last executing test programs: 2m36.197483328s ago: executing program 1 (id=920): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xd, &(0x7f0000000300)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x9d}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x2, 0x2, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r4, 0x0, 0xffffffffffffffff}, 0x18) mkdir(&(0x7f0000000540)='./bus\x00', 0xe0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x40, r8, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x40}}, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) sendfile(r5, r9, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f0000000000)) accept4(r0, 0x0, 0x0, 0x0) 2m32.391451397s ago: executing program 1 (id=928): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x109440, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000240)) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) r3 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7712206b43c5972e4da9efa16e6f3d", @ANYRESHEX=r2, @ANYBLOB=',\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xc}, 0x14) r4 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x1}, 0x2}, 0x18) r5 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1ab882) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) 2m30.620152581s ago: executing program 1 (id=931): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(0x0) r4 = socket$inet6(0xa, 0xa, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe28, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0xfffffffe}, 0x1c) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f0000000300)={'dummy0\x00', 0x8000}) connect$inet6(r4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r6 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r6, 0x0) setpgid(0x0, 0x0) getuid() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) 2m27.580829885s ago: executing program 1 (id=937): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x80805, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r2, 0x0) connect$vsock_stream(r2, &(0x7f0000000100), 0x10) poll(&(0x7f0000000000)=[{r1, 0x9081}], 0x1, 0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c, r3, 0x200, 0x70bd25, 0x5, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11dc606ae039eeda}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r7, r6, 0x0, 0x40008) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r8, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) link(0x0, &(0x7f0000000040)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) 2m24.007971693s ago: executing program 1 (id=946): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f000001b740)=ANY=[@ANYRES8, @ANYRES64, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES16], 0x75}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000"]) openat$kvm(0xffffff9c, 0x0, 0x80800, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000084) fsmount(r1, 0x0, 0x74) socket$inet6(0xa, 0xa, 0x7c9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000001b700)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000f31acd0a04c433b5380100000000000400", @ANYBLOB="ef030000000f000008000500", @ANYRES32=r5, @ANYBLOB="1c00128009000100766c616e000000000c00028006"], 0x44}}, 0x4004850) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @none}, 0x8) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000002d000100000000090000000004000080350011802fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7000000"], 0x4c}], 0x1}, 0x20004840) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x2f, @empty, 0x5}, {0xa, 0x4e24, 0xfffff809, @private0, 0x4}, 0x1, {[0x5, 0x8, 0xbf41, 0x6, 0x100, 0xcdd, 0xff, 0xd]}}, 0x5c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f0000000100)={0x20000000, 0x23000000}) semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f0000000080)=""/141) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000010240)={&(0x7f0000000180), 0xc, &(0x7f0000010200)={&(0x7f00000001c0)={0x10, 0x3e9, 0x0, 0x8000000, 0x0, {0xffff, 0x3f7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) 2m20.342879451s ago: executing program 1 (id=952): creat(&(0x7f0000000100)='./file0\x00', 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x24}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000140)='9p\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r2, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0xffff, 0xfffffffffffffffa}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2m4.984845465s ago: executing program 32 (id=952): creat(&(0x7f0000000100)='./file0\x00', 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x24}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000140)='9p\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r2, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0xffff, 0xfffffffffffffffa}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1m44.194245518s ago: executing program 2 (id=1010): pipe(&(0x7f0000000040)={0xffffffffffffffff}) fcntl$setpipe(r0, 0x4, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x48) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m42.678735447s ago: executing program 2 (id=1013): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x800}) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x0, 0x40004}) memfd_create(&(0x7f0000000480)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\x00\x00\x00\x00\x00\x00\r\x17\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x1f37\x02\xb9\xb2\x9a3\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\x826`M\xab\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~A\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8\x01\x00j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xd8\x84\n\x13\x9a\x85&\v\xfeU\x18\x17o6m\x84\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/675, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/145, 0x91}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x4db}], 0x6, 0x40010020, 0x0) 1m38.902985077s ago: executing program 2 (id=1015): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x2a, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(0x0, 0x442281, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) syz_emit_vhci(&(0x7f0000003100)=ANY=[@ANYBLOB], 0x22) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) creat(0x0, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x41001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)) 1m36.332984261s ago: executing program 2 (id=1020): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00', 0x0, 0x10}, 0x18) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) 1m35.810604415s ago: executing program 2 (id=1023): pipe(&(0x7f0000000040)={0xffffffffffffffff}) fcntl$setpipe(r0, 0x4, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x48) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m33.254124269s ago: executing program 2 (id=1028): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) r3 = socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RWALK(r0, &(0x7f0000000300)={0x8b, 0x6f, 0x1, {0xa, [{0x0, 0x1, 0x5}, {0x4, 0x4, 0x1000}, {0x80, 0x1, 0x5}, {0x40, 0x2, 0x1}, {0x10, 0x1, 0x8}, {0x0, 0x3, 0x4}, {0x20, 0x1, 0x4}, {0x0, 0x1}, {0x20, 0x3, 0x8}, {0x2, 0x2, 0x7}]}}, 0x8b) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0xc044040) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020900090200000000000000fedbdf25a76a8e12fc7229656e1eae9283ab286cd119f33e091c75c07ff3c9a85353519874e9caa4a83eeb3304a1bcb89115"], 0x10}}, 0x0) timer_delete(0x0) close(0x3) syz_clone3(&(0x7f000001aa80)={0x200090000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000003c0), {0x16}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000000400)=""/189, &(0x7f000001aa40)=[0xffffffffffffffff], 0x1}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000400)={'b', ' *:* ', 'rm\x00'}, 0x9) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tw'], 0xa) 1m32.079417316s ago: executing program 33 (id=1028): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) r3 = socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RWALK(r0, &(0x7f0000000300)={0x8b, 0x6f, 0x1, {0xa, [{0x0, 0x1, 0x5}, {0x4, 0x4, 0x1000}, {0x80, 0x1, 0x5}, {0x40, 0x2, 0x1}, {0x10, 0x1, 0x8}, {0x0, 0x3, 0x4}, {0x20, 0x1, 0x4}, {0x0, 0x1}, {0x20, 0x3, 0x8}, {0x2, 0x2, 0x7}]}}, 0x8b) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0xc044040) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020900090200000000000000fedbdf25a76a8e12fc7229656e1eae9283ab286cd119f33e091c75c07ff3c9a85353519874e9caa4a83eeb3304a1bcb89115"], 0x10}}, 0x0) timer_delete(0x0) close(0x3) syz_clone3(&(0x7f000001aa80)={0x200090000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000003c0), {0x16}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000000400)=""/189, &(0x7f000001aa40)=[0xffffffffffffffff], 0x1}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000400)={'b', ' *:* ', 'rm\x00'}, 0x9) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tw'], 0xa) 15.246212739s ago: executing program 0 (id=1107): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x80805, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r2, 0x0) connect$vsock_stream(r2, &(0x7f0000000100), 0x10) poll(&(0x7f0000000000)=[{r1, 0x9081}], 0x1, 0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c, r3, 0x200, 0x70bd25, 0x5, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11dc606ae039eeda}, 0x8000) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r7, r6, 0x0, 0x40008) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r8, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) link(0x0, &(0x7f0000000040)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) 8.965592534s ago: executing program 4 (id=1112): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x800}) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x0, 0x40004}) memfd_create(&(0x7f0000000480)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\x00\x00\x00\x00\x00\x00\r\x17\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x1f37\x02\xb9\xb2\x9a3\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\x826`M\xab\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~A\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8\x01\x00j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xd8\x84\n\x13\x9a\x85&\v\xfeU\x18\x17o6m\x84\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/675, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/145, 0x91}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x4db}], 0x6, 0x40010020, 0x0) 7.163500031s ago: executing program 4 (id=1114): mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000440)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './bus'}, 0x3a}], [], 0x2f}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x3, 0x1, 0x94, 0x1, 0x1}, 0x48) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) getresgid(&(0x7f0000000180), &(0x7f0000000340), &(0x7f0000000380)) 7.114844513s ago: executing program 0 (id=1115): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) r4 = socket$inet6(0xa, 0xa, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe28, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0xfffffffe}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f0000000300)={'dummy0\x00', 0x8000}) connect$inet6(r4, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r5 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, 0x0) getuid() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) 6.928384704s ago: executing program 4 (id=1116): socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(0x0) r2 = socket$inet6(0xa, 0xa, 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f0000000300)={'dummy0\x00', 0x8000}) connect$inet6(r2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r4 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r4, 0x0) r5 = getuid() quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000100)=@filename='./cgroup.cpu/cgroup.procs\x00', r5, &(0x7f0000000140)={0x5, 0xa, 0x0, 0x4}) 4.518677525s ago: executing program 0 (id=1121): r0 = socket(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x25, 0x0, 0x0) 4.158159482s ago: executing program 4 (id=1122): r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000380)) 3.953427438s ago: executing program 3 (id=1125): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b8920000000109029009020000000009"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0x1}, {0xd, 0xe}, {0xc, 0x5}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.922763631s ago: executing program 0 (id=1126): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) pread64(r0, &(0x7f0000000000)=""/65, 0x41, 0x7bdb) 3.174982744s ago: executing program 0 (id=1129): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x80) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_clone(0x613c8300, 0x0, 0x0, 0x0, 0x0, 0x0) 3.010878317s ago: executing program 4 (id=1130): syz_clone(0x60000080, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2.99534119s ago: executing program 5 (id=1131): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001500)=""/4098, 0x1002}], 0x1}, 0x1e2) 2.930433619s ago: executing program 6 (id=1132): r0 = socket(0x11, 0x10000000000003, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, 0x0, 0x0) 2.490868535s ago: executing program 5 (id=1133): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.132967764s ago: executing program 6 (id=1134): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)='h', 0x1}], 0x1}, 0x40005) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40010060) 1.815875468s ago: executing program 5 (id=1135): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x1, 0x8, 0x6a40, 0x5, 0xbcd}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0xf13) 1.767021929s ago: executing program 6 (id=1136): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200008f0800000000000000000000850000006100000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x28, 