last executing test programs: 12m34.927677188s ago: executing program 3 (id=157): socket$pppl2tp(0x18, 0x1, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040), 0x1, 0x40580) close(0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) ptrace(0x10, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/mem_sleep', 0x741201, 0x20) socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) inotify_add_watch(0xffffffffffffffff, &(0x7f00000006c0)='.\x00', 0x400017e) pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff}, 0x80) r3 = add_key(&(0x7f00000008c0)='id_resolver\x00', &(0x7f0000000900)={'syz', 0x3}, &(0x7f0000000940)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x3d) pipe2$watch_queue(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) keyctl$set_timeout(0xf, r3, 0x2) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) tee(r5, r6, 0x404, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5e) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000001d0003006a05000042000000ffffffff0000000005010905a10105091901290a150025017501950a8102950175068103c0000000000000000000000000000000d328962999ff302be6ca188508e169cf9f172414f9635f24"], 0x135) write$UHID_DESTROY(r7, &(0x7f0000000b80), 0x4) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000c00)={0x500, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x3a, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x18}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xffffffff, @mcast1, 0x9ed6}}]}, 0x70}}, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d00)='.\x00', 0x68800, 0x1c) lseek(r8, 0x100, 0x1) 12m31.843707472s ago: executing program 3 (id=159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000038000180060001000a0000000700060073680000080005000100000008000800030000000c0007000000000000000000080009008000000064b3723d5c00ed3bad75aed3c12b9f840bfb904922f703fc7b63b10063f68522a052c8b93135a48d7d65b187ac30d2d2c8e66d19092dc3a125f5783bb30165a6a56a1a3f"], 0x4c}}, 0x0) listen(0xffffffffffffffff, 0xfffffffe) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) 12m19.868364287s ago: executing program 3 (id=173): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0x1, 0x70bd2d, 0xa5dfdbfc}, 0x14}}, 0x4008810) 12m18.449827882s ago: executing program 3 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x22288000, 0x0, 0xfffffffffffffd60, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086203, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000019780)={0x0, 0x0, &(0x7f00000197c0)={&(0x7f0000019980)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000019a40)={0x0, 0x0, &(0x7f0000019a80)={&(0x7f0000019ac0)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) 12m14.591093163s ago: executing program 3 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000002c80)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bc80)={0x0, 0xffffffffffffffd0, 0x0, 0x1, 0x0, 0x0, 0x44820}, 0x8000) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0x5200}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) 12m8.136379687s ago: executing program 3 (id=189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000240)={0x7, 0x0, [{0x80000001, 0x6, 0x4, 0x9, 0x4, 0x390, 0x3}, {0x80000001, 0x40, 0x2, 0x6, 0x5f8e, 0x4, 0x5}, {0x80000007, 0xd40f, 0x4, 0x7, 0x3, 0x2, 0x9}, {0x40000000, 0x1, 0xc, 0x8, 0x0, 0x6, 0x7fd}, {0x40000000, 0x1, 0x0, 0x7ff, 0x1fb5, 0xe, 0x400}, {0x7, 0x7ff, 0x2, 0x20e8c, 0x80008001, 0x2, 0x9}, {0x80000007, 0x71f82364, 0x1, 0x7, 0x1122, 0x1, 0x7f}]}) 11m52.668148409s ago: executing program 32 (id=189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000240)={0x7, 0x0, [{0x80000001, 0x6, 0x4, 0x9, 0x4, 0x390, 0x3}, {0x80000001, 0x40, 0x2, 0x6, 0x5f8e, 0x4, 0x5}, {0x80000007, 0xd40f, 0x4, 0x7, 0x3, 0x2, 0x9}, {0x40000000, 0x1, 0xc, 0x8, 0x0, 0x6, 0x7fd}, {0x40000000, 0x1, 0x0, 0x7ff, 0x1fb5, 0xe, 0x400}, {0x7, 0x7ff, 0x2, 0x20e8c, 0x80008001, 0x2, 0x9}, {0x80000007, 0x71f82364, 0x1, 0x7, 0x1122, 0x1, 0x7f}]}) 9m50.825112469s ago: executing program 2 (id=365): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00'], 0x48}}, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9m40.706585695s ago: executing program 2 (id=376): r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000000)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, 0x0, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) r1 = open(&(0x7f0000000800)='./bus\x00', 0x1c1242, 0x0) ftruncate(r1, 0x2007ffb) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000840), 0x103902, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b3b000/0x400000)=nil) pselect6(0x40, &(0x7f0000000500)={0x9, 0x93, 0x80000001, 0x0, 0x6200000000000000, 0x7, 0xffffffffffffff01, 0x7fff}, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 9m39.439742251s ago: executing program 2 (id=379): socket$kcm(0x10, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f00000104c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x80}}, 0xffffffffffffff2f) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) 9m36.942638714s ago: executing program 2 (id=383): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r4 = add_key$user(&(0x7f00000002c0), 0x0, &(0x7f0000000b80)="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", 0x131, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = add_key$user(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="376e0bc9f206b26502f152f03a63066a166f73b8517b85103afb861c949fe67ad6da27b7cff3ba1a08956c90a447018064f6703e7b99a2d4c25c338e4be4a54d7bbbcfd4b9e6bb9fd8d3dfbe21db0abe094dcacc04933160b868cfa50008509c7c83a53f0c48b76da3037b3dc9c11bb8f8b6536850f596ac233b80465efc9b474d2f03b298", 0x85, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000780)={r4, r5, r4}, 0x0, 0x0, 0x0) r6 = add_key(&(0x7f00000007c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3082010c3081baa003020102020101300a06082a8503070101030230", 0x1c, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000840)={r6}, &(0x7f00000000c0)=ANY=[@ANYBLOB="20686173683d686d616328736861312d517046c1868a7707bb9d63652953ea29024d8563e2c2e677c2d7300000000000009f009e9fc4a28d09000000000000000000000000000000000000000000000000000000e88b8d00c8ab3f00f97c4862f7efbad57eaff544c1ea90fb225505a58a99ad4aa529aa7131d4b006f767c2949541cb8f86320b19c25fd00a510f21acc4d20816193572ac4b0ecf9b851ecdd3379643a222a84c519b1794483051180afadac04632786461dbec5959a4af769e678faea4e9196569ca757ca8609dd17c0d8ada3cca"], 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x41c600, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x400002, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x8c811}, 0x4040050) r9 = memfd_create(&(0x7f0000000d80)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x80\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\xa1\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x9d\xcf?{y\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xe6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xdei\xa9,P\xe33r\\\t\xde\x03wz\xcdd\x80\xd8c\x1e\xe9\xb6\xa5\xd4\xa6\xc7\xe5\xbc\x8b\x84,\xe6\x0e\x84\xcc\x90i\x93\xa0R\x15\xd8\x9b\xfd\x87(v\"\x8fed\xc6.\xaf\x8c\xfb\xa6\xe3\x1f\x89\x83$\xfd\xc7\aNK> ', 0x7) lseek(r9, 0x9c790007fffffffc, 0x4) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0x9, 0x4) 9m35.482272279s ago: executing program 2 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r3, &(0x7f0000001540)=""/102392, 0x18ff8) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f000001a640), &(0x7f000001a680)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f000001a6c0)='asymmetric\x00', 0x0, &(0x7f000001a700), 0x0, r4) 9m32.910744993s ago: executing program 2 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x0) 9m17.439172712s ago: executing program 33 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x0) 4m35.146075135s ago: executing program 1 (id=869): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lseek(0xffffffffffffffff, 0x10001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 4m25.161851865s ago: executing program 1 (id=886): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000340)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x9, 0xa, 0x70}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) 4m24.89161795s ago: executing program 1 (id=887): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00'], 0x48}}, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x82, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m22.509983994s ago: executing program 1 (id=890): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m19.893101203s ago: executing program 1 (id=894): socket(0xa, 0x3, 0xff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001680)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000016c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000001740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000017c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001880), 0x10106, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000001940)={0xa, 0x4e24, 0x25a, @mcast2, 0x9}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x23, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000019c0)="800037bb", 0x4, 0x0, 0x0, 0x0) 4m18.729112544s ago: executing program 1 (id=895): mkdirat(0xffffffffffffff9c, &(0x7f0000001080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000010c0)='./sys\x00', &(0x7f0000001100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r1, &(0x7f0000000380)=0xffffffffffffffff, 0x12) 4m2.199078374s ago: executing program 34 (id=895): mkdirat(0xffffffffffffff9c, &(0x7f0000001080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000010c0)='./sys\x00', &(0x7f0000001100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r1, &(0x7f0000000380)=0xffffffffffffffff, 0x12) 12.170102459s ago: executing program 6 (id=1523): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002540)={0x50, 0x0, r1, {0x7, 0x9, 0xfffffffa, 0x110002, 0x10, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000025c0)="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", 0x2000, &(0x7f00000045c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000004680)={0x2020}, 0xfffffdca) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f00000066c0)='./file0\x00', &(0x7f0000006780)=@known='security.apparmor\x00', 0x0, 0xff34) 12.002513347s ago: executing program 6 (id=1526): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fddbdf2500", @ANYRES32=0x0, @ANYBLOB="b20a050023"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 11.868923613s ago: executing program 6 (id=1528): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x604e054) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000f40)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000f80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000fc0), 0x0, 0x0) read$msr(r2, &(0x7f0000002e40)=""/102368, 0x18fe0) r3 = fsopen(&(0x7f0000000340)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='addr\x00', &(0x7f00000003c0)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000440)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000480)='vers\x00', &(0x7f00000004c0)='3\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r6, 0x1, 0x30bd26, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000580)='timeo\x00Ms\xac\xc6Md5\xf5IU\xd5\xed\x9a\xc0{R\xbe\xbf\x93\x88\xd7E\xf9\xff\xff\xff\xd2\xedQQ\xca4\x95N)c]>\x0f$*\xc0\x93?T\xc7HF\xe5pI\xb8>x}\x9f8\x8bT\xf3\xda|)[{\xa5\x97\xef\x86\r\xb7\xc5\xbed\x85\xf2\xbf\'\n\xd5s\xdd\xdbh\xc5\xe9)\xe3\xd8\xfd\xc2E\xec\xc7\b\xf4\t\x8b\xb8\x9e\xf7\xff[\xccmb\xe6}\xde\xc7\xf7\xc7\xe4h\xa2\x9b\xc3\\\x97/\xb5Y\xeehD{\xa4\x88\xd7g\x82\xae\x15^\x02\xd6\xaaeW\xb6\x81\x8dq~W\xec\xf8G\xd0mf\xf1z\xb8hG\xd8SN', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 7.312920536s ago: executing program 6 (id=1561): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fddbdf250000", @ANYRES32=0x0, @ANYBLOB="b20a050023"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 6.778105587s ago: executing program 6 (id=1568): mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x0, &(0x7f0000001040)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, 0x0, &(0x7f00000010c0), 0x0, &(0x7f0000001100)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000001140)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000001180)='./bus\x00', 0x0, 0x180) 6.403013727s ago: executing program 4 (id=1569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000340)="605223115b1d88d15095957fa48b", 0xe}, {&(0x7f0000000380)="bee934b329fadb3cf1fe59eb0836e323bf8485dacf243d3664d5ce89060148a522632e917ea25b08d8405bc800d993305effa821cad1d1008d169727f775697bd81a4ef90105dd8388517467603e", 0x4e}], 0x2) 6.253173445s ago: executing program 6 (id=1571): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x604e054) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000f40)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000f80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000fc0), 0x0, 0x0) read$msr(r2, &(0x7f0000002e40)=""/102368, 0x18fe0) r3 = fsopen(&(0x7f0000000340)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='addr\x00', &(0x7f00000003c0)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000440)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000480)='vers\x00', &(0x7f00000004c0)='3\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r6, 0x1, 0x30bd26, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000580)='timeo\x00Ms\xac\xc6Md5\xf5IU\xd5\xed\x9a\xc0{R\xbe\xbf\x93\x88\xd7E\xf9\xff\xff\xff\xd2\xedQQ\xca4\x95N)c]>\x0f$*\xc0\x93?T\xc7HF\xe5pI\xb8>x}\x9f8\x8bT\xf3\xda|)[{\xa5\x97\xef\x86\r\xb7\xc5\xbed\x85\xf2\xbf\'\n\xd5s\xdd\xdbh\xc5\xe9)\xe3\xd8\xfd\xc2E\xec\xc7\b\xf4\t\x8b\xb8\x9e\xf7\xff[\xccmb\xe6}\xde\xc7\xf7\xc7\xe4h\xa2\x9b\xc3\\\x97/\xb5Y\xeehD{\xa4\x88\xd7g\x82\xae\x15^\x02\xd6\xaaeW\xb6\x81\x8dq~W\xec\xf8G\xd0mf\xf1z\xb8hG\xd8SN', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 6.185484842s ago: executing program 4 (id=1572): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, 0xffffffffffffffff, 0xcd2e8000) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 5.759711537s ago: executing program 5 (id=1574): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x101c00, 0x0) set_mempolicy(0x4005, 0x0, 0x1003ff) setsockopt(0xffffffffffffffff, 0x1, 0x483, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xf, 0x401d031, r0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) syz_open_dev$vim2m(0x0, 0x5, 0x2) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000200)) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="230000000c00000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x7ff, r1}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$dvb_demux(&(0x7f0000000340), 0x0, 0x41) r2 = syz_open_dev$dvb_demux(&(0x7f0000000380), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000003c0)={0x1, 0x0, 0x3, 0x14, 0x4}) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2000) 5.606312831s ago: executing program 7 (id=1576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005e00)=@vmx={0x9, 0x0, 0x2080, {0xa000, 0x8000000, {}, 0x0, 0x8b}, {"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", "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"}}) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.332310859s ago: executing program 0 (id=1578): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fddbdf250000", @ANYRES32=0x0, @ANYBLOB="b20a050023"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 5.276016747s ago: executing program 4 (id=1579): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="b1", 0xfffd, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000100)=0x8) 5.166886661s ago: executing program 5 (id=1580): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000200)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}, 0x2}], 0x1, 0x2040000, 0x0) 4.981720665s ago: executing program 4 (id=1581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000"], 0x4a) 4.951469589s ago: executing program 0 (id=1582): mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x0, &(0x7f0000001040)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, 0x0, &(0x7f00000010c0), 0x0, &(0x7f0000001100)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000001140)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000001180)='./bus\x00', 0x0, 0x180) 4.885213513s ago: executing program 7 (id=1583): shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f00)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000f40), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000f80), 0x2, 0x141102) writev(r0, &(0x7f0000000fc0)=[{&(0x7f0000001000)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003080)={0x11, 0xa, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x4}, 0x94) syz_open_dev$video(0x0, 0xa3, 0x0) mknod$loop(&(0x7f0000000d00)='./file0\x00', 0xfff, 0x0) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000d80), 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40), 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./gadget\x00', &(0x7f0000000a80)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000b00)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r2, &(0x7f0000000b80)="0100000007058102400000", 0xb) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x101042, 0x15) 2.994803975s ago: executing program 0 (id=1584): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='27', 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x0}, 0x68) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x2000007, 0x12, r0, 0x0) openat(r0, 0x0, 0x120002, 0x141) syz_open_procfs$userns(0x0, 0x0) 1.778018248s ago: executing program 7 (id=1585): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x82, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.642177592s ago: executing program 5 (id=1586): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x5032}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000340)="605223115b1d88d15095957fa48b", 0xe}, {&(0x7f0000000380)="bee934b329fadb3cf1fe59eb0836e323bf8485dacf243d3664d5ce89060148a522632e917ea25b08d8405bc800d993305effa821cad1d1008d169727f775697bd81a4ef90105dd8388517467603e", 