 has an invalid length. [ 238.566699][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'. [ 238.616123][ T191] topre 0003:0853:0148.001A: unknown main item tag 0x0 [ 238.624645][ T191] topre 0003:0853:0148.001A: unknown main item tag 0x0 [ 238.632800][ T191] topre 0003:0853:0148.001A: unknown main item tag 0x0 [ 238.642899][ T191] topre 0003:0853:0148.001A: unknown main item tag 0x0 [ 238.649895][ T191] topre 0003:0853:0148.001A: unknown main item tag 0x0 [ 238.656758][ T191] topre 0003:0853:0148.001A: unknown main item tag 0x0 [ 238.663619][ T191] topre 0003:0853:0148.001A: unknown main item tag 0x0 [ 238.670521][ T191] topre 0003:0853:0148.001A: unknown main item tag 0x0 [ 238.677394][ T191] topre 0003:0853:0148.001A: unknown main item tag 0x0 [ 238.684260][ T191] topre 0003:0853:0148.001A: unknown main item tag 0x0 [ 238.718694][ T191] topre 0003:0853:0148.001A: hidraw0: USB HID vff.7f Device [HID 0853:0148] on usb-dummy_hcd.4-1/input0 [ 238.773247][ T191] usb 5-1: USB disconnect, device number 27 [ 238.807664][T10339] fido_id[10339]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 239.556800][T10355] xt_hashlimit: size too large, truncated to 1048576 [ 240.390900][T10377] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 240.715506][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1798'. [ 241.732955][T10416] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1808'. [ 241.767991][ T29] audit: type=1400 audit(1783338792.865:576): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 241.913604][ T29] audit: type=1400 audit(1783338793.015:577): avc: denied { audit_write } for pid=10427 comm="syz.3.1811" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 242.440235][ T191] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 242.607055][ T191] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 242.628268][ T191] usb 4-1: config 0 has no interface number 0 [ 242.637394][T10442] fuse: Bad value for 'fd' [ 242.649373][ T191] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 242.672231][ T191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.694813][ T191] usb 4-1: Product: syz [ 242.707029][ T191] usb 4-1: Manufacturer: syz [ 242.727083][ T191] usb 4-1: SerialNumber: syz [ 242.743026][ T191] usb 4-1: config 0 descriptor?? [ 242.961623][ T191] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 242.986583][ T191] uvcvideo 4-1:0.31: No valid video chain found. [ 243.011049][ T191] usb 4-1: USB disconnect, device number 28 [ 243.119653][T10468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1831'. [ 244.084852][T10495] netlink: 'syz.1.1842': attribute type 1 has an invalid length. [ 244.401283][ T29] audit: type=1400 audit(1783338795.475:578): avc: denied { read } for pid=5273 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 245.472286][T10557] netlink: 'syz.4.1868': attribute type 1 has an invalid length. [ 245.579988][T10557] bond2: entered promiscuous mode [ 245.588988][T10557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.614760][T10561] bond2: (slave veth3): making interface the new active one [ 245.648006][T10561] veth3: entered promiscuous mode [ 245.658374][T10561] bond2: (slave veth3): Enslaving as an active interface with an up link [ 245.692811][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1875'. [ 246.054946][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1881'. [ 246.308754][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 246.316674][ C0] bridge0: port 3(syz_tun) entered learning state [ 246.539932][T10603] input: syz1 as /devices/virtual/input/input35 [ 246.680137][ T29] audit: type=1400 audit(1783338797.745:579): avc: denied { create } for pid=10611 comm="syz.4.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 246.713181][T10612] lapbether: lapb_data_request error - 4 [ 246.765254][ T29] audit: type=1400 audit(1783338797.745:580): avc: denied { setopt } for pid=10611 comm="syz.4.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 246.831858][ T29] audit: type=1326 audit(1783338797.745:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10606 comm="syz.0.1889" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f763d79de59 code=0x0 [ 246.896383][ T29] audit: type=1400 audit(1783338797.815:582): avc: denied { write } for pid=10611 comm="syz.4.1893" path="socket:[29398]" dev="sockfs" ino=29398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 246.973678][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 247.126506][ T29] audit: type=1400 audit(1783338798.185:583): avc: denied { bind } for pid=10626 comm="syz.2.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 247.440706][T10637] fuse: Bad value for 'fd' [ 247.717637][T10649] overlayfs: failed to clone upperpath [ 247.868143][ T29] audit: type=1400 audit(1783338798.945:584): avc: denied { recv } for pid=10653 comm="syz.4.1910" saddr=10.128.0.169 src=30006 daddr=10.128.0.232 dest=42958 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 248.088696][T10665] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1914'. [ 248.386131][ T4938] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 248.503774][ T29] audit: type=1326 audit(1783338799.595:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10688 comm="syz.1.1924" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 248.562324][ T29] audit: type=1326 audit(1783338799.595:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10688 comm="syz.1.1924" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 248.595956][ T29] audit: type=1326 audit(1783338799.595:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10688 comm="syz.1.1924" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 248.660934][T10698] loop5: detected capacity change from 0 to 2640 [ 248.671012][ T5600] buffer_io_error: 329 callbacks suppressed [ 248.671027][ T5600] Buffer I/O error on dev loop5, logical block 0, async page read [ 248.693848][T10698] Buffer I/O error on dev loop5, logical block 0, async page read [ 248.705310][ T29] audit: type=1326 audit(1783338799.595:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10688 comm="syz.1.1924" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 248.705359][ T29] audit: type=1326 audit(1783338799.595:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10688 comm="syz.1.1924" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 248.705398][ T29] audit: type=1326 audit(1783338799.595:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10688 comm="syz.1.1924" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 248.794800][ T5600] Buffer I/O error on dev loop5, logical block 0, async page read [ 248.803048][ T5600] Buffer I/O error on dev loop5, logical block 0, async page read [ 248.870722][ T5600] Buffer I/O error on dev loop5, logical block 0, async page read [ 248.879042][ T5600] Buffer I/O error on dev loop5, logical block 0, async page read [ 248.890315][T10698] Buffer I/O error on dev loop5, logical block 0, async page read [ 248.898231][T10698] Buffer I/O error on dev loop5, logical block 0, async page read [ 248.911245][T10707] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 248.928203][T10707] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 248.936682][T10698] loop5: unable to read partition table [ 248.966992][T10698] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 248.996895][ T4978] ldm_validate_partition_table(): Disk read failed. [ 249.003800][ T4978] Dev loop5: unable to read RDB block 0 [ 249.009688][ T4978] loop5: unable to read partition table [ 249.146954][T10710] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 249.169567][T10716] all: renamed from lo (while UP) [ 249.314376][T10725] fuse: Bad value for 'fd' [ 249.469464][T10739] overlayfs: failed to clone upperpath [ 249.698726][ T4938] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 249.718740][ T4938] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 249.731426][ T4938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.781773][ T4938] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 250.157993][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.353584][T10766] overlayfs: failed to clone upperpath [ 250.668419][T10784] 9pnet: p9_errstr2errno: server reported unknown error [ 250.871762][ T4938] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 251.035704][T10807] netdevsim netdevsim0 netdevsim2: IPsec offload requires 128 bit authentication [ 251.095060][ T4938] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 251.103252][ T4938] stv0680 4-1:4.0: last error: 116, command = 0xe2 [ 251.117757][T10801] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1970'. [ 251.128122][ T4938] usb 4-1: USB disconnect, device number 29 [ 251.356677][T10819] overlayfs: failed to clone upperpath [ 252.021288][ T805] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 252.264600][T10864] 8021q: adding VLAN 0 to HW filter on device .` [ 252.281675][ T805] usb 4-1: Using ep0 maxpacket: 32 [ 252.294728][ T805] usb 4-1: config 3 has an invalid interface number: 160 but max is 0 [ 252.346617][ T805] usb 4-1: config 3 has no interface number 0 [ 252.349794][T10864] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 252.361523][ T805] usb 4-1: config 3 interface 160 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 252.390317][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 252.390332][ T29] audit: type=1400 audit(1783338803.485:654): avc: denied { egress } for pid=24 comm="kworker/1:0" saddr=fe80::1c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 252.422444][ T805] usb 4-1: config 3 interface 160 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 252.435954][ T805] usb 4-1: config 3 interface 160 has no altsetting 0 [ 252.443041][ T29] audit: type=1400 audit(1783338803.485:655): avc: denied { sendto } for pid=24 comm="kworker/1:0" saddr=fe80::1c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 252.469379][ T805] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 252.488666][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.498203][ T805] usb 4-1: Product: syz [ 252.507598][ T805] usb 4-1: Manufacturer: syz [ 252.522131][ T805] usb 4-1: SerialNumber: syz [ 252.546693][T10834] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 252.561299][T10873] fuse: Bad value for 'fd' [ 252.827288][T10896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2009'. [ 252.910728][T10898] geneve3: entered promiscuous mode [ 253.244209][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2014'. [ 253.379797][ T805] usbhid 4-1:3.160: couldn't find an input interrupt endpoint [ 253.431915][ T805] usb 4-1: USB disconnect, device number 30 [ 254.037926][T10921] fuse: Bad value for 'fd' [ 254.477693][ T29] audit: type=1400 audit(1783338805.555:656): avc: denied { mounton } for pid=10942 comm="syz.1.2029" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.584846][ T29] audit: type=1400 audit(1783338805.655:657): avc: denied { map } for pid=10952 comm="syz.0.2033" path="socket:[29974]" dev="sockfs" ino=29974 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 255.092202][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'. [ 255.859704][ T191] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 256.000130][T11013] fuse: Bad value for 'fd' [ 256.007397][ T29] audit: type=1400 audit(1783338807.065:658): avc: denied { setattr } for pid=11009 comm="syz.2.2061" name="file0" dev="tmpfs" ino=2256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 256.043154][ T29] audit: type=1400 audit(1783338807.065:659): avc: denied { bind } for pid=11012 comm="syz.0.