0x0, &(0x7f0000000000)="ac0000000000ec67838717bd86ddbd6e902562ac5675da63a84744c677777570e8bd8e1450c4e68d", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.6425003s ago: executing program 3 (id=1137): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 1.379773591s ago: executing program 3 (id=1138): r0 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) close_range(r0, 0xffffffffffffffff, 0x0) 1.29485136s ago: executing program 6 (id=1139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) 1.051990171s ago: executing program 6 (id=1140): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=[@hoplimit={{0x14, 0x11a, 0x34, 0x9}}], 0xe}}], 0x2, 0x40) 970.336179ms ago: executing program 3 (id=1141): r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xffff, @empty}, 0x3, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x6b}, 0x0) 928.695328ms ago: executing program 5 (id=1142): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x2, 0x4) connect$ax25(r0, &(0x7f0000000200)={{0x3, @null, 0x4}, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 638.846775ms ago: executing program 3 (id=1143): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x9c}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 345.907799ms ago: executing program 5 (id=1144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x10000000000}, 0x20) 243.329145ms ago: executing program 3 (id=1145): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 202.633194ms ago: executing program 6 (id=1146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 102.686119ms ago: executing program 0 (id=1147): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r3, 0x75e7f000) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='mountinfo\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) 102.407665ms ago: executing program 4 (id=1148): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 0s ago: executing program 5 (id=1149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$PROG_LOAD(0x24, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): klog_limit=64 [ 475.887420][ T5849] audit: audit_lost=87783 audit_rate_limit=0 audit_backlog_limit=64 [ 475.896120][ T5849] audit: backlog limit exceeded [ 475.901719][ T927] dvb-usb: bulk message failed: -71 (6/0) [ 475.908778][ T30] audit: type=1400 audit(2000000234.740:165522): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=9068 comm="syz.2.847" name="work" dev="tmpfs" ino=1028 [ 475.909439][ T5845] audit: audit_backlog=65 > audit_backlog_limit=64 [ 475.928316][ T927] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 475.935220][ T5206] audit: audit_lost=87784 audit_rate_limit=0 audit_backlog_limit=64 [ 475.935245][ T5206] audit: backlog limit exceeded [ 475.941036][ T927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 476.116113][ T927] dvb-usb: schedule remote query interval to 150 msecs. [ 476.123178][ T927] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 476.289874][ T24] dvb-usb: bulk message failed: -71 (1/0) [ 476.295945][ T24] dvb-usb: error while querying for an remote control event. [ 476.335487][ T927] usb 2-1: USB disconnect, device number 8 [ 476.444677][ T9080] overlayfs: failed to resolve './file1': -2 [ 477.268040][ T927] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 477.443684][ T9085] syzkaller0: entered promiscuous mode [ 477.587412][ T9085] syzkaller0: entered allmulticast mode [ 478.785872][ T9094] tipc: Enabled bearer , priority 0 [ 478.925779][ T9094] syzkaller0: entered promiscuous mode [ 479.506225][ T9094] syzkaller0: entered allmulticast mode [ 479.749452][ T9093] tipc: Resetting bearer [ 480.234855][ T9093] tipc: Disabling bearer [ 480.498247][ T9109] tmpfs: Unknown parameter 'nr_ino' [ 480.834765][ T30] kauditd_printk_skb: 7977 callbacks suppressed [ 480.834817][ T30] audit: type=1400 audit(2000000240.330:169074): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9105 comm="syz.2.857" name="176" dev="tmpfs" ino=1043 [ 482.058452][ T5891] audit: audit_backlog=65 > audit_backlog_limit=64 [ 482.065764][ T5845] audit: audit_backlog=65 > audit_backlog_limit=64 [ 482.072310][ T5845] audit: audit_lost=89261 audit_rate_limit=0 audit_backlog_limit=64 [ 482.081279][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 482.087897][ C0] audit: audit_lost=89262 audit_rate_limit=0 audit_backlog_limit=64 [ 482.095968][ C0] audit: backlog limit exceeded [ 482.096408][ T5891] audit: audit_lost=89263 audit_rate_limit=0 audit_backlog_limit=64 [ 482.105071][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 482.115169][ T5845] audit: backlog limit exceeded [ 483.693635][ T9127] netlink: 'syz.4.861': attribute type 10 has an invalid length. [ 483.717962][ T9127] netlink: 40 bytes leftover after parsing attributes in process `syz.4.861'. [ 486.611747][ T30] kauditd_printk_skb: 4103 callbacks suppressed [ 486.611771][ T30] audit: type=1400 audit(2000000245.220:171468): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9132 comm="syz.2.864" saddr=10.128.0.169 src=30008 daddr=10.128.0.185 dest=57960 netif=eth0 [ 486.709696][ T30] audit: type=1400 audit(2000000245.720:171469): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9132 comm="syz.2.864" saddr=10.128.0.169 src=30008 daddr=10.128.0.185 dest=57960 netif=eth0 [ 486.778967][ T30] audit: type=1400 audit(2000000245.810:171470): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9134 comm="syz.1.866" name="176" dev="tmpfs" ino=1020 [ 486.808435][ T9146] audit: audit_backlog=65 > audit_backlog_limit=64 [ 486.811042][ T5884] audit: audit_backlog=65 > audit_backlog_limit=64 [ 486.815283][ T9146] audit: audit_lost=89834 audit_rate_limit=0 audit_backlog_limit=64 [ 486.821860][ T5884] audit: audit_lost=89835 audit_rate_limit=0 audit_backlog_limit=64 [ 486.829731][ T9146] audit: backlog limit exceeded [ 486.841191][ T30] audit: type=1400 audit(2000000245.810:171471): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9134 comm="syz.1.866" name="176" dev="tmpfs" ino=1020 [ 487.012511][ T9143] audit: audit_backlog=65 > audit_backlog_limit=64 [ 487.136044][ T9152] ./bus: Can't lookup blockdev [ 488.004528][ T9161] IPv6: Can't replace route, no match found [ 490.012084][ T9166] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>' [ 490.095462][ T9166] CPU: 1 UID: 0 PID: 9166 Comm: syz.1.873 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 490.095493][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 490.095507][ T9166] Call Trace: [ 490.095516][ T9166] [ 490.095526][ T9166] dump_stack_lvl+0x189/0x250 [ 490.095563][ T9166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.095589][ T9166] ? __pfx__printk+0x10/0x10 [ 490.095618][ T9166] ? kernfs_path_from_node+0x2c/0x260 [ 490.095673][ T9166] ? kernfs_path_from_node+0x2c/0x260 [ 490.095698][ T9166] ? kernfs_path_from_node+0x2c/0x260 [ 490.095727][ T9166] ? kernfs_path_from_node+0x22c/0x260 [ 490.095754][ T9166] ? kernfs_path_from_node+0x2c/0x260 [ 490.095785][ T9166] sysfs_warn_dup+0x8e/0xa0 [ 490.095811][ T9166] sysfs_do_create_link_sd+0xc0/0x110 [ 490.095855][ T9166] device_add_class_symlinks+0x1cf/0x240 [ 490.095897][ T9166] device_add+0x475/0xb50 [ 490.095935][ T9166] wiphy_register+0x199a/0x26b0 [ 490.095988][ T9166] ? __pfx_wiphy_register+0x10/0x10 [ 490.096029][ T9166] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 490.096069][ T9166] ieee80211_register_hw+0x33e1/0x4120 [ 490.096127][ T9166] ? ieee80211_register_hw+0x1471/0x4120 [ 490.096173][ T9166] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 490.096212][ T9166] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 490.096259][ T9166] ? __hrtimer_setup+0x187/0x210 [ 490.096283][ T9166] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 490.096323][ T9166] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 490.096394][ T9166] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 490.096428][ T9166] ? kstrndup+0xbf/0x160 [ 490.096458][ T9166] ? memcpy_orig+0x58/0x130 [ 490.096493][ T9166] hwsim_new_radio_nl+0xea4/0x1b10 [ 490.096537][ T9166] ? __pfx___nla_validate_parse+0x10/0x10 [ 490.096585][ T9166] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 490.096622][ T9166] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 490.096659][ T9166] ? __nla_parse+0x40/0x60 [ 490.096692][ T9166] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 490.096728][ T9166] genl_family_rcv_msg_doit+0x215/0x300 [ 490.096763][ T9166] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 490.096806][ T9166] ? bpf_lsm_capable+0x9/0x20 [ 490.096840][ T9166] ? security_capable+0x7e/0x2e0 [ 490.096880][ T9166] genl_rcv_msg+0x60e/0x790 [ 490.096913][ T9166] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.096937][ T9166] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 490.096986][ T9166] ? irqentry_exit+0x74/0x90 [ 490.097019][ T9166] netlink_rcv_skb+0x205/0x470 [ 490.097052][ T9166] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.097077][ T9166] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.097104][ T9166] ? lock_acquire+0x175/0x360 [ 490.097146][ T9166] ? down_read+0x1ad/0x2e0 [ 490.097176][ T9166] genl_rcv+0x28/0x40 [ 490.097197][ T9166] netlink_unicast+0x75c/0x8e0 [ 490.097240][ T9166] netlink_sendmsg+0x805/0xb30 [ 490.097282][ T9166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.097322][ T9166] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.097343][ T9166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.097374][ T9166] __sock_sendmsg+0x21c/0x270 [ 490.097404][ T9166] ____sys_sendmsg+0x505/0x830 [ 490.097445][ T9166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.097491][ T9166] ? import_iovec+0x74/0xa0 [ 490.097527][ T9166] ___sys_sendmsg+0x21f/0x2a0 [ 490.097565][ T9166] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.097668][ T9166] ? __fget_files+0x2a/0x420 [ 490.097693][ T9166] ? __fget_files+0x3a0/0x420 [ 490.097733][ T9166] __x64_sys_sendmsg+0x19b/0x260 [ 490.097773][ T9166] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.097823][ T9166] ? rcu_is_watching+0x15/0xb0 [ 490.097862][ T9166] ? do_syscall_64+0xbe/0x3b0 [ 490.097893][ T9166] do_syscall_64+0xfa/0x3b0 [ 490.097916][ T9166] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.097940][ T9166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.097962][ T9166] ? clear_bhb_loop+0x60/0xb0 [ 490.097990][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.098010][ T9166] RIP: 0033:0x7f51de38ebe9 [ 490.098030][ T9166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.098050][ T9166] RSP: 002b:00007f51df226038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.098074][ T9166] RAX: ffffffffffffffda RBX: 00007f51de5b5fa0 RCX: 00007f51de38ebe9 [ 490.098090][ T9166] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 490.098103][ T9166] RBP: 00007f51de411e19 R08: 0000000000000000 R09: 0000000000000000 [ 490.098117][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.098130][ T9166] R13: 00007f51de5b6038 R14: 00007f51de5b5fa0 R15: 00007ffc4a66c3e8 [ 490.098170][ T9166] [ 491.724918][ T30] kauditd_printk_skb: 4628 callbacks suppressed [ 491.724961][ T30] audit: type=1400 audit(2000000251.240:173421): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9175 comm="syz.2.877" name="newroot" dev="tmpfs" ino=2 [ 491.795110][ T5913] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 491.887572][ T30] audit: type=1400 audit(2000000251.270:173422): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=9170 comm="syz.0.875" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 491.911275][ T30] audit: type=1400 audit(2000000251.270:173423): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9175 comm="syz.2.877" name="/" dev="devtmpfs" ino=1 [ 491.914522][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 491.934113][ T30] audit: type=1400 audit(2000000251.270:173424): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9175 comm="syz.2.877" name="cpu" dev="devtmpfs" ino=85 [ 491.938893][ T5840] audit: audit_backlog=65 > audit_backlog_limit=64 [ 491.956992][ T30] audit: type=1400 audit(2000000251.270:173425): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9175 comm="syz.2.877" name="0" dev="devtmpfs" ino=86 [ 491.964387][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 491.988249][ C0] audit: audit_lost=90729 audit_rate_limit=0 audit_backlog_limit=64 [ 491.996349][ C0] audit: backlog limit exceeded [ 492.018277][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 492.026137][ T5913] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 492.034536][ T5913] usb 1-1: config 0 has no interface number 0 [ 492.040995][ T5913] usb 1-1: config 0 interface 12 has no altsetting 0 [ 492.066308][ T5913] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 492.163290][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.193681][ T5913] usb 1-1: Product: syz [ 492.212493][ T5913] usb 1-1: Manufacturer: syz [ 492.229808][ T5913] usb 1-1: SerialNumber: syz [ 492.312074][ T5913] usb 1-1: config 0 descriptor?? [ 493.521694][ T9196] tmpfs: Unknown parameter 'nr_ino' [ 494.362857][ T5913] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 494.388639][ T5913] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 494.408595][ T5913] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 494.420802][ T9199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.883'. [ 494.431291][ T5913] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 494.485014][ T5913] usb 1-1: USB disconnect, device number 20 [ 494.894365][ T9208] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 494.906911][ T9208] CPU: 0 UID: 0 PID: 9208 Comm: syz.2.886 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 494.906954][ T9208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.906967][ T9208] Call Trace: [ 494.906973][ T9208] [ 494.906980][ T9208] dump_stack_lvl+0x189/0x250 [ 494.907005][ T9208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.907023][ T9208] ? __pfx__printk+0x10/0x10 [ 494.907046][ T9208] ? __rcu_read_unlock+0x84/0xe0 [ 494.907068][ T9208] ? kernfs_path_from_node+0x2c/0x260 [ 494.907089][ T9208] ? kernfs_path_from_node+0x22c/0x260 [ 494.907106][ T9208] ? kernfs_path_from_node+0x2c/0x260 [ 494.907128][ T9208] sysfs_warn_dup+0x8e/0xa0 [ 494.907146][ T9208] sysfs_do_create_link_sd+0xc0/0x110 [ 494.907166][ T9208] device_add_class_symlinks+0x1cf/0x240 [ 494.907194][ T9208] device_add+0x475/0xb50 [ 494.907220][ T9208] wiphy_register+0x199a/0x26b0 [ 494.907255][ T9208] ? __pfx_wiphy_register+0x10/0x10 [ 494.907274][ T9208] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 494.907302][ T9208] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 494.907328][ T9208] ieee80211_register_hw+0x33e1/0x4120 [ 494.907368][ T9208] ? ieee80211_register_hw+0x1471/0x4120 [ 494.907398][ T9208] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 494.907433][ T9208] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 494.907466][ T9208] ? __hrtimer_setup+0x187/0x210 [ 494.907481][ T9208] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 494.907509][ T9208] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 494.907557][ T9208] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 494.907579][ T9208] ? trace_kmalloc+0x1f/0xd0 [ 494.907591][ T9208] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 494.907608][ T9208] ? kstrndup+0xbf/0x160 [ 494.907635][ T9208] hwsim_new_radio_nl+0xea4/0x1b10 [ 494.907661][ T9208] ? __pfx___nla_validate_parse+0x10/0x10 [ 494.907693][ T9208] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 494.907745][ T9208] ? __nla_parse+0x40/0x60 [ 494.907767][ T9208] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 494.907795][ T9208] genl_family_rcv_msg_doit+0x215/0x300 [ 494.907818][ T9208] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 494.907848][ T9208] ? bpf_lsm_capable+0x9/0x20 [ 494.907868][ T9208] ? security_capable+0x7e/0x2e0 [ 494.907895][ T9208] genl_rcv_msg+0x60e/0x790 [ 494.907918][ T9208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.907934][ T9208] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 494.907959][ T9208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.907975][ T9208] ? netlink_rcv_skb+0x1e0/0x470 [ 494.908009][ T9208] netlink_rcv_skb+0x205/0x470 [ 494.908032][ T9208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.908050][ T9208] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.908088][ T9208] ? down_read+0x1ad/0x2e0 [ 494.908109][ T9208] genl_rcv+0x28/0x40 [ 494.908124][ T9208] netlink_unicast+0x75c/0x8e0 [ 494.908175][ T9208] netlink_sendmsg+0x805/0xb30 [ 494.908208][ T9208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.908238][ T9208] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.908255][ T9208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.908279][ T9208] __sock_sendmsg+0x21c/0x270 [ 494.908302][ T9208] ____sys_sendmsg+0x505/0x830 [ 494.908338][ T9208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.908372][ T9208] ? import_iovec+0x74/0xa0 [ 494.908398][ T9208] ___sys_sendmsg+0x21f/0x2a0 [ 494.908432][ T9208] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.908491][ T9208] ? __fget_files+0x2a/0x420 [ 494.908508][ T9208] ? __fget_files+0x3a0/0x420 [ 494.908535][ T9208] __x64_sys_sendmsg+0x19b/0x260 [ 494.908564][ T9208] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.908611][ T9208] do_syscall_64+0xfa/0x3b0 [ 494.908631][ T9208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.908646][ T9208] ? asm_sysvec_call_function_single+0x1a/0x20 [ 494.908662][ T9208] ? clear_bhb_loop+0x60/0xb0 [ 494.908682][ T9208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.908697][ T9208] RIP: 0033:0x7f8bd438ebe9 [ 494.908712][ T9208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.908727][ T9208] RSP: 002b:00007f8bd25f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.908744][ T9208] RAX: ffffffffffffffda RBX: 00007f8bd45b6090 RCX: 00007f8bd438ebe9 [ 494.908755][ T9208] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 494.908766][ T9208] RBP: 00007f8bd4411e19 R08: 0000000000000000 R09: 0000000000000000 [ 494.908776][ T9208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.908786][ T9208] R13: 00007f8bd45b6128 R14: 00007f8bd45b6090 R15: 00007fff9dfbe0e8 [ 494.908812][ T9208] [ 496.627742][ T9222] IPv6: Can't replace route, no match found [ 497.065305][ T5206] audit_log_start: 7522 callbacks suppressed [ 497.065325][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 497.079749][ T30] audit: type=1400 audit(2000000256.220:176647): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5884 comm="udevd" name="/" dev="sysfs" ino=1 [ 497.101386][ T9223] audit: audit_backlog=65 > audit_backlog_limit=64 [ 497.115717][ T9225] audit: audit_backlog=65 > audit_backlog_limit=64 [ 497.122283][ T9225] audit: audit_lost=92164 audit_rate_limit=0 audit_backlog_limit=64 [ 497.123143][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 497.132032][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 497.137435][ T5849] audit: audit_lost=92165 audit_rate_limit=0 audit_backlog_limit=64 [ 497.143513][ C0] audit: audit_lost=92166 audit_rate_limit=0 audit_backlog_limit=64 [ 497.151639][ T5849] audit: backlog limit exceeded [ 498.086442][ T9228] Falling back ldisc for ttyS3. [ 498.193271][ T9234] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 498.225365][ T9234] overlayfs: overlapping lowerdir path [ 498.489266][ T9239] tmpfs: Unknown parameter 'nr_ino' [ 499.487704][ T9249] IPVS: Unknown mcast interface:  [ 502.078645][ T30] kauditd_printk_skb: 5558 callbacks suppressed [ 502.078663][ T30] audit: type=1400 audit(2000000261.600:179555): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=9266 comm="syz-executor" name="184" dev="tmpfs" ino=1070 [ 502.125184][ T30] audit: type=1400 audit(2000000261.600:179556): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9266 comm="syz-executor" name="184" dev="tmpfs" ino=1070 [ 502.149534][ T30] audit: type=1400 audit(2000000261.600:179557): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9266 comm="syz-executor" name="184" dev="tmpfs" ino=1070 [ 502.179848][ T30] audit: type=1400 audit(2000000261.600:179558): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=9266 comm="syz-executor" name="184" dev="tmpfs" ino=1070 [ 502.247478][ T5845] audit: audit_backlog=65 > audit_backlog_limit=64 [ 502.274436][ T5845] audit: audit_lost=93051 audit_rate_limit=0 audit_backlog_limit=64 [ 502.279359][ T30] audit: type=1400 audit(2000000261.600:179559): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9266 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 502.286644][ T9268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 502.308666][ T9268] audit: audit_lost=93052 audit_rate_limit=0 audit_backlog_limit=64 [ 502.317833][ T9268] audit: backlog limit exceeded [ 504.014996][ T927] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 505.034970][ T927] usb 3-1: Using ep0 maxpacket: 16 [ 505.047614][ T927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.068535][ T927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.426543][ T927] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 505.435771][ T927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.455651][ T927] usb 3-1: config 0 descriptor?? [ 505.803369][ T9280] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 505.825108][ T9280] overlayfs: overlapping lowerdir path [ 506.195616][ T927] hid-multitouch 0003:1FD2:6007.0008: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 506.618365][ T927] usb 3-1: USB disconnect, device number 17 [ 506.670702][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.680524][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.184321][ T30] kauditd_printk_skb: 3989 callbacks suppressed [ 507.184366][ T30] audit: type=1400 audit(2000000266.650:182135): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=9288 comm="syz.1.910" name=6574683004 dev="mqueue" ino=15930 [ 507.627775][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 507.724758][ T9287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 507.731998][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 507.738587][ C0] audit: audit_lost=93524 audit_rate_limit=0 audit_backlog_limit=64 [ 507.746690][ C0] audit: backlog limit exceeded [ 507.768193][ T9294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 507.774773][ T9294] audit: audit_lost=93525 audit_rate_limit=0 audit_backlog_limit=64 [ 507.806159][ T30] audit: type=1400 audit(2000000266.650:182136): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=9288 comm="syz.1.910" path=2F6574683004 dev="mqueue" ino=15930 [ 507.825847][ T5845] audit: audit_backlog=65 > audit_backlog_limit=64 [ 508.412958][ T9287] fido_id[9287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 508.520847][ T9299] tipc: Enabled bearer , priority 0 [ 508.556388][ T9299] syzkaller0: entered promiscuous mode [ 508.563576][ T9299] syzkaller0: entered allmulticast mode [ 508.581181][ T9305] 9pnet_fd: Insufficient options for proto=fd [ 509.575313][ T5898] tipc: Node number set to 2751321686 [ 509.648980][ T9298] tipc: Resetting bearer [ 509.843699][ T9298] tipc: Disabling bearer [ 510.488098][ T9315] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 510.532529][ T9315] CPU: 0 UID: 0 PID: 9315 Comm: syz.1.917 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 510.532552][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 510.532562][ T9315] Call Trace: [ 510.532569][ T9315] [ 510.532576][ T9315] dump_stack_lvl+0x189/0x250 [ 510.532603][ T9315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.532622][ T9315] ? __pfx__printk+0x10/0x10 [ 510.532644][ T9315] ? kernfs_path_from_node+0x2c/0x260 [ 510.532664][ T9315] ? kernfs_path_from_node+0x2c/0x260 [ 510.532682][ T9315] ? kernfs_path_from_node+0x2c/0x260 [ 510.532703][ T9315] ? kernfs_path_from_node+0x22c/0x260 [ 510.532721][ T9315] ? kernfs_path_from_node+0x2c/0x260 [ 510.532745][ T9315] sysfs_warn_dup+0x8e/0xa0 [ 510.532765][ T9315] sysfs_do_create_link_sd+0xc0/0x110 [ 510.532786][ T9315] device_add_class_symlinks+0x1cf/0x240 [ 510.532815][ T9315] device_add+0x475/0xb50 [ 510.532843][ T9315] wiphy_register+0x199a/0x26b0 [ 510.532879][ T9315] ? __pfx_wiphy_register+0x10/0x10 [ 510.532899][ T9315] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 510.532928][ T9315] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 510.532955][ T9315] ieee80211_register_hw+0x33e1/0x4120 [ 510.532995][ T9315] ? ieee80211_register_hw+0x1471/0x4120 [ 510.533027][ T9315] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 510.533080][ T9315] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 510.533144][ T9315] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 510.533175][ T9315] ? trace_kmalloc+0x1f/0xd0 [ 510.533193][ T9315] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 510.533217][ T9315] ? kstrndup+0xbf/0x160 [ 510.533255][ T9315] hwsim_new_radio_nl+0xea4/0x1b10 [ 510.533287][ T9315] ? __pfx___nla_validate_parse+0x10/0x10 [ 510.533320][ T9315] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 510.533354][ T9315] ? __nla_parse+0x40/0x60 [ 510.533377][ T9315] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 510.533404][ T9315] genl_family_rcv_msg_doit+0x215/0x300 [ 510.533428][ T9315] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 510.533457][ T9315] ? bpf_lsm_capable+0x9/0x20 [ 510.533477][ T9315] ? security_capable+0x7e/0x2e0 [ 510.533512][ T9315] genl_rcv_msg+0x60e/0x790 [ 510.533535][ T9315] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.533552][ T9315] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 510.533587][ T9315] netlink_rcv_skb+0x205/0x470 [ 510.533611][ T9315] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.533629][ T9315] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 510.533667][ T9315] ? down_read+0x1ad/0x2e0 [ 510.533689][ T9315] genl_rcv+0x28/0x40 [ 510.533704][ T9315] netlink_unicast+0x75c/0x8e0 [ 510.533735][ T9315] netlink_sendmsg+0x805/0xb30 [ 510.533769][ T9315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.533799][ T9315] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 510.533814][ T9315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.533838][ T9315] __sock_sendmsg+0x21c/0x270 [ 510.533861][ T9315] ____sys_sendmsg+0x505/0x830 [ 510.533891][ T9315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.533924][ T9315] ? import_iovec+0x74/0xa0 [ 510.533950][ T9315] ___sys_sendmsg+0x21f/0x2a0 [ 510.533977][ T9315] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.534035][ T9315] ? __fget_files+0x2a/0x420 [ 510.534052][ T9315] ? __fget_files+0x3a0/0x420 [ 510.534079][ T9315] __x64_sys_sendmsg+0x19b/0x260 [ 510.534107][ T9315] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.534142][ T9315] ? rcu_is_watching+0x15/0xb0 [ 510.534164][ T9315] ? do_syscall_64+0xbe/0x3b0 [ 510.534186][ T9315] do_syscall_64+0xfa/0x3b0 [ 510.534203][ T9315] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.534219][ T9315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.534235][ T9315] ? clear_bhb_loop+0x60/0xb0 [ 510.534254][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.534270][ T9315] RIP: 0033:0x7f51de38ebe9 [ 510.534284][ T9315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.534298][ T9315] RSP: 002b:00007f51df226038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.534315][ T9315] RAX: ffffffffffffffda RBX: 00007f51de5b5fa0 RCX: 00007f51de38ebe9 [ 510.534327][ T9315] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 510.534338][ T9315] RBP: 00007f51de411e19 R08: 0000000000000000 R09: 0000000000000000 [ 510.534348][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.534357][ T9315] R13: 00007f51de5b6038 R14: 