0x4e}], 0x3) 1.417047179s ago: executing program 0 (id=1587): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r3, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0x16, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, "a0", "f5af2e", 0x6}}}}}, 0x0) 1.261761046s ago: executing program 5 (id=1588): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYBLOB="0200ee050a000200aa"], 0x34}, 0x1, 0x0, 0x0, 0x14040080}, 0x800) 1.134902471s ago: executing program 4 (id=1589): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, 0xffffffffffffffff, 0xcd2e8000) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1.104136402s ago: executing program 0 (id=1590): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x101c00, 0x0) set_mempolicy(0x4005, 0x0, 0x1003ff) setsockopt(0xffffffffffffffff, 0x1, 0x483, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xf, 0x401d031, r0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) syz_open_dev$vim2m(0x0, 0x5, 0x2) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000200)) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="230000000c00000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x7ff, r1}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$dvb_demux(&(0x7f0000000340), 0x0, 0x41) r2 = syz_open_dev$dvb_demux(&(0x7f0000000380), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000003c0)={0x1, 0x0, 0x3, 0x14, 0x4}) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2000) 961.735481ms ago: executing program 7 (id=1591): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write(r0, &(0x7f0000000a00)='7', 0x1) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7) r1 = fcntl$getown(r0, 0x9) fcntl$setown(r0, 0x8, r1) 709.003424ms ago: executing program 5 (id=1592): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fddbdf25000000", @ANYRES32=0x0, @ANYBLOB="b20a050023"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, 0x0, 0x20040040) 632.230672ms ago: executing program 7 (id=1593): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) writev(r0, &(0x7f0000003700)=[{0x0}, {&(0x7f0000001640)="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", 0x99a}], 0x2) pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0xfb2200) 348.215466ms ago: executing program 5 (id=1594): mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x0, &(0x7f0000001040)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x0, &(0x7f0000001100)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000001140)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000001180)='./bus\x00', 0x0, 0x180) 156.451498ms ago: executing program 7 (id=1595): shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f00)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000f40), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000f80), 0x2, 0x141102) writev(r0, &(0x7f0000000fc0)=[{&(0x7f0000001000)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003080)={0x11, 0xa, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x4}, 0x94) syz_open_dev$video(0x0, 0xa3, 0x0) mknod$loop(&(0x7f0000000d00)='./file0\x00', 0xfff, 0x0) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000d80), 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40), 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./gadget\x00', &(0x7f0000000a80)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000b00)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r2, &(0x7f0000000b80)="0100000007058102400000", 0xb) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x101042, 0x15) 45.450485ms ago: executing program 0 (id=1596): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 4 (id=1597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000200)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000280), 0x0, 0x2040000, 0x0) kernel console output (not intermixed with test programs): t promiscuous mode [ 767.010999][ T1173] hsr_slave_1: left promiscuous mode [ 767.012562][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.059854][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.151777][T10722] 9p: Bad value for 'wfdno' [ 767.655660][ T9850] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 767.859973][ T9850] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 767.862407][ T9850] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 767.862436][ T9850] usb 1-1: config 1 has no interface number 0 [ 767.900780][ T9850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.900799][ T9850] usb 1-1: Product: syz [ 767.900808][ T9850] usb 1-1: Manufacturer: syz [ 767.900815][ T9850] usb 1-1: SerialNumber: syz [ 767.930292][ T9850] usb 1-1: 3:0 : does not exist [ 767.930308][ T9850] usb 1-1: 3:0 : does not exist [ 768.224550][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 768.316859][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 768.357475][ T9850] usb 1-1: USB disconnect, device number 14 [ 768.995632][ T5616] Bluetooth: hci1: command tx timeout [ 769.179099][T10650] rxe_eth0 speed is unknown, defaulting to 1000 [ 771.075531][ T5616] Bluetooth: hci1: command tx timeout [ 772.543504][T10748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.157325][ T5616] Bluetooth: hci1: command tx timeout [ 773.790757][T10374] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 773.859447][T10374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 773.905104][T10374] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 774.183262][T10374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 774.208714][T10374] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 774.264845][T10374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 774.278675][T10374] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 774.351810][T10374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 774.525618][T10065] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 774.727071][T10065] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 774.761373][T10065] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 774.761403][T10065] usb 1-1: config 1 has no interface number 0 [ 774.785760][T10065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.785789][T10065] usb 1-1: Product: syz [ 774.785804][T10065] usb 1-1: Manufacturer: syz [ 774.785818][T10065] usb 1-1: SerialNumber: syz [ 775.011698][T10065] usb 1-1: 3:0 : does not exist [ 775.011723][T10065] usb 1-1: 3:0 : does not exist [ 775.047506][T10714] rxe_eth0 speed is unknown, defaulting to 1000 [ 775.235597][ T5616] Bluetooth: hci1: command tx timeout [ 775.790445][T10065] usb 1-1: USB disconnect, device number 15 [ 775.934992][T10790] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 776.343336][T10797] 9p: Bad value for 'wfdno' [ 776.396251][T10753] udevd[10753]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 776.795745][T10813] 9p: Bad value for 'wfdno' [ 776.925657][ T9880] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 777.088415][ T9880] usb 5-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 777.089970][ T9880] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.089998][ T9880] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 777.096746][ T9880] usb 5-1: string descriptor 0 read error: -22 [ 777.096882][ T9880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.693121][T10831] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 779.873932][ T9880] usb 5-1: USB disconnect, device number 8 [ 781.165890][T10650] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.209220][T10650] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.232761][T10650] bridge_slave_0: entered allmulticast mode [ 781.311159][T10650] bridge_slave_0: entered promiscuous mode [ 781.657137][T10857] overlayfs: overlapping lowerdir path [ 781.666409][T10650] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.666558][T10650] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.666784][T10650] bridge_slave_1: entered allmulticast mode [ 781.750244][T10650] bridge_slave_1: entered promiscuous mode [ 782.042475][T10374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.073706][T10856] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 782.073751][T10856] overlayfs: overlapping lowerdir path [ 782.180290][T10650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.211153][T10650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.280866][T10650] team0: Port device team_slave_0 added [ 782.285244][T10650] team0: Port device team_slave_1 added [ 782.412731][T10650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.412750][T10650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.412770][T10650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.482306][T10650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.482324][T10650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.482349][T10650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.234950][T10870] 9p: Bad value for 'wfdno' [ 783.292012][T10650] hsr_slave_0: entered promiscuous mode [ 783.294642][T10650] hsr_slave_1: entered promiscuous mode [ 783.298692][ T8795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 783.321900][T10714] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.324053][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.324257][T10714] bridge_slave_0: entered allmulticast mode [ 783.328231][T10714] bridge_slave_0: entered promiscuous mode [ 783.353447][T10714] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.353557][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.353738][T10714] bridge_slave_1: entered allmulticast mode [ 783.359511][T10714] bridge_slave_1: entered promiscuous mode [ 783.404470][ T8795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 783.422294][ T8795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 783.429296][ T8795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 783.430305][ T8795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 783.670907][T10880] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1018'. [ 783.759068][T10880] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1018'. [ 783.773628][T10714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.811754][T10714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.915678][T10065] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 783.978289][T10887] input: syz0 as /devices/virtual/input/input18 [ 784.080680][T10065] usb 1-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 784.082202][T10065] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.082218][T10065] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 784.088611][T10065] usb 1-1: string descriptor 0 read error: -22 [ 784.088748][T10065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.237156][T10714] team0: Port device team_slave_0 added [ 784.263010][T10714] team0: Port device team_slave_1 added [ 784.538868][T10714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.539077][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.539153][T10714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.114012][T10714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.114114][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.114183][T10714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.647405][ T8795] Bluetooth: hci0: command tx timeout [ 786.749174][ T9880] usb 1-1: USB disconnect, device number 16 [ 787.070345][T10874] rxe_eth0 speed is unknown, defaulting to 1000 [ 787.170885][T10714] hsr_slave_0: entered promiscuous mode [ 787.178897][T10714] hsr_slave_1: entered promiscuous mode [ 787.181801][T10714] debugfs: 'hsr0' already exists in 'hsr' [ 787.181821][T10714] Cannot create hsr debugfs directory [ 787.350212][T10906] input: syz0 as /devices/virtual/input/input19 [ 787.598299][T10916] netlink: 'syz.4.1025': attribute type 2 has an invalid length. [ 787.728772][ T8795] Bluetooth: hci0: command tx timeout [ 787.824441][T10922] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1026'. [ 787.887015][T10922] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1026'. [ 787.987235][T10925] input: syz0 as /devices/virtual/input/input20 [ 788.000631][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13 [ 788.365583][ T9880] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 788.521612][ T9880] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 788.534960][ T9880] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 788.534990][ T9880] usb 1-1: config 1 has no interface number 0 [ 788.553521][ T9880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.553546][ T9880] usb 1-1: Product: syz [ 788.553555][ T9880] usb 1-1: Manufacturer: syz [ 788.553562][ T9880] usb 1-1: SerialNumber: syz [ 788.610336][ T9880] usb 1-1: 3:0 : does not exist [ 788.610361][ T9880] usb 1-1: 3:0 : does not exist [ 788.895262][ T9880] usb 1-1: USB disconnect, device number 17 [ 789.055682][T10065] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 789.208660][T10065] usb 5-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 789.209955][T10065] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.209980][T10065] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 789.214304][T10065] usb 5-1: string descriptor 0 read error: -22 [ 789.214465][T10065] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.795486][ T8795] Bluetooth: hci0: command tx timeout [ 791.874269][ T9880] usb 5-1: USB disconnect, device number 9 [ 791.875515][ T8795] Bluetooth: hci0: command tx timeout [ 792.189982][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14 [ 792.337056][ T1173] bridge_slave_1: left allmulticast mode [ 792.337094][ T1173] bridge_slave_1: left promiscuous mode [ 792.337368][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.508245][T10965] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1034'. [ 792.509611][ T9880] hid-generic 0000:9010500:501A105.000E: unknown main item tag 0x0 [ 792.509635][ T9880] hid-generic 0000:9010500:501A105.000E: unknown main item tag 0x0 [ 792.509684][ T9880] hid-generic 0000:9010500:501A105.000E: collection stack underflow [ 792.509698][ T9880] hid-generic 0000:9010500:501A105.000E: item 0 0 0 12 parsing failed [ 792.510064][ T9880] hid-generic 0000:9010500:501A105.000E: probe with driver hid-generic failed with error -22 [ 792.586434][ T1173] bridge_slave_0: left allmulticast mode [ 792.586459][ T1173] bridge_slave_0: left promiscuous mode [ 792.587129][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.815742][ T1173] bridge_slave_1: left allmulticast mode [ 792.815771][ T1173] bridge_slave_1: left promiscuous mode [ 792.815997][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.927257][ T1173] bridge_slave_0: left allmulticast mode [ 792.927283][ T1173] bridge_slave_0: left promiscuous mode [ 792.927439][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.435854][T10052] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 793.606277][T10052] usb 5-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 793.607521][T10052] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 793.607552][T10052] usb 5-1: config 1 has no interface number 0 [ 793.613914][T10052] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.613933][T10052] usb 5-1: Product: syz [ 793.613941][T10052] usb 5-1: Manufacturer: syz [ 793.613953][T10052] usb 5-1: SerialNumber: syz [ 793.689155][T10052] usb 5-1: 3:0 : does not exist [ 793.689172][T10052] usb 5-1: 3:0 : does not exist [ 793.914815][T10052] usb 5-1: USB disconnect, device number 10 [ 793.987585][T10753] udevd[10753]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 794.378530][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.473880][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.508596][ T1173] bond0 (unregistering): Released all slaves [ 795.988769][T10978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 797.037621][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.150688][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.239033][ T1173] bond0 (unregistering): Released all slaves [ 797.282472][T10874] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.282544][T10874] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.282693][T10874] bridge_slave_0: entered allmulticast mode [ 797.284975][T10874] bridge_slave_0: entered promiscuous mode [ 797.331245][T10965] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1034'. [ 797.350253][T10874] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.350348][T10874] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.350493][T10874] bridge_slave_1: entered allmulticast mode [ 797.351878][T10874] bridge_slave_1: entered promiscuous mode [ 799.059836][T10874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.204469][T10874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.562108][T10874] team0: Port device team_slave_0 added [ 799.582276][T10874] team0: Port device team_slave_1 added [ 800.451780][T10874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.451800][T10874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.451826][T10874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.505208][T11011] netlink: 'syz.4.1046': attribute type 2 has an invalid length. [ 800.534759][T10874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.534778][T10874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.534806][T10874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.983892][ T5273] 8021q: adding VLAN 0 to HW filter on device eth15 [ 801.517229][T10874] hsr_slave_0: entered promiscuous mode [ 801.519029][T10874] hsr_slave_1: entered promiscuous mode [ 801.519576][T10874] debugfs: 'hsr0' already exists in 'hsr' [ 801.519588][T10874] Cannot create hsr debugfs directory [ 801.728806][ T1173] hsr_slave_0: left promiscuous mode [ 801.765633][ T1173] hsr_slave_1: left promiscuous mode [ 801.771325][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.807133][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.871175][T11028] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1048'. [ 802.039245][ T1173] hsr_slave_0: left promiscuous mode [ 802.079583][ T1173] hsr_slave_1: left promiscuous mode [ 802.080529][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.129026][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.406986][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 803.466277][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 804.320353][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 804.389668][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 804.753682][T11049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1053'. [ 805.416582][T11028] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1048'. [ 805.499715][T11049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 805.500288][T11050] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 805.608523][T11050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 805.645930][T11050] bond1: (slave lo): Enslaving as an active interface with an up link [ 807.444489][T11063] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.444719][T11063] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.635871][ T5738] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 807.836409][ T5738] usb 5-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 807.837929][ T5738] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 807.837954][ T5738] usb 5-1: config 1 has no interface number 0 [ 807.840154][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.840180][ T5738] usb 5-1: Product: syz [ 807.840193][ T5738] usb 5-1: Manufacturer: syz [ 807.840207][ T5738] usb 5-1: SerialNumber: syz [ 807.919857][ T5738] usb 5-1: 3:0 : does not exist [ 807.919882][ T5738] usb 5-1: 3:0 : does not exist [ 808.226094][ T5738] usb 5-1: USB disconnect, device number 11 [ 808.400924][T11063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.442233][T11063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.923209][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.923269][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.555535][T11076] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1061'. [ 809.889851][T11078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1062'. [ 809.923920][T11076] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1061'. [ 809.958422][T11078] 8021q: adding VLAN 0 to HW filter on device bond2 [ 810.013888][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'. [ 810.036434][T11080] bond1: (slave lo): Releasing backup interface [ 810.146057][T11080] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 810.146596][T11080] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 810.263003][T11080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 810.273962][T11080] bond2: (slave lo): Enslaving as an active interface with an up link [ 810.332042][T11082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 810.366485][T11083] lo: entered promiscuous mode [ 810.366698][T11083] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 810.520954][T11083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 810.602637][T11083] bond1: (slave lo): Enslaving as an active interface with an up link [ 810.996994][ T3358] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.410113][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.410171][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.410205][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.051860][T11114] 9p: Bad value for 'wfdno' [ 813.577475][T10650] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 813.634737][T10650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 813.644536][T10650] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 813.690762][T10650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 814.017709][T10650] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 814.061341][T10650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 814.240767][T10650] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 814.282810][T10650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 815.664904][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1073'. [ 815.898262][T10650] kthread_run failed with err -4 [ 816.041195][T11163] 8021q: adding VLAN 0 to HW filter on device bond2 [ 816.139429][T11165] bond1: (slave lo): Releasing backup interface [ 816.179603][T11165] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 816.194333][T11165] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 816.273911][T11165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 816.300219][T11165] bond2: (slave lo): Enslaving as an active interface with an up link [ 816.719466][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 816.764443][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 816.767578][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 816.774810][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 816.775687][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 818.083111][T11190] input: syz0 as /devices/virtual/input/input21 [ 818.383109][T11200] FAULT_INJECTION: forcing a failure. [ 818.383109][T11200] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 818.383145][T11200] CPU: 1 UID: 0 PID: 11200 Comm: syz.0.1077 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 818.383170][T11200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 818.383183][T11200] Call Trace: [ 818.383190][T11200] [ 818.383199][T11200] dump_stack_lvl+0xe8/0x150 [ 818.383245][T11200] should_fail_ex+0x447/0x5e0 [ 818.383280][T11200] _copy_from_user+0x2d/0xb0 [ 818.383413][T11200] bpf_vlog_reverse_ubuf+0xb1/0x3e0 [ 818.383455][T11200] bpf_vlog_finalize+0x189/0x3f0 [ 818.383488][T11200] bpf_log_attr_finalize+0x80/0x1e0 [ 818.383520][T11200] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 818.383563][T11200] ? btf_parse_hdr+0x5f2/0x810 [ 818.383600][T11200] btf_new_fd+0x6a0/0x8f0 [ 818.383630][T11200] __sys_bpf+0xda7/0xe00 [ 818.383671][T11200] ? __pfx___sys_bpf+0x10/0x10 [ 818.383709][T11200] ? do_futex+0x458/0x4e0 [ 818.383770][T11200] ? rcu_is_watching+0x16/0xb0 [ 818.383803][T11200] __x64_sys_bpf+0xba/0xd0 [ 818.383831][T11200] do_syscall_64+0x166/0x520 [ 818.383859][T11200] ? trace_irq_disable+0x3b/0x140 [ 818.383881][T11200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.383903][T11200] ? clear_bhb_loop+0x70/0xc0 [ 818.383928][T11200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.383948][T11200] RIP: 0033:0x7fdc045dfb19 [ 818.383969][T11200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.383988][T11200] RSP: 002b:00007fdc0282e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 818.384011][T11200] RAX: ffffffffffffffda RBX: 00007fdc04865fa0 RCX: 00007fdc045dfb19 [ 818.384027][T11200] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 818.384041][T11200] RBP: 00007fdc04677b70 R08: 0000000000000000 R09: 0000000000000000 [ 818.384055][T11200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.384068][T11200] R13: 00007fdc04866038 R14: 00007fdc04865fa0 R15: 00007ffccaecaae8 [ 818.384101][T11200] [ 818.841215][ T8795] Bluetooth: hci5: command tx timeout [ 819.936686][T11185] rxe_eth0 speed is unknown, defaulting to 1000 [ 820.305771][ T1173] bridge_slave_1: left allmulticast mode [ 820.305809][ T1173] bridge_slave_1: left promiscuous mode [ 820.306132][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.466625][ T1173] bridge_slave_0: left allmulticast mode [ 820.466661][ T1173] bridge_slave_0: left promiscuous mode [ 820.466949][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.892870][T11250] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1082'. [ 820.928626][ T8795] Bluetooth: hci5: command tx timeout [ 822.996320][ T8795] Bluetooth: hci5: command tx timeout [ 823.786090][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.883432][T11268] 9p: Bad value for 'wfdno' [ 823.907141][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.991121][ T1173] bond0 (unregistering): Released all slaves [ 824.464760][T11275] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1091'. [ 825.183218][ T8795] Bluetooth: hci5: command tx timeout [ 825.418403][T11280] 9p: Bad value for 'wfdno' [ 825.662244][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 825.721143][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 825.724046][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 825.730952][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 825.731636][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 826.035037][T11289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'. [ 826.275892][T11289] 8021q: adding VLAN 0 to HW filter on device bond3 [ 826.290546][T11283] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 826.331300][T11291] bond2: (slave lo): Releasing backup interface [ 826.366337][T11291] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 826.373026][T11291] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 826.469709][T11291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 826.496597][T11291] bond3: (slave lo): Enslaving as an active interface with an up link [ 826.955553][ T1173] hsr_slave_0: left promiscuous mode [ 826.956517][T11307] 9p: Bad value for 'wfdno' [ 827.010388][ T1173] hsr_slave_1: left promiscuous mode [ 827.014269][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.036534][T11313] FAULT_INJECTION: forcing a failure. [ 827.036534][T11313] name failslab, interval 1, probability 5, space 0, times 9996 [ 827.036571][T11313] CPU: 0 UID: 0 PID: 11313 Comm: syz.4.1099 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 827.036596][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 827.036609][T11313] Call Trace: [ 827.036617][T11313] [ 827.036626][T11313] dump_stack_lvl+0xe8/0x150 [ 827.036669][T11313] should_fail_ex+0x447/0x5e0 [ 827.036703][T11313] should_failslab+0xa8/0x100 [ 827.036733][T11313] __kmalloc_cache_node_noprof+0xa7/0x670 [ 827.036758][T11313] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 827.036871][T11313] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 827.036893][T11313] ? __init_waitqueue_head+0xad/0x160 [ 827.036922][T11313] sbitmap_queue_init_node+0x1dc/0x4d0 [ 827.036946][T11313] blk_mq_init_tags+0x1ab/0x2d0 [ 827.036996][T11313] blk_mq_alloc_map_and_rqs+0xbe/0x970 [ 827.037026][T11313] ? kfree+0x1c5/0x6d0 [ 827.037055][T11313] ? blk_mq_map_queues+0x3ea/0x490 [ 827.037086][T11313] ? blk_mq_map_queues+0x3ea/0x490 [ 827.037111][T11313] ? rcu_is_watching+0x16/0xb0 [ 827.037141][T11313] blk_mq_alloc_set_map_and_rqs+0x1a0/0x800 [ 827.037181][T11313] blk_mq_alloc_tag_set+0x81a/0x1010 [ 827.037222][T11313] loop_add+0x436/0xb50 [ 827.037303][T11313] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 827.037330][T11313] ? __pfx_loop_add+0x10/0x10 [ 827.037378][T11313] ? __pfx_smack_file_ioctl+0x10/0x10 [ 827.037413][T11313] loop_control_ioctl+0x12b/0x5b0 [ 827.037448][T11313] ? __fget_files+0x2a/0x420 [ 827.037478][T11313] ? __pfx_loop_control_ioctl+0x10/0x10 [ 827.037510][T11313] ? bpf_lsm_file_ioctl+0x9/0x20 [ 827.037535][T11313] ? __pfx_loop_control_ioctl+0x10/0x10 [ 827.037562][T11313] __se_sys_ioctl+0xff/0x170 [ 827.037588][T11313] do_syscall_64+0x166/0x520 [ 827.037612][T11313] ? trace_irq_disable+0x3b/0x140 [ 827.037635][T11313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.037656][T11313] ? clear_bhb_loop+0x70/0xc0 [ 827.037681][T11313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.037702][T11313] RIP: 0033:0x7ff9fe09fb19 [ 827.037722][T11313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.037740][T11313] RSP: 002b:00007ff9fc2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 827.037762][T11313] RAX: ffffffffffffffda RBX: 00007ff9fe325fa0 RCX: 00007ff9fe09fb19 [ 827.037779][T11313] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 827.037792][T11313] RBP: 00007ff9fe137b70 R08: 0000000000000000 R09: 0000000000000000 [ 827.037805][T11313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.037817][T11313] R13: 00007ff9fe326038 R14: 00007ff9fe325fa0 R15: 00007ffdff63b698 [ 827.037850][T11313] [ 827.038073][T11313] blk-mq: reduced tag depth (128 -> 64) [ 827.124898][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.374756][T11317] 9p: Bad value for 'wfdno' [ 827.653369][T11323] FAULT_INJECTION: forcing a failure. [ 827.653369][T11323] name failslab, interval 1, probability 5, space 0, times 9995 [ 827.653391][T11323] CPU: 1 UID: 0 PID: 11323 Comm: syz.4.1103 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 827.653405][T11323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 827.653412][T11323] Call Trace: [ 827.653417][T11323] [ 827.653421][T11323] dump_stack_lvl+0xe8/0x150 [ 827.653446][T11323] should_fail_ex+0x447/0x5e0 [ 827.653463][T11323] should_failslab+0xa8/0x100 [ 827.653478][T11323] ? do_getname+0x2e/0x250 [ 827.653492][T11323] kmem_cache_alloc_noprof+0x99/0x680 [ 827.653510][T11323] ? do_getname+0x2e/0x250 [ 827.653527][T11323] do_getname+0x2e/0x250 [ 827.653547][T11323] ? getname_flags+0x11/0x20 [ 827.653561][T11323] do_sys_openat2+0xce/0x200 [ 827.653576][T11323] ? __se_sys_futex+0x3a8/0x450 [ 827.653593][T11323] ? __pfx_do_sys_openat2+0x10/0x10 [ 827.653608][T11323] ? __fget_files+0x2a/0x420 [ 827.653624][T11323] ? __pfx___se_sys_futex+0x10/0x10 [ 827.653638][T11323] ? fput+0xa0/0xd0 [ 827.653653][T11323] __x64_sys_openat+0x138/0x170 [ 827.653670][T11323] do_syscall_64+0x166/0x520 [ 827.653682][T11323] ? trace_irq_disable+0x3b/0x140 [ 827.653694][T11323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.653706][T11323] ? clear_bhb_loop+0x70/0xc0 [ 827.653719][T11323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.653730][T11323] RIP: 0033:0x7ff9fe06034e [ 827.653741][T11323] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 827.653751][T11323] RSP: 002b:00007ff9fc2edec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 827.653765][T11323] RAX: ffffffffffffffda RBX: 00007ff9fc2ee6c0 RCX: 00007ff9fe06034e [ 827.653773][T11323] RDX: 0000000000000000 RSI: 00007ff9fc2edf90 RDI: ffffffffffffff9c [ 827.653781][T11323] RBP: 00007ff9fe137b70 R08: 0000000000000000 R09: 0000000000000000 [ 827.653788][T11323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.653794][T11323] R13: 00007ff9fe326038 R14: 00007ff9fe325fa0 R15: 00007ffdff63b698 [ 827.653820][T11323] [ 827.850963][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 827.896264][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 827.966417][ T8795] Bluetooth: hci3: command tx timeout [ 828.149866][T11315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1100'. [ 828.441885][T11337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1106'. [ 828.570372][T11337] 8021q: adding VLAN 0 to HW filter on device bond3 [ 828.571296][T11331] syzkaller1: entered promiscuous mode [ 828.571322][T11331] syzkaller1: entered allmulticast mode [ 828.573901][T11284] rxe_eth0 speed is unknown, defaulting to 1000 [ 828.783579][T11345] FAULT_INJECTION: forcing a failure. [ 828.783579][T11345] name failslab, interval 1, probability 5, space 0, times 10000 [ 828.783617][T11345] CPU: 0 UID: 0 PID: 11345 Comm: syz.4.1108 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 828.783642][T11345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 828.783656][T11345] Call Trace: [ 828.783665][T11345] [ 828.783674][T11345] dump_stack_lvl+0xe8/0x150 [ 828.783717][T11345] should_fail_ex+0x447/0x5e0 [ 828.783752][T11345] should_failslab+0xa8/0x100 [ 828.783780][T11345] __kmalloc_cache_noprof+0x9c/0x670 [ 828.783804][T11345] ? sctp_add_bind_addr+0x8c/0x370 [ 828.783826][T11345] ? sctp_add_bind_addr+0x8c/0x370 [ 828.783863][T11345] sctp_add_bind_addr+0x8c/0x370 [ 828.783891][T11345] sctp_copy_local_addr_list+0x31a/0x4e0 [ 828.783916][T11345] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 828.783939][T11345] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 828.783964][T11345] ? sctp_v6_is_any+0x64/0x80 [ 828.783991][T11345] ? sctp_copy_one_addr+0x93/0x360 [ 828.784017][T11345] sctp_bind_addr_copy+0xb3/0x3c0 [ 828.784040][T11345] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 828.784075][T11345] sctp_connect_new_asoc+0x2ff/0x6b0 [ 828.784107][T11345] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 828.784139][T11345] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 828.784170][T11345] ? lockdep_hardirqs_on+0x7b/0x110 [ 828.784195][T11345] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 828.784218][T11345] ? security_sctp_bind_connect+0x7e/0x2c0 [ 828.784252][T11345] sctp_sendmsg+0x1506/0x2a50 [ 828.784277][T11345] ? hrtimer_start_range_ns_common+0x7fc/0xb70 [ 828.784322][T11345] ? __pfx_sctp_sendmsg+0x10/0x10 [ 828.784349][T11345] ? smack_socket_sendmsg+0x4b8/0x5a0 [ 828.784379][T11345] ? lockdep_hardirqs_on+0x7b/0x110 [ 828.784405][T11345] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 828.784441][T11345] ? __lock_acquire+0x747/0x2de0 [ 828.784479][T11345] ? __lock_acquire+0x747/0x2de0 [ 828.784516][T11345] ? sock_rps_record_flow+0x19/0x350 [ 828.784551][T11345] ? inet_sendmsg+0x298/0x320 [ 828.784584][T11345] ? __pfx_inet_sendmsg+0x10/0x10 [ 828.784615][T11345] sock_sendmsg_nosec+0x10f/0x190 [ 828.784649][T11345] ____sys_sendmsg+0x565/0x870 [ 828.784681][T11345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 828.784710][T11345] ? import_iovec+0x73/0xa0 [ 828.784739][T11345] ___sys_sendmsg+0x2a5/0x360 [ 828.784760][T11345] ? __lock_acquire+0x747/0x2de0 [ 828.784797][T11345] ? __pfx____sys_sendmsg+0x10/0x10 [ 828.784825][T11345] ? futex_wake+0x51e/0x600 [ 828.784897][T11345] ? __fget_files+0x3a8/0x420 [ 828.784926][T11345] ? __fget_files+0x2a/0x420 [ 828.784967][T11345] __x64_sys_sendmsg+0x1b7/0x290 [ 828.784993][T11345] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 828.785040][T11345] do_syscall_64+0x166/0x520 [ 828.785063][T11345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.785085][T11345] ? clear_bhb_loop+0x70/0xc0 [ 828.785111][T11345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.785133][T11345] RIP: 0033:0x7ff9fe09fb19 [ 828.785153][T11345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.785171][T11345] RSP: 