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 256.365877][T11028] netlink: 'syz.0.2068': attribute type 16 has an invalid length. [ 256.374231][T11028] netlink: 'syz.0.2068': attribute type 17 has an invalid length. [ 256.447433][T11028] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.454612][T11028] bridge0: port 1(bridge_slave_0) entered listening state [ 256.513296][ T191] usb 5-1: Using ep0 maxpacket: 16 [ 256.515979][T11028] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 256.682884][ T29] audit: type=1400 audit(1783338807.775:660): avc: denied { ioctl } for pid=11041 comm="syz.0.2073" path="socket:[28663]" dev="sockfs" ino=28663 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 256.768896][ T29] audit: type=1326 audit(1783338807.825:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11043 comm="syz.0.2074" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f763d79de59 code=0x0 [ 256.835433][ T5708] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 256.887829][T11049] xt_hashlimit: size too large, truncated to 1048576 [ 257.152105][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2080'. [ 257.158627][ T191] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.171851][ T191] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.178460][ T191] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 257.178511][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2080'. [ 257.187497][ T191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.201880][ T191] usb 5-1: config 0 descriptor?? [ 257.212070][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2080'. [ 257.221537][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2080'. [ 257.254114][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 257.267140][T11061] netlink: 'syz.2.2081': attribute type 29 has an invalid length. [ 257.274961][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 257.285078][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 257.293960][T11061] netlink: 'syz.2.2081': attribute type 29 has an invalid length. [ 257.301774][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 257.484149][ T5708] usb 4-1: config 0 has no interfaces? [ 257.494641][ T5708] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 257.505904][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.520627][ T5708] usb 4-1: Product: syz [ 257.525267][ T5708] usb 4-1: Manufacturer: syz [ 257.531338][ T5708] usb 4-1: SerialNumber: syz [ 257.562204][ T5708] usb 4-1: config 0 descriptor?? [ 257.791004][ T191] nzxt-smart2 0003:1E71:2009.001B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 257.933480][T11036] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 257.970307][ T30] usb 4-1: USB disconnect, device number 31 [ 257.996899][T11076] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 258.222031][ T5708] usb 5-1: USB disconnect, device number 28 [ 258.427045][T11089] netlink: 'syz.1.2091': attribute type 11 has an invalid length. [ 258.445306][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2091'. [ 258.455839][T11089] netlink: 'syz.1.2091': attribute type 11 has an invalid length. [ 258.470673][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2091'. [ 258.653095][ T29] audit: type=1400 audit(1783338809.755:662): avc: denied { write } for pid=11102 comm="syz.2.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.708664][ T29] audit: type=1400 audit(1783338809.805:663): avc: denied { getopt } for pid=11104 comm="syz.1.2100" lport=40847 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 258.870742][ T805] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 258.886454][ T29] audit: type=1326 audit(1783338809.975:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.4.2103" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33c79de59 code=0x7ffc0000 [ 258.979483][ T29] audit: type=1326 audit(1783338810.025:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.4.2103" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33c79de59 code=0x7ffc0000 [ 259.036553][ T29] audit: type=1326 audit(1783338810.025:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.4.2103" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33c79de59 code=0x7ffc0000 [ 259.140386][ T805] usb 4-1: unable to get BOS descriptor or descriptor too short [ 259.152020][ T29] audit: type=1326 audit(1783338810.025:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.4.2103" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33c79de59 code=0x7ffc0000 [ 259.152192][ T805] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.178463][ T29] audit: type=1326 audit(1783338810.025:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.4.2103" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd33c79de59 code=0x7ffc0000 [ 259.178507][ T29] audit: type=1326 audit(1783338810.025:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.4.2103" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33c79de59 code=0x7ffc0000 [ 259.178544][ T29] audit: type=1326 audit(1783338810.025:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.4.2103" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33c79de59 code=0x7ffc0000 [ 259.178583][ T29] audit: type=1326 audit(1783338810.085:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.4.2103" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd33c79de59 code=0x7ffc0000 [ 259.299598][T11119] ref_ctr_offset mismatch. inode: 0x7de offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa0000000a00000a [ 259.384863][ T805] usb 4-1: string descriptor 0 read error: -22 [ 259.400466][T11123] fuse: Bad value for 'fd' [ 259.406704][ T805] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 259.448903][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.808295][ T11] IPVS: starting estimator thread 0... [ 260.116782][T11147] IPVS: using max 48 ests per chain, 115200 per kthread [ 260.188717][T11163] macvtap1: entered promiscuous mode [ 260.200113][T11163] macvtap1: entered allmulticast mode [ 260.205628][T11163] veth1_vlan: entered allmulticast mode [ 260.304989][T11163] macvtap2: entered promiscuous mode [ 260.331970][T11163] macvtap2: entered allmulticast mode [ 260.496787][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2132'. [ 260.577735][T11175] netlink: 75 bytes leftover after parsing attributes in process `syz.1.2132'. [ 260.831977][T11186] overlayfs: failed to clone upperpath [ 261.032460][T11198] fuse: Bad value for 'fd' [ 261.109677][T11204] netlink: 'syz.2.2144': attribute type 1 has an invalid length. [ 261.126924][T11204] netlink: 'syz.2.2144': attribute type 4 has an invalid length. [ 261.141208][T11204] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.2144'. [ 261.735518][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 261.742163][ C0] bridge0: topology change detected, propagating [ 261.748695][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.755891][ C0] bridge0: topology change detected, propagating [ 261.924440][T11235] overlayfs: failed to clone upperpath [ 261.965681][T11237] fuse: fd is not a fuse device [ 262.016792][T11241] xt_hashlimit: size too large, truncated to 1048576 [ 262.324671][T11257] netlink: 'syz.1.2167': attribute type 4 has an invalid length. [ 262.370415][ T5614] Bluetooth: hci3: unexpected event for opcode 0x0401 [ 262.385834][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.385887][ C0] bridge0: topology change detected, propagating [ 263.242725][ T5708] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 263.700824][ T5708] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 263.710549][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.732274][ T5708] usb 5-1: config 0 descriptor?? [ 263.741718][ T5708] cp210x 5-1:0.0: cp210x converter detected [ 264.093094][T11310] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.163219][ T5708] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 264.203860][ T5708] usb 5-1: cp210x converter now attached to ttyUSB0 [ 264.401219][T11321] usb 5-1: USB disconnect, device number 29 [ 264.423292][T11321] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 264.434095][T11310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.473599][T11310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.606526][T11321] cp210x 5-1:0.0: device disconnected [ 264.787150][T11310] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 264.881859][ T1176] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.905268][ T1176] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.954769][ T1176] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.997949][ T1176] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.057370][ T1176] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.084148][ T1176] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.116950][ T1176] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.146502][ T1176] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.250700][T11352] fuse: fd is not a fuse device [ 265.639968][T11098] usb 4-1: 1:1: usb_set_interface failed (-110) [ 265.653896][T11324] usb 4-1: USB disconnect, device number 32 [ 266.449152][ T5614] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 266.460794][ T5614] Bluetooth: hci3: Injecting HCI hardware error event [ 266.468996][ T5614] Bluetooth: hci3: hardware error 0x00 [ 267.127021][T11432] overlayfs: failed to clone upperpath [ 267.226808][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 267.226824][ T29] audit: type=1400 audit(1783338818.305:684): avc: denied { read } for pid=11435 comm="syz.1.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.232707][T11439] lo: Caught tx_queue_len zero misconfig [ 267.369295][T11322] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 267.491990][ T29] audit: type=1400 audit(1783338818.585:685): avc: denied { read } for pid=11445 comm="syz.4.2227" name="file1" dev="tmpfs" ino=2117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 267.581878][ T29] audit: type=1400 audit(1783338818.585:686): avc: denied { watch watch_reads } for pid=11445 comm="syz.4.2227" path="/397/file1" dev="tmpfs" ino=2117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 267.640659][T11322] usb 4-1: Using ep0 maxpacket: 8 [ 267.647217][T11322] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.659152][T11322] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 267.680678][T11322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.706145][T11322] usb 4-1: config 0 descriptor?? [ 267.731244][T11322] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 268.034808][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2238'. [ 268.058727][T11470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.066203][T11470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.095159][T11470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.114530][T11470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.336286][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2244'. [ 268.470767][ T5614] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 268.481091][T11494] 9p: Bad value for 'rfdno' [ 268.488129][ T29] audit: type=1400 audit(1783338819.575:687): avc: denied { create } for pid=11491 comm="syz.0.2248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 268.602929][T11498] fuse: fd is not a fuse device [ 268.754765][T11507] xfrm1: entered allmulticast mode [ 268.760378][ T29] audit: type=1400 audit(1783338819.855:688): avc: denied { setattr } for pid=11504 comm="syz.4.2255" name="RAWv6" dev="sockfs" ino=31524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 268.798077][T11507] ip6gretap1: entered promiscuous mode [ 268.870782][ T29] audit: type=1400 audit(1783338819.955:689): avc: denied { listen } for pid=11510 comm="syz.4.2257" lport=38092 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 269.236200][T11322] gspca_vc032x: reg_w err -71 [ 269.241960][T11322] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 269.269950][T11322] usb 4-1: USB disconnect, device number 33 [ 269.394952][ T29] audit: type=1400 audit(1783338820.495:690): avc: denied { write } for pid=11529 comm="syz.4.