00007f51de5b5fa0 R15: 00007ffc4a66c3e8 [ 510.534389][ T9315] [ 510.960493][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.118615][ T9316] Falling back ldisc for ttyS3. [ 513.122623][ T30] kauditd_printk_skb: 5080 callbacks suppressed [ 513.122645][ T30] audit: type=1400 audit(2000000270.970:184252): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=9326 comm="syz.1.920" opid=9326 ocomm="syz.1.920" [ 513.205625][ T9338] audit: audit_backlog=65 > audit_backlog_limit=64 [ 513.212321][ T9338] audit: audit_lost=94515 audit_rate_limit=0 audit_backlog_limit=64 [ 513.220550][ T9338] audit: backlog limit exceeded [ 513.225752][ T9338] audit: audit_backlog=65 > audit_backlog_limit=64 [ 513.232375][ T9338] audit: audit_lost=94516 audit_rate_limit=0 audit_backlog_limit=64 [ 513.240597][ T9338] audit: backlog limit exceeded [ 513.380925][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 513.387635][ C0] audit: audit_lost=94517 audit_rate_limit=0 audit_backlog_limit=64 [ 513.396024][ C0] audit: backlog limit exceeded [ 513.880910][ T9341] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$' [ 513.930481][ T9341] CPU: 1 UID: 0 PID: 9341 Comm: syz.3.924 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 513.930512][ T9341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.930526][ T9341] Call Trace: [ 513.930540][ T9341] [ 513.930551][ T9341] dump_stack_lvl+0x189/0x250 [ 513.930594][ T9341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.930621][ T9341] ? __pfx__printk+0x10/0x10 [ 513.930652][ T9341] ? kernfs_path_from_node+0x2c/0x260 [ 513.930681][ T9341] ? kernfs_path_from_node+0x2c/0x260 [ 513.930707][ T9341] ? kernfs_path_from_node+0x2c/0x260 [ 513.930737][ T9341] ? kernfs_path_from_node+0x22c/0x260 [ 513.930763][ T9341] ? kernfs_path_from_node+0x2c/0x260 [ 513.930795][ T9341] sysfs_warn_dup+0x8e/0xa0 [ 513.930822][ T9341] sysfs_do_create_link_sd+0xc0/0x110 [ 513.930853][ T9341] device_add_class_symlinks+0x1cf/0x240 [ 513.930893][ T9341] device_add+0x475/0xb50 [ 513.930933][ T9341] wiphy_register+0x199a/0x26b0 [ 513.930984][ T9341] ? __pfx_wiphy_register+0x10/0x10 [ 513.931013][ T9341] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 513.931054][ T9341] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 513.931094][ T9341] ieee80211_register_hw+0x33e1/0x4120 [ 513.931152][ T9341] ? ieee80211_register_hw+0x1471/0x4120 [ 513.931204][ T9341] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 513.931245][ T9341] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 513.931293][ T9341] ? __hrtimer_setup+0x187/0x210 [ 513.931316][ T9341] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 513.931363][ T9341] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 513.931436][ T9341] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 513.931468][ T9341] ? trace_kmalloc+0x1f/0xd0 [ 513.931492][ T9341] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 513.931516][ T9341] ? kstrndup+0xbf/0x160 [ 513.931557][ T9341] hwsim_new_radio_nl+0xea4/0x1b10 [ 513.931595][ T9341] ? __pfx___nla_validate_parse+0x10/0x10 [ 513.931643][ T9341] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 513.931693][ T9341] ? __nla_parse+0x40/0x60 [ 513.931726][ T9341] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 513.931764][ T9341] genl_family_rcv_msg_doit+0x215/0x300 [ 513.931799][ T9341] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 513.931843][ T9341] ? bpf_lsm_capable+0x9/0x20 [ 513.931871][ T9341] ? security_capable+0x7e/0x2e0 [ 513.931909][ T9341] genl_rcv_msg+0x60e/0x790 [ 513.931943][ T9341] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.931966][ T9341] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 513.932019][ T9341] netlink_rcv_skb+0x205/0x470 [ 513.932053][ T9341] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.932079][ T9341] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.932135][ T9341] ? down_read+0x1ad/0x2e0 [ 513.932166][ T9341] genl_rcv+0x28/0x40 [ 513.932187][ T9341] netlink_unicast+0x75c/0x8e0 [ 513.932232][ T9341] netlink_sendmsg+0x805/0xb30 [ 513.932278][ T9341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.932323][ T9341] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.932352][ T9341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.932386][ T9341] __sock_sendmsg+0x21c/0x270 [ 513.932418][ T9341] ____sys_sendmsg+0x505/0x830 [ 513.932462][ T9341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.932512][ T9341] ? import_iovec+0x74/0xa0 [ 513.932549][ T9341] ___sys_sendmsg+0x21f/0x2a0 [ 513.932588][ T9341] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.932673][ T9341] ? __fget_files+0x2a/0x420 [ 513.932699][ T9341] ? __fget_files+0x3a0/0x420 [ 513.932739][ T9341] __x64_sys_sendmsg+0x19b/0x260 [ 513.932779][ T9341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.932830][ T9341] ? rcu_is_watching+0x15/0xb0 [ 513.932862][ T9341] ? do_syscall_64+0xbe/0x3b0 [ 513.932895][ T9341] do_syscall_64+0xfa/0x3b0 [ 513.932926][ T9341] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.932950][ T9341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.932973][ T9341] ? clear_bhb_loop+0x60/0xb0 [ 513.933002][ T9341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.933025][ T9341] RIP: 0033:0x7f887918ebe9 [ 513.933046][ T9341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.933066][ T9341] RSP: 002b:00007f887a08e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.933090][ T9341] RAX: ffffffffffffffda RBX: 00007f88793b5fa0 RCX: 00007f887918ebe9 [ 513.933107][ T9341] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 513.933122][ T9341] RBP: 00007f8879211e19 R08: 0000000000000000 R09: 0000000000000000 [ 513.933136][ T9341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.933150][ T9341] R13: 00007f88793b6038 R14: 00007f88793b5fa0 R15: 00007ffd5e262088 [ 513.933188][ T9341] [ 516.024099][ T9352] 9pnet_fd: Insufficient options for proto=fd [ 516.254955][ T9357] No control pipe specified [ 516.689343][ T9358] tipc: Enabled bearer , priority 0 [ 516.768737][ T9364] syzkaller0: entered promiscuous mode [ 516.774247][ T9364] syzkaller0: entered allmulticast mode [ 516.906413][ T9358] tipc: Resetting bearer [ 516.972841][ T9354] tipc: Resetting bearer [ 517.086267][ T9367] No control pipe specified [ 517.485692][ T9354] tipc: Disabling bearer [ 518.125286][ T30] kauditd_printk_skb: 2453 callbacks suppressed [ 518.125306][ T30] audit: type=1400 audit(2000000277.650:186307): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9371 comm="modprobe" name="lib" dev="sda1" ino=1642 [ 518.248018][ T9378] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.254566][ T9378] audit: audit_lost=94651 audit_rate_limit=0 audit_backlog_limit=64 [ 518.269411][ T30] audit: type=1400 audit(2000000277.650:186308): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=9371 comm="modprobe" name="libpcre2-8.so.0.13.0" dev="sda1" ino=1723 [ 518.271648][ T9377] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.365686][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.372270][ T5838] audit: audit_lost=94652 audit_rate_limit=0 audit_backlog_limit=64 [ 518.375073][ T9378] audit: backlog limit exceeded [ 518.405317][ T9377] audit: audit_lost=94653 audit_rate_limit=0 audit_backlog_limit=64 [ 518.412042][ T30] audit: type=1400 audit(2000000277.650:186309): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=9371 comm="modprobe" path="/usr/lib/libpcre2-8.so.0.13.0" dev="sda1" ino=1723 [ 518.524428][ T9379] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 519.065138][ T9379] CPU: 0 UID: 0 PID: 9379 Comm: syz.2.932 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 519.065170][ T9379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 519.065184][ T9379] Call Trace: [ 519.065193][ T9379] [ 519.065203][ T9379] dump_stack_lvl+0x189/0x250 [ 519.065239][ T9379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.065262][ T9379] ? __pfx__printk+0x10/0x10 [ 519.065289][ T9379] ? kernfs_path_from_node+0x2c/0x260 [ 519.065313][ T9379] ? kernfs_path_from_node+0x2c/0x260 [ 519.065334][ T9379] ? kernfs_path_from_node+0x2c/0x260 [ 519.065359][ T9379] ? kernfs_path_from_node+0x22c/0x260 [ 519.065380][ T9379] ? kernfs_path_from_node+0x2c/0x260 [ 519.065407][ T9379] sysfs_warn_dup+0x8e/0xa0 [ 519.065430][ T9379] sysfs_do_create_link_sd+0xc0/0x110 [ 519.065456][ T9379] device_add_class_symlinks+0x1cf/0x240 [ 519.065490][ T9379] device_add+0x475/0xb50 [ 519.065523][ T9379] wiphy_register+0x199a/0x26b0 [ 519.065578][ T9379] ? __pfx_wiphy_register+0x10/0x10 [ 519.065602][ T9379] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 519.065638][ T9379] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 519.065672][ T9379] ieee80211_register_hw+0x33e1/0x4120 [ 519.065720][ T9379] ? ieee80211_register_hw+0x1471/0x4120 [ 519.065759][ T9379] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 519.065793][ T9379] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 519.065835][ T9379] ? __hrtimer_setup+0x187/0x210 [ 519.065854][ T9379] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 519.065888][ T9379] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 519.065952][ T9379] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 519.065978][ T9379] ? trace_kmalloc+0x1f/0xd0 [ 519.065994][ T9379] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 519.066014][ T9379] ? kstrndup+0xbf/0x160 [ 519.066058][ T9379] hwsim_new_radio_nl+0xea4/0x1b10 [ 519.066089][ T9379] ? __pfx___nla_validate_parse+0x10/0x10 [ 519.066131][ T9379] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 519.066178][ T9379] ? __nla_parse+0x40/0x60 [ 519.066206][ T9379] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 519.066238][ T9379] genl_family_rcv_msg_doit+0x215/0x300 [ 519.066268][ T9379] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 519.066306][ T9379] ? bpf_lsm_capable+0x9/0x20 [ 519.066329][ T9379] ? security_capable+0x7e/0x2e0 [ 519.066361][ T9379] genl_rcv_msg+0x60e/0x790 [ 519.066389][ T9379] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.066408][ T9379] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 519.066453][ T9379] netlink_rcv_skb+0x205/0x470 [ 519.066481][ T9379] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.066504][ T9379] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 519.066556][ T9379] ? down_read+0x1ad/0x2e0 [ 519.066582][ T9379] genl_rcv+0x28/0x40 [ 519.066601][ T9379] netlink_unicast+0x75c/0x8e0 [ 519.066639][ T9379] netlink_sendmsg+0x805/0xb30 [ 519.066677][ T9379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.066714][ T9379] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 519.066733][ T9379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.066761][ T9379] __sock_sendmsg+0x21c/0x270 [ 519.066788][ T9379] ____sys_sendmsg+0x505/0x830 [ 519.066826][ T9379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.066866][ T9379] ? import_iovec+0x74/0xa0 [ 519.066897][ T9379] ___sys_sendmsg+0x21f/0x2a0 [ 519.066930][ T9379] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.067002][ T9379] ? __fget_files+0x2a/0x420 [ 519.067022][ T9379] ? __fget_files+0x3a0/0x420 [ 519.067056][ T9379] __x64_sys_sendmsg+0x19b/0x260 [ 519.067089][ T9379] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.067131][ T9379] ? rcu_is_watching+0x15/0xb0 [ 519.067159][ T9379] ? do_syscall_64+0xbe/0x3b0 [ 519.067186][ T9379] do_syscall_64+0xfa/0x3b0 [ 519.067206][ T9379] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.067234][ T9379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.067254][ T9379] ? clear_bhb_loop+0x60/0xb0 [ 519.067279][ T9379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.067299][ T9379] RIP: 0033:0x7f8bd438ebe9 [ 519.067317][ T9379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.067336][ T9379] RSP: 002b:00007f8bd5123038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.067357][ T9379] RAX: ffffffffffffffda RBX: 00007f8bd45b5fa0 RCX: 00007f8bd438ebe9 [ 519.067372][ T9379] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 519.067385][ T9379] RBP: 00007f8bd4411e19 R08: 0000000000000000 R09: 0000000000000000 [ 519.067397][ T9379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.067424][ T9379] R13: 00007f8bd45b6038 R14: 00007f8bd45b5fa0 R15: 00007fff9dfbe0e8 [ 519.067459][ T9379] [ 520.896825][ T9395] netlink: 32 bytes leftover after parsing attributes in process `syz.1.937'. [ 520.979120][ T9392] syzkaller1: entered promiscuous mode [ 520.984687][ T9392] syzkaller1: entered allmulticast mode [ 522.562299][ T9406] tmpfs: Unknown parameter 'nr_ino' [ 522.714674][ T9407] 9pnet_fd: Insufficient options for proto=fd [ 523.227901][ T5845] audit_log_start: 1657 callbacks suppressed [ 523.227916][ T5845] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.241368][ T9408] audit: audit_backlog=66 > audit_backlog_limit=64 [ 523.250349][ T30] audit: type=1400 audit(2000000282.630:187615): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5838 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 523.294969][ T9408] audit: audit_lost=94771 audit_rate_limit=0 audit_backlog_limit=64 [ 523.303626][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.319959][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.325184][ T5849] audit: audit_lost=94772 audit_rate_limit=0 audit_backlog_limit=64 [ 523.326561][ C0] audit: audit_lost=94773 audit_rate_limit=0 audit_backlog_limit=64 [ 523.334694][ T5845] audit: audit_lost=94774 audit_rate_limit=0 audit_backlog_limit=64 [ 523.342576][ C0] audit: backlog limit exceeded [ 523.482921][ T9412] No control pipe specified [ 523.936744][ T9410] netlink: 32 bytes leftover after parsing attributes in process `syz.4.944'. [ 525.128015][ T9425] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 525.345047][ T9425] CPU: 1 UID: 0 PID: 9425 Comm: syz.1.946 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 