002b:00007ff9fc2ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.785193][T11345] RAX: ffffffffffffffda RBX: 00007ff9fe325fa0 RCX: 00007ff9fe09fb19 [ 828.785209][T11345] RDX: 0000000024000052 RSI: 00002000000001c0 RDI: 0000000000000003 [ 828.785224][T11345] RBP: 00007ff9fe137b70 R08: 0000000000000000 R09: 0000000000000000 [ 828.785238][T11345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.785251][T11345] R13: 00007ff9fe326038 R14: 00007ff9fe325fa0 R15: 00007ffdff63b698 [ 828.785286][T11345] [ 830.035920][ T8795] Bluetooth: hci3: command tx timeout [ 830.160398][T11368] 9p: Bad value for 'wfdno' [ 830.460704][T11382] input: syz0 as /devices/virtual/input/input22 [ 830.610451][T11386] bond4: entered promiscuous mode [ 830.614690][T11386] 8021q: adding VLAN 0 to HW filter on device bond4 [ 831.093110][T11403] FAULT_INJECTION: forcing a failure. [ 831.093110][T11403] name failslab, interval 1, probability 5, space 0, times 10000 [ 831.093213][T11403] CPU: 0 UID: 0 PID: 11403 Comm: syz.4.1116 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 831.093244][T11403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 831.093256][T11403] Call Trace: [ 831.093263][T11403] [ 831.093271][T11403] dump_stack_lvl+0xe8/0x150 [ 831.093307][T11403] should_fail_ex+0x447/0x5e0 [ 831.093336][T11403] should_failslab+0xa8/0x100 [ 831.093359][T11403] __kmalloc_cache_noprof+0x9c/0x670 [ 831.093378][T11403] ? sctp_add_bind_addr+0x8c/0x370 [ 831.093396][T11403] ? sctp_add_bind_addr+0x8c/0x370 [ 831.093419][T11403] sctp_add_bind_addr+0x8c/0x370 [ 831.093441][T11403] sctp_copy_local_addr_list+0x31a/0x4e0 [ 831.093461][T11403] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 831.093480][T11403] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 831.093500][T11403] ? sctp_v6_is_any+0x64/0x80 [ 831.093521][T11403] ? sctp_copy_one_addr+0x93/0x360 [ 831.093542][T11403] sctp_bind_addr_copy+0xb3/0x3c0 [ 831.093561][T11403] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 831.093593][T11403] sctp_connect_new_asoc+0x2ff/0x6b0 [ 831.093618][T11403] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 831.093644][T11403] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 831.093670][T11403] ? lockdep_hardirqs_on+0x7b/0x110 [ 831.093690][T11403] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 831.093709][T11403] ? security_sctp_bind_connect+0x7e/0x2c0 [ 831.093739][T11403] sctp_sendmsg+0x1506/0x2a50 [ 831.093770][T11403] ? __lock_acquire+0x747/0x2de0 [ 831.093800][T11403] ? __pfx_sctp_sendmsg+0x10/0x10 [ 831.093820][T11403] ? smack_socket_sendmsg+0x4b8/0x5a0 [ 831.093852][T11403] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 831.093881][T11403] ? __lock_acquire+0x747/0x2de0 [ 831.093912][T11403] ? __lock_acquire+0x747/0x2de0 [ 831.093943][T11403] ? sock_rps_record_flow+0x19/0x350 [ 831.093975][T11403] ? inet_sendmsg+0x298/0x320 [ 831.094003][T11403] ? __pfx_inet_sendmsg+0x10/0x10 [ 831.094029][T11403] sock_sendmsg_nosec+0x10f/0x190 [ 831.094058][T11403] ____sys_sendmsg+0x565/0x870 [ 831.094086][T11403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.094113][T11403] ? import_iovec+0x73/0xa0 [ 831.094139][T11403] ___sys_sendmsg+0x2a5/0x360 [ 831.094160][T11403] ? __lock_acquire+0x747/0x2de0 [ 831.094188][T11403] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.094209][T11403] ? futex_wait+0x2a2/0x390 [ 831.094273][T11403] ? __fget_files+0x3a8/0x420 [ 831.094304][T11403] ? __fget_files+0x2a/0x420 [ 831.094337][T11403] __x64_sys_sendmsg+0x1b7/0x290 [ 831.094360][T11403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 831.094400][T11403] do_syscall_64+0x166/0x520 [ 831.094422][T11403] ? trace_irq_disable+0x3b/0x140 [ 831.094443][T11403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.094464][T11403] ? clear_bhb_loop+0x70/0xc0 [ 831.094488][T11403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.094508][T11403] RIP: 0033:0x7ff9fe09fb19 [ 831.094527][T11403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.094544][T11403] RSP: 002b:00007ff9fc2ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.094566][T11403] RAX: ffffffffffffffda RBX: 00007ff9fe325fa0 RCX: 00007ff9fe09fb19 [ 831.094581][T11403] RDX: 0000000024000052 RSI: 00002000000001c0 RDI: 0000000000000003 [ 831.094595][T11403] RBP: 00007ff9fe137b70 R08: 0000000000000000 R09: 0000000000000000 [ 831.094609][T11403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.094620][T11403] R13: 00007ff9fe326038 R14: 00007ff9fe325fa0 R15: 00007ffdff63b698 [ 831.094644][T11403] [ 831.282416][T11185] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.282535][T11185] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.282735][T11185] bridge_slave_0: entered allmulticast mode [ 831.287548][T11185] bridge_slave_0: entered promiscuous mode [ 831.497250][T11395] syzkaller1: entered promiscuous mode [ 831.497279][T11395] syzkaller1: entered allmulticast mode [ 831.499110][T11185] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.499306][T11185] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.499462][T11185] bridge_slave_1: entered allmulticast mode [ 831.501682][T11185] bridge_slave_1: entered promiscuous mode [ 832.125853][ T8795] Bluetooth: hci3: command tx timeout [ 832.162327][T11185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.186418][T11185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.698341][T11185] team0: Port device team_slave_0 added [ 832.721480][T11185] team0: Port device team_slave_1 added [ 832.792092][T11418] 9p: Bad value for 'wfdno' [ 833.318185][T11185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.318202][T11185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.318228][T11185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.372094][T11426] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 833.501456][T11431] FAULT_INJECTION: forcing a failure. [ 833.501456][T11431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 833.501494][T11431] CPU: 1 UID: 0 PID: 11431 Comm: syz.4.1124 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 833.501512][T11431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 833.501519][T11431] Call Trace: [ 833.501525][T11431] [ 833.501531][T11431] dump_stack_lvl+0xe8/0x150 [ 833.501556][T11431] should_fail_ex+0x447/0x5e0 [ 833.501574][T11431] _copy_from_user+0x2d/0xb0 [ 833.501592][T11431] __sys_bpf+0x2e7/0xe00 [ 833.501611][T11431] ? __pfx___sys_bpf+0x10/0x10 [ 833.501663][T11431] ? do_futex+0x3e7/0x4e0 [ 833.501693][T11431] ? ksys_write+0x248/0x270 [ 833.501704][T11431] ? __pfx___se_sys_futex+0x10/0x10 [ 833.501718][T11431] ? __pfx_ksys_write+0x10/0x10 [ 833.501731][T11431] __x64_sys_bpf+0xba/0xd0 [ 833.501746][T11431] do_syscall_64+0x166/0x520 [ 833.501760][T11431] ? trace_irq_disable+0x3b/0x140 [ 833.501772][T11431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.501797][T11431] ? clear_bhb_loop+0x70/0xc0 [ 833.501813][T11431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.501824][T11431] RIP: 0033:0x7ff9fe09fb19 [ 833.501836][T11431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.501846][T11431] RSP: 002b:00007ff9fc2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 833.501859][T11431] RAX: ffffffffffffffda RBX: 00007ff9fe325fa0 RCX: 00007ff9fe09fb19 [ 833.501868][T11431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 833.501874][T11431] RBP: 00007ff9fe137b70 R08: 0000000000000000 R09: 0000000000000000 [ 833.501881][T11431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.501887][T11431] R13: 00007ff9fe326038 R14: 00007ff9fe325fa0 R15: 00007ffdff63b698 [ 833.501904][T11431] [ 833.817584][T11185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.817601][T11185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.817616][T11185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.818128][T11284] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.818362][T11284] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.818534][T11284] bridge_slave_0: entered allmulticast mode [ 833.820094][T11284] bridge_slave_0: entered promiscuous mode [ 833.878159][T11284] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.878276][T11284] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.878473][T11284] bridge_slave_1: entered allmulticast mode [ 833.883482][T11284] bridge_slave_1: entered promiscuous mode [ 833.915466][ T5738] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 834.020189][T11284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.045102][T11284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.058766][T11185] hsr_slave_0: entered promiscuous mode [ 834.059671][T11185] hsr_slave_1: entered promiscuous mode [ 834.060173][T11185] debugfs: 'hsr0' already exists in 'hsr' [ 834.060189][T11185] Cannot create hsr debugfs directory [ 834.060373][T10874] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 834.076563][ T5738] usb 5-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 834.078133][ T5738] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 834.078160][ T5738] usb 5-1: config 1 has no interface number 0 [ 834.080680][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.080706][ T5738] usb 5-1: Product: syz [ 834.080720][ T5738] usb 5-1: Manufacturer: syz [ 834.080733][ T5738] usb 5-1: SerialNumber: syz [ 834.111535][ T5738] usb 5-1: 3:0 : does not exist [ 834.111560][ T5738] usb 5-1: 3:0 : does not exist [ 834.182061][T10874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 834.205692][ T8795] Bluetooth: hci3: command tx timeout [ 834.219887][T10874] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 834.264491][T10874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 834.282207][T10874] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 834.325136][ T5738] usb 5-1: USB disconnect, device number 12 [ 834.347336][T10874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 834.509102][T11284] team0: Port device team_slave_0 added [ 834.512889][T10874] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 834.551030][T10874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 834.571702][T11284] team0: Port device team_slave_1 added [ 835.743134][T11284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.743152][T11284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.743170][T11284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.832617][T11284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.832636][T11284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.832658][T11284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.291594][T11284] hsr_slave_0: entered promiscuous mode [ 836.292348][T11284] hsr_slave_1: entered promiscuous mode [ 836.292941][T11284] debugfs: 'hsr0' already exists in 'hsr' [ 836.292960][T11284] Cannot create hsr debugfs directory [ 836.435882][ T1173] bridge_slave_1: left allmulticast mode [ 836.435920][ T1173] bridge_slave_1: left promiscuous mode [ 836.436213][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.538457][ T1173] bridge_slave_0: left allmulticast mode [ 836.538491][ T1173] bridge_slave_0: left promiscuous mode [ 836.538725][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.151252][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.266435][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.347168][ T1173] bond0 (unregistering): Released all slaves [ 837.465567][ T9869] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 837.616473][ T9869] usb 5-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 837.617709][ T9869] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 837.617734][ T9869] usb 5-1: config 1 has no interface number 0 [ 837.621071][ T9869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.621098][ T9869] usb 5-1: Product: syz [ 837.621110][ T9869] usb 5-1: Manufacturer: syz [ 837.621124][ T9869] usb 5-1: SerialNumber: syz [ 837.738260][ T9869] usb 5-1: 3:0 : does not exist [ 837.738284][ T9869] usb 5-1: 3:0 : does not exist [ 837.885423][ T9869] usb 5-1: USB disconnect, device number 13 [ 838.060734][T11480] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1139'. [ 838.094305][T11480] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1139'. [ 838.755920][ T1173] hsr_slave_0: left promiscuous mode [ 838.775741][ T1173] hsr_slave_1: left promiscuous mode [ 838.776624][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.826122][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.228038][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 839.286286][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 841.176210][ T5738] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 841.334402][T10874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.337824][ T5738] usb 5-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 841.339198][ T5738] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 841.339221][ T5738] usb 5-1: config 1 has no interface number 0 [ 841.361633][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.361660][ T5738] usb 5-1: Product: syz [ 841.361675][ T5738] usb 5-1: Manufacturer: syz [ 841.361689][ T5738] usb 5-1: SerialNumber: syz [ 841.379794][T10874] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.514423][ T5738] usb 5-1: 3:0 : does not exist [ 841.514440][ T5738] usb 5-1: 3:0 : does not exist [ 841.524319][ T1456] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.524445][ T1456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.552750][ T1407] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.552951][ T1407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.790321][ T5738] usb 5-1: USB disconnect, device number 14 [ 842.925507][T11281] udevd[11281]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 844.439969][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 844.471097][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 844.472582][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 844.499701][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 844.504633][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 845.108170][T11548] rxe_eth0 speed is unknown, defaulting to 1000 [ 845.336380][ T1173] bridge_slave_1: left allmulticast mode [ 845.336418][ T1173] bridge_slave_1: left promiscuous mode [ 845.336678][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.443689][T11569] 9p: Bad value for 'wfdno' [ 845.506817][ T1173] bridge_slave_0: left allmulticast mode [ 845.506844][ T1173] bridge_slave_0: left promiscuous mode [ 845.507120][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.016614][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 846.118922][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 846.204959][ T1173] bond0 (unregistering): Released all slaves [ 846.763889][ T8795] Bluetooth: hci0: command tx timeout [ 846.812992][T11582] netlink: 'syz.0.1159': attribute type 2 has an invalid length. [ 847.220144][T11589] FAULT_INJECTION: forcing a failure. [ 847.220144][T11589] name failslab, interval 1, probability 5, space 0, times 9997 [ 847.220179][T11589] CPU: 0 UID: 0 PID: 11589 Comm: syz.4.1162 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 847.220205][T11589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 847.220218][T11589] Call Trace: [ 847.220226][T11589] [ 847.220236][T11589] dump_stack_lvl+0xe8/0x150 [ 847.220279][T11589] should_fail_ex+0x447/0x5e0 [ 847.220312][T11589] should_failslab+0xa8/0x100 [ 847.220341][T11589] __kmalloc_cache_noprof+0x9c/0x670 [ 847.220365][T11589] ? shmem_init_fs_context+0x53/0x260 [ 847.220390][T11589] ? shmem_init_fs_context+0x53/0x260 [ 847.220424][T11589] shmem_init_fs_context+0x53/0x260 [ 847.220453][T11589] alloc_fs_context+0x99e/0xd00 [ 847.220523][T11589] do_new_mount+0x177/0xb00 [ 847.220551][T11589] ? cap_capable+0x123/0x460 [ 847.220586][T11589] ? __pfx_do_new_mount+0x10/0x10 [ 847.220617][T11589] ? ns_capable+0x84/0xe0 [ 847.220652][T11589] ? path_mount+0x647/0x1050 [ 847.220691][T11589] ? user_path_at+0xd4/0x160 [ 847.220726][T11589] __se_sys_mount+0x31d/0x420 [ 847.220762][T11589] ? __pfx___se_sys_mount+0x10/0x10 [ 847.220798][T11589] ? __x64_sys_mount+0x20/0xc0 [ 847.220830][T11589] do_syscall_64+0x166/0x520 [ 847.220854][T11589] ? trace_irq_disable+0x3b/0x140 [ 847.220876][T11589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.220898][T11589] ? clear_bhb_loop+0x70/0xc0 [ 847.220924][T11589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.220945][T11589] RIP: 0033:0x7ff9fe09fb19 [ 847.220964][T11589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.220983][T11589] RSP: 002b:00007ff9fc2ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 847.221006][T11589] RAX: ffffffffffffffda RBX: 00007ff9fe325fa0 RCX: 00007ff9fe09fb19 [ 847.221022][T11589] RDX: 0000200000000340 RSI: 00002000000002c0 RDI: 0000000000000000 [ 847.221037][T11589] RBP: 00007ff9fe137b70 R08: 0000200000000380 R09: 0000000000000000 [ 847.221052][T11589] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 847.221065][T11589] R13: 00007ff9fe326038 R14: 00007ff9fe325fa0 R15: 00007ffdff63b698 [ 847.221099][T11589] [ 848.310973][T11602] FAULT_INJECTION: forcing a failure. [ 848.310973][T11602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.311010][T11602] CPU: 0 UID: 0 PID: 11602 Comm: syz.4.1166 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 848.311035][T11602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 848.311048][T11602] Call Trace: [ 848.311057][T11602] [ 848.311066][T11602] dump_stack_lvl+0xe8/0x150 [ 848.311109][T11602] should_fail_ex+0x447/0x5e0 [ 848.311143][T11602] _copy_from_user+0x2d/0xb0 [ 848.311179][T11602] input_event_from_user+0xb1/0x290 [ 848.311345][T11602] ? __pfx_input_event_from_user+0x10/0x10 [ 848.311385][T11602] ? rt_spin_unlock+0x165/0x200 [ 848.311421][T11602] evdev_write+0x2ca/0x4c0 [ 848.311485][T11602] ? __pfx_evdev_write+0x10/0x10 [ 848.311518][T11602] ? bpf_lsm_file_permission+0x9/0x20 [ 848.311543][T11602] ? security_file_permission+0x75/0x260 [ 848.311576][T11602] ? rw_verify_area+0x209/0x4d0 [ 848.311609][T11602] ? __pfx_evdev_write+0x10/0x10 [ 