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 270.229848][ T29] audit: type=1326 audit(1783338821.305:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11563 comm="syz.0.2280" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763d79de59 code=0x7ffc0000 [ 270.257885][ T29] audit: type=1326 audit(1783338821.305:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11563 comm="syz.0.2280" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763d79de59 code=0x7ffc0000 [ 270.289439][ T29] audit: type=1326 audit(1783338821.305:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11563 comm="syz.0.2280" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763d79de59 code=0x7ffc0000 [ 271.775234][T11617] fuse: Bad value for 'fd' [ 271.908665][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 272.188421][T11618] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 272.262838][T11640] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2307'. [ 272.317900][T11643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11643 comm=syz.2.2307 [ 272.383632][T11643] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2307'. [ 272.402362][T11645] fuse: fd is not a fuse device [ 273.274394][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 273.274411][ T29] audit: type=1400 audit(1783338824.375:879): avc: denied { map } for pid=11671 comm="syz.4.2320" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 273.798031][T11677] loop2: detected capacity change from 0 to 7 [ 273.825713][T11677] Dev loop2: unable to read RDB block 7 [ 273.838366][T11677] loop2: AHDI p1 p2 p3 [ 273.843380][T11677] loop2: partition table partially beyond EOD, truncated [ 273.852290][T11677] loop2: p1 start 1601398130 is beyond EOD, truncated [ 273.860850][T11677] loop2: p2 start 1702059890 is beyond EOD, truncated [ 274.034254][T11692] overlayfs: failed to clone lowerpath [ 274.046700][T11692] overlayfs: failed to clone lowerpath [ 274.616010][T11710] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 274.952838][T11720] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 275.481849][T11730] overlayfs: failed to clone lowerpath [ 275.517483][T11730] overlayfs: failed to clone lowerpath [ 275.761746][T11741] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 276.056830][T11745] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 276.667668][T11775] overlayfs: failed to clone upperpath [ 276.689577][T11780] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 277.131697][T11799] netlink: 'syz.2.2368': attribute type 1 has an invalid length. [ 277.205283][T11799] bond1: entered promiscuous mode [ 277.212746][T11799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.245487][T11802] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.266223][T11802] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 277.290709][T11802] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 277.305648][T11802] bond1: (slave ip6gre1): making interface the new active one [ 277.324334][T11802] ip6gre1: entered promiscuous mode [ 277.343440][T11802] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 277.833251][T11827] lo: entered allmulticast mode [ 277.838367][T11827] tunl0: entered allmulticast mode [ 277.853494][T11827] gre0: entered allmulticast mode [ 277.860905][T11827] gretap0: entered allmulticast mode [ 277.866328][T11827] erspan0: entered allmulticast mode [ 277.872146][T11827] ip_vti0: entered allmulticast mode [ 277.877578][T11827] ip6_vti0: entered allmulticast mode [ 277.883430][T11827] sit0: entered allmulticast mode [ 277.915202][T11827] ip6tnl0: entered allmulticast mode [ 277.925596][T11827] ip6gre0: entered allmulticast mode [ 277.952134][T11827] syz_tun: entered allmulticast mode [ 277.967213][T11827] ip6gretap0: entered allmulticast mode [ 277.981857][T11827] bridge0: entered allmulticast mode [ 277.997614][T11827] vcan0: entered allmulticast mode [ 278.010976][T11827] bond0: entered allmulticast mode [ 278.023536][T11827] bond_slave_0: entered allmulticast mode [ 278.040044][T11827] bond_slave_1: entered allmulticast mode [ 278.055767][T11827] team0: entered allmulticast mode [ 278.067763][T11827] team_slave_0: entered allmulticast mode [ 278.084048][T11827] team_slave_1: entered allmulticast mode [ 278.118017][T11827] dummy0: entered allmulticast mode [ 278.136552][T11827] nlmon0: entered allmulticast mode [ 278.153187][T11827] batadv0: entered allmulticast mode [ 278.170942][T11827] vxcan0: entered allmulticast mode [ 278.186263][T11827] vxcan1: entered allmulticast mode [ 278.208872][T11827] veth0: entered allmulticast mode [ 278.221953][T11827] veth1: entered allmulticast mode [ 278.236303][T11827] wg0: entered allmulticast mode [ 278.253958][T11827] wg1: entered allmulticast mode [ 278.261826][T11827] wg2: entered allmulticast mode [ 278.268535][T11827] veth0_to_bridge: entered allmulticast mode [ 278.279932][T11827] veth0_to_bond: entered allmulticast mode [ 278.286066][T11827] veth1_to_bond: entered allmulticast mode [ 278.295042][T11827] veth0_to_team: entered allmulticast mode [ 278.301380][T11827] veth1_to_team: entered allmulticast mode [ 278.307459][T11827] veth0_to_batadv: entered allmulticast mode [ 278.326532][T11827] batadv_slave_0: entered allmulticast mode [ 278.341234][T11827] veth1_to_batadv: entered allmulticast mode [ 278.348120][T11827] batadv_slave_1: entered allmulticast mode [ 278.354390][T11827] xfrm0: entered allmulticast mode [ 278.365802][T11827] veth0_to_hsr: entered allmulticast mode [ 278.373001][T11827] hsr_slave_0: entered allmulticast mode [ 278.379110][T11827] veth1_to_hsr: entered allmulticast mode [ 278.385037][T11827] hsr_slave_1: entered allmulticast mode [ 278.391857][T11827] hsr0: entered allmulticast mode [ 278.397085][T11827] veth1_virt_wifi: entered allmulticast mode [ 278.403550][T11827] veth0_virt_wifi: entered allmulticast mode [ 278.409877][T11827] virt_wifi0: entered allmulticast mode [ 278.415646][T11827] veth1_vlan: entered allmulticast mode [ 278.421621][T11827] veth0_vlan: entered allmulticast mode [ 278.427350][T11827] vlan0: entered allmulticast mode [ 278.432891][T11827] vlan1: entered allmulticast mode [ 278.438206][T11827] macvlan0: entered allmulticast mode [ 278.445112][T11827] macvlan1: entered allmulticast mode [ 278.450875][T11827] ipvlan0: entered allmulticast mode [ 278.456353][T11827] ipvlan1: entered allmulticast mode [ 278.462102][T11827] veth1_macvtap: entered allmulticast mode [ 278.468106][T11827] veth0_macvtap: entered allmulticast mode [ 278.474365][T11827] macvtap0: entered allmulticast mode [ 278.480090][T11827] macsec0: entered allmulticast mode [ 278.485548][T11827] geneve0: entered allmulticast mode [ 278.491556][T11827] geneve1: entered allmulticast mode [ 278.497036][T11827] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 278.504920][T11827] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 278.512650][T11827] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 278.520362][T11827] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 278.566332][T11827] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 278.576469][ T29] audit: type=1400 audit(1783338829.655:880): avc: denied { connect } for pid=11836 comm="syz.4.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 278.606732][T11827] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 278.613943][T11827] ip6erspan0: entered allmulticast mode [ 278.619590][T11827] @: entered allmulticast mode [ 278.624444][T11827] gre1: entered allmulticast mode [ 278.643128][T11827] ipip0: entered allmulticast mode [ 278.648397][T11827] ipip1: entered allmulticast mode [ 278.653632][T11827] sit1: entered allmulticast mode [ 278.659072][T11827] ip6gretap1: entered allmulticast mode [ 278.677115][T11827] bond1: entered allmulticast mode [ 278.682310][T11827] geneve2: entered allmulticast mode [ 278.687794][T11827] sit2: entered allmulticast mode [ 278.692933][T11827] gtp0: entered allmulticast mode [ 278.832049][ T29] audit: type=1400 audit(1783338829.935:881): avc: denied { bind } for pid=11846 comm="syz.3.2389" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 278.886521][ T29] audit: type=1400 audit(1783338829.955:882): avc: denied { name_bind } for pid=11846 comm="syz.3.2389" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 278.912426][ T29] audit: type=1400 audit(1783338829.955:883): avc: denied { node_bind } for pid=11846 comm="syz.3.2389" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 279.122334][ T29] audit: type=1400 audit(1783338830.225:884): avc: denied { map } for pid=11855 comm="syz.4.2392" path="socket:[32744]" dev="sockfs" ino=32744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 279.355194][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2396'. [ 279.419469][T11322] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 279.424951][T11866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.503515][T11869] overlayfs: failed to clone upperpath [ 279.519984][T11871] tipc: Started in network mode [ 279.524879][T11871] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 279.534318][T11871] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 279.544311][T11871] tipc: Enabled bearer , priority 10 [ 279.690498][T11322] usb 4-1: Using ep0 maxpacket: 32 [ 279.700690][T11322] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 279.709090][T11322] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 279.730290][T11322] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 279.760841][T11322] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 279.775050][T11322] usb 4-1: config 0 interface 0 has no altsetting 0 [ 279.783727][T11322] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 279.797643][T11322] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 279.806455][T11322] usb 4-1: Product: syz [ 279.810652][T11322] usb 4-1: Manufacturer: syz [ 279.815237][T11322] usb 4-1: SerialNumber: syz [ 279.823768][T11322] usb 4-1: config 0 descriptor?? [ 279.837841][T11322] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 279.852761][T11322] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 279.964850][T11893] overlayfs: failed to clone upperpath [ 280.184227][T11322] usb 4-1: USB disconnect, device number 34 [ 280.190223][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 280.197003][T11861] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 280.218104][T11900] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 280.265705][T11322] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 280.560945][T11334] tipc: Node number set to 1 [ 280.833594][T11919] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 281.026351][T11931] raw_sendmsg: syz.3.2422 forgot to set AF_INET. Fix it! [ 281.363360][T11948] fuse: Bad value for 'fd' [ 281.401381][T11953] macvtap1: entered promiscuous mode [ 281.410897][T11953] macvtap1: entered allmulticast mode [ 281.450292][ T29] audit: type=1400 audit(1783338832.515:885): avc: denied { accept } for pid=11954 comm="syz.4.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 281.459963][T11953] macvtap2: entered promiscuous mode [ 281.478141][T11953] macvtap2: entered allmulticast mode [ 281.792804][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2451'. [ 281.899274][ T11] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 281.955662][ T76] nci: nci_ntf_packet: unknown ntf opcode 0x102 [ 282.063939][ T11] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 282.075712][ T11] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 282.085907][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 282.094869][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 282.106092][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 282.403483][ T11] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 282.413094][ T11] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 282.423079][ T11] usb 5-1: Product: syz [ 282.427708][ T11] usb 5-1: Manufacturer: syz [ 282.454403][ T11] cdc_wdm 5-1:1.0: skipping garbage [ 282.462124][ T11] cdc_wdm 5-1:1.0: skipping garbage [ 282.472395][ T11] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 282.480002][ T11] cdc_wdm 5-1:1.0: Unknown control protocol [ 282.655387][T11987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.706428][ T11] usb 5-1: USB disconnect, device number 30 [ 282.786895][ T29] audit: type=1400 audit(1783338833.885:886): avc: denied { associate } for pid=12014 comm="syz.2.2453" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 282.978952][T12022] fuse: Bad value for 'fd' [ 283.282070][ T29] audit: type=1400 audit(1783338834.385:887): avc: denied { create } for pid=12032 comm="syz.3.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 283.328747][ T29] audit: type=1400 audit(1783338834.395:888): avc: denied { write } for pid=12032 comm="syz.3.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 283.389407][ T29] audit: type=1400 audit(1783338834.485:889): avc: denied { read append } for pid=12037 comm="syz.3.2463" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 283.749686][ T5614] Bluetooth: hci4: command 0x0c1a tx timeout [ 283.861447][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 283.861462][ T29] audit: type=1400 audit(1783338834.965:891): avc: denied { write } for pid=12042 comm="syz.4.