525.345072][ T9425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 525.345082][ T9425] Call Trace: [ 525.345089][ T9425] [ 525.345097][ T9425] dump_stack_lvl+0x189/0x250 [ 525.345123][ T9425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.345143][ T9425] ? __pfx__printk+0x10/0x10 [ 525.345165][ T9425] ? kernfs_path_from_node+0x2c/0x260 [ 525.345187][ T9425] ? kernfs_path_from_node+0x2c/0x260 [ 525.345206][ T9425] ? kernfs_path_from_node+0x2c/0x260 [ 525.345226][ T9425] ? kernfs_path_from_node+0x22c/0x260 [ 525.345244][ T9425] ? kernfs_path_from_node+0x2c/0x260 [ 525.345266][ T9425] sysfs_warn_dup+0x8e/0xa0 [ 525.345285][ T9425] sysfs_do_create_link_sd+0xc0/0x110 [ 525.345307][ T9425] device_add_class_symlinks+0x1cf/0x240 [ 525.345336][ T9425] device_add+0x475/0xb50 [ 525.345363][ T9425] wiphy_register+0x199a/0x26b0 [ 525.345399][ T9425] ? __pfx_wiphy_register+0x10/0x10 [ 525.345419][ T9425] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 525.345448][ T9425] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 525.345476][ T9425] ieee80211_register_hw+0x33e1/0x4120 [ 525.345517][ T9425] ? ieee80211_register_hw+0x1471/0x4120 [ 525.345550][ T9425] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 525.345579][ T9425] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 525.345612][ T9425] ? __hrtimer_setup+0x187/0x210 [ 525.345628][ T9425] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 525.345657][ T9425] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 525.345706][ T9425] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 525.345728][ T9425] ? trace_kmalloc+0x1f/0xd0 [ 525.345741][ T9425] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 525.345758][ T9425] ? kstrndup+0xbf/0x160 [ 525.345787][ T9425] hwsim_new_radio_nl+0xea4/0x1b10 [ 525.345815][ T9425] ? __pfx___nla_validate_parse+0x10/0x10 [ 525.345849][ T9425] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 525.345883][ T9425] ? __nla_parse+0x40/0x60 [ 525.345906][ T9425] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 525.345939][ T9425] genl_family_rcv_msg_doit+0x215/0x300 [ 525.345964][ T9425] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 525.345991][ T9425] ? ns_capable+0x8a/0xf0 [ 525.346009][ T9425] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 525.346038][ T9425] genl_rcv_msg+0x60e/0x790 [ 525.346061][ T9425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.346077][ T9425] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 525.346114][ T9425] netlink_rcv_skb+0x205/0x470 [ 525.346138][ T9425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.346156][ T9425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.346195][ T9425] ? down_read+0x1ad/0x2e0 [ 525.346218][ T9425] genl_rcv+0x28/0x40 [ 525.346232][ T9425] netlink_unicast+0x75c/0x8e0 [ 525.346263][ T9425] netlink_sendmsg+0x805/0xb30 [ 525.346286][ T9425] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 525.346309][ T9425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.346339][ T9425] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.346355][ T9425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.346379][ T9425] __sock_sendmsg+0x21c/0x270 [ 525.346401][ T9425] ____sys_sendmsg+0x505/0x830 [ 525.346433][ T9425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.346468][ T9425] ? import_iovec+0x74/0xa0 [ 525.346493][ T9425] ___sys_sendmsg+0x21f/0x2a0 [ 525.346521][ T9425] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.346579][ T9425] ? __fget_files+0x2a/0x420 [ 525.346597][ T9425] ? __fget_files+0x3a0/0x420 [ 525.346624][ T9425] __x64_sys_sendmsg+0x19b/0x260 [ 525.346652][ T9425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.346687][ T9425] ? rcu_is_watching+0x15/0xb0 [ 525.346709][ T9425] ? do_syscall_64+0xbe/0x3b0 [ 525.346731][ T9425] do_syscall_64+0xfa/0x3b0 [ 525.346763][ T9425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.346779][ T9425] ? asm_sysvec_call_function_single+0x1a/0x20 [ 525.346795][ T9425] ? clear_bhb_loop+0x60/0xb0 [ 525.346815][ T9425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.346831][ T9425] RIP: 0033:0x7f51de38ebe9 [ 525.346846][ T9425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.346860][ T9425] RSP: 002b:00007f51df205038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.346877][ T9425] RAX: ffffffffffffffda RBX: 00007f51de5b6090 RCX: 00007f51de38ebe9 [ 525.346890][ T9425] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 525.346900][ T9425] RBP: 00007f51de411e19 R08: 0000000000000000 R09: 0000000000000000 [ 525.346910][ T9425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.346919][ T9425] R13: 00007f51de5b6128 R14: 00007f51de5b6090 R15: 00007ffc4a66c3e8 [ 525.346951][ T9425] [ 525.896715][ T9428] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 525.908627][ T9428] CPU: 1 UID: 0 PID: 9428 Comm: syz.3.947 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 525.908649][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 525.908659][ T9428] Call Trace: [ 525.908665][ T9428] [ 525.908672][ T9428] dump_stack_lvl+0x189/0x250 [ 525.908697][ T9428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.908716][ T9428] ? __pfx__printk+0x10/0x10 [ 525.908738][ T9428] ? kernfs_path_from_node+0x2c/0x260 [ 525.908759][ T9428] ? kernfs_path_from_node+0x2c/0x260 [ 525.908776][ T9428] ? kernfs_path_from_node+0x2c/0x260 [ 525.908797][ T9428] ? kernfs_path_from_node+0x22c/0x260 [ 525.908821][ T9428] ? kernfs_path_from_node+0x2c/0x260 [ 525.908843][ T9428] sysfs_warn_dup+0x8e/0xa0 [ 525.908862][ T9428] sysfs_do_create_link_sd+0xc0/0x110 [ 525.908883][ T9428] device_add_class_symlinks+0x1cf/0x240 [ 525.908912][ T9428] device_add+0x475/0xb50 [ 525.908939][ T9428] wiphy_register+0x199a/0x26b0 [ 525.908974][ T9428] ? __pfx_wiphy_register+0x10/0x10 [ 525.908995][ T9428] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 525.909023][ T9428] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 525.909051][ T9428] ieee80211_register_hw+0x33e1/0x4120 [ 525.909091][ T9428] ? ieee80211_register_hw+0x1471/0x4120 [ 525.909123][ T9428] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 525.909152][ T9428] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 525.909185][ T9428] ? __hrtimer_setup+0x187/0x210 [ 525.909201][ T9428] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 525.909230][ T9428] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 525.909279][ T9428] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 525.909302][ T9428] ? trace_kmalloc+0x1f/0xd0 [ 525.909319][ T9428] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 525.909336][ T9428] ? kstrndup+0xbf/0x160 [ 525.909365][ T9428] hwsim_new_radio_nl+0xea4/0x1b10 [ 525.909391][ T9428] ? __pfx___nla_validate_parse+0x10/0x10 [ 525.909424][ T9428] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 525.909450][ T9428] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 525.909476][ T9428] ? __nla_parse+0x40/0x60 [ 525.909499][ T9428] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 525.909524][ T9428] genl_family_rcv_msg_doit+0x215/0x300 [ 525.909548][ T9428] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 525.909577][ T9428] ? bpf_lsm_capable+0x9/0x20 [ 525.909597][ T9428] ? security_capable+0x7e/0x2e0 [ 525.909624][ T9428] genl_rcv_msg+0x60e/0x790 [ 525.909647][ T9428] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.909663][ T9428] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 525.909699][ T9428] netlink_rcv_skb+0x205/0x470 [ 525.909723][ T9428] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.909741][ T9428] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.909779][ T9428] ? down_read+0x1ad/0x2e0 [ 525.909800][ T9428] genl_rcv+0x28/0x40 [ 525.909861][ T9428] netlink_unicast+0x75c/0x8e0 [ 525.909894][ T9428] netlink_sendmsg+0x805/0xb30 [ 525.909926][ T9428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.909957][ T9428] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.909973][ T9428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.909997][ T9428] __sock_sendmsg+0x21c/0x270 [ 525.910019][ T9428] ____sys_sendmsg+0x505/0x830 [ 525.910049][ T9428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.910087][ T9428] ? import_iovec+0x74/0xa0 [ 525.910115][ T9428] ___sys_sendmsg+0x21f/0x2a0 [ 525.910143][ T9428] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.910200][ T9428] ? __fget_files+0x2a/0x420 [ 525.910218][ T9428] ? __fget_files+0x3a0/0x420 [ 525.910245][ T9428] __x64_sys_sendmsg+0x19b/0x260 [ 525.910274][ T9428] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.910313][ T9428] ? rcu_is_watching+0x15/0xb0 [ 525.910335][ T9428] ? do_syscall_64+0xbe/0x3b0 [ 525.910357][ T9428] do_syscall_64+0xfa/0x3b0 [ 525.910373][ T9428] ? lockdep_hardirqs_on+0x9c/0x150 [ 525.910391][ T9428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.910416][ T9428] ? clear_bhb_loop+0x60/0xb0 [ 525.910444][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.910465][ T9428] RIP: 0033:0x7f887918ebe9 [ 525.910485][ T9428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.910505][ T9428] RSP: 002b:00007f887a08e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.910528][ T9428] RAX: ffffffffffffffda RBX: 00007f88793b5fa0 RCX: 00007f887918ebe9 [ 525.910545][ T9428] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 525.910561][ T9428] RBP: 00007f8879211e19 R08: 0000000000000000 R09: 0000000000000000 [ 525.910571][ T9428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.910581][ T9428] R13: 00007f88793b6038 R14: 00007f88793b5fa0 R15: 00007ffd5e262088 [ 525.910608][ T9428] [ 527.234987][ T5913] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 527.349384][ T9441] overlayfs: failed to resolve './file0': -2 [ 528.169148][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 528.479996][ T30] kauditd_printk_skb: 2709 callbacks suppressed [ 528.480018][ T30] audit: type=1400 audit(2000000287.920:189148): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.0.185 dest=57960 netif=eth0 [ 529.674978][ T30] audit: type=1400 audit(2000000288.110:189149): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=9439 comm="syz.3.951" name=6574683004 dev="mqueue" ino=7501 [ 529.687156][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 529.695578][ T30] audit: type=1400 audit(2000000288.110:189150): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=9439 comm="syz.3.951" path=2F6574683004 dev="mqueue" ino=7501 [ 529.721777][ T30] audit: type=1400 audit(2000000288.110:189151): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9439 comm="syz.3.951" name="newroot" dev="tmpfs" ino=2 [ 529.722582][ T9429] audit: audit_backlog=65 > audit_backlog_limit=64 [ 529.744175][ T30] audit: type=1400 audit(2000000288.110:189152): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9439 comm="syz.3.951" name="/" dev="devtmpfs" ino=1 [ 529.755855][ T9447] audit: audit_backlog=65 > audit_backlog_limit=64 [ 529.769185][ T30] audit: type=1400 audit(2000000288.110:189153): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9439 comm="syz.3.951" name="dri" dev="devtmpfs" ino=625 [ 529.794986][ T30] audit: type=1400 audit(2000000288.110:189154): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=9439 comm="syz.3.951" name="card1" dev="devtmpfs" ino=628 [ 529.825949][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.871392][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.925007][ T5913] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 529.941739][ T9450] tmpfs: Unknown parameter 'nr_ino' [ 529.973893][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.789411][ T5913] usb 3-1: config 0 descriptor?? [ 530.981425][ T9453] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 531.001247][ T9453] CPU: 0 UID: 0 PID: 9453 Comm: syz.4.953 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 531.001278][ T9453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 531.001292][ T9453] Call Trace: [ 531.001301][ T9453] [ 531.001310][ T9453] dump_stack_lvl+0x189/0x250 [ 531.001341][ T9453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.001360][ T9453] ? __pfx__printk+0x10/0x10 [ 531.001400][ T9453] ? __rcu_read_unlock+0x84/0xe0 [ 531.001423][ T9453] ? kernfs_path_from_node+0x2c/0x260 [ 531.001445][ T9453] ? kernfs_path_from_node+0x22c/0x260 [ 531.001464][ T9453] ? kernfs_path_from_node+0x2c/0x260 [ 531.001486][ T9453] sysfs_warn_dup+0x8e/0xa0 [ 531.001504][ T9453] sysfs_do_create_link_sd+0xc0/0x110 [ 531.001525][ T9453] device_add_class_symlinks+0x1cf/0x240 [ 531.001553][ T9453] device_add+0x475/0xb50 [ 531.001581][ T9453] wiphy_register+0x199a/0x26b0 [ 531.001616][ T9453] ? __pfx_wiphy_register+0x10/0x10 [ 531.001636][ T9453] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 531.001665][ T9453] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 531.001693][ T9453] ieee80211_register_hw+0x33e1/0x4120 [ 531.001733][ T9453] ? ieee80211_register_hw+0x1471/0x4120 [ 531.001765][ T9453] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 531.001794][ T9453] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 531.001828][ T9453] ? __hrtimer_setup+0x187/0x210 [ 531.001844][ T9453] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 531.001872][ T9453] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 531.001921][ T9453] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 531.001943][ T9453] ? trace_kmalloc+0x1f/0xd0 [ 531.001956][ T9453] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 531.001973][ T9453] ? kstrndup+0xbf/0x160 [ 531.002015][ T9453] hwsim_new_radio_nl+0xea4/0x1b10 [ 531.002040][ T9453] ? __pfx___nla_validate_parse+0x10/0x10 [ 531.002071][ T9453] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 531.002104][ T9453] ? __nla_parse+0x40/0x60 [ 531.002126][ T9453] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 531.002151][ T9453] genl_family_rcv_msg_doit+0x215/0x300 [ 531.002174][ T9453] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 531.002199][ T9453] ? __sanitizer_cov_trace_pc+0x58/0x70 [ 531.002222][ T9453] ? security_capable+0x7e/0x2e0 [ 531.002248][ T9453] genl_rcv_msg+0x60e/0x790 [ 531.002270][ T9453] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.002285][ T9453] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 531.002320][ T9453] netlink_rcv_skb+0x205/0x470 [ 531.002342][ T9453] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.002359][ T9453] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 531.002403][ T9453] ? down_read+0x1ad/0x2e0 [ 531.002424][ T9453] genl_rcv+0x28/0x40 [ 531.002437][ T9453] netlink_unicast+0x75c/0x8e0 [ 531.002467][ T9453] netlink_sendmsg+0x805/0xb30 [ 531.002498][ T9453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.002528][ T9453] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 531.002544][ T9453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.002567][ T9453] __sock_sendmsg+0x21c/0x270 [ 531.002589][ T9453] ____sys_sendmsg+0x505/0x830 [ 531.002618][ T9453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.002650][ T9453] ? import_iovec+0x74/0xa0 [ 531.002676][ T9453] ___sys_sendmsg+0x21f/0x2a0 [ 531.002702][ T9453] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.002758][ T9453] ? __fget_files+0x2a/0x420 [ 531.002789][ T9453] ? __fget_files+0x3a0/0x420 [ 531.002814][ T9453] __x64_sys_sendmsg+0x19b/0x260 [ 531.002838][ T9453] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 531.002871][ T9453] ? rcu_is_watching+0x15/0xb0 [ 531.002890][ T9453] ? do_syscall_64+0xbe/0x3b0 [ 531.002910][ T9453] do_syscall_64+0xfa/0x3b0 [ 531.002926][ T9453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.002940][ T9453] ? asm_sysvec_call_function_single+0x1a/0x20 [ 531.002954][ T9453] ? clear_bhb_loop+0x60/0xb0 [ 531.002972][ T9453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.002985][ T9453] RIP: 0033:0x7fda0c98ebe9 [ 531.002999][ T9453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.003012][ T9453] RSP: 002b:00007fda0d8a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.003027][ T9453] RAX: ffffffffffffffda RBX: 00007fda0cbb6090 RCX: 00007fda0c98ebe9 [ 531.003037][ T9453] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 531.003047][ T9453] RBP: 00007fda0ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 531.003055][ T9453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.003064][ T9453] R13: 00007fda0cbb6128 R14: 00007fda0cbb6090 R15: 00007ffce986ce48 [ 531.003088][ T9453] [ 531.575040][ T5913] usb 3-1: can't set config #0, error -71 [ 531.583254][ T5913] usb 3-1: USB disconnect, device number 18 [ 534.036499][ T30] kauditd_printk_skb: 2888 callbacks suppressed [ 534.036519][ T30] audit: type=1400 audit(2000000292.790:190471): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5849 comm="syz-executor" name="192" dev="tmpfs" ino=1117 [ 534.077394][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 534.084010][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 534.084026][ C0] audit: audit_lost=95691 audit_rate_limit=0 audit_backlog_limit=64 [ 534.084043][ C0] audit: backlog limit exceeded [ 534.115785][ T5838] audit: audit_lost=95692 audit_rate_limit=0 audit_backlog_limit=64 [ 534.145978][ T5838] audit: backlog limit exceeded [ 534.174131][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 534.214968][ T5838] audit: audit_lost=95693 audit_rate_limit=0 audit_backlog_limit=64 [ 534.222999][ T5838] audit: backlog limit exceeded [ 534.459241][ T9480] netlink: 'syz.4.961': attribute type 10 has an invalid length. [ 534.467443][ T9480] netlink: 40 bytes leftover after parsing attributes in process `syz.4.961'. [ 535.084645][ T9482] netlink: 'syz.2.962': attribute type 10 has an invalid length. [ 535.092962][ T9482] netlink: 40 bytes leftover after parsing attributes in process `syz.2.962'. [ 538.507201][ T9504] Falling back ldisc for ttyS3. [ 539.364500][ T30] kauditd_printk_skb: 2887 callbacks suppressed [ 539.364521][ T30] audit: type=1400 audit(2000000298.690:192404): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="/" dev="sda1" ino=2 [ 539.378519][ T5845] audit: audit_backlog=65 > audit_backlog_limit=64 [ 539.397561][ T5845] audit: audit_lost=96013 audit_rate_limit=0 audit_backlog_limit=64 [ 539.406216][ T5845] audit: backlog limit exceeded [ 539.412024][ T5845] audit: audit_backlog=65 > audit_backlog_limit=64 [ 539.412062][ T9505] audit: audit_backlog=65 > audit_backlog_limit=64 [ 539.418844][ T5845] audit: audit_lost=96014 audit_rate_limit=0 audit_backlog_limit=64 [ 539.418865][ T5845] audit: backlog limit exceeded [ 539.419536][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 539.427585][ T9513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 539.851994][ T9513] tmpfs: Unknown parameter 'nr_ino' [ 541.261356][ T9526] veth0_to_team: entered promiscuous mode [ 541.267257][ T9526] veth0_to_team: entered allmulticast mode [ 544.315047][ T5913] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 544.374401][ T30] kauditd_printk_skb: 2741 callbacks suppressed [ 544.374416][ T30] audit: type=1400 audit(2000000303.890:194385): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5833 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 544.419188][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 544.432966][ T9534] audit: audit_backlog=65 > audit_backlog_limit=64 [ 544.460815][ T9549] audit: audit_backlog=65 > audit_backlog_limit=64 [ 544.467486][ T9549] audit: audit_lost=96269 audit_rate_limit=0 audit_backlog_limit=64 [ 544.475661][ T9549] audit: backlog limit exceeded [ 544.488882][ T5833] audit: audit_lost=96270 audit_rate_limit=0 audit_backlog_limit=64 [ 544.490722][ T9534] audit: audit_lost=96271 audit_rate_limit=0 audit_backlog_limit=64 [ 544.509871][ T30] audit: type=1400 audit(2000000303.930:194386): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5833 comm="syz-executor" name="193" dev="tmpfs" ino=1130 [ 544.531913][ T9534] audit: backlog limit exceeded [ 544.565155][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 544.577761][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.624099][ T5913] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 544.670576][ T5913] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 544.680663][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 544.689472][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 544.701574][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 544.711946][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 544.719625][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 544.755401][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.286382][ T5913] usb 4-1: Product: syz [ 545.290603][ T5913] usb 4-1: Manufacturer: syz [ 545.316888][ T5913] usb 4-1: SerialNumber: syz [ 545.344466][ T5913] usb 4-1: config 0 descriptor?? [ 546.399765][ T9563] tmpfs: Unknown parameter 'nr_ino' [ 546.745079][ T5841] Bluetooth: hci5: command tx timeout [ 548.821952][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.835414][ T5841] Bluetooth: hci5: command tx timeout [ 549.374947][ T30] kauditd_printk_skb: 2651 callbacks suppressed [ 549.374968][ T30] audit: type=1400 audit(2000000308.890:196395): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5833 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 549.437834][ T9582] audit: audit_backlog=65 > audit_backlog_limit=64 [ 549.444732][ T9582] audit: audit_lost=96486 audit_rate_limit=0 audit_backlog_limit=64 [ 549.445902][ T9580] audit: audit_backlog=65 > audit_backlog_limit=64 [ 549.455491][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.466867][ T9582] audit: backlog limit exceeded [ 549.477860][ T30] audit: type=1400 audit(2000000308.890:196396): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5833 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 549.487380][ T9581] audit: audit_backlog=65 > audit_backlog_limit=64 [ 549.503848][ T9581] audit: audit_lost=96487 audit_rate_limit=0 audit_backlog_limit=64 [ 549.504406][ T30] audit: type=1400 audit(2000000308.890:196397): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5833 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 549.511902][ T9581] audit: backlog limit exceeded [ 549.832141][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.372277][ T982] usb 4-1: USB disconnect, device number 10 [ 550.605535][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.816721][ T9600] IPv6: Can't replace route, no match found [ 551.030995][ T5841] Bluetooth: hci5: command tx timeout [ 552.009190][ T9551] chnl_net:caif_netlink_parms(): no params data found [ 552.581351][ T9608] tmpfs: Unknown parameter 'nr_ino' [ 553.077929][ T5841] Bluetooth: hci5: command tx timeout [ 553.835643][ T9606] Falling back ldisc for ttyS3. [ 554.390663][ T30] kauditd_printk_skb: 4095 callbacks suppressed [ 554.390681][ T30] audit: type=1400 audit(2000000313.910:199651): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9595 comm="udevd" name="/" dev="sda1" ino=2 [ 554.534468][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 554.539106][ T9595] audit: audit_backlog=66 > audit_backlog_limit=64 [ 554.545804][ T9616] audit: audit_backlog=66 > audit_backlog_limit=64 [ 554.549308][ T5206] audit: audit_backlog=66 > audit_backlog_limit=64 [ 554.554315][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 554.567285][ C0] audit: audit_lost=96769 audit_rate_limit=0 audit_backlog_limit=64 [ 554.574938][ T9595] audit: audit_lost=96770 audit_rate_limit=0 audit_backlog_limit=64 [ 554.575321][ C0] audit: backlog limit exceeded [ 554.583288][ T9595] audit: backlog limit exceeded [ 554.847401][ T37] dummy0: left allmulticast mode [ 554.854415][ T37] bridge0: port 3(dummy0) entered disabled state [ 554.947248][ T37] bridge_slave_1: left allmulticast mode [ 555.112161][ T37] bridge_slave_1: left promiscuous mode [ 555.118675][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.139910][ T37] bridge_slave_0: left allmulticast mode [ 555.152200][ T37] bridge_slave_0: left promiscuous mode [ 555.160192][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.441276][ T9640] overlayfs: failed to resolve './file1': -2 [ 556.903254][ T9645] binder: 9644:9645 ioctl 4018620d 0 returned -22 [ 558.722723][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.740967][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.766834][ T37] bond0 (unregistering): Released all slaves [ 558.785929][ T9624] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 558.802579][ T9624] CPU: 1 UID: 0 PID: 9624 Comm: syz.0.995 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 558.802607][ T9624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 558.802617][ T9624] Call Trace: [ 558.802623][ T9624] [ 558.802631][ T9624] dump_stack_lvl+0x189/0x250 [ 558.802657][ T9624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.802676][ T9624] ? __pfx__printk+0x10/0x10 [ 558.802701][ T9624] ? kernfs_path_from_node+0x2c/0x260 [ 558.802722][ T9624] ? kernfs_path_from_node+0x2c/0x260 [ 558.802740][ T9624] ? kernfs_path_from_node+0x2c/0x260 [ 558.802761][ T9624] ? kernfs_path_from_node+0x22c/0x260 [ 558.802778][ T9624] ? kernfs_path_from_node+0x2c/0x260 [ 558.802800][ T9624] sysfs_warn_dup+0x8e/0xa0 [ 558.802819][ T9624] sysfs_do_create_link_sd+0xc0/0x110 [ 558.802840][ T9624] device_add_class_symlinks+0x1cf/0x240 [ 558.802869][ T9624] device_add+0x475/0xb50 [ 558.802897][ T9624] wiphy_register+0x199a/0x26b0 [ 558.802933][ T9624] ? __pfx_wiphy_register+0x10/0x10 [ 558.802953][ T9624] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 558.802982][ T9624] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 558.803010][ T9624] ieee80211_register_hw+0x33e1/0x4120 [ 558.803049][ T9624] ? ieee80211_register_hw+0x1471/0x4120 [ 558.803081][ T9624] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 558.803110][ T9624] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 558.803144][ T9624] ? __hrtimer_setup+0x187/0x210 [ 558.803159][ T9624] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 558.803188][ T9624] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 558.803251][ T9624] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 558.803276][ T9624] ? trace_kmalloc+0x1f/0xd0 [ 558.803289][ T9624] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 558.803306][ T9624] ? kstrndup+0xbf/0x160 [ 558.803336][ T9624] hwsim_new_radio_nl+0xea4/0x1b10 [ 558.803364][ T9624] ? __pfx___nla_validate_parse+0x10/0x10 [ 558.803398][ T9624] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 558.803424][ T9624] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 558.803450][ T9624] ? __nla_parse+0x40/0x60 [ 558.803472][ T9624] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 558.803498][ T9624] genl_family_rcv_msg_doit+0x215/0x300 [ 558.803521][ T9624] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 558.803551][ T9624] ? bpf_lsm_capable+0x9/0x20 [ 558.803571][ T9624] ? security_capable+0x7e/0x2e0 [ 558.803605][ T9624] genl_rcv_msg+0x60e/0x790 [ 558.803628][ T9624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.803644][ T9624] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 558.803680][ T9624] netlink_rcv_skb+0x205/0x470 [ 558.803704][ T9624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.803723][ T9624] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 558.803761][ T9624] ? down_read+0x1ad/0x2e0 [ 558.803782][ T9624] genl_rcv+0x28/0x40 [ 558.803797][ T9624] netlink_unicast+0x75c/0x8e0 [ 558.803831][ T9624] netlink_sendmsg+0x805/0xb30 [ 558.803862][ T9624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.803894][ T9624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.803918][ T9624] __sock_sendmsg+0x21c/0x270 [ 558.803940][ T9624] ____sys_sendmsg+0x505/0x830 [ 558.803970][ T9624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.804003][ T9624] ? import_iovec+0x74/0xa0 [ 558.804029][ T9624] ___sys_sendmsg+0x21f/0x2a0 [ 558.804055][ T9624] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.804114][ T9624] ? __fget_files+0x2a/0x420 [ 558.804138][ T9624] ? __fget_files+0x3a0/0x420 [ 558.804171][ T9624] __x64_sys_sendmsg+0x19b/0x260 [ 558.804210][ T9624] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 558.804274][ T9624] do_syscall_64+0xfa/0x3b0 [ 558.804300][ T9624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.804320][ T9624] ? asm_sysvec_call_function_single+0x1a/0x20 [ 558.804340][ T9624] ? clear_bhb_loop+0x60/0xb0 [ 558.804368][ T9624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.804389][ T9624] RIP: 0033:0x7fcb7ff8ebe9 [ 558.804410][ T9624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.804429][ T9624] RSP: 002b:00007fcb80d46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.804452][ T9624] RAX: ffffffffffffffda RBX: 00007fcb801b6090 RCX: 00007fcb7ff8ebe9 [ 558.804470][ T9624] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 558.804483][ T9624] RBP: 00007fcb80011e19 R08: 0000000000000000 R09: 0000000000000000 [ 558.804497][ T9624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.804511][ T9624] R13: 00007fcb801b6128 R14: 00007fcb801b6090 R15: 00007ffcd1b58408 [ 558.804557][ T9624] [ 558.868495][ T9551] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.872649][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.880104][ T9551] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.304286][ T9551] bridge_slave_0: entered allmulticast mode [ 559.312458][ T9551] bridge_slave_0: entered promiscuous mode [ 559.422081][ T9551] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.444773][ T9551] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.446771][ T30] kauditd_printk_skb: 2147 callbacks suppressed [ 559.446791][ T30] audit: type=1400 audit(2000000318.960:201283): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5838 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 559.478374][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.491513][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 559.501683][ T30] audit: type=1400 audit(2000000318.960:201284): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5838 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 559.524745][ T30] audit: type=1400 audit(2000000318.960:201285): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5838 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 559.539541][ T9551] bridge_slave_1: entered allmulticast mode [ 559.544134][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.564156][ T30] audit: type=1400 audit(2000000318.960:201286): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5838 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 559.594962][ T30] audit: type=1400 audit(2000000318.960:201287): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5838 comm="syz-executor" name="197" dev="tmpfs" ino=1196 [ 559.595024][ T5838] audit: audit_lost=96944 audit_rate_limit=0 audit_backlog_limit=64 [ 559.669744][ T30] audit: type=1400 audit(2000000318.960:201288): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=37 comm="kworker/u8:3" saddr=10.128.0.169 src=30008 daddr=10.128.0.185 dest=57960 netif=eth0 [ 559.723320][ T9551] bridge_slave_1: entered promiscuous mode [ 559.729289][ T5838] audit: backlog limit exceeded [ 559.735055][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 561.145393][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 561.305626][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 561.367963][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.519444][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 561.588340][ T24] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 561.600855][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.612756][ T9551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.627399][ T24] usb 5-1: Product: syz [ 561.635247][ T24] usb 5-1: Manufacturer: syz [ 561.640918][ T24] usb 5-1: SerialNumber: syz [ 561.664752][ T24] usb 5-1: config 0 descriptor?? [ 561.682625][ T9551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.696308][ T9672] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 561.727834][ T9672] CPU: 0 UID: 0 PID: 9672 Comm: syz.2.1006 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 561.727858][ T9672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 561.727868][ T9672] Call Trace: [ 561.727875][ T9672] [ 561.727884][ T9672] dump_stack_lvl+0x189/0x250 [ 561.727911][ T9672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.727929][ T9672] ? __pfx__printk+0x10/0x10 [ 561.727953][ T9672] ? kernfs_path_from_node+0x2c/0x260 [ 561.727977][ T9672] ? kernfs_path_from_node+0x2c/0x260 [ 561.727996][ T9672] ? kernfs_path_from_node+0x2c/0x260 [ 561.728017][ T9672] ? kernfs_path_from_node+0x22c/0x260 [ 561.728037][ T9672] ? kernfs_path_from_node+0x2c/0x260 [ 561.728068][ T9672] sysfs_warn_dup+0x8e/0xa0 [ 561.728087][ T9672] sysfs_do_create_link_sd+0xc0/0x110 [ 561.728109][ T9672] device_add_class_symlinks+0x1cf/0x240 [ 561.728138][ T9672] device_add+0x475/0xb50 [ 561.728166][ T9672] wiphy_register+0x199a/0x26b0 [ 561.728202][ T9672] ? __pfx_wiphy_register+0x10/0x10 [ 561.728222][ T9672] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 561.728250][ T9672] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 561.728278][ T9672] ieee80211_register_hw+0x33e1/0x4120 [ 561.728320][ T9672] ? ieee80211_register_hw+0x1471/0x4120 [ 561.728353][ T9672] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 561.728381][ T9672] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 561.728415][ T9672] ? __hrtimer_setup+0x187/0x210 [ 561.728431][ T9672] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 561.728459][ T9672] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 561.728509][ T9672] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 561.728532][ T9672] ? trace_kmalloc+0x1f/0xd0 [ 561.728545][ T9672] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 561.728569][ T9672] ? kstrndup+0xbf/0x160 [ 561.728598][ T9672] hwsim_new_radio_nl+0xea4/0x1b10 [ 561.728629][ T9672] ? __pfx___nla_validate_parse+0x10/0x10 [ 561.728648][ T9672] ? preempt_schedule_irq+0xde/0x150 [ 561.728664][ T9672] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 561.728689][ T9672] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 561.728720][ T9672] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 561.728745][ T9672] ? __nla_parse+0x40/0x60 [ 561.728768][ T9672] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 561.728794][ T9672] genl_family_rcv_msg_doit+0x215/0x300 [ 561.728823][ T9672] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 561.728862][ T9672] ? bpf_lsm_capable+0x9/0x20 [ 561.728891][ T9672] ? security_capable+0x7e/0x2e0 [ 561.728929][ T9672] genl_rcv_msg+0x60e/0x790 [ 561.728960][ T9672] ? __pfx_genl_rcv_msg+0x10/0x10 [ 561.728977][ T9672] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 561.729014][ T9672] netlink_rcv_skb+0x205/0x470 [ 561.729038][ T9672] ? __pfx_genl_rcv_msg+0x10/0x10 [ 561.729064][ T9672] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.729103][ T9672] ? down_read+0x1ad/0x2e0 [ 561.729125][ T9672] genl_rcv+0x28/0x40 [ 561.729140][ T9672] netlink_unicast+0x75c/0x8e0 [ 561.729171][ T9672] netlink_sendmsg+0x805/0xb30 [ 561.729203][ T9672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.729233][ T9672] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 561.729249][ T9672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.729273][ T9672] __sock_sendmsg+0x21c/0x270 [ 561.729297][ T9672] ____sys_sendmsg+0x505/0x830 [ 561.729329][ T9672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.729375][ T9672] ? import_iovec+0x74/0xa0 [ 561.729401][ T9672] ___sys_sendmsg+0x21f/0x2a0 [ 561.729428][ T9672] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.729485][ T9672] ? __fget_files+0x2a/0x420 [ 561.729501][ T9672] ? __fget_files+0x3a0/0x420 [ 561.729528][ T9672] __x64_sys_sendmsg+0x19b/0x260 [ 561.729555][ T9672] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 561.729589][ T9672] ? rcu_is_watching+0x15/0xb0 [ 561.729630][ T9672] ? do_syscall_64+0xbe/0x3b0 [ 561.729653][ T9672] do_syscall_64+0xfa/0x3b0 [ 561.729672][ T9672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.729687][ T9672] ? asm_sysvec_call_function_single+0x1a/0x20 [ 561.729703][ T9672] ? clear_bhb_loop+0x60/0xb0 [ 561.729727][ T9672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.729753][ T9672] RIP: 0033:0x7f8bd438ebe9 [ 561.729774][ T9672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.729792][ T9672] RSP: 002b:00007f8bd25f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.729815][ T9672] RAX: ffffffffffffffda RBX: 00007f8bd45b6090 RCX: 00007f8bd438ebe9 [ 561.729831][ T9672] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 561.729848][ T9672] RBP: 00007f8bd4411e19 R08: 0000000000000000 R09: 0000000000000000 [ 561.729857][ T9672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.729866][ T9672] R13: 00007f8bd45b6128 R14: 00007f8bd45b6090 R15: 00007fff9dfbe0e8 [ 561.729894][ T9672] [ 562.699214][ T9678] No control pipe specified [ 563.222122][ T9551] team0: Port device team_slave_0 added [ 563.269322][ T24] usb 5-1: USB disconnect, device number 18 [ 563.774022][ T37] hsr_slave_0: left promiscuous mode [ 563.791276][ T37] hsr_slave_1: left promiscuous mode [ 563.798525][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.811052][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.860393][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.911569][ T9691] overlayfs: failed to resolve './file1': -2 [ 564.545638][ T30] kauditd_printk_skb: 3153 callbacks suppressed [ 564.545658][ T30] audit: type=1400 audit(2000000323.350:203897): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5838 comm="syz-executor" name="cgroup.cpu" dev="tmpfs" ino=1203 [ 564.605583][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.608332][ T5845] audit: audit_backlog=65 > audit_backlog_limit=64 [ 564.612913][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 564.620014][ T5833] audit: audit_backlog=66 > audit_backlog_limit=64 [ 564.625910][ C0] audit: audit_lost=97127 audit_rate_limit=0 audit_backlog_limit=64 [ 564.625933][ C0] audit: backlog limit exceeded [ 564.627215][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 564.637102][ T5833] audit: audit_lost=97128 audit_rate_limit=0 audit_backlog_limit=64 [ 564.640943][ C0] audit: audit_lost=97129 audit_rate_limit=0 audit_backlog_limit=64 [ 564.668390][ C0] audit: backlog limit exceeded [ 565.007550][ T37] veth1_macvtap: left promiscuous mode [ 565.025445][ T37] veth0_macvtap: left promiscuous mode [ 565.032412][ T37] veth1_vlan: left promiscuous mode [ 565.786186][ T37] veth0_vlan: left promiscuous mode [ 565.848682][ T9702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1012'. [ 567.693398][ T37] team0 (unregistering): Port device team_slave_1 removed [ 567.790724][ T37] team0 (unregistering): Port device team_slave_0 removed [ 568.115954][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.122348][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.232682][ T9551] team0: Port device team_slave_1 added [ 569.241202][ T9721] FAULT_INJECTION: forcing a failure. [ 569.241202][ T9721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.254457][ T9721] CPU: 1 UID: 0 PID: 9721 Comm: syz.3.1016 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 569.254486][ T9721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 569.254500][ T9721] Call Trace: [ 569.254511][ T9721] [ 569.254521][ T9721] dump_stack_lvl+0x189/0x250 [ 569.254562][ T9721] ? __pfx____ratelimit+0x10/0x10 [ 569.254586][ T9721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.254612][ T9721] ? __pfx__printk+0x10/0x10 [ 569.254640][ T9721] ? __might_fault+0xb0/0x130 [ 569.254676][ T9721] should_fail_ex+0x414/0x560 [ 569.254706][ T9721] _copy_from_user+0x2d/0xb0 [ 569.254739][ T9721] do_ip_vs_set_ctl+0x2d3/0xa60 [ 569.254770][ T9721] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 569.254814][ T9721] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 569.254851][ T9721] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 569.254898][ T9721] nf_setsockopt+0x26c/0x290 [ 569.254936][ T9721] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 569.254968][ T9721] do_sock_setsockopt+0x179/0x1b0 [ 569.255007][ T9721] __x64_sys_setsockopt+0x13f/0x1b0 [ 569.255046][ T9721] do_syscall_64+0xfa/0x3b0 [ 569.255073][ T9721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.255094][ T9721] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 569.255116][ T9721] ? clear_bhb_loop+0x60/0xb0 [ 569.255144][ T9721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.255165][ T9721] RIP: 0033:0x7f887918ebe9 [ 569.255185][ T9721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.255225][ T9721] RSP: 002b:00007f887a04c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 569.255248][ T9721] RAX: ffffffffffffffda RBX: 00007f88793b6180 RCX: 00007f887918ebe9 [ 569.255264][ T9721] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000008 [ 569.255278][ T9721] RBP: 00007f887a04c090 R08: 0000000000000044 R09: 0000000000000000 [ 569.255292][ T9721] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.255306][ T9721] R13: 00007f88793b6218 R14: 00007f88793b6180 R15: 00007ffd5e262088 [ 569.255344][ T9721] [ 569.669467][ T30] kauditd_printk_skb: 1904 callbacks suppressed [ 569.669486][ T30] audit: type=1400 audit(2000000328.740:204971): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9712 comm="syz.3.1016" name="newroot" dev="tmpfs" ino=2 [ 569.879887][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 569.887562][ T30] audit: type=1400 audit(2000000328.740:204972): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9712 