848.311639][T11602] vfs_write+0x29f/0xbb0 [ 848.311677][T11602] ? __pfx_vfs_write+0x10/0x10 [ 848.311712][T11602] ? __fget_files+0x2a/0x420 [ 848.311740][T11602] ? __fget_files+0x3a8/0x420 [ 848.311769][T11602] ? __fget_files+0x2a/0x420 [ 848.311804][T11602] ? fdget+0x1b2/0x250 [ 848.311841][T11602] ksys_write+0x156/0x270 [ 848.311863][T11602] ? __pfx_ksys_write+0x10/0x10 [ 848.311896][T11602] do_syscall_64+0x166/0x520 [ 848.311919][T11602] ? trace_irq_disable+0x3b/0x140 [ 848.311940][T11602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.311965][T11602] ? clear_bhb_loop+0x70/0xc0 [ 848.311993][T11602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.312013][T11602] RIP: 0033:0x7ff9fe09fb19 [ 848.312034][T11602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.312053][T11602] RSP: 002b:00007ff9fc2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 848.312077][T11602] RAX: ffffffffffffffda RBX: 00007ff9fe325fa0 RCX: 00007ff9fe09fb19 [ 848.312093][T11602] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000006 [ 848.312107][T11602] RBP: 00007ff9fe137b70 R08: 0000000000000000 R09: 0000000000000000 [ 848.312121][T11602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.312134][T11602] R13: 00007ff9fe326038 R14: 00007ff9fe325fa0 R15: 00007ffdff63b698 [ 848.312177][T11602] [ 848.578336][ T1173] hsr_slave_0: left promiscuous mode [ 848.616199][ T1173] hsr_slave_1: left promiscuous mode [ 848.617422][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.657792][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.835502][ T8795] Bluetooth: hci0: command tx timeout [ 849.664750][T11609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1169'. [ 850.033612][ T36] audit: type=1326 audit(1793802828.890:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11610 comm="syz.4.1170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 850.034587][ T36] audit: type=1326 audit(1793802828.900:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11610 comm="syz.4.1170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 850.042934][ T36] audit: type=1326 audit(1793802828.910:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11610 comm="syz.4.1170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 850.043411][ T36] audit: type=1326 audit(1793802828.910:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11610 comm="syz.4.1170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 850.043732][ T36] audit: type=1326 audit(1793802828.910:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11610 comm="syz.4.1170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 850.170567][ T36] audit: type=1326 audit(1793802829.030:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11610 comm="syz.4.1170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9fe099897 code=0x7ffc0000 [ 850.170625][ T36] audit: type=1326 audit(1793802829.040:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11610 comm="syz.4.1170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9fe040e99 code=0x7ffc0000 [ 850.171886][ T36] audit: type=1326 audit(1793802829.040:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11610 comm="syz.4.1170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9fe099897 code=0x7ffc0000 [ 850.172114][ T36] audit: type=1326 audit(1793802829.040:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11610 comm="syz.4.1170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9fe040e99 code=0x7ffc0000 [ 850.247566][ T36] audit: type=1326 audit(1793802829.120:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11610 comm="syz.4.1170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9fe099897 code=0x7ffc0000 [ 851.113854][ T8795] Bluetooth: hci0: command tx timeout [ 851.135302][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 851.217510][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 851.507371][T11185] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 851.549989][T11185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 851.559887][T11185] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 851.685384][T11185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 851.694027][T11185] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 851.764400][T11185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 852.014437][T11185] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 852.102283][T11185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 852.777641][T11284] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 852.854259][T11284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 852.887583][T11639] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 852.888800][T11284] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 852.957629][T11284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 852.987228][T11284] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 853.033221][T11284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 853.041597][T11284] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 853.086037][T11284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 853.157270][ T8795] Bluetooth: hci0: command tx timeout [ 854.924771][T11659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1180'. [ 855.563272][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 855.563292][ T36] audit: type=1326 audit(1793802834.430:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.4.1181" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 855.565072][ T36] audit: type=1326 audit(1793802834.430:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.4.1181" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 855.574856][ T36] audit: type=1326 audit(1793802834.440:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.4.1181" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 855.574906][ T36] audit: type=1326 audit(1793802834.440:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.4.1181" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 855.574944][ T36] audit: type=1326 audit(1793802834.440:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.4.1181" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 855.575789][ T36] audit: type=1326 audit(1793802834.440:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.4.1181" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 855.576038][ T36] audit: type=1326 audit(1793802834.450:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.4.1181" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 855.576634][ T36] audit: type=1326 audit(1793802834.450:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.4.1181" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 855.576911][ T36] audit: type=1326 audit(1793802834.450:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.4.1181" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 855.577457][ T36] audit: type=1326 audit(1793802834.450:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.4.1181" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 855.910199][T11548] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.911351][T11548] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.911551][T11548] bridge_slave_0: entered allmulticast mode [ 855.914572][T11548] bridge_slave_0: entered promiscuous mode [ 855.962055][T11548] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.962195][T11548] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.962349][T11548] bridge_slave_1: entered allmulticast mode [ 855.963638][T11548] bridge_slave_1: entered promiscuous mode [ 856.269327][T11548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.292792][T11548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.555227][T11548] team0: Port device team_slave_0 added [ 856.571159][T11548] team0: Port device team_slave_1 added [ 856.672609][T11548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.672627][T11548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.672655][T11548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.690338][T11548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.690357][T11548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.690382][T11548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.732120][T11685] FAULT_INJECTION: forcing a failure. [ 856.732120][T11685] name failslab, interval 1, probability 5, space 0, times 9996 [ 856.732154][T11685] CPU: 1 UID: 0 PID: 11685 Comm: syz.0.1188 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 856.732178][T11685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 856.732191][T11685] Call Trace: [ 856.732198][T11685] [ 856.732207][T11685] dump_stack_lvl+0xe8/0x150 [ 856.732248][T11685] should_fail_ex+0x447/0x5e0 [ 856.732279][T11685] ? __d_alloc+0x37/0x830 [ 856.732310][T11685] should_failslab+0xa8/0x100 [ 856.732336][T11685] kmem_cache_alloc_lru_noprof+0x9d/0x680 [ 856.732371][T11685] ? __d_alloc+0x37/0x830 [ 856.732406][T11685] __d_alloc+0x37/0x830 [ 856.732440][T11685] __d_alloc_parallel+0xde/0x1710 [ 856.732470][T11685] ? lock_acquire+0x115/0x350 [ 856.732512][T11685] ? __d_lookup+0x66/0x790 [ 856.732533][T11685] ? __d_lookup+0x66/0x790 [ 856.732553][T11685] ? __pfx___d_alloc_parallel+0x10/0x10 [ 856.732575][T11685] ? d_lookup+0x1f/0xc0 [ 856.732597][T11685] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 856.732626][T11685] ? lockdep_hardirqs_on+0x7b/0x110 [ 856.732657][T11685] lookup_open+0x2c8/0x1b00 [ 856.732704][T11685] path_openat+0x711/0x2100 [ 856.732743][T11685] do_file_open+0x23e/0x4a0 [ 856.732761][T11685] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 856.732791][T11685] ? __pfx_do_file_open+0x10/0x10 [ 856.732824][T11685] ? __pfx_kfree_link+0x10/0x10 [ 856.732864][T11685] ? alloc_fd+0x6b2/0x760 [ 856.732903][T11685] do_sys_openat2+0x115/0x200 [ 856.732929][T11685] ? __se_sys_futex+0x3a8/0x450 [ 856.732956][T11685] ? __pfx_do_sys_openat2+0x10/0x10 [ 856.732988][T11685] ? rcu_is_watching+0x16/0xb0 [ 856.733017][T11685] __x64_sys_openat+0x138/0x170 [ 856.733048][T11685] do_syscall_64+0x166/0x520 [ 856.733070][T11685] ? trace_irq_disable+0x3b/0x140 [ 856.733092][T11685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.733114][T11685] ? clear_bhb_loop+0x70/0xc0 [ 856.733139][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.733158][T11685] RIP: 0033:0x7fdc045a034e [ 856.733176][T11685] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 856.733194][T11685] RSP: 002b:00007fdc0282dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 856.733216][T11685] RAX: ffffffffffffffda RBX: 00007fdc0282e6c0 RCX: 00007fdc045a034e [ 856.733232][T11685] RDX: 0000000000000000 RSI: 00007fdc0282df90 RDI: ffffffffffffff9c [ 856.733246][T11685] RBP: 00007fdc04677b70 R08: 0000000000000000 R09: 0000000000000000 [ 856.733259][T11685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.733272][T11685] R13: 00007fdc04866038 R14: 00007fdc04865fa0 R15: 00007ffccaecaae8 [ 856.733305][T11685] [ 856.931728][T11689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1190'. [ 858.456218][T11185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.592499][T11548] hsr_slave_0: entered promiscuous mode [ 858.602324][T11548] hsr_slave_1: entered promiscuous mode [ 859.459373][T11185] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.757727][ T1481] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.758204][ T1481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.910275][T11284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.957801][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.958028][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.042108][T11715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1198'. [ 860.075593][ T1173] bridge_slave_1: left allmulticast mode [ 860.075633][ T1173] bridge_slave_1: left promiscuous mode [ 860.075896][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.207703][ T1173] bridge_slave_0: left allmulticast mode [ 860.207743][ T1173] bridge_slave_0: left promiscuous mode [ 860.210505][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.388946][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.473281][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.523814][ T1173] bond0 (unregistering): Released all slaves [ 862.839478][T11284] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.141441][T11739] overlayfs: overlapping lowerdir path [ 863.514987][T11745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1208'. [ 863.556156][ T1173] hsr_slave_0: left promiscuous mode [ 863.596627][ T1173] hsr_slave_1: left promiscuous mode [ 863.598013][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.618865][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.073201][T11749] input: syz0 as /devices/virtual/input/input23 [ 864.158501][T11736] udevd[11736]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 864.158630][T11736] udevd[11736]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 864.201040][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 864.266090][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 864.459078][ T36] kauditd_printk_skb: 254 callbacks suppressed [ 864.459099][ T36] audit: type=1326 audit(1793802843.330:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11755 comm="syz.4.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 864.459142][ T36] audit: type=1326 audit(1793802843.330:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11755 comm="syz.4.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 864.462239][ T36] audit: type=1326 audit(1793802843.330:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11755 comm="syz.4.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 864.462546][ T36] audit: type=1326 audit(1793802843.330:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11755 comm="syz.4.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 864.463075][ T36] audit: type=1326 audit(1793802843.330:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11755 comm="syz.4.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 864.463552][ T36] audit: type=1326 audit(1793802843.330:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11755 comm="syz.4.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 864.463795][ T36] audit: type=1326 audit(1793802843.330:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11755 comm="syz.4.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 864.464512][ T36] audit: type=1326 audit(1793802843.330:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11755 comm="syz.4.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 864.464555][ T36] audit: type=1326 audit(1793802843.330:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11755 comm="syz.4.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 864.464961][ T36] audit: type=1326 audit(1793802843.330:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11755 comm="syz.4.1213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fe09fb19 code=0x7ffc0000 [ 864.797817][ T1456] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.797924][ T1456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.891166][T11760] overlayfs: overlapping lowerdir path [ 865.093091][ T1456] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.093255][ T1456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.330390][T11772] 9p: Bad value for 'wfdno' [ 867.000612][T11816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1221'. [ 868.933964][T11284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.987397][T11185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.281920][T11548] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 869.349991][T11548] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 869.358030][T11548] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 869.423798][T11548] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 869.431846][T11548] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 869.513266][T11548] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 869.516403][T11548] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 869.607543][T11548] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 869.989027][T11548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.493222][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.493547][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.204015][T11548] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.249298][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.249401][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.293807][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.296894][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.311358][T11284] veth0_vlan: entered promiscuous mode [ 871.374717][ T36] kauditd_printk_skb: 579 callbacks suppressed [ 871.374736][ T36] audit: type=1326 audit(1793802850.240:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11864 comm="syz.0.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc045dfb19 code=0x7ffc0000 [ 871.400085][T11185] veth0_vlan: entered promiscuous mode [ 871.405035][T11284] veth1_vlan: entered promiscuous mode [ 871.419941][ T36] audit: type=1326 audit(1793802850.240:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11864 comm="syz.0.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc045dfb19 code=0x7ffc0000 [ 871.420215][ T36] audit: type=1326 audit(1793802850.290:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11864 comm="syz.0.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdc045dfb19 code=0x7ffc0000 [ 871.420467][ T36] audit: type=1326 audit(1793802850.290:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11864 comm="syz.0.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc045dfb19 code=0x7ffc0000 [ 871.420870][ T36] audit: type=1326 audit(1793802850.290:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11864 comm="syz.0.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc045dfb19 code=0x7ffc0000 [ 871.421129][ T36] audit: type=1326 audit(1793802850.290:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11864 comm="syz.0.