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 284.096422][ T29] audit: type=1326 audit(1783338835.185:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12050 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5259de59 code=0x7ffc0000 [ 284.122942][ T29] audit: type=1326 audit(1783338835.185:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12050 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5259de59 code=0x7ffc0000 [ 284.212271][ T29] audit: type=1326 audit(1783338835.185:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12050 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5259de59 code=0x7ffc0000 [ 284.253647][ T29] audit: type=1326 audit(1783338835.185:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12050 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2b5259de59 code=0x7ffc0000 [ 284.291577][ T29] audit: type=1326 audit(1783338835.185:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12050 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5259de59 code=0x7ffc0000 [ 284.319178][ T29] audit: type=1326 audit(1783338835.185:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12050 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5259de59 code=0x7ffc0000 [ 284.352400][ T29] audit: type=1326 audit(1783338835.235:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12050 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5259de59 code=0x7ffc0000 [ 284.378844][ T29] audit: type=1326 audit(1783338835.235:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12050 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2b5259de59 code=0x7ffc0000 [ 284.486525][ T29] audit: type=1326 audit(1783338835.235:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12050 comm="syz.2.2468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2b5259de59 code=0x7ffc0000 [ 284.676889][T12069] 9p: Could not find request transport: fd0x0000000000000003 [ 284.833913][T12086] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 284.841134][T12086] overlayfs: failed to set xattr on upper [ 284.858581][T12086] overlayfs: ...falling back to redirect_dir=nofollow. [ 284.865476][T12086] overlayfs: ...falling back to metacopy=off. [ 284.871540][T12086] overlayfs: ...falling back to index=off. [ 284.877339][T12086] overlayfs: ...falling back to uuid=null. [ 285.081556][T12097] netlink: 'syz.4.2487': attribute type 1 has an invalid length. [ 285.102414][T12097] netlink: 'syz.4.2487': attribute type 1 has an invalid length. [ 285.875249][T12139] xt_hashlimit: size too large, truncated to 1048576 [ 286.403778][T12164] xt_hashlimit: size too large, truncated to 1048576 [ 286.465726][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2517'. [ 286.496107][T12171] netlink: 'syz.0.2517': attribute type 2 has an invalid length. [ 286.529297][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2517'. [ 286.547817][T12171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2517'. [ 286.604837][T12174] netlink: 'syz.0.2517': attribute type 2 has an invalid length. [ 286.634694][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2517'. [ 287.288715][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.295981][ C1] bridge0: topology change detected, propagating [ 287.545347][T12212] overlayfs: failed to clone upperpath [ 287.711189][T12214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2534'. [ 287.738300][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2534'. [ 288.087926][T12220] tipc: Enabling of bearer rejected, failed to enable media [ 288.473189][T12226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.482749][T12226] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.495749][T12226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.563516][T12226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.572936][T12226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.585922][T12226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 288.634233][T12226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.648022][T12226] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 288.667439][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.674593][ T36] bridge0: port 1(bridge_slave_0) entered listening state [ 288.701205][T12248] fuse: Bad value for 'fd' [ 289.622012][T12284] gretap1: entered promiscuous mode [ 289.883424][T12287] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 290.271676][T12308] netlink: 'syz.0.2571': attribute type 4 has an invalid length. [ 290.288177][T12310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2572'. [ 290.337389][T12310] 8021q: adding VLAN 0 to HW filter on device team1 [ 290.486560][T12322] fuse: fd is not a fuse device [ 290.808727][ T11] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 290.961694][ T11] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 290.971276][ T11] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 290.980013][ T11] usb 5-1: Product: syz [ 290.984347][ T11] usb 5-1: SerialNumber: syz [ 290.992872][ T11] usb 5-1: config 0 descriptor?? [ 291.203171][ T11] hso 5-1:0.0: Failed to find INT IN ep [ 291.422764][T11323] usb 5-1: USB disconnect, device number 31 [ 292.445746][T12348] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 292.916337][T12366] overlayfs: failed to clone upperpath [ 293.041195][ T5780] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 293.209257][ T5780] usb 4-1: Using ep0 maxpacket: 16 [ 293.224186][ T5780] usb 4-1: unable to get BOS descriptor or descriptor too short [ 293.242687][ T5780] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 293.255004][T11333] hid_parser_main: 4005 callbacks suppressed [ 293.255035][T11333] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 293.266000][ T5780] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 293.283135][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.289091][T11333] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 293.301851][ T5780] usb 4-1: Product: syz [ 293.307014][ T5780] usb 4-1: Manufacturer: syz [ 293.312998][T11333] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 293.313508][ T5780] usb 4-1: SerialNumber: syz [ 293.341585][T11333] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 293.369045][T11333] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 293.383817][T11333] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 293.392544][T11333] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 293.400754][T11333] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 293.409028][T11333] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 293.417213][T11333] hid-generic 0006:0004:0009.001C: unknown main item tag 0x0 [ 293.436323][T11333] hid-generic 0006:0004:0009.001C: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 293.534264][T12382] fido_id[12382]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 293.573344][ T5780] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 293.629838][ T5780] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 293.753066][T12406] fuse: fd is not a fuse device [ 294.000827][ T5780] usb 4-1: 2:1 : bogus bTerminalLink 6 [ 294.537433][ T5780] usb 4-1: USB disconnect, device number 35 [ 294.615896][ T5600] udevd[5600]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.687864][T12430] fuse: fd is not a fuse device [ 294.929270][ T11] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 295.039040][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2624'. [ 295.066300][T12457] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 295.094332][T12461] gretap0: entered promiscuous mode [ 295.102681][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 295.115074][T12461] gretap0: left promiscuous mode [ 295.116942][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 295.116954][ T29] audit: type=1400 audit(1783338846.215:907): avc: denied { mounton } for pid=12458 comm="syz.3.2629" path="/file0" dev="bpf" ino=34978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:bpf_t tclass=dir permissive=1 [ 295.156128][T12460] overlayfs: upper fs does not support tmpfile. [ 295.181697][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.194310][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.216288][ T11] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 295.227985][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.252349][ T11] usb 5-1: config 0 descriptor?? [ 295.397098][T12476] fuse: fd is not a fuse device [ 295.723232][ T11] cp2112 0003:10C4:EA90.001D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 295.788482][T12489] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 295.884982][ T11] cp2112 0003:10C4:EA90.001D: Part Number: 0x00 Device Version: 0x00 [ 296.703058][T11324] usb 5-1: USB disconnect, device number 32 [ 297.359840][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2661'. [ 297.388733][T12533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.401356][T12533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.543579][T12542] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2665'. [ 298.776409][T12601] vlan1: entered allmulticast mode [ 298.783057][T12601] veth0_vlan: entered allmulticast mode [ 298.849858][T12601] bond2: left promiscuous mode [ 298.854820][T12601] veth3: left promiscuous mode [ 298.925823][T12604] netlink: 'syz.0.2686': attribute type 1 has an invalid length. [ 299.885291][T12639] fuse: Bad value for 'fd' [ 300.429278][T12649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12649 comm=syz.3.2705 [ 300.497581][T12649] netlink: 'syz.3.2705': attribute type 1 has an invalid length. [ 300.594747][T12649] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.602405][ T29] audit: type=1326 audit(1783338851.655:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.0.2700" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f763d79de59 code=0x0 [ 300.729906][T12649] bond2: (slave ip6erspan0): making interface the new active one [ 300.741448][T12649] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 300.850047][T12669] batadv_slave_1: entered allmulticast mode [ 300.862741][T12668] batadv_slave_1: left allmulticast mode [ 300.942935][T12673] Bluetooth: hci0: unsupported parameter 255 [ 300.952185][T12673] Bluetooth: hci0: unsupported parameter 255 [ 301.823975][T12699] overlayfs: failed to clone upperpath [ 301.854377][T12701] fuse: Bad value for 'fd' [ 302.596742][T12725] fuse: Bad value for 'fd' [ 303.103162][T12741] fuse: Bad value for 'fd' [ 303.210546][ T29] audit: type=1400 audit(1783338854.285:909): avc: denied { ioctl } for pid=12746 comm="syz.3.2746" path="socket:[36640]" dev="sockfs" ino=36640 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 303.644208][ T29] audit: type=1326 audit(1783338854.745:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12738 comm="syz.1.2744" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x0 [ 303.908689][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 304.450629][T11333] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 304.629587][T11333] usb 5-1: Using ep0 maxpacket: 8 [ 304.642299][T12795] overlayfs: failed to clone lowerpath [ 304.657970][T11333] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.696234][T11333] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 304.736677][T11333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.773244][T11333] usb 5-1: config 0 descriptor?? [ 304.798105][T11333] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 305.237506][ T29] audit: type=1326 audit(1783338856.335:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12815 comm="syz.1.2775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 305.329640][ T29] audit: type=1326 audit(1783338856.335:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12815 comm="syz.1.2775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 305.362012][ T29] audit: type=1326 audit(1783338856.335:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12815 comm="syz.1.2775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 305.393931][T12818] tipc: Enabling of bearer rejected, failed to enable media [ 305.403511][ T29] audit: type=1326 audit(1783338856.345:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12815 comm="syz.1.2775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 305.457405][ T29] audit: type=1326 audit(1783338856.345:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12815 comm="syz.1.2775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 305.525354][ T29] audit: type=1326 audit(1783338856.345:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12815 comm="syz.1.2775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 305.568840][ T29] audit: type=1326 audit(1783338856.345:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12815 comm="syz.1.2775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 305.598883][ T29] audit: type=1326 audit(1783338856.345:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12815 comm="syz.1.2775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 305.628989][ T29] audit: type=1326 audit(1783338856.345:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12815 comm="syz.1.2775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 305.655845][ T29] audit: type=1326 audit(1783338856.345:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12815 comm="syz.1.2775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 305.682417][ T29] audit: type=1326 audit(1783338856.345:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12815 comm="syz.1.2775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 305.709328][ T29] audit: type=1326 audit(1783338856.345:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12815 comm="syz.1.2775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 305.749809][ T29] audit: type=1326 audit(1783338856.345:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12815 comm="syz.1.2775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 305.776316][ T29] audit: type=1326 audit(1783338856.345:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12815 comm="syz.1.2775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 305.804546][ T29] audit: type=1326 audit(1783338856.345:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12815 comm="syz.1.2775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7a3d5e68e code=0x7ffc0000 [ 305.831025][ T29] audit: type=1326 audit(1783338856.345:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12815 comm="syz.1.2775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a3d9de59 code=0x7ffc0000 [ 305.990000][T12833] netlink: 'syz.1.2783': attribute type 21 has an invalid length. [ 306.010288][T12833] netlink: 'syz.1.2783': attribute type 21 has an invalid length. [ 306.527820][ T5740] usb 5-1: USB disconnect, device number 33 [ 307.309245][T12872] netlink: 'syz.1.2800': attribute type 1 has an invalid length. [ 307.339825][T12872] netlink: 'syz.1.2800': attribute type 4 has an invalid length. [ 307.373356][T12872] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.2800'. [ 308.162922][T12892] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2807'. [ 308.249549][T12898] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2807'. [ 308.259233][T12898] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.266774][T12898] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.296911][T12893] netlink: 'syz.1.2808': attribute type 5 has an invalid length. [ 308.631201][T12918] Bluetooth: hci0: unsupported parameter 255 [ 308.637225][T12918] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 308.826332][T12929] bridge_slave_0: left promiscuous mode [ 308.839329][T12929] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.876520][T12929] bond0: (slave bond_slave_0): Releasing backup interface [ 308.884151][T12929] bond_slave_0: left allmulticast mode [ 308.905752][T12929] bond0: (slave bond_slave_1): Releasing backup interface [ 308.943577][T12929] team0: Port device team_slave_0 removed [ 308.961982][T12929] team0: Port device team_slave_1 removed [ 308.975830][T12929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.984350][T12929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.996328][T12929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.007435][T12929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.017180][T12929] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 309.146217][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2827'. [ 310.139744][T13006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2850'. [ 310.965421][T13036] netlink: 'syz.1.2864': attribute type 10 has an invalid length. [ 310.984530][T13036] batadv0: left allmulticast mode [ 311.006079][T13036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.012471][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 311.012485][ T29] audit: type=1804 audit(1783338862.105:1003): pid=13037 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2863" name="/newroot/489/file1" dev="tmpfs" ino=2590 res=1 errno=0 [ 311.024818][T13036] batadv0: entered allmulticast mode [ 311.093694][T13041] bond0 (unregistering): Released all slaves [ 311.149925][T13044] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13044 comm=syz.3.2867 [ 311.188122][T13044] netlink: 'syz.3.2867': attribute type 12 has an invalid length. [ 311.197237][T13044] netlink: 'syz.3.2867': attribute type 29 has an invalid length. [ 311.205291][T13044] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2867'. [ 311.214734][T13044] netlink: 'syz.3.2867': attribute type 1 has an invalid length. [ 311.222696][T13044] netlink: 'syz.3.2867': attribute type 2 has an invalid length. [ 311.235336][T13044] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2867'. [ 311.300741][T13050] hsr0 speed is unknown, defaulting to 1000 [ 311.307931][T13050] hsr0 speed is unknown, defaulting to 1000 [ 311.317151][T13050] hsr0 speed is unknown, defaulting to 1000 [ 311.326610][T13050] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 311.342729][T13050] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 311.361460][T13050] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 311.378298][T13050] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 311.396752][T13050] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 311.439315][T13050] hsr0 speed is unknown, defaulting to 1000 [ 311.448420][T13050] hsr0 speed is unknown, defaulting to 1000 [ 311.456227][T13050] hsr0 speed is unknown, defaulting to 1000 [ 311.465138][T13050] hsr0 speed is unknown, defaulting to 1000 [ 311.472952][T13050] hsr0 speed is unknown, defaulting to 1000 [ 311.636145][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.869188][T11324] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 312.140125][T11324] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 312.158747][T13097] hsr0 speed is unknown, defaulting to 1000 [ 312.177221][T11324] usb 4-1: config 0 interface 0 has no altsetting 0 [ 312.204039][T11324] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 312.231759][T11324] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 312.277337][T11324] usb 4-1: Product: syz [ 312.294069][T11324] usb 4-1: Manufacturer: syz [ 312.315255][T11324] usb 4-1: SerialNumber: syz [ 312.334028][T11324] usb 4-1: config 0 descriptor?? [ 312.358845][T11324] usb 4-1: selecting invalid altsetting 0 [ 312.381651][T13106] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 312.647029][T11324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.673742][T11323] usb 4-1: USB disconnect, device number 36 [ 313.030639][T11339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.074809][T13143] coredump: 1445(syz.2.2904): Core dump to core aborted: cannot preserve file permissions [ 313.418671][T11323] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 313.459737][ T29] audit: type=1400 audit(1783338864.565:1004): avc: denied { ioctl } for pid=13160 comm="syz.3.2912" path="socket:[38848]" dev="sockfs" ino=38848 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 313.592507][T11323] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.618653][T11323] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.637294][T11323] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 313.647831][T11323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.674153][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.818721][T11324] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 313.871072][T11323] usb 5-1: usb_control_msg returned -32 [ 313.877084][T11323] usbtmc 5-1:16.0: can't read capabilities [ 313.970186][T11324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 313.980008][T11324] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 313.989756][T11324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 313.999633][T11324] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 314.009746][T11324] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 314.018803][T11324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.029080][T11324] usb 4-1: config 0 descriptor?? [ 314.263926][T11324] hdpvr 4-1:0.0: firmware version 0x8 dated 5 [ 314.465298][T11323] usb 5-1: USB disconnect, device number 34 [ 314.710586][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.746184][T11324] hdpvr 4-1:0.0: Could not setup controls [ 314.759127][T11324] hdpvr 4-1:0.0: registering videodev failed [ 314.782217][T11324] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 314.795687][T11324] usb 4-1: USB disconnect, device number 37 [ 315.327540][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2930'. [ 315.368740][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2930'. [ 315.441504][ T7816] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.447772][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2930'. [ 315.466411][ T7816] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.503725][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2930'. [ 315.512709][ T7816] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.521420][ T7816] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.540476][T13212] 9p: Bad value for 'wfdno' [ 315.750344][T11324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.991020][ T29] audit: type=1400 audit(1783338867.065:1005): avc: denied { mounton } for pid=13235 comm="syz.3.2944" path="/500/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 316.127007][T11339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.284362][T13245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.675102][T13260] hsr0 speed is unknown, defaulting to 1000 [ 316.792440][T11324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.834574][T13267] vivid-002: disconnect [ 316.849349][T13266] vivid-002: reconnect [ 317.118126][T13276] fuse: Bad value for 'fd' [ 317.204802][T13278] loop6: detected capacity change from 0 to 2640 [ 317.237575][ T5600] buffer_io_error: 344 callbacks suppressed [ 317.237590][ T5600] Buffer I/O error on dev loop6, logical block 0, async page read [ 317.315191][ T5600] Buffer I/O error on dev loop6, logical block 0, async page read [ 317.348162][ T5600] Buffer I/O error on dev loop6, logical block 0, async page read [ 317.357143][T11334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.391750][ T5600] Buffer I/O error on dev loop6, logical block 0, async page read [ 317.426918][T13288] fuse: Bad value for 'fd' [ 317.446695][ T5600] Buffer I/O error on dev loop6, logical block 0, async page read [ 317.654178][T13294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.672006][T13294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.703797][T13294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.732784][T13297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.789502][T13297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.195442][T13314] overlayfs: failed to clone upperpath [ 318.498229][T11339] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 318.658837][T11339] usb 5-1: Using ep0 maxpacket: 32 [ 318.683513][T11339] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.708250][T13304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 318.754724][T11339] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.806522][T11339] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 318.843334][T11339] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 318.880681][T11339] usb 5-1: Product: syz [ 318.901095][T11339] usb 5-1: Manufacturer: syz [ 318.954912][T11339] hub 5-1:4.0: USB hub found [ 319.151188][T11339] hub 5-1:4.0: 2 ports detected [ 319.318602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 319.328609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 319.370356][T11339] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 319.459702][T11339] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 319.552769][T11339] usb 5-1: USB disconnect, device number 35 [ 319.553818][T13341] overlayfs: failed to clone upperpath [ 320.566721][T13360] hsr0 speed is unknown, defaulting to 1000 [ 320.578587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 320.808985][ T29] audit: type=1400 audit(1783338871.905:1006): avc: denied { setopt } for pid=13370 comm="syz.0.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 320.842037][T13371] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2997'. [ 321.101495][ T29] audit: type=1400 audit(1783338872.195:1007): avc: denied { read } for pid=13380 comm="syz.0.3001" dev="sockfs" ino=40199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 321.572623][ T29] audit: type=1400 audit(1783338872.675:1008): avc: denied { setattr } for pid=13394 comm="syz.0.3005" name="/" dev="configfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 321.830916][ C1] net_ratelimit: 15 callbacks suppressed [ 321.830933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.896541][T13412] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 322.880326][T11324] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 323.098920][T11324] usb 5-1: Using ep0 maxpacket: 32 [ 323.134644][T11324] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 323.164578][T11324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.194193][T11324] usb 5-1: Product: syz [ 323.205158][T11324] usb 5-1: Manufacturer: syz [ 323.218828][T11324] usb 5-1: SerialNumber: syz [ 323.234344][T11324] usb 5-1: config 0 descriptor?? [ 323.464172][T11324] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 036 [ 323.920431][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3028'. [ 324.460197][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3033'. [ 324.482138][T13479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3033'. [ 324.544437][T13435] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.554534][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3033'. [ 324.566306][T13479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3033'. [ 324.577968][T13435] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.586760][T13435] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.609626][T13435] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.492947][T13508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3044'. [ 325.707024][T11334] usb 5-1: USB disconnect, device number 36 [ 325.718642][T11324] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 325.880071][T11324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 325.898765][T11324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.924156][T11324] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 325.945201][T11324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.966204][T11324] usb 4-1: config 0 descriptor?? [ 325.979280][T13524] netlink: 'syz.2.3052': attribute type 1 has an invalid length. [ 326.056363][T13524] 8021q: adding VLAN 0 to HW filter on device bond3 [ 326.107061][T13524] bond3: (slave gretap1): making interface the new active one [ 326.117107][T13524] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 326.214316][T13538] netlink: 'syz.2.3058': attribute type 4 has an invalid length. [ 326.269908][T13540] bond3 (unregistering): Released all slaves [ 326.307602][T13544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3059'. [ 326.389268][T11324] hid_parser_main: 14 callbacks suppressed [ 326.389287][T11324] elan 0003:04F3:0755.001E: unknown main item tag 0x0 [ 326.410427][T11324] elan 0003:04F3:0755.001E: unknown main item tag 0x0 [ 326.425288][T11324] elan 0003:04F3:0755.001E: failed to start in urb: -90 [ 326.459958][T11324] elan 0003:04F3:0755.001E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 326.646413][T11316] usb 4-1: USB disconnect, device number 38 [ 326.876319][T13568] netlink: 820 bytes leftover after parsing attributes in process `syz.4.3070'. [ 326.885635][T13568] netlink: 820 bytes leftover after parsing attributes in process `syz.4.3070'. [ 327.011784][T13576] hsr0 speed is unknown, defaulting to 1000 [ 327.293910][ T29] audit: type=1326 audit(1783338878.395:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.4.3074" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd33c79de59 code=0x0 [ 327.297798][T13588] hsr0 speed is unknown, defaulting to 1000 [ 327.489168][ T29] audit: type=1326 audit(1783338878.585:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13586 comm="syz.2.3078" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b5259de59 code=0x0 [ 327.848866][T11333] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 327.983935][T13600] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 328.044725][T11333] usb 4-1: Using ep0 maxpacket: 32 [ 328.056325][T11333] usb 4-1: unable to get BOS descriptor or descriptor too short [ 328.072813][T11333] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 328.082596][T11333] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 328.090894][T11333] usb 4-1: config 14 has no interface number 0 [ 328.116129][T11333] usb 4-1: config 14 has no interface number 1 [ 328.122456][T11333] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 328.135361][T11333] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 328.147119][T11333] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 328.158471][T11333] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 328.169833][T11333] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 328.181108][T11333] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.269423][T11333] usb 4-1: config 14 interface 57 has no altsetting 0 [ 328.276230][T11333] usb 4-1: config 14 interface 228 has no altsetting 0 [ 328.436222][T13614] overlayfs: failed to resolve './cgroup': -2 [ 328.741755][T13620] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 329.008160][T13634] hsr0 speed is unknown, defaulting to 1000 [ 329.066828][T11333] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 329.075902][T11333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.084146][T11333] usb 4-1: Product: syz [ 329.088313][T11333] usb 4-1: Manufacturer: syz [ 329.092905][T11333] usb 4-1: SerialNumber: syz [ 329.205547][ T29] audit: type=1400 audit(1783338880.305:1011): avc: denied { set_context_mgr } for pid=13637 comm="syz.4.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 329.262611][T13641] binder: 13637:13641 ioctl c0306201 200000000640 returned -22 [ 329.321534][ T29] audit: type=1326 audit(1783338880.425:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13633 comm="syz.0.3095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f763d79de59 code=0x0 [ 329.493151][T13647] fuse: Bad value for 'fd' [ 329.694181][T11333] legousbtower 4-1:14.57: interrupt endpoints not found [ 329.722997][ T29] audit: type=1400 audit(1783338880.825:1013): avc: denied { rename } for pid=13655 comm="syz.2.3103" name="file0" dev="tmpfs" ino=3491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 330.095009][T11333] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 330.130011][T11333] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 330.337138][T13689] overlayfs: failed to clone upperpath [ 330.431359][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3117'. [ 330.626265][T13702] hsr0 speed is unknown, defaulting to 1000 [ 330.681122][T13704] usb 4-1: LEGO USB Tower reset control request failed [ 330.800034][ T29] audit: type=1326 audit(1783338881.905:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13701 comm="syz.4.3121" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd33c79de59 code=0x0 [ 330.895485][T11320] usb 4-1: USB disconnect, device number 39 [ 330.936783][T11320] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 331.918669][T11320] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 332.108637][T11320] usb 5-1: Using ep0 maxpacket: 32 [ 332.138742][ T29] audit: type=1400 audit(1783338883.235:1015): avc: denied { shutdown } for pid=13727 comm="syz.3.3131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 332.160645][T11320] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 332.173680][T11320] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 332.190342][T11320] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 332.209743][T11320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 332.241463][T11320] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 332.272882][T11320] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 332.308101][T11320] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 332.325807][T11320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.336063][T11320] usb 5-1: config 0 descriptor?? [ 332.563154][T11320] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 332.575632][ T29] audit: type=1400 audit(1783338883.675:1016): avc: denied { bind } for pid=13740 comm="syz.2.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 332.645536][ T29] audit: type=1400 audit(1783338883.675:1017): avc: denied { connect } for pid=13740 comm="syz.2.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 332.841195][T13752] syzkaller0: entered promiscuous mode [ 332.848062][ C1] usblp0: nonzero read bulk status received: -71 [ 332.856974][T11320] usb 5-1: USB disconnect, device number 37 [ 332.882487][T13719] usblp0: removed [ 332.903455][T13752] syzkaller0: entered allmulticast mode [ 333.772767][ T29] audit: type=1326 audit(1783338884.875:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13777 comm="syz.4.3149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33c79de59 code=0x7ffc0000 [ 333.842115][ T29] audit: type=1326 audit(1783338884.875:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13777 comm="syz.4.3149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33c79de59 code=0x7ffc0000 [ 333.901032][ T29] audit: type=1326 audit(1783338884.905:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13777 comm="syz.4.3149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33c79de59 code=0x7ffc0000 [ 333.954867][ T29] audit: type=1326 audit(1783338884.905:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13777 comm="syz.4.3149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33c79de59 code=0x7ffc0000 [ 334.009018][ T29] audit: type=1326 audit(1783338884.905:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13777 comm="syz.4.3149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd33c79de59 code=0x7ffc0000 [ 334.049931][ T29] audit: type=1326 audit(1783338884.905:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13777 comm="syz.4.3149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33c79de59 code=0x7ffc0000 [ 334.076851][ T29] audit: type=1326 audit(1783338884.915:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13777 comm="syz.4.3149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33c79de59 code=0x7ffc0000 [ 334.103615][ T29] audit: type=1326 audit(1783338884.915:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13777 comm="syz.4.3149" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33c79de59 code=0x7ffc0000 [ 334.130270][T13785] lo: Caught tx_queue_len zero misconfig [ 334.207311][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3153'. [ 334.236812][T13787] erspan0: entered promiscuous mode [ 334.242532][T13787] macvtap1: entered promiscuous mode [ 334.247932][T13787] macvtap1: entered allmulticast mode [ 334.268118][T13787] erspan0: entered allmulticast mode [ 334.293138][T13792] erspan0: left allmulticast mode [ 334.315142][T13792] erspan0: left promiscuous mode [ 334.343171][T13792] macvtap1: left promiscuous mode [ 334.352580][T13792] macvtap1: left allmulticast mode [ 334.452807][T13799] fuse: fd is not a fuse device [ 334.737746][T13820] netlink: 'syz.1.3166': attribute type 1 has an invalid length. [ 334.755024][T13820] bond0: entered promiscuous mode [ 334.760294][T13820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.773631][T13820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.780411][T13820] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 334.790913][T13820] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 334.805919][T13820] bond0: (slave vti0): making interface the new active one [ 334.813402][T13820] vti0: entered promiscuous mode [ 334.819875][T13820] bond0: (slave vti0): Enslaving as an active interface with an up link [ 334.851955][T13823] netlink: 'syz.1.3167': attribute type 1 has an invalid length. [ 334.868380][T13823] 8021q: adding VLAN 0 to HW filter on device bond3 [ 334.894324][T13823] bond3: (slave gretap2): making interface the new active one [ 334.916487][T13823] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 334.977738][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3170'. [ 335.088777][T11334] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 335.258762][T11334] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 335.274248][T11334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.283797][T11334] usb 4-1: Product: syz [ 335.288385][T11334] usb 4-1: Manufacturer: syz [ 335.294121][T11334] usb 4-1: SerialNumber: syz [ 335.305457][T11334] usb 4-1: config 0 descriptor?? [ 335.756907][T11334] usb 4-1: Firmware: major: 108, minor: 101, hardware type: UNKNOWN (114) [ 335.938651][T11320] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 335.969341][T11334] usb 4-1: Read permanent extended address 94:0f:ca:bf:a8:bc:0c:22 from device [ 335.994092][T11334] usb 4-1: atusb_probe: initialization failed, error = -524 [ 336.011614][T11334] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 336.106430][T11320] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 336.135059][T11320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.188637][T11320] usb 5-1: Product: syz [ 336.202263][T11320] usb 5-1: Manufacturer: syz [ 336.206864][T13874] hsr0 speed is unknown, defaulting to 1000 [ 336.215281][T11334] usb 4-1: USB disconnect, device number 40 [ 336.229337][T11320] usb 5-1: SerialNumber: syz [ 336.243550][T11320] usb 5-1: config 0 descriptor?? [ 336.504803][T13884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3194'. [ 