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fdc045dfb19 code=0x7ffc0000 [ 871.421345][ T36] audit: type=1326 audit(1793802850.290:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11864 comm="syz.0.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc045dfb19 code=0x7ffc0000 [ 871.421767][ T36] audit: type=1326 audit(1793802850.290:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11864 comm="syz.0.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdc045dfb19 code=0x7ffc0000 [ 871.422226][ T36] audit: type=1326 audit(1793802850.290:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11864 comm="syz.0.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc045dfb19 code=0x7ffc0000 [ 871.424072][ T36] audit: type=1326 audit(1793802850.290:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11864 comm="syz.0.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc045dfb19 code=0x7ffc0000 [ 871.525717][T11185] veth1_vlan: entered promiscuous mode [ 871.739532][T11872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1230'. [ 871.817882][T11284] veth0_macvtap: entered promiscuous mode [ 871.844932][T11284] veth1_macvtap: entered promiscuous mode [ 871.921536][T11185] veth0_macvtap: entered promiscuous mode [ 871.951390][T11875] FAULT_INJECTION: forcing a failure. [ 871.951390][T11875] name failslab, interval 1, probability 5, space 0, times 9995 [ 871.951418][T11875] CPU: 0 UID: 0 PID: 11875 Comm: syz.0.1231 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 871.951431][T11875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 871.951440][T11875] Call Trace: [ 871.951444][T11875] [ 871.951450][T11875] dump_stack_lvl+0xe8/0x150 [ 871.951474][T11875] should_fail_ex+0x447/0x5e0 [ 871.951491][T11875] ? __d_alloc+0x37/0x830 [ 871.951510][T11875] should_failslab+0xa8/0x100 [ 871.951526][T11875] kmem_cache_alloc_lru_noprof+0x9d/0x680 [ 871.951545][T11875] ? __d_alloc+0x37/0x830 [ 871.951565][T11875] __d_alloc+0x37/0x830 [ 871.951580][T11875] ? shmem_fill_super+0x97d/0x1070 [ 871.951598][T11875] d_make_root+0x41/0x80 [ 871.951608][T11875] shmem_fill_super+0xc3d/0x1070 [ 871.951622][T11875] ? __pfx_set_anon_super_fc+0x10/0x10 [ 871.951644][T11875] ? __pfx_shmem_fill_super+0x10/0x10 [ 871.951661][T11875] ? rcu_is_watching+0x16/0xb0 [ 871.951674][T11875] ? cap_capable+0x123/0x460 [ 871.951689][T11875] ? __pfx_shmem_fill_super+0x10/0x10 [ 871.951704][T11875] get_tree_nodev+0xbe/0x150 [ 871.951723][T11875] vfs_get_tree+0x92/0x2a0 [ 871.951735][T11875] do_new_mount+0x325/0xb00 [ 871.951749][T11875] ? cap_capable+0x123/0x460 [ 871.951766][T11875] ? __pfx_do_new_mount+0x10/0x10 [ 871.951782][T11875] ? ns_capable+0x84/0xe0 [ 871.951798][T11875] ? path_mount+0x647/0x1050 [ 871.951815][T11875] ? user_path_at+0xd4/0x160 [ 871.951832][T11875] __se_sys_mount+0x31d/0x420 [ 871.951850][T11875] ? __pfx___se_sys_mount+0x10/0x10 [ 871.951869][T11875] ? __x64_sys_mount+0x20/0xc0 [ 871.951885][T11875] do_syscall_64+0x166/0x520 [ 871.951898][T11875] ? trace_irq_disable+0x3b/0x140 [ 871.951910][T11875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.951921][T11875] ? clear_bhb_loop+0x70/0xc0 [ 871.951935][T11875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.951946][T11875] RIP: 0033:0x7fdc045dfb19 [ 871.951958][T11875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.951968][T11875] RSP: 002b:00007fdc0282e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 871.951980][T11875] RAX: ffffffffffffffda RBX: 00007fdc04865fa0 RCX: 00007fdc045dfb19 [ 871.951988][T11875] RDX: 0000200000000340 RSI: 00002000000002c0 RDI: 0000000000000000 [ 871.951996][T11875] RBP: 00007fdc04677b70 R08: 0000200000000380 R09: 0000000000000000 [ 871.952003][T11875] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 871.952009][T11875] R13: 00007fdc04866038 R14: 00007fdc04865fa0 R15: 00007ffccaecaae8 [ 871.952027][T11875] [ 872.032330][T11185] veth1_macvtap: entered promiscuous mode [ 872.105195][T11284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.169181][T11185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.177652][T11284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.211089][T11185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.532990][ T1481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.533013][ T1481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.679219][ T1456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.679243][ T1456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.783530][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.783547][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.854605][ T1553] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.856924][ T1173] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.874477][ T1553] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.878713][ T1407] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.881451][ T1456] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.881495][ T1456] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.881529][ T1456] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.881563][ T1456] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.249828][T11902] fuse: Unknown parameter '00000000000000000003' [ 874.332416][ T1481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.332436][ T1481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.463155][T11548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.922462][T11913] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1238'. [ 876.161042][T11548] veth0_vlan: entered promiscuous mode [ 876.284444][T11548] veth1_vlan: entered promiscuous mode [ 876.330374][T11923] syz.7.907 (11923): drop_caches: 2 [ 876.330826][T11923] syz.7.907 (11923): drop_caches: 2 [ 876.461068][T11548] veth0_macvtap: entered promiscuous mode [ 876.479480][T11548] veth1_macvtap: entered promiscuous mode [ 876.540181][T11548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.557423][T11548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.649979][T11943] FAULT_INJECTION: forcing a failure. [ 876.649979][T11943] name failslab, interval 1, probability 5, space 0, times 9994 [ 876.650016][T11943] CPU: 1 UID: 0 PID: 11943 Comm: syz.0.1245 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 876.650041][T11943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 876.650054][T11943] Call Trace: [ 876.650061][T11943] [ 876.650071][T11943] dump_stack_lvl+0xe8/0x150 [ 876.650114][T11943] should_fail_ex+0x447/0x5e0 [ 876.650143][T11943] should_failslab+0xa8/0x100 [ 876.650168][T11943] __kmalloc_noprof+0xf6/0x790 [ 876.650188][T11943] ? tomoyo_encode+0x2ad/0x570 [ 876.650206][T11943] ? tomoyo_encode+0x2ad/0x570 [ 876.650225][T11943] ? __get_fs_type+0x21/0x280 [ 876.650249][T11943] tomoyo_encode+0x2ad/0x570 [ 876.650274][T11943] tomoyo_mount_permission+0x50d/0x9e0 [ 876.650314][T11943] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 876.650350][T11943] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 876.650379][T11943] ? kasan_save_track+0x4f/0x80 [ 876.650449][T11943] ? kasan_quarantine_put+0xbb/0x1f0 [ 876.650472][T11943] security_sb_mount+0xe4/0x320 [ 876.650496][T11943] path_mount+0xbc/0x1050 [ 876.650528][T11943] ? user_path_at+0xd4/0x160 [ 876.650557][T11943] __se_sys_mount+0x31d/0x420 [ 876.650591][T11943] ? __pfx___se_sys_mount+0x10/0x10 [ 876.650627][T11943] ? __x64_sys_mount+0x20/0xc0 [ 876.650655][T11943] do_syscall_64+0x166/0x520 [ 876.650679][T11943] ? trace_irq_disable+0x3b/0x140 [ 876.650701][T11943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.650723][T11943] ? clear_bhb_loop+0x70/0xc0 [ 876.650749][T11943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.650769][T11943] RIP: 0033:0x7fdc045dfb19 [ 876.650793][T11943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.650811][T11943] RSP: 002b:00007fdc0282e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 876.650834][T11943] RAX: ffffffffffffffda RBX: 00007fdc04865fa0 RCX: 00007fdc045dfb19 [ 876.650849][T11943] RDX: 0000200000000340 RSI: 00002000000002c0 RDI: 0000000000000000 [ 876.650864][T11943] RBP: 00007fdc04677b70 R08: 0000200000000380 R09: 0000000000000000 [ 876.650878][T11943] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 876.650891][T11943] R13: 00007fdc04866038 R14: 00007fdc04865fa0 R15: 00007ffccaecaae8 [ 876.650922][T11943] [ 877.097122][ T1182] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.097496][ T1182] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.398840][ T1456] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.656451][ T3413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.656472][ T3413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.658594][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.992793][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.992808][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.669097][T11987] FAULT_INJECTION: forcing a failure. [ 879.669097][T11987] name failslab, interval 1, probability 5, space 0, times 9993 [ 879.669124][T11987] CPU: 0 UID: 0 PID: 11987 Comm: syz.4.1257 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 879.669138][T11987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 879.669146][T11987] Call Trace: [ 879.669150][T11987] [ 879.669156][T11987] dump_stack_lvl+0xe8/0x150 [ 879.669182][T11987] should_fail_ex+0x447/0x5e0 [ 879.669200][T11987] should_failslab+0xa8/0x100 [ 879.669218][T11987] __kmalloc_noprof+0xf6/0x790 [ 879.669230][T11987] ? tomoyo_encode+0x2ad/0x570 [ 879.669241][T11987] ? tomoyo_encode+0x2ad/0x570 [ 879.669252][T11987] ? __get_fs_type+0x21/0x280 [ 879.669265][T11987] tomoyo_encode+0x2ad/0x570 [ 879.669280][T11987] tomoyo_mount_permission+0x50d/0x9e0 [ 879.669297][T11987] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 879.669317][T11987] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 879.669334][T11987] ? kasan_save_track+0x4f/0x80 [ 879.669372][T11987] ? kasan_quarantine_put+0xbb/0x1f0 [ 879.669385][T11987] security_sb_mount+0xe4/0x320 [ 879.669399][T11987] path_mount+0xbc/0x1050 [ 879.669416][T11987] ? user_path_at+0xd4/0x160 [ 879.669434][T11987] __se_sys_mount+0x31d/0x420 [ 879.669452][T11987] ? __pfx___se_sys_mount+0x10/0x10 [ 879.669471][T11987] ? __x64_sys_mount+0x20/0xc0 [ 879.669488][T11987] do_syscall_64+0x166/0x520 [ 879.669501][T11987] ? trace_irq_disable+0x3b/0x140 [ 879.669512][T11987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.669524][T11987] ? clear_bhb_loop+0x70/0xc0 [ 879.669538][T11987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.669549][T11987] RIP: 0033:0x7ff9fe09fb19 [ 879.669561][T11987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.669571][T11987] RSP: 002b:00007ff9fc2ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 879.669584][T11987] RAX: ffffffffffffffda RBX: 00007ff9fe325fa0 RCX: 00007ff9fe09fb19 [ 879.669592][T11987] RDX: 0000200000000340 RSI: 00002000000002c0 RDI: 0000000000000000 [ 879.669599][T11987] RBP: 00007ff9fe137b70 R08: 0000200000000380 R09: 0000000000000000 [ 879.669606][T11987] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 879.669612][T11987] R13: 00007ff9fe326038 R14: 00007ff9fe325fa0 R15: 00007ffdff63b698 [ 879.669630][T11987] [ 880.163506][T11993] FAULT_INJECTION: forcing a failure. [ 880.163506][T11993] name failslab, interval 1, probability 5, space 0, times 9992 [ 880.163528][T11993] CPU: 0 UID: 0 PID: 11993 Comm: syz.6.1259 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 880.163545][T11993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 880.163552][T11993] Call Trace: [ 880.163557][T11993] [ 880.163562][T11993] dump_stack_lvl+0xe8/0x150 [ 880.163587][T11993] should_fail_ex+0x447/0x5e0 [ 880.163605][T11993] should_failslab+0xa8/0x100 [ 880.163620][T11993] __kmalloc_node_track_caller_noprof+0xf6/0x7b0 [ 880.163633][T11993] ? vfs_parse_fs_qstr+0x11e/0x1e0 [ 880.163644][T11993] ? vfs_parse_fs_qstr+0x11e/0x1e0 [ 880.163658][T11993] kmemdup_nul+0x36/0xf0 [ 880.163672][T11993] vfs_parse_fs_qstr+0x11e/0x1e0 [ 880.163684][T11993] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 880.163697][T11993] ? alloc_fs_context+0x9b2/0xd00 [ 880.163713][T11993] do_new_mount+0x2b2/0xb00 [ 880.163727][T11993] ? cap_capable+0x123/0x460 [ 880.163745][T11993] ? __pfx_do_new_mount+0x10/0x10 [ 880.163761][T11993] ? ns_capable+0x84/0xe0 [ 880.163778][T11993] ? path_mount+0x647/0x1050 [ 880.163797][T11993] ? user_path_at+0xd4/0x160 [ 880.163815][T11993] __se_sys_mount+0x31d/0x420 [ 880.163833][T11993] ? __pfx___se_sys_mount+0x10/0x10 [ 880.163852][T11993] ? __x64_sys_mount+0x20/0xc0 [ 880.163868][T11993] do_syscall_64+0x166/0x520 [ 880.163882][T11993] ? trace_irq_disable+0x3b/0x140 [ 880.163894][T11993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.163905][T11993] ? clear_bhb_loop+0x70/0xc0 [ 880.163919][T11993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.163930][T11993] RIP: 0033:0x7fbf6229fb19 [ 880.163942][T11993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.163951][T11993] RSP: 002b:00007fbf604f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 880.163964][T11993] RAX: ffffffffffffffda RBX: 00007fbf62525fa0 RCX: 00007fbf6229fb19 [ 880.163972][T11993] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 00002000000000c0 [ 880.163980][T11993] RBP: 00007fbf62337b70 R08: 0000200000000100 R09: 0000000000000000 [ 880.163987][T11993] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 880.163993][T11993] R13: 00007fbf62526038 R14: 00007fbf62525fa0 R15: 00007ffda4852238 [ 880.164010][T11993] [ 880.839101][T12006] input: syz0 as /devices/virtual/input/input24 [ 880.895535][ T9847] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 881.067318][T11736] udevd[11736]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 881.086859][ T9847] usb 6-1: New USB device found: idVendor=17ef, idProduct=60ee, bcdDevice=0.00 [ 881.090368][ T9847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 881.090399][ T9847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.140493][ T9847] usb 6-1: config 0 descriptor?? [ 881.141420][T12002] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 881.772226][T12002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.804776][T12002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.861441][ T9847] hid (null): unknown global tag 0x10 [ 881.861876][ T9847] hid (null): report_id 0 is invalid [ 881.861884][ T9847] hid (null): bogus close delimiter [ 881.886269][ T9847] hid (null): unknown global tag 0xb4 [ 881.886288][ T9847] hid (null): invalid report_count 23989 [ 881.914880][ T9847] lenovo 0003:17EF:60EE.000F: unknown main item tag 0x0 [ 881.914924][ T9847] lenovo 0003:17EF:60EE.000F: unknown main item tag 0x0 [ 881.914952][ T9847] lenovo 0003:17EF:60EE.000F: unknown main item tag 0x0 [ 881.914978][ T9847] lenovo 0003:17EF:60EE.000F: unknown main item tag 0x0 [ 881.915004][ T9847] lenovo 0003:17EF:60EE.000F: unknown main item tag 0x0 [ 881.915030][ T9847] lenovo 0003:17EF:60EE.000F: unknown main item tag 0x0 [ 881.915056][ T9847] lenovo 0003:17EF:60EE.000F: unknown main item tag 0x0 [ 881.915082][ T9847] lenovo 0003:17EF:60EE.000F: unknown main item tag 0x0 [ 881.915107][ T9847] lenovo 0003:17EF:60EE.000F: unknown main item tag 0x0 [ 881.915133][ T9847] lenovo 0003:17EF:60EE.000F: unknown main item tag 0x0 [ 881.989664][ T9847] lenovo 0003:17EF:60EE.000F: unexpected long global item [ 881.994035][ T9847] lenovo 0003:17EF:60EE.000F: hid_parse failed [ 881.994083][ T9847] lenovo 0003:17EF:60EE.000F: probe with driver lenovo failed with error -22 [ 882.301125][ T9850] usb 6-1: USB disconnect, device number 2 [ 882.714100][T12028] FAULT_INJECTION: forcing a failure. [ 882.714100][T12028] name failslab, interval 1, probability 5, space 0, times 9991 [ 882.714123][T12028] CPU: 0 UID: 0 PID: 12028 Comm: syz.6.1270 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 882.714136][T12028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 882.714144][T12028] Call Trace: [ 882.714148][T12028] [ 882.714153][T12028] dump_stack_lvl+0xe8/0x150 [ 882.714178][T12028] should_fail_ex+0x447/0x5e0 [ 882.714196][T12028] should_failslab+0xa8/0x100 [ 882.714212][T12028] __kmalloc_cache_noprof+0x9c/0x670 [ 882.714225][T12028] ? sget_fc+0x795/0x1d00 [ 882.714240][T12028] ? sget_fc+0x795/0x1d00 [ 882.714257][T12028] ? __pfx_shmem_fill_super+0x10/0x10 [ 882.714274][T12028] sget_fc+0x795/0x1d00 [ 882.714304][T12028] ? __pfx_set_anon_super_fc+0x10/0x10 [ 882.714322][T12028] ? __pfx_sget_fc+0x10/0x10 [ 882.714337][T12028] ? vfs_parse_monolithic_sep+0x322/0x360 [ 882.714349][T12028] ? shmem_init_fs_context+0x53/0x260 [ 882.714362][T12028] ? __pfx_shmem_next_opt+0x10/0x10 [ 882.714379][T12028] ? rcu_is_watching+0x16/0xb0 [ 882.714393][T12028] ? cap_capable+0x123/0x460 [ 882.714408][T12028] ? __pfx_shmem_fill_super+0x10/0x10 [ 882.714424][T12028] get_tree_nodev+0x2a/0x150 [ 882.714442][T12028] vfs_get_tree+0x92/0x2a0 [ 882.714454][T12028] do_new_mount+0x325/0xb00 [ 882.714469][T12028] ? cap_capable+0x123/0x460 [ 882.714485][T12028] ? __pfx_do_new_mount+0x10/0x10 [ 882.714501][T12028] ? ns_capable+0x84/0xe0 [ 882.714518][T12028] ? path_mount+0x647/0x1050 [ 882.714534][T12028] ? user_path_at+0xd4/0x160 [ 882.714551][T12028] __se_sys_mount+0x31d/0x420 [ 882.714569][T12028] ? __pfx___se_sys_mount+0x10/0x10 [ 882.714587][T12028] ? __x64_sys_mount+0x20/0xc0 [ 882.714603][T12028] do_syscall_64+0x166/0x520 [ 882.714616][T12028] ? trace_irq_disable+0x3b/0x140 [ 882.714628][T12028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.714640][T12028] ? clear_bhb_loop+0x70/0xc0 [ 882.714653][T12028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.714665][T12028] RIP: 0033:0x7fbf6229fb19 [ 882.714677][T12028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.714686][T12028] RSP: 002b:00007fbf604f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 882.714698][T12028] RAX: ffffffffffffffda RBX: 00007fbf62525fa0 RCX: 00007fbf6229fb19 [ 882.714706][T12028] RDX: 0000200000000340 RSI: 00002000000002c0 RDI: 0000000000000000 [ 882.714714][T12028] RBP: 00007fbf62337b70 R08: 