336.530019][T13884] 8021q: adding VLAN 0 to HW filter on device bond4 [ 336.662892][T11320] usb 5-1: Firmware: major: 108, minor: 101, hardware type: UNKNOWN (114) [ 336.873871][T11320] usb 5-1: no permanent extended address found, random address set [ 336.885532][T11320] usb 5-1: atusb_probe: initialization failed, error = -524 [ 336.901077][T11320] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 337.091825][T11320] usb 5-1: USB disconnect, device number 38 [ 337.496432][T13903] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3201'. [ 337.506992][T13903] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3201'. [ 337.880963][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 337.880978][ T29] audit: type=1326 audit(1783338888.985:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13916 comm="syz.3.3208" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062a59de59 code=0x7ffc0000 [ 337.936966][ T29] audit: type=1326 audit(1783338888.985:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13916 comm="syz.3.3208" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062a59de59 code=0x7ffc0000 [ 337.984562][ T29] audit: type=1326 audit(1783338888.985:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13916 comm="syz.3.3208" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062a59de59 code=0x7ffc0000 [ 338.011373][ T29] audit: type=1326 audit(1783338888.985:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13916 comm="syz.3.3208" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f062a59de59 code=0x7ffc0000 [ 338.037908][ T29] audit: type=1326 audit(1783338888.985:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13916 comm="syz.3.3208" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062a59de59 code=0x7ffc0000 [ 338.064709][ T29] audit: type=1326 audit(1783338888.985:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13916 comm="syz.3.3208" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062a59de59 code=0x7ffc0000 [ 338.103333][ T29] audit: type=1326 audit(1783338888.985:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13916 comm="syz.3.3208" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062a59de59 code=0x7ffc0000 [ 338.129925][ T29] audit: type=1326 audit(1783338888.985:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13916 comm="syz.3.3208" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f062a55e68e code=0x7ffc0000 [ 338.169203][ T29] audit: type=1326 audit(1783338888.985:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13916 comm="syz.3.3208" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f062a59f157 code=0x7ffc0000 [ 338.195748][ T29] audit: type=1326 audit(1783338888.985:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13916 comm="syz.3.3208" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062a59de59 code=0x7ffc0000 [ 338.557369][T13939] erspan0: entered promiscuous mode [ 338.566111][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3218'. [ 338.575216][T13939] erspan0: left promiscuous mode [ 339.063115][T13962] fuse: fd is not a fuse device [ 339.251524][T13969] syz.2.3226: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 339.292674][T13969] CPU: 1 UID: 0 PID: 13969 Comm: syz.2.3226 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.292707][T13969] Tainted: [L]=SOFTLOCKUP [ 339.292714][T13969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 339.292724][T13969] Call Trace: [ 339.292730][T13969] [ 339.292737][T13969] dump_stack_lvl+0x100/0x190 [ 339.292763][T13969] warn_alloc.cold+0x94/0xa8 [ 339.292783][T13969] ? __pfx_warn_alloc+0x10/0x10 [ 339.292813][T13969] ? kasan_save_stack+0x3f/0x50 [ 339.292833][T13969] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 339.292857][T13969] ? xskq_create+0x52/0x1d0 [ 339.292876][T13969] ? xsk_setsockopt+0x743/0xab0 [ 339.292894][T13969] ? do_sock_setsockopt+0xf3/0x1d0 [ 339.292914][T13969] ? __sys_setsockopt+0x195/0x220 [ 339.292939][T13969] ? __x64_sys_setsockopt+0xbd/0x160 [ 339.292962][T13969] ? do_syscall_64+0x115/0x870 [ 339.292984][T13969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.293006][T13969] ? xskq_create+0xfb/0x1d0 [ 339.293027][T13969] __vmalloc_node_range_noprof+0x136c/0x1630 [ 339.293059][T13969] ? xskq_create+0xfb/0x1d0 [ 339.293088][T13969] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 339.293116][T13969] ? kasan_save_track+0x14/0x30 [ 339.293133][T13969] ? __kasan_kmalloc+0xaa/0xb0 [ 339.293151][T13969] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 339.293177][T13969] ? xskq_create+0xfb/0x1d0 [ 339.293198][T13969] vmalloc_user_noprof+0x9e/0xe0 [ 339.293221][T13969] ? xskq_create+0xfb/0x1d0 [ 339.293244][T13969] xskq_create+0xfb/0x1d0 [ 339.293267][T13969] xsk_setsockopt+0x743/0xab0 [ 339.293292][T13969] ? __pfx_xsk_setsockopt+0x10/0x10 [ 339.293312][T13969] ? find_held_lock+0x2b/0x80 [ 339.293337][T13969] ? __fget_files+0x215/0x3d0 [ 339.293366][T13969] ? selinux_socket_setsockopt+0x6a/0x80 [ 339.293388][T13969] ? __pfx_xsk_setsockopt+0x10/0x10 [ 339.293411][T13969] do_sock_setsockopt+0xf3/0x1d0 [ 339.293434][T13969] __sys_setsockopt+0x195/0x220 [ 339.293466][T13969] __x64_sys_setsockopt+0xbd/0x160 [ 339.293490][T13969] ? do_syscall_64+0x90/0x870 [ 339.293521][T13969] ? lockdep_hardirqs_on+0x78/0x100 [ 339.293546][T13969] do_syscall_64+0x115/0x870 [ 339.293571][T13969] ? clear_bhb_loop+0x40/0x90 [ 339.293592][T13969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.293610][T13969] RIP: 0033:0x7f2b5259de59 [ 339.293626][T13969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.293643][T13969] RSP: 002b:00007f2b53399028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 339.293663][T13969] RAX: ffffffffffffffda RBX: 00007f2b52825fa0 RCX: 00007f2b5259de59 [ 339.293675][T13969] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 339.293686][T13969] RBP: 00007f2b52633e6f R08: 0000000000000029 R09: 0000000000000000 [ 339.293697][T13969] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.293708][T13969] R13: 00007f2b52826038 R14: 00007f2b52825fa0 R15: 00007ffe2f3a46d8 [ 339.293734][T13969] [ 339.295556][T13969] Mem-Info: [ 339.812390][T13969] active_anon:51354 inactive_anon:0 isolated_anon:0 [ 339.812390][T13969] active_file:0 inactive_file:56109 isolated_file:0 [ 339.812390][T13969] unevictable:768 dirty:323 writeback:0 [ 339.812390][T13969] slab_reclaimable:13333 slab_unreclaimable:103584 [ 339.812390][T13969] mapped:31701 shmem:39474 pagetables:1833 [ 339.812390][T13969] sec_pagetables:0 bounce:0 [ 339.812390][T13969] kernel_misc_reclaimable:0 [ 339.812390][T13969] free:1246246 free_pcp:9718 free_cma:0 [ 339.941857][T13969] Node 0 active_anon:204716kB inactive_anon:0kB active_file:0kB inactive_file:224208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126780kB dirty:1292kB writeback:0kB shmem:156360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:14836kB pagetables:7300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 340.038713][T13993] netlink: 'syz.3.3229': attribute type 10 has an invalid length. [ 340.054841][T13993] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 340.063612][T13993] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 340.122968][T13969] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 340.332015][T13969] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 340.432516][T13969] lowmem_reserve[]: 0 2473 2473 2473 2473 [ 340.455677][T13969] Node 0 DMA32 free:1022848kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:204572kB inactive_anon:0kB active_file:0kB inactive_file:224208kB unevictable:1536kB writepending:1420kB zspages:0kB present:3129332kB managed:2532368kB mlocked:0kB bounce:0kB free_pcp:38468kB local_pcp:21132kB free_cma:0kB [ 340.545943][T13969] lowmem_reserve[]: 0 0 0 0 0 [ 340.564009][T13969] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 340.655003][T13969] lowmem_reserve[]: 0 0 0 0 0 [ 340.658032][T14005] fuse: fd is not a fuse device [ 340.698010][T13969] Node 1 Normal free:3948360kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 340.778214][T13969] lowmem_reserve[]: 0 0 0 0 0 [ 340.797198][T13969] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 340.827775][T13969] Node 0 DMA32: 833*4kB (UME) 565*8kB (UME) 353*16kB (UM) 854*32kB (UM) 214*64kB (UME) 57*128kB (UME) 32*256kB (UME) 22*512kB (UME) 2*1024kB (M) 23*2048kB (UME) 218*4096kB (UM) = 1023356kB [ 340.878655][T13969] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 340.909611][T13969] Node 1 Normal: 0*4kB 1*8kB (U) 8*16kB (U) 8*32kB (UM) 11*64kB (UM) 4*128kB (UM) 3*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3948360kB [ 340.952039][T13969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.996589][T13969] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 341.006066][T11316] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 341.026119][T13969] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 341.067392][T13969] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 341.096228][T13969] 95579 total pagecache pages [ 341.129218][T13969] 0 pages in swap cache [ 341.144895][T13969] Free swap = 124996kB [ 341.156366][T13969] Total swap = 124996kB [ 341.163823][T11316] usb 4-1: unable to get BOS descriptor or descriptor too short [ 341.175492][T11316] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 341.193751][T13969] 2097051 pages RAM [ 341.202915][T11316] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 341.223172][T13969] 0 pages HighMem/MovableOnly [ 341.234613][T13969] 432248 pages reserved [ 341.245200][T11316] usb 4-1: string descriptor 0 read error: -22 [ 341.247903][T14016] xt_hashlimit: size too large, truncated to 1048576 [ 341.281981][T13969] 0 pages cma reserved [ 341.301121][T11316] usb 4-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 341.330136][T11316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.378434][T11316] usb 4-1: low speed audio streaming not supported [ 341.399757][T11316] usb 4-1: low speed audio streaming not supported [ 341.676323][T11333] usb 4-1: USB disconnect, device number 41 [ 341.834302][T14037] SELinux: failed to load policy [ 342.308902][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 342.632427][T14067] fuse: Bad value for 'fd' [ 342.747352][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3261'. [ 342.758306][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3261'. [ 343.631394][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 343.631424][ T29] audit: type=1400 audit(1783338894.735:1090): avc: denied { create } for pid=14125 comm="syz.2.3282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 343.714045][ T29] audit: type=1400 audit(1783338894.785:1091): avc: denied { bind } for pid=14125 comm="syz.2.3282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 343.787646][ T29] audit: type=1400 audit(1783338894.795:1092): avc: denied { write } for pid=14125 comm="syz.2.3282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 344.012113][T14141] fuse: Bad value for 'fd' [ 344.554108][T14160] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 345.076231][ T29] audit: type=1400 audit(1783338896.175:1093): avc: denied { write } for pid=14178 comm="syz.1.3303" name="file0" dev="tmpfs" ino=4066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 345.115341][T14182] overlayfs: failed to clone upperpath [ 345.120979][ T29] audit: type=1400 audit(1783338896.175:1094): avc: denied { open } for pid=14178 comm="syz.1.3303" path="/774/file0" dev="tmpfs" ino=4066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 345.198132][ T29] audit: type=1400 audit(1783338896.205:1095): avc: denied { ioctl } for pid=14178 comm="syz.1.3303" path="/774/file0" dev="tmpfs" ino=4066 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 345.253778][T14190] fuse: fd is not a fuse device [ 345.729921][T14206] fuse: fd is not a fuse device [ 345.783917][T14204] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 345.996083][T14221] netlink: 'syz.1.3322': attribute type 4 has an invalid length. [ 346.006821][T14221] netlink: 'syz.1.3322': attribute type 4 has an invalid length. [ 346.109031][T14226] hsr0 speed is unknown, defaulting to 1000 [ 346.430424][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3331'. [ 346.439325][T14241] bridge0: left allmulticast mode [ 346.495075][T14241] bridge0: port 1(vlan2) entered blocking state [ 346.501533][T14241] bridge0: port 1(vlan2) entered disabled state [ 346.507934][T14241] vlan2: entered allmulticast mode [ 346.514761][T14241] vlan2: entered promiscuous mode [ 346.520258][T14241] geneve0: entered promiscuous mode [ 346.703942][T14226] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3325'. [ 346.717782][T14226] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 346.766578][T11320] libceph: connect (1)[c::]:6789 error -101 [ 346.774874][T11320] libceph: mon0 (1)[c::]:6789 connect error [ 347.042132][T11320] libceph: connect (1)[c::]:6789 error -101 [ 347.060256][ T29] audit: type=1400 audit(1783338898.165:1096): avc: denied { listen } for pid=14275 comm="syz.2.3343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 347.062946][T11320] libceph: mon0 (1)[c::]:6789 connect error [ 347.086249][ T29] audit: type=1400 audit(1783338898.185:1097): avc: denied { accept } for pid=14275 comm="syz.2.3343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 347.129270][T14255] ceph: No mds server is up or the cluster is laggy [ 347.330084][T13426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.403176][ T29] audit: type=1400 audit(1783338898.505:1098): avc: denied { write } for pid=14292 comm="syz.4.3350" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 347.844075][ T29] audit: type=1400 audit(1783338898.945:1099): avc: denied { setopt } for pid=14305 comm="syz.3.3354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 347.845779][T14308] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3354'. [ 347.988748][T14312] fuse: fd is not a fuse device [ 348.031547][T14315] g5ÜÇŸÅ: renamed from vlan0 (while UP) [ 452.998529][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 453.005501][ C1] rcu: 0-...!: (1 GPs behind) idle=dccc/1/0x4000000000000000 softirq=75127/75128 fqs=6 [ 453.016141][ C1] rcu: (detected by 1, t=10502 jiffies, g=66597, q=775 ncpus=2) [ 453.023851][ C1] Sending NMI from CPU 1 to CPUs 0: [ 453.023876][ C0] NMI backtrace for cpu 0 [ 453.023889][ C0] CPU: 0 UID: 0 PID: 14315 Comm: syz.2.3359 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.023912][ C0] Tainted: [L]=SOFTLOCKUP [ 453.023917][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 453.023925][ C0] RIP: 0010:__lock_acquire+0x851/0x1a40 [ 453.023943][ C0] Code: 05 44 bb 84 14 0f 83 b2 09 00 00 49 be eb 83 b5 80 46 86 c8 61 48 8b 4c 24 08 4c 0f af f1 49 c1 ee 2d 4a 8b 04 f5 a0 8e a7 97 <4e> 8d 2c f5 a0 8e a7 97 48 85 c0 74 1f 48 83 e8 08 48 85 c0 74 16 [ 453.023956][ C0] RSP: 0018:ffffc90000007c58 EFLAGS: 00000006 [ 453.023969][ C0] RAX: ffffffff946a5968 RBX: ffff8880285c0d08 RCX: dde87c7b4ea25df8 [ 453.023978][ C0] RDX: 00000000a0a951fc RSI: 000000000647f4ab RDI: 00000000584ee8af [ 453.023987][ C0] RBP: ffff8880285c0000 R08: 0000000099c2e1a5 R09: 0000000000000000 [ 453.023995][ C0] R10: 0000000000000008 R11: 0000000000000000 R12: dde87c7b4ea25df8 [ 453.024003][ C0] R13: 0000000000000009 R14: 000000000001af95 R15: 0000000000000009 [ 453.024011][ C0] FS: 00007f2b533996c0(0000) GS:ffff888123dec000(0000) knlGS:0000000000000000 [ 453.024025][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.024034][ C0] CR2: 0000001b33612ff8 CR3: 000000004f64d000 CR4: 00000000003526f0 [ 453.024042][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 453.024050][ C0] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 453.024058][ C0] Call Trace: [ 453.024063][ C0] [ 453.024071][ C0] ? do_raw_spin_lock+0x128/0x260 [ 453.024088][ C0] lock_acquire+0x1b9/0x370 [ 453.024102][ C0] ? debug_object_deactivate+0x135/0x3b0 [ 453.024118][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 453.024136][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 453.024151][ C0] ? debug_object_deactivate+0x135/0x3b0 [ 453.024165][ C0] debug_object_deactivate+0x135/0x3b0 [ 453.024179][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 453.024195][ C0] ? timerqueue_linked_add+0x260/0x430 [ 453.024211][ C0] __hrtimer_run_queues+0x2e9/0x9c0 [ 453.024233][ C0] hrtimer_interrupt+0x3e5/0x940 [ 453.024255][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 453.024275][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 453.024292][ C0] [ 453.024296][ C0] [ 453.024301][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 453.024315][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 453.024329][ C0] Code: 05 3b df 7d 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 c4 3c 0f 0f 82 ac 02 00 00 8b 35 4e f8 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd de 7d 12 0f 85 ec 02 00 00 48 83 c4 [ 453.024340][ C0] RSP: 0018:ffffc9000398f340 EFLAGS: 00000206 [ 453.024350][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 453.024358][ C0] RDX: 0000000000000000 RSI: ffffffff8e17cd15 RDI: ffffffff8c400c80 [ 453.024367][ C0] RBP: ffffffff8ebe6040 R08: 00000000c7614b4b R09: 000000000000001e [ 453.024375][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 453.024383][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 453.024397][ C0] ? page_table_check_set+0x477/0x920 [ 453.024412][ C0] ? page_table_check_set+0x477/0x920 [ 453.024428][ C0] page_table_check_set+0x6b/0x920 [ 453.024441][ C0] ? page_table_check_set+0x4f/0x920 [ 453.024457][ C0] __page_table_check_ptes_set+0x27a/0x4e0 [ 453.024471][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 453.024485][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 453.024504][ C0] copy_page_range+0x2197/0x5b20 [ 453.024531][ C0] ? mas_wr_store_entry+0xa1/0x1e80 [ 453.024545][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 453.024566][ C0] ? __pfx___might_resched+0x10/0x10 [ 453.024581][ C0] ? dup_mmap+0xcfe/0x21b0 [ 453.024595][ C0] ? down_write+0x146/0x1f0 [ 453.024614][ C0] ? up_write+0x2e5/0x5c0 [ 453.024630][ C0] dup_mmap+0xd44/0x21b0 [ 453.024649][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 453.024664][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 453.024681][ C0] ? __lock_acquire+0x49f/0x1a40 [ 453.024695][ C0] ? find_held_lock+0x2b/0x80 [ 453.024712][ C0] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 453.024734][ C0] copy_process+0x4588/0x8030 [ 453.024749][ C0] ? futex_unqueue+0x133/0x2c0 [ 453.024769][ C0] ? __pfx_copy_process+0x10/0x10 [ 453.024787][ C0] ? _copy_from_user+0x59/0xd0 [ 453.024802][ C0] kernel_clone+0x176/0x9d0 [ 453.024818][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 453.024838][ C0] __do_sys_clone3+0x214/0x290 [ 453.024854][ C0] ? __pfx___do_sys_clone3+0x10/0x10 [ 453.024873][ C0] ? __might_fault+0xc5/0x140 [ 453.024899][ C0] do_syscall_64+0x115/0x870 [ 453.024920][ C0] ? clear_bhb_loop+0x40/0x90 [ 453.024935][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.024947][ C0] RIP: 0033:0x7f2b5259de59 [ 453.024959][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.024970][ C0] RSP: 002b:00007f2b53398ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 453.024983][ C0] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f2b5259de59 [ 453.024992][ C0] RDX: 00007f2b53398f10 RSI: 0000000000000058 RDI: 00007f2b53398f10 [ 453.025000][ C0] RBP: 00007f2b52633e6f R08: 0000000000000000 R09: 0000000000000058 [ 453.025009][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.025016][ C0] R13: 00007f2b52826038 R14: 00007f2b52825fa0 R15: 00007ffe2f3a46d8 [ 453.025030][ C0] [ 453.025871][ C1] rcu: rcu_preempt kthread starved for 10490 jiffies! g66597 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 453.575118][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 453.585072][ C1] rcu: RCU grace-period kthread stack dump: [ 453.590941][ C1] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 453.604418][ C1] Call Trace: [ 453.607682][ C1] [ 453.610606][ C1] __schedule+0x125c/0x6730 [ 453.615119][ C1] ? __pfx___schedule+0x10/0x10 [ 453.619960][ C1] ? find_held_lock+0x2b/0x80 [ 453.624647][ C1] ? schedule+0x225/0x2c0 [ 453.628972][ C1] schedule+0xdd/0x2c0 [ 453.633034][ C1] schedule_timeout+0x127/0x280 [ 453.637874][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 453.643236][ C1] ? __pfx_process_timeout+0x10/0x10 [ 453.648523][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 453.654322][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 453.659776][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 453.664529][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 453.669814][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 453.674758][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 453.679947][ C1] ? rcu_is_watching+0x12/0xc0 [ 453.684724][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 453.690535][ C1] rcu_gp_kthread+0x179/0x230 [ 453.695209][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 453.700395][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 453.706220][ C1] ? __kthread_parkme+0x18c/0x230 [ 453.711242][ C1] ? kthread+0x13a/0x450 [ 453.715477][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 453.720663][ C1] kthread+0x370/0x450 [ 453.724730][ C1] ? __pfx_kthread+0x10/0x10 [ 453.729315][ C1] ret_from_fork+0x72b/0xd50 [ 453.733906][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 453.739010][ C1] ? __switch_to+0x800/0x10f0 [ 453.743685][ C1] ? __pfx_kthread+0x10/0x10 [ 453.748272][ C1] ret_from_fork_asm+0x1a/0x30 [ 453.753043][ C1] [ 453.756048][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 453.762355][ C1] CPU: 1 UID: 0 PID: 5607 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 453.773363][ C1] Tainted: [L]=SOFTLOCKUP [ 453.777668][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 453.787708][ C1] RIP: 0010:smp_call_function_many_cond+0x589/0x16c0 [ 453.794373][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 a9 95 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 [ 453.813984][ C1] RSP: 0018:ffffc90003807618 EFLAGS: 00000293 [ 453.820040][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fd3abd [ 453.827999][ C1] RDX: ffff888075ae4a80 RSI: ffffffff81fd3a97 RDI: ffff888075ae4a80 [ 453.835958][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 453.843914][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 453.851871][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 453.859833][ C1] FS: 0000555560893500(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 453.868749][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.875320][ C1] CR2: 0000001b33710ff8 CR3: 000000005a862000 CR4: 00000000003526f0 [ 453.883279][ C1] DR0: 000004000002002c DR1: fffeffffff7fff02 DR2: 0000000080000002 [ 453.891234][ C1] DR3: 0000000000000003 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 453.899192][ C1] Call Trace: [ 453.902457][ C1] [ 453.905385][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 453.910584][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 453.916901][ C1] ? ldt_dup_context+0x45/0x300 [ 453.921749][ C1] ? find_held_lock+0x2b/0x80 [ 453.926422][ C1] ? ldt_dup_context+0x1a4/0x300 [ 453.931370][ C1] ? ldt_dup_context+0x1a4/0x300 [ 453.936308][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 453.941496][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 453.946598][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 453.951718][ C1] ? dup_mmap+0x12ec/0x21b0 [ 453.956213][ C1] ? dup_mmap+0x12ec/0x21b0 [ 453.960708][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 453.966246][ C1] ? up_write+0x2e5/0x5c0 [ 453.970568][ C1] dup_mmap+0x1307/0x21b0 [ 453.974904][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 453.979570][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 453.985370][ C1] ? __lock_acquire+0x49f/0x1a40 [ 453.990299][ C1] ? find_held_lock+0x2b/0x80 [ 453.994971][ C1] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 454.000872][ C1] copy_process+0x4588/0x8030 [ 454.005559][ C1] ? __pfx_copy_process+0x10/0x10 [ 454.010576][ C1] ? do_raw_spin_lock+0x128/0x260 [ 454.015605][ C1] kernel_clone+0x176/0x9d0 [ 454.020099][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 454.025121][ C1] ? find_held_lock+0x2b/0x80 [ 454.029790][ C1] ? __might_fault+0xc5/0x140 [ 454.034465][ C1] __do_sys_clone+0xd9/0x120 [ 454.039048][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 454.044257][ C1] do_syscall_64+0x115/0x870 [ 454.048839][ C1] ? clear_bhb_loop+0x40/0x90 [ 454.053509][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.059387][ C1] RIP: 0033:0x7fd33c7c68d2 [ 454.063790][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 454.083385][ C1] RSP: 002b:00007fff38a9a770 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 454.091784][ C1] RAX: ffffffffffffffda RBX: 00007fff38a9a770 RCX: 00007fd33c7c68d2 [ 454.099739][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 454.107698][ C1] RBP: 00007fff38a9a8fc R08: 0000000000000000 R09: 0000000000000001 [ 454.115668][ C1] R10: 00005555608937d0 R11: 0000000000000246 R12: 0000000000000001 [ 454.123640][ C1] R13: 00000000000927c0 R14: 0000000000054f5a R15: 00007fff38a9a950 [ 454.131628][ C1]