0000200000000380 R09: 0000000000000000 [ 882.714721][T12028] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 882.714727][T12028] R13: 00007fbf62526038 R14: 00007fbf62525fa0 R15: 00007ffda4852238 [ 882.714744][T12028] [ 883.830503][T12040] input: syz0 as /devices/virtual/input/input25 [ 883.855193][T12044] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1277'. [ 886.028249][T10065] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 886.185524][T10065] usb 6-1: New USB device found: idVendor=17ef, idProduct=60ee, bcdDevice=0.00 [ 886.188601][T10065] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 886.188634][T10065] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.262188][T10065] usb 6-1: config 0 descriptor?? [ 886.278144][T12059] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 886.714782][T12059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.737197][T12059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.779365][T10065] hid (null): unknown global tag 0x10 [ 886.781582][T10065] hid (null): report_id 0 is invalid [ 886.781605][T10065] hid (null): bogus close delimiter [ 886.784819][T10065] hid (null): unknown global tag 0xb4 [ 886.784839][T10065] hid (null): invalid report_count 23989 [ 886.841015][T10065] lenovo 0003:17EF:60EE.0010: unexpected long global item [ 886.841884][T10065] lenovo 0003:17EF:60EE.0010: hid_parse failed [ 886.841972][T10065] lenovo 0003:17EF:60EE.0010: probe with driver lenovo failed with error -22 [ 887.202808][T10065] usb 6-1: USB disconnect, device number 3 [ 891.819914][T12131] netlink: 91 bytes leftover after parsing attributes in process `syz.5.1305'. [ 892.065624][ T9850] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 892.216523][ T9850] usb 5-1: New USB device found: idVendor=17ef, idProduct=60ee, bcdDevice=0.00 [ 892.235513][ T9850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 892.235584][ T9850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.303339][ T9850] usb 5-1: config 0 descriptor?? [ 892.320959][T12133] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 892.812207][T12133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.825994][T12133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.890732][ T9850] hid (null): unknown global tag 0x10 [ 892.895887][ T9850] hid (null): report_id 0 is invalid [ 892.895909][ T9850] hid (null): bogus close delimiter [ 892.923493][ T9850] hid (null): unknown global tag 0xb4 [ 892.923511][ T9850] hid (null): invalid report_count 23989 [ 893.067773][ T9850] hid_parser_main: 224 callbacks suppressed [ 893.067792][ T9850] lenovo 0003:17EF:60EE.0011: unknown main item tag 0x0 [ 893.067811][ T9850] lenovo 0003:17EF:60EE.0011: unknown main item tag 0x0 [ 893.067827][ T9850] lenovo 0003:17EF:60EE.0011: unknown main item tag 0x0 [ 893.067842][ T9850] lenovo 0003:17EF:60EE.0011: unknown main item tag 0x0 [ 893.067857][ T9850] lenovo 0003:17EF:60EE.0011: unknown main item tag 0x0 [ 893.067872][ T9850] lenovo 0003:17EF:60EE.0011: unknown main item tag 0x0 [ 893.067887][ T9850] lenovo 0003:17EF:60EE.0011: unknown main item tag 0x0 [ 893.067912][ T9850] lenovo 0003:17EF:60EE.0011: unknown main item tag 0x0 [ 893.067927][ T9850] lenovo 0003:17EF:60EE.0011: unknown main item tag 0x0 [ 893.067941][ T9850] lenovo 0003:17EF:60EE.0011: unknown main item tag 0x0 [ 893.090461][ T9850] lenovo 0003:17EF:60EE.0011: unexpected long global item [ 893.143390][ T9850] lenovo 0003:17EF:60EE.0011: hid_parse failed [ 893.143469][ T9850] lenovo 0003:17EF:60EE.0011: probe with driver lenovo failed with error -22 [ 893.441249][ T9850] usb 5-1: USB disconnect, device number 15 [ 894.406229][T12172] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1311'. [ 896.319419][T12202] FAULT_INJECTION: forcing a failure. [ 896.319419][T12202] name fail_futex, interval 1, probability 0, space 0, times 1 [ 896.319444][T12202] CPU: 1 UID: 0 PID: 12202 Comm: syz.7.1329 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 896.319459][T12202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 896.319466][T12202] Call Trace: [ 896.319471][T12202] [ 896.319477][T12202] dump_stack_lvl+0xe8/0x150 [ 896.319501][T12202] should_fail_ex+0x447/0x5e0 [ 896.319519][T12202] get_futex_key+0x1ab/0x1410 [ 896.319533][T12202] ? __pfx_futex_wake_mark+0x10/0x10 [ 896.319555][T12202] ? __pfx_get_futex_key+0x10/0x10 [ 896.319572][T12202] futex_wake+0x119/0x600 [ 896.319591][T12202] ? __pfx_futex_wait+0x10/0x10 [ 896.319608][T12202] ? __pfx_futex_wake+0x10/0x10 [ 896.319623][T12202] ? __sys_bpf+0xdb4/0xe00 [ 896.319641][T12202] ? __pfx___sys_bpf+0x10/0x10 [ 896.319657][T12202] do_futex+0x458/0x4e0 [ 896.319673][T12202] ? __pfx_do_futex+0x10/0x10 [ 896.319687][T12202] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 896.319708][T12202] __se_sys_futex+0x3a8/0x450 [ 896.319726][T12202] ? __pfx___se_sys_futex+0x10/0x10 [ 896.319739][T12202] ? rcu_is_watching+0x16/0xb0 [ 896.319756][T12202] ? __x64_sys_futex+0x21/0xf0 [ 896.319772][T12202] do_syscall_64+0x166/0x520 [ 896.319786][T12202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.319797][T12202] ? clear_bhb_loop+0x70/0xc0 [ 896.319810][T12202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.319821][T12202] RIP: 0033:0x7f0610eefb19 [ 896.319833][T12202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.319843][T12202] RSP: 002b:00007f060f13e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 896.319856][T12202] RAX: ffffffffffffffda RBX: 00007f0611175fa8 RCX: 00007f0610eefb19 [ 896.319869][T12202] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0611175fac [ 896.319882][T12202] RBP: 00007f0611175fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 896.319896][T12202] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 896.319909][T12202] R13: 00007f0611176038 R14: 00007ffcbd581f00 R15: 00007ffcbd581fe8 [ 896.319929][T12202] [ 896.615490][T10053] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 896.775675][T10053] usb 1-1: New USB device found: idVendor=17ef, idProduct=60ee, bcdDevice=0.00 [ 896.776817][T10053] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 896.776846][T10053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.874022][T10053] usb 1-1: config 0 descriptor?? [ 896.881952][T12198] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 897.557317][T12198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.564437][T12198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.587263][T10053] hid (null): unknown global tag 0x10 [ 897.597148][T10053] hid (null): report_id 0 is invalid [ 897.597164][T10053] hid (null): bogus close delimiter [ 897.597850][T10053] hid (null): unknown global tag 0xb4 [ 897.597860][T10053] hid (null): invalid report_count 23989 [ 897.831232][T10053] lenovo 0003:17EF:60EE.0012: unexpected long global item [ 897.831635][T10053] lenovo 0003:17EF:60EE.0012: hid_parse failed [ 897.831675][T10053] lenovo 0003:17EF:60EE.0012: probe with driver lenovo failed with error -22 [ 898.064622][T10053] usb 1-1: USB disconnect, device number 18 [ 899.598297][ T3413] IPVS: starting estimator thread 0... [ 899.685592][T12233] IPVS: using max 9 ests per chain, 21600 per kthread [ 902.539753][T12276] FAULT_INJECTION: forcing a failure. [ 902.539753][T12276] name failslab, interval 1, probability 5, space 0, times 9989 [ 902.539775][T12276] CPU: 1 UID: 0 PID: 12276 Comm: syz.6.1356 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 902.539788][T12276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 902.539796][T12276] Call Trace: [ 902.539801][T12276] [ 902.539806][T12276] dump_stack_lvl+0xe8/0x150 [ 902.539830][T12276] should_fail_ex+0x447/0x5e0 [ 902.539848][T12276] should_failslab+0xa8/0x100 [ 902.539863][T12276] __kmalloc_cache_noprof+0x9c/0x670 [ 902.539875][T12276] ? shmem_init_fs_context+0x53/0x260 [ 902.539889][T12276] ? shmem_init_fs_context+0x53/0x260 [ 902.539906][T12276] shmem_init_fs_context+0x53/0x260 [ 902.539924][T12276] alloc_fs_context+0x99e/0xd00 [ 902.539941][T12276] do_new_mount+0x177/0xb00 [ 902.539956][T12276] ? cap_capable+0x123/0x460 [ 902.539973][T12276] ? __pfx_do_new_mount+0x10/0x10 [ 902.539989][T12276] ? ns_capable+0x84/0xe0 [ 902.540006][T12276] ? path_mount+0x647/0x1050 [ 902.540022][T12276] ? user_path_at+0xd4/0x160 [ 902.540040][T12276] __se_sys_mount+0x31d/0x420 [ 902.540057][T12276] ? __pfx___se_sys_mount+0x10/0x10 [ 902.540076][T12276] ? __x64_sys_mount+0x20/0xc0 [ 902.540091][T12276] do_syscall_64+0x166/0x520 [ 902.540105][T12276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.540116][T12276] ? clear_bhb_loop+0x70/0xc0 [ 902.540130][T12276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.540141][T12276] RIP: 0033:0x7fbf6229fb19 [ 902.540152][T12276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.540162][T12276] RSP: 002b:00007fbf604f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 902.540174][T12276] RAX: ffffffffffffffda RBX: 00007fbf62525fa0 RCX: 00007fbf6229fb19 [ 902.540183][T12276] RDX: 0000200000000340 RSI: 00002000000002c0 RDI: 0000000000000000 [ 902.540190][T12276] RBP: 00007fbf62337b70 R08: 0000000000000000 R09: 0000000000000000 [ 902.540197][T12276] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 902.540203][T12276] R13: 00007fbf62526038 R14: 00007fbf62525fa0 R15: 00007ffda4852238 [ 902.540220][T12276] [ 902.615498][T10065] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 902.856431][T10065] usb 5-1: New USB device found: idVendor=17ef, idProduct=60ee, bcdDevice=0.00 [ 902.857542][T10065] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 902.857571][T10065] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.899123][T10065] usb 5-1: config 0 descriptor?? [ 902.899719][T12270] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 903.582941][T12270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.621571][T12270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.644680][T10065] hid (null): unknown global tag 0x10 [ 903.668591][T10065] hid (null): report_id 0 is invalid [ 903.668609][T10065] hid (null): bogus close delimiter [ 903.669289][T10065] hid (null): unknown global tag 0xb4 [ 903.669303][T10065] hid (null): invalid report_count 23989 [ 904.192138][T10065] hid_parser_main: 224 callbacks suppressed [ 904.192159][T10065] lenovo 0003:17EF:60EE.0013: unknown main item tag 0x0 [ 904.192184][T10065] lenovo 0003:17EF:60EE.0013: unknown main item tag 0x0 [ 904.192200][T10065] lenovo 0003:17EF:60EE.0013: unknown main item tag 0x0 [ 904.192221][T10065] lenovo 0003:17EF:60EE.0013: unknown main item tag 0x0 [ 904.192247][T10065] lenovo 0003:17EF:60EE.0013: unknown main item tag 0x0 [ 904.194287][T10065] lenovo 0003:17EF:60EE.0013: unknown main item tag 0x0 [ 904.194309][T10065] lenovo 0003:17EF:60EE.0013: unknown main item tag 0x0 [ 904.194325][T10065] lenovo 0003:17EF:60EE.0013: unknown main item tag 0x0 [ 904.194341][T10065] lenovo 0003:17EF:60EE.0013: unknown main item tag 0x0 [ 904.194359][T10065] lenovo 0003:17EF:60EE.0013: unknown main item tag 0x0 [ 904.234974][T10065] lenovo 0003:17EF:60EE.0013: unexpected long global item [ 904.252344][T10065] lenovo 0003:17EF:60EE.0013: hid_parse failed [ 904.252420][T10065] lenovo 0003:17EF:60EE.0013: probe with driver lenovo failed with error -22 [ 904.425951][ T9850] usb 5-1: USB disconnect, device number 16 [ 910.669502][T12378] netlink: 83 bytes leftover after parsing attributes in process `syz.6.1390'. [ 910.714302][T12382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1392'. [ 912.611535][T12416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1405'. [ 912.784171][T12420] netlink: 83 bytes leftover after parsing attributes in process `syz.7.1404'. [ 912.930371][T12425] FAULT_INJECTION: forcing a failure. [ 912.930371][T12425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 912.930396][T12425] CPU: 0 UID: 0 PID: 12425 Comm: syz.0.1407 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 912.930409][T12425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 912.930417][T12425] Call Trace: [ 912.930422][T12425] [ 912.930427][T12425] dump_stack_lvl+0xe8/0x150 [ 912.930454][T12425] should_fail_ex+0x447/0x5e0 [ 912.930472][T12425] _copy_from_user+0x2d/0xb0 [ 912.930489][T12425] input_event_from_user+0xb1/0x290 [ 912.930508][T12425] ? __pfx_input_event_from_user+0x10/0x10 [ 912.930529][T12425] ? rt_spin_unlock+0x165/0x200 [ 912.930548][T12425] evdev_write+0x2ca/0x4c0 [ 912.930570][T12425] ? __pfx_evdev_write+0x10/0x10 [ 912.930587][T12425] ? irqentry_exit+0x2a0/0x9b0 [ 912.930598][T12425] ? bpf_lsm_file_permission+0x9/0x20 [ 912.930611][T12425] ? security_file_permission+0x75/0x260 [ 912.930628][T12425] ? rw_verify_area+0x209/0x4d0 [ 912.930645][T12425] ? __pfx_evdev_write+0x10/0x10 [ 912.930661][T12425] vfs_write+0x29f/0xbb0 [ 912.930684][T12425] ? __pfx_vfs_write+0x10/0x10 [ 912.930701][T12425] ? __fget_files+0x2a/0x420 [ 912.930716][T12425] ? __fget_files+0x3a8/0x420 [ 912.930731][T12425] ? __fget_files+0x2a/0x420 [ 912.930748][T12425] ? fdget+0x1b2/0x250 [ 912.930767][T12425] ksys_write+0x156/0x270 [ 912.930779][T12425] ? __pfx_ksys_write+0x10/0x10 [ 912.930795][T12425] do_syscall_64+0x166/0x520 [ 912.930808][T12425] ? trace_irq_disable+0x3b/0x140 [ 912.930828][T12425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.930840][T12425] ? clear_bhb_loop+0x70/0xc0 [ 912.930854][T12425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.930866][T12425] RIP: 0033:0x7fdc045dfb19 [ 912.930877][T12425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.930887][T12425] RSP: 002b:00007fdc0282e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 912.930899][T12425] RAX: ffffffffffffffda RBX: 00007fdc04865fa0 RCX: 00007fdc045dfb19 [ 912.930907][T12425] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000004 [ 912.930914][T12425] RBP: 00007fdc04677b70 R08: 0000000000000000 R09: 0000000000000000 [ 912.930922][T12425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.930929][T12425] R13: 00007fdc04866038 R14: 00007fdc04865fa0 R15: 00007ffccaecaae8 [ 912.930946][T12425] [ 914.772593][T12445] FAULT_INJECTION: forcing a failure. [ 914.772593][T12445] name fail_futex, interval 1, probability 0, space 0, times 0 [ 914.772628][T12445] CPU: 1 UID: 0 PID: 12445 Comm: syz.0.1415 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 914.772649][T12445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 914.772657][T12445] Call Trace: [ 914.772662][T12445] [ 914.772667][T12445] dump_stack_lvl+0xe8/0x150 [ 914.772693][T12445] should_fail_ex+0x447/0x5e0 [ 914.772711][T12445] get_futex_key+0x1ab/0x1410 [ 914.772725][T12445] ? __pfx_futex_wake_mark+0x10/0x10 [ 914.772747][T12445] ? __pfx_get_futex_key+0x10/0x10 [ 914.772765][T12445] futex_wake+0x119/0x600 [ 914.772783][T12445] ? __pfx_futex_wait+0x10/0x10 [ 914.772799][T12445] ? __pfx_futex_wake+0x10/0x10 [ 914.772814][T12445] ? __sys_bpf+0xdb4/0xe00 [ 914.772833][T12445] ? __pfx___sys_bpf+0x10/0x10 [ 914.772851][T12445] do_futex+0x458/0x4e0 [ 914.772868][T12445] ? __pfx_do_futex+0x10/0x10 [ 914.772882][T12445] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 914.772903][T12445] __se_sys_futex+0x3a8/0x450 [ 914.772920][T12445] ? __pfx___se_sys_futex+0x10/0x10 [ 914.772933][T12445] ? rcu_is_watching+0x16/0xb0 [ 914.772950][T12445] ? __x64_sys_futex+0x21/0xf0 [ 914.772966][T12445] do_syscall_64+0x166/0x520 [ 914.772979][T12445] ? trace_irq_disable+0x3b/0x140 [ 914.772991][T12445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.773002][T12445] ? clear_bhb_loop+0x70/0xc0 [ 914.773015][T12445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.773026][T12445] RIP: 0033:0x7fdc045dfb19 [ 914.773038][T12445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.773047][T12445] RSP: 002b:00007fdc0282e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 914.773059][T12445] RAX: ffffffffffffffda RBX: 00007fdc04865fa8 RCX: 00007fdc045dfb19 [ 914.773067][T12445] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdc04865fac [ 914.773074][T12445] RBP: 00007fdc04865fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 914.773082][T12445] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 914.773089][T12445] R13: 00007fdc04866038 R14: 00007ffccaecaa00 R15: 00007ffccaecaae8 [ 914.773106][T12445] [ 915.507493][T12455] netlink: 83 bytes leftover after parsing attributes in process `syz.6.1420'. [ 916.627006][T12472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1422'. [ 917.882165][T12501] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 920.284851][T12537] FAULT_INJECTION: forcing a failure. [ 920.284851][T12537] name failslab, interval 1, probability 5, space 0, times 10000 [ 920.284878][T12537] CPU: 1 UID: 0 PID: 12537 Comm: syz.0.1439 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 920.284892][T12537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 920.284899][T12537] Call Trace: [ 920.284904][T12537] [ 920.284910][T12537] dump_stack_lvl+0xe8/0x150 [ 920.284936][T12537] should_fail_ex+0x447/0x5e0 [ 920.284955][T12537] should_failslab+0xa8/0x100 [ 920.284970][T12537] __kmalloc_cache_noprof+0x9c/0x670 [ 920.284983][T12537] ? sctp_add_bind_addr+0x8c/0x370 [ 920.284995][T12537] ? sctp_add_bind_addr+0x8c/0x370 [ 920.285011][T12537] sctp_add_bind_addr+0x8c/0x370 [ 920.285025][T12537] sctp_copy_local_addr_list+0x31a/0x4e0 [ 920.285039][T12537] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 920.285051][T12537] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 920.285065][T12537] ? sctp_v6_is_any+0x64/0x80 [ 920.285079][T12537] ? sctp_copy_one_addr+0x93/0x360 [ 920.285092][T12537] sctp_bind_addr_copy+0xb3/0x3c0 [ 920.285105][T12537] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 920.285125][T12537] sctp_connect_new_asoc+0x2ff/0x6b0 [ 920.285141][T12537] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 920.285158][T12537] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 920.285175][T12537] ? lockdep_hardirqs_on+0x7b/0x110 [ 920.285187][T12537] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 920.285199][T12537] ? security_sctp_bind_connect+0x7e/0x2c0 [ 920.285218][T12537] sctp_sendmsg+0x1506/0x2a50 [ 920.285237][T12537] ? __lock_acquire+0x747/0x2de0 [ 920.285255][T12537] ? __pfx_sctp_sendmsg+0x10/0x10 [ 920.285267][T12537] ? smack_socket_sendmsg+0x4b8/0x5a0 [ 920.285286][T12537] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 920.285309][T12537] ? __lock_acquire+0x747/0x2de0 [ 920.285344][T12537] ? __lock_acquire+0x747/0x2de0 [ 920.285384][T12537] ? sock_rps_record_flow+0x19/0x350 [ 920.285419][T12537] ? inet_sendmsg+0x298/0x320 [ 920.285450][T12537] ? __pfx_inet_sendmsg+0x10/0x10 [ 920.285477][T12537] sock_sendmsg_nosec+0x10f/0x190 [ 920.285507][T12537] ____sys_sendmsg+0x565/0x870 [ 920.285537][T12537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 920.285568][T12537] ? import_iovec+0x73/0xa0 [ 920.285600][T12537] ___sys_sendmsg+0x2a5/0x360 [ 920.285621][T12537] ? __lock_acquire+0x747/0x2de0 [ 920.285656][T12537] ? __pfx____sys_sendmsg+0x10/0x10 [ 920.285682][T12537] ? futex_wait+0x2a2/0x390 [ 920.285744][T12537] ? __fget_files+0x3a8/0x420 [ 920.285773][T12537] ? __fget_files+0x2a/0x420 [ 920.285813][T12537] __x64_sys_sendmsg+0x1b7/0x290 [ 920.285839][T12537] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 920.285882][T12537] do_syscall_64+0x166/0x520 [ 920.285907][T12537] ? trace_irq_disable+0x3b/0x140 [ 920.285926][T12537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.285949][T12537] ? clear_bhb_loop+0x70/0xc0 [ 920.285975][T12537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.285995][T12537] RIP: 0033:0x7fdc045dfb19 [ 920.286008][T12537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.286018][T12537] RSP: 002b:00007fdc0282e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.286030][T12537] RAX: ffffffffffffffda RBX: 00007fdc04865fa0 RCX: 00007fdc045dfb19 [ 920.286038][T12537] RDX: 0000000024000052 RSI: 00002000000001c0 RDI: 0000000000000003 [ 920.286046][T12537] RBP: 00007fdc04677b70 R08: 0000000000000000 R09: 0000000000000000 [ 920.286052][T12537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 920.286059][T12537] R13: 00007fdc04866038 R14: 00007fdc04865fa0 R15: 00007ffccaecaae8 [ 920.286077][T12537] [ 921.269777][T12557] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1447'. [ 921.666493][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1449'. [ 922.943973][T12578] input: syz0 as /devices/virtual/input/input28 [ 924.090227][T12602] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1460'. [ 925.715569][T12630] input: syz0 as /devices/virtual/input/input29 [ 925.835085][T12633] overlay: Unknown parameter '/' [ 925.863966][T12633] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 926.197998][T12646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1475'. [ 926.742690][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 926.742714][ T36] audit: type=1800 audit(1793802905.540:959): pid=12652 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1477" name="file2" dev="sda1" ino=2053 res=0 errno=-22 [ 926.795264][ T36] audit: type=1800 audit(1793802905.660:960): pid=12644 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1473" name="file2" dev="sda1" ino=2053 res=0 errno=-22 [ 927.146700][T12662] overlay: Unknown parameter '/' [ 927.253031][T12662] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 927.659025][T12672] input: syz0 as /devices/virtual/input/input30 [ 928.077748][T12680] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1487'. [ 928.514316][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1489'. [ 929.708142][ T1553] IPVS: starting estimator thread 0... [ 929.835554][T12696] IPVS: using max 15 ests per chain, 36000 per kthread [ 930.307579][T12710] overlay: Unknown parameter '/' [ 930.562987][T12712] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 931.099660][T12718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1499'. [ 932.612497][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.612568][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.481363][T12752] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 933.837538][T12763] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1514'. [ 933.858029][T12764] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1515'. [ 934.569907][T12781] fuse: Invalid rootmode [ 934.743936][T12787] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1526'. [ 934.822345][T12791] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 934.831503][T12790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1527'. [ 936.483955][T12825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1538'. [ 936.770544][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1540'. [ 937.003254][T12833] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 937.682528][T12855] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1550'. [ 938.242350][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1552'. [ 938.242378][T12865] bridge: RTM_NEWNEIGH with invalid ether address [ 938.619404][ T36] audit: type=1800 audit(1793802917.490:961): pid=12870 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.1553" name="file2" dev="sda1" ino=2053 res=0 errno=-22 [ 938.873121][T12874] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 939.792488][T12896] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1564'. [ 939.792507][T12896] bridge: RTM_NEWNEIGH with invalid ether address [ 939.817035][T12897] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1561'. [ 940.089798][T12912] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 941.245266][T12938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 941.245285][T12938] bridge: RTM_NEWNEIGH with invalid ether address [ 941.581372][T12943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1578'. [ 941.922321][T12956] overlayfs: overlapping lowerdir path [ 943.272008][T12963] gadgetfs: bound to dummy_udc driver [ 943.605546][ T9847] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 943.605893][ C0] gadgetfs: connected [ 943.608470][ T9847] gadgetfs: disconnected [ 943.925626][T12963] gadgetfs: suspended from state 2 [ 944.131167][ T8795] Bluetooth: hci5: command 0x0406 tx timeout [ 944.156561][ T9847] usb 1-1: device not accepting address 19, error -71 [ 945.851947][T12982] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1588'. [ 946.284988][ T36] audit: type=1800 audit(1793802925.140:962): pid=12990 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.1593" name="file2" dev="sda1" ino=2053 res=0 errno=-22 [ 946.488139][T12993] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 946.967101][T13001] gadgetfs: bound to dummy_udc driver [ 947.227130][ T9847] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 947.227398][ C0] gadgetfs: connected [ 947.227608][ T9847] gadgetfs: disconnected [ 947.375678][ C0] gadgetfs: connected [ 947.377114][ T9847] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 947.377487][ T9847] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 947.377511][ T9847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.604744][T12996] gadgetfs: suspended from state 3 [ 947.607832][T12996] gadgetfs: disconnected [ 947.639049][ T9847] usb 1-1: can't set config #1, error -71 [ 947.716649][ T9847] usb 1-1: USB disconnect, device number 21 [ 947.889687][T13003] ================================================================== [ 947.889706][T13003] BUG: KASAN: slab-use-after-free in mutex_lock_interruptible_nested+0x55/0x1c0 [ 947.889753][T13003] Read of size 1 at addr ffff88803043b458 by task syz.7.1595/13003 [ 947.889770][T13003] [ 947.889782][T13003] CPU: 1 UID: 0 PID: 13003 Comm: syz.7.1595 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 947.889796][T13003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 947.889803][T13003] Call Trace: [ 947.889808][T13003] [ 947.889814][T13003] dump_stack_lvl+0xe8/0x150 [ 947.889836][T13003] print_address_description+0x55/0x1e0 [ 947.889883][T13003] ? mutex_lock_interruptible_nested+0x55/0x1c0 [ 947.889899][T13003] print_report+0x58/0x70 [ 947.889915][T13003] kasan_report+0x117/0x150 [ 947.889931][T13003] ? mutex_lock_interruptible_nested+0x55/0x1c0 [ 947.889948][T13003] ? ep_open+0x4e/0x270 [ 947.890045][T13003] __kasan_check_byte+0x2a/0x40 [ 947.890058][T13003] lock_acquire+0x7d/0x350 [ 947.890077][T13003] ? ep_open+0x4e/0x270 [ 947.890094][T13003] ? ep_open+0x4e/0x270 [ 947.890108][T13003] mutex_lock_interruptible_nested+0x55/0x1c0 [ 947.890124][T13003] ? ep_open+0x4e/0x270 [ 947.890140][T13003] ep_open+0x4e/0x270 [ 947.890155][T13003] ? do_dentry_open+0x832/0x1410 [ 947.890169][T13003] ? __pfx_ep_open+0x10/0x10 [ 947.890184][T13003] do_dentry_open+0x841/0x1410 [ 947.890200][T13003] vfs_open_consume+0x4a/0x360 [ 947.890212][T13003] ? path_openat+0x16e6/0x2100 [ 947.890223][T13003] path_openat+0x1701/0x2100 [ 947.890237][T13003] do_file_open+0x23e/0x4a0 [ 947.890246][T13003] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 947.890260][T13003] ? __pfx_do_file_open+0x10/0x10 [ 947.890275][T13003] ? alloc_fd+0x6b2/0x760 [ 947.890292][T13003] do_sys_openat2+0x115/0x200 [ 947.890305][T13003] ? lockdep_hardirqs_on+0x7b/0x110 [ 947.890317][T13003] ? __pfx_do_sys_openat2+0x10/0x10 [ 947.890334][T13003] __x64_sys_openat+0x138/0x170 [ 947.890348][T13003] do_syscall_64+0x166/0x520 [ 947.890360][T13003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.890379][T13003] ? clear_bhb_loop+0x70/0xc0 [ 947.890391][T13003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.890403][T13003] RIP: 0033:0x7f0610eefb19 [ 947.890415][T13003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.890425][T13003] RSP: 002b:00007f060f0fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 947.890438][T13003] RAX: ffffffffffffffda RBX: 00007f0611176180 RCX: 00007f0610eefb19 [ 947.890446][T13003] RDX: 0000000000000002 RSI: 0000200000000b40 RDI: ffffffffffffff9c [ 947.890454][T13003] RBP: 00007f0610f87b70 R08: 0000000000000000 R09: 0000000000000000 [ 947.890461][T13003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.890468][T13003] R13: 00007f0611176218 R14: 00007f0611176180 R15: 00007ffcbd581fe8 [ 947.890479][T13003] [ 947.890483][T13003] [ 947.890486][T13003] Allocated by task 13001: [ 947.890522][T13003] kasan_save_track+0x3e/0x80 [ 947.890533][T13003] __kasan_kmalloc+0x93/0xb0 [ 947.890543][T13003] __kmalloc_cache_noprof+0x3d0/0x670 [ 947.890553][T13003] gadgetfs_bind+0x2f5/0xb20 [ 947.890568][T13003] gadget_bind_driver+0x2ca/0x9e0 [ 947.890635][T13003] really_probe+0x254/0xae0 [ 947.890679][T13003] __driver_probe_device+0x1e8/0x360 [ 947.890690][T13003] driver_probe_device+0x4f/0x240 [ 947.890700][T13003] __driver_attach+0x34e/0x630 [ 947.890711][T13003] bus_for_each_dev+0x23e/0x2c0 [ 947.890745][T13003] bus_add_driver+0x392/0x6e0 [ 947.890759][T13003] driver_register+0x23a/0x320 [ 947.890771][T13003] usb_gadget_register_driver_owner+0xf9/0x270 [ 947.890784][T13003] dev_config+0xe4e/0x12c0 [ 947.890798][T13003] vfs_write+0x29f/0xbb0 [ 947.890813][T13003] ksys_write+0x156/0x270 [ 947.890820][T13003] do_syscall_64+0x166/0x520 [ 947.890831][T13003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.890840][T13003] [ 947.890842][T13003] Freed by task 12996: [ 947.890848][T13003] kasan_save_track+0x3e/0x80 [ 947.890857][T13003] kasan_save_free_info+0x40/0x50 [ 947.890873][T13003] __kasan_slab_free+0x5c/0x80 [ 947.890883][T13003] kfree+0x1c5/0x6d0 [ 947.890896][T13003] destroy_ep_files+0x2a3/0x330 [ 947.890911][T13003] gadgetfs_unbind+0x112/0x2c0 [ 947.890925][T13003] gadget_unbind_driver+0x1cb/0x410 [ 947.890937][T13003] device_release_driver_internal+0x42b/0x7d0 [ 947.890948][T13003] driver_detach+0x1f3/0x2d0 [ 947.890958][T13003] bus_remove_driver+0x229/0x320 [ 947.890972][T13003] usb_gadget_unregister_driver+0x4e/0x70 [ 947.890984][T13003] dev_release+0x86/0x210 [ 947.890997][T13003] __fput+0x41a/0xa70 [ 947.891009][T13003] fput_close_sync+0x11f/0x240 [ 947.891021][T13003] filp_close_sync+0x6e/0xa0 [ 947.891033][T13003] __se_sys_close_range+0xa7d/0xef0 [ 947.891046][T13003] do_syscall_64+0x166/0x520 [ 947.891057][T13003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.891066][T13003] [ 947.891069][T13003] The buggy address belongs to the object at ffff88803043b400 [ 947.891069][T13003] which belongs to the cache kmalloc-512 of size 512 [ 947.891079][T13003] The buggy address is located 88 bytes inside of [ 947.891079][T13003] freed 512-byte region [ffff88803043b400, ffff88803043b600) [ 947.891090][T13003] [ 947.891093][T13003] The buggy address belongs to the physical page: [ 947.891106][T13003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30438 [ 947.891120][T13003] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 947.891129][T13003] flags: 0x80000000000040(head|node=0|zone=1) [ 947.891142][T13003] page_type: f5(slab) [ 947.891152][T13003] raw: 0080000000000040 ffff88813ff13c80 dead000000000100 dead000000000122 [ 947.891161][T13003] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 947.891171][T13003] head: 0080000000000040 ffff88813ff13c80 dead000000000100 dead000000000122 [ 947.891180][T13003] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 947.891189][T13003] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 947.891198][T13003] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 947.891202][T13003] page dumped because: kasan: bad access detected [ 947.891211][T13003] page_owner tracks the page as allocated [ 947.891215][T13003] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18212977091 [ 947.891232][T13003] post_alloc_hook+0x1f9/0x250 [ 947.891248][T13003] get_page_from_freelist+0x258b/0x2600 [ 947.891258][T13003] __alloc_frozen_pages_noprof+0x227/0x440 [ 947.891269][T13003] allocate_slab+0x7d/0x5e0 [ 947.891282][T13003] refill_objects+0x2d8/0x350 [ 947.891295][T13003] __pcs_replace_empty_main+0x339/0x690 [ 947.891308][T13003] __kvmalloc_node_noprof+0x6ef/0x880 [ 947.891318][T13003] v4l2_ctrl_new+0x103c/0x1820 [ 947.891359][T13003] v4l2_ctrl_new_custom+0x5b4/0x7f0 [ 947.891377][T13003] vivid_create_controls+0xda9/0x3c40 [ 947.891394][T13003] vivid_probe+0x4112/0x70d0 [ 947.891406][T13003] platform_probe+0xf9/0x190 [ 947.891438][T13003] really_probe+0x254/0xae0 [ 947.891449][T13003] __driver_probe_device+0x1e8/0x360 [ 947.891460][T13003] driver_probe_device+0x4f/0x240 [ 947.891472][T13003] __driver_attach+0x34e/0x630 [ 947.891483][T13003] page_owner free stack trace missing [ 947.891487][T13003] [ 947.891490][T13003] Memory state around the buggy address: [ 947.891496][T13003] ffff88803043b300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 947.891503][T13003] ffff88803043b380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 947.891511][T13003] >ffff88803043b400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 947.891517][T13003] ^ [ 947.891523][T13003] ffff88803043b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 947.891530][T13003] ffff88803043b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 947.891535][T13003] ================================================================== [ 947.891683][T13003] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 948.668960][T13003] CPU: 1 UID: 0 PID: 13003 Comm: syz.7.1595 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 948.678833][T13003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 948.688876][T13003] Call Trace: [ 948.692143][T13003] [ 948.695059][T13003] vpanic+0x26f/0x710 [ 948.699030][T13003] panic+0xc5/0xd0 [ 948.702731][T13003] ? __pfx_panic+0x10/0x10 [ 948.707126][T13003] ? preempt_schedule_thunk+0x16/0x40 [ 948.712483][T13003] ? preempt_schedule_thunk+0x16/0x40 [ 948.717942][T13003] ? mutex_lock_interruptible_nested+0x55/0x1c0 [ 948.724181][T13003] check_panic_on_warn+0x89/0xb0 [ 948.729126][T13003] ? mutex_lock_interruptible_nested+0x55/0x1c0 [ 948.735356][T13003] end_report+0x73/0x170 [ 948.739597][T13003] ? mutex_lock_interruptible_nested+0x55/0x1c0 [ 948.745821][T13003] kasan_report+0x128/0x150 [ 948.750407][T13003] ? mutex_lock_interruptible_nested+0x55/0x1c0 [ 948.756634][T13003] ? ep_open+0x4e/0x270 [ 948.760773][T13003] __kasan_check_byte+0x2a/0x40 [ 948.765610][T13003] lock_acquire+0x7d/0x350 [ 948.770018][T13003] ? ep_open+0x4e/0x270 [ 948.774161][T13003] ? ep_open+0x4e/0x270 [ 948.778299][T13003] mutex_lock_interruptible_nested+0x55/0x1c0 [ 948.784526][T13003] ? ep_open+0x4e/0x270 [ 948.788685][T13003] ep_open+0x4e/0x270 [ 948.792653][T13003] ? do_dentry_open+0x832/0x1410 [ 948.797571][T13003] ? __pfx_ep_open+0x10/0x10 [ 948.802163][T13003] do_dentry_open+0x841/0x1410 [ 948.806927][T13003] vfs_open_consume+0x4a/0x360 [ 948.811704][T13003] ? path_openat+0x16e6/0x2100 [ 948.816464][T13003] path_openat+0x1701/0x2100 [ 948.821039][T13003] do_file_open+0x23e/0x4a0 [ 948.825519][T13003] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 948.831309][T13003] ? __pfx_do_file_open+0x10/0x10 [ 948.836313][T13003] ? alloc_fd+0x6b2/0x760 [ 948.840629][T13003] do_sys_openat2+0x115/0x200 [ 948.845292][T13003] ? lockdep_hardirqs_on+0x7b/0x110 [ 948.850501][T13003] ? __pfx_do_sys_openat2+0x10/0x10 [ 948.855686][T13003] __x64_sys_openat+0x138/0x170 [ 948.860519][T13003] do_syscall_64+0x166/0x520 [ 948.865088][T13003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.871129][T13003] ? clear_bhb_loop+0x70/0xc0 [ 948.875790][T13003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.881767][T13003] RIP: 0033:0x7f0610eefb19 [ 948.886184][T13003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.905776][T13003] RSP: 002b:00007f060f0fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 948.914178][T13003] RAX: ffffffffffffffda RBX: 00007f0611176180 RCX: 00007f0610eefb19 [ 948.922129][T13003] RDX: 0000000000000002 RSI: 0000200000000b40 RDI: ffffffffffffff9c [ 948.930191][T13003] RBP: 00007f0610f87b70 R08: 0000000000000000 R09: 0000000000000000 [ 948.938177][T13003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.946238][T13003] R13: 00007f0611176218 R14: 00007f0611176180 R15: 00007ffcbd581fe8 [ 948.954200][T13003] [ 948.957491][T13003] Kernel Offset: disabled [ 948.961827][T13003] Rebooting in 86400 seconds..