comm="syz.3.1016" name="/" dev="devtmpfs" ino=1 [ 569.994736][ T5206] audit: audit_lost=97407 audit_rate_limit=0 audit_backlog_limit=64 [ 570.044108][ T9551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.126106][ T30] audit: type=1400 audit(2000000328.740:204973): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=9712 comm="syz.3.1016" name="video1" dev="devtmpfs" ino=933 [ 570.145934][ T5206] audit: backlog limit exceeded [ 570.157194][ T30] audit: type=1400 audit(2000000328.740:204974): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=9712 comm="syz.3.1016" path="/dev/video1" dev="devtmpfs" ino=933 [ 570.159460][ T9551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.381712][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 570.397651][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 570.397996][ T9726] audit: audit_backlog=65 > audit_backlog_limit=64 [ 570.458628][ T9551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.545054][ T9551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.552114][ T9551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.686888][ T9551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.811077][ T9716] Falling back ldisc for ttyS3. [ 570.899066][ T9730] tipc: Enabling of bearer rejected, failed to enable media [ 571.284380][ T9551] hsr_slave_0: entered promiscuous mode [ 571.311708][ T9551] hsr_slave_1: entered promiscuous mode [ 573.188115][ T9751] IPv6: Can't replace route, no match found [ 574.003967][ T37] IPVS: stop unused estimator thread 0... [ 574.049220][ T5845] syz-executor (5845) used greatest stack depth: 20152 bytes left [ 574.225618][ T9759] syzkaller1: entered promiscuous mode [ 574.249926][ T9759] syzkaller1: entered allmulticast mode [ 574.844814][ T30] kauditd_printk_skb: 3532 callbacks suppressed [ 574.875719][ T30] audit: type=1400 audit(2000000334.200:207580): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9760 comm="syz.0.1029" name="newroot" dev="tmpfs" ino=2 [ 574.912213][ T9728] audit: audit_backlog=65 > audit_backlog_limit=64 [ 574.920702][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 574.934975][ T5206] audit: audit_lost=97718 audit_rate_limit=0 audit_backlog_limit=64 [ 574.945684][ T30] audit: type=1400 audit(2000000334.200:207581): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9760 comm="syz.0.1029" name="/" dev="devtmpfs" ino=1 [ 574.964773][ T9728] audit: audit_lost=97719 audit_rate_limit=0 audit_backlog_limit=64 [ 574.979451][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 574.988833][ T5206] audit: backlog limit exceeded [ 574.994046][ T5849] audit: audit_lost=97720 audit_rate_limit=0 audit_backlog_limit=64 [ 575.005223][ T9728] audit: backlog limit exceeded [ 575.106063][ T9764] Falling back ldisc for ttyS3. [ 575.282139][ T5964] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.460912][ T9551] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 575.657804][ T9551] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 576.530140][ T9551] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 576.743312][ T5964] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.805405][ T9551] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 576.917059][ T5964] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.121522][ T5964] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.537986][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 577.561823][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 577.579560][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 577.605137][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 577.619376][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 578.329227][ T9799] No control pipe specified [ 579.884963][ T5841] Bluetooth: hci2: command tx timeout [ 579.891284][ T30] kauditd_printk_skb: 3596 callbacks suppressed [ 579.891302][ T30] audit: type=1400 audit(2000000338.640:210118): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=9727 comm="udevd" path="/proc/cmdline" dev="proc" ino=4026532038 [ 579.927837][ T5964] dummy0: left allmulticast mode [ 579.933068][ T5964] bridge0: port 3(dummy0) entered disabled state [ 579.941740][ T9807] audit: audit_backlog=65 > audit_backlog_limit=64 [ 579.963831][ T30] audit: type=1400 audit(2000000338.640:210119): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9727 comm="udevd" name="/" dev="sda1" ino=2 [ 579.989437][ T9803] audit: audit_backlog=65 > audit_backlog_limit=64 [ 580.004281][ T9807] audit: audit_lost=98074 audit_rate_limit=0 audit_backlog_limit=64 [ 580.043142][ T9803] audit: audit_lost=98075 audit_rate_limit=0 audit_backlog_limit=64 [ 580.062726][ T9807] audit: backlog limit exceeded [ 580.067768][ T9807] audit: audit_backlog=65 > audit_backlog_limit=64 [ 580.082966][ T9807] audit: audit_lost=98076 audit_rate_limit=0 audit_backlog_limit=64 [ 580.104916][ T9807] audit: backlog limit exceeded [ 580.114822][ T5964] bridge_slave_1: left allmulticast mode [ 580.120778][ T5964] bridge_slave_1: left promiscuous mode [ 580.167526][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.197428][ T5964] bridge_slave_0: left allmulticast mode [ 580.203492][ T5964] bridge_slave_0: left promiscuous mode [ 580.245279][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.566933][ T5964] bond_slave_0: left promiscuous mode [ 580.572623][ T5964] bond_slave_1: left promiscuous mode [ 580.622880][ T9810] overlayfs: failed to resolve './file1': -2 [ 581.977265][ T5841] Bluetooth: hci2: command tx timeout [ 582.086001][ T5964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.141773][ T5964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.157813][ T5964] bond0 (unregistering): Released all slaves [ 582.341643][ T5964] tipc: Left network mode [ 582.405508][ T9818] Falling back ldisc for ttyS3. [ 582.458170][ T9551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.196764][ T9551] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.516902][ T7723] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.524156][ T7723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.309353][ T5841] Bluetooth: hci2: command tx timeout [ 584.560629][ T9835] gfs2: not a GFS2 filesystem [ 584.621130][ T7723] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.629398][ T7723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.919426][ T30] kauditd_printk_skb: 1924 callbacks suppressed [ 584.919446][ T30] audit: type=1400 audit(2000000344.440:211788): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5838 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 584.959977][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 584.967159][ T5838] audit: audit_lost=98162 audit_rate_limit=0 audit_backlog_limit=64 [ 584.975634][ T5838] audit: backlog limit exceeded [ 584.977385][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 584.980757][ T30] audit: type=1400 audit(2000000344.480:211789): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5838 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 584.987157][ C0] audit: audit_lost=98163 audit_rate_limit=0 audit_backlog_limit=64 [ 584.987180][ C0] audit: backlog limit exceeded [ 585.022444][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 585.029869][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 585.306868][ T5964] hsr_slave_0: left promiscuous mode [ 585.323380][ T5964] hsr_slave_1: left promiscuous mode [ 585.334468][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.352149][ T5964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.448262][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.469536][ T5964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.826782][ T5964] veth1_macvtap: left promiscuous mode [ 585.864178][ T5964] veth0_macvtap: left promiscuous mode [ 585.892916][ T5964] veth1_vlan: left promiscuous mode [ 585.966716][ T5964] veth0_vlan: left promiscuous mode [ 586.374133][ T5841] Bluetooth: hci2: command tx timeout [ 587.827224][ T5964] team0 (unregistering): Port device team_slave_1 removed [ 587.884005][ T9861] IPv6: Can't replace route, no match found [ 588.010230][ T5964] team0 (unregistering): Port device team_slave_0 removed [ 588.891052][ T9865] IPv6: Can't replace route, no match found [ 589.940296][ T30] kauditd_printk_skb: 1766 callbacks suppressed [ 589.940314][ T30] audit: type=1400 audit(2000000349.460:213387): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9866 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 589.998396][ T30] audit: type=1400 audit(2000000349.500:213388): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9866 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 590.021693][ T30] audit: type=1400 audit(2000000349.500:213389): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9866 comm="syz-executor" name="218" dev="tmpfs" ino=1273 [ 590.092518][ T30] audit: type=1400 audit(2000000349.500:213390): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=9866 comm="syz-executor" opid=9866 ocomm="syz-executor" [ 590.092706][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 590.139947][ T9868] audit: audit_backlog=65 > audit_backlog_limit=64 [ 590.146843][ T9868] audit: audit_lost=98221 audit_rate_limit=0 audit_backlog_limit=64 [ 590.155336][ T9868] audit: backlog limit exceeded [ 590.161490][ T9868] audit: audit_backlog=65 > audit_backlog_limit=64 [ 590.168607][ T9868] audit: audit_lost=98222 audit_rate_limit=0 audit_backlog_limit=64 [ 590.233771][ T9551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 590.854150][ T9792] chnl_net:caif_netlink_parms(): no params data found [ 591.769106][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 591.985029][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 591.996558][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.009680][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 592.025527][ T24] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 592.035398][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.045393][ T24] usb 1-1: Product: syz [ 592.049683][ T24] usb 1-1: Manufacturer: syz [ 592.054405][ T24] usb 1-1: SerialNumber: syz [ 592.077372][ T24] usb 1-1: config 0 descriptor?? [ 592.148796][ T9792] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.176466][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.205216][ T9792] bridge_slave_0: entered allmulticast mode [ 592.237987][ T9792] bridge_slave_0: entered promiscuous mode [ 592.274621][ T9792] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.336517][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.376199][ T9792] bridge_slave_1: entered allmulticast mode [ 592.409139][ T9792] bridge_slave_1: entered promiscuous mode [ 592.458108][ T5964] IPVS: stop unused estimator thread 0... [ 592.665486][ T9792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.705532][ T9792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.790221][ T9551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.890496][ T9792] team0: Port device team_slave_0 added [ 592.924275][ T9792] team0: Port device team_slave_1 added [ 593.090856][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.101335][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.146937][ T9792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.176088][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.198235][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.273787][ T9792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.456425][ T9792] hsr_slave_0: entered promiscuous mode [ 593.463196][ T9792] hsr_slave_1: entered promiscuous mode [ 593.470554][ T9792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.478478][ T9792] Cannot create hsr debugfs directory [ 593.573779][ T5836] usb 1-1: USB disconnect, device number 21 [ 594.928872][ T9908] overlayfs: failed to resolve './file1': -2 [ 594.960114][ T30] kauditd_printk_skb: 5160 callbacks suppressed [ 594.960165][ T30] audit: type=1400 audit(2000000354.430:216607): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9901 comm="syz.0.1057" name="213" dev="tmpfs" ino=1259 [ 595.524032][ T9903] audit: audit_backlog=65 > audit_backlog_limit=64 [ 595.531155][ T9728] audit: audit_backlog=65 > audit_backlog_limit=64 [ 595.541571][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 595.577501][ T9728] audit: audit_lost=98871 audit_rate_limit=0 audit_backlog_limit=64 [ 595.589422][ T9903] audit: audit_lost=98872 audit_rate_limit=0 audit_backlog_limit=64 [ 595.598192][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 595.608088][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 595.609862][ T30] audit: type=1400 audit(2000000354.430:216608): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9901 comm="syz.0.1057" name="213" dev="tmpfs" ino=1259 [ 595.614672][ C0] audit: audit_lost=98873 audit_rate_limit=0 audit_backlog_limit=64 [ 595.782553][ T9792] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 595.835029][ T9792] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 595.917336][ T9792] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 595.941892][ T9792] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 595.959296][ T9551] veth0_vlan: entered promiscuous mode [ 596.012352][ T9551] veth1_vlan: entered promiscuous mode [ 596.085086][ T5836] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 596.112129][ T9551] veth0_macvtap: entered promiscuous mode [ 596.145839][ T9551] veth1_macvtap: entered promiscuous mode [ 596.189778][ T9551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.925017][ T5836] usb 1-1: Using ep0 maxpacket: 16 [ 597.007277][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.085979][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.125409][ T9551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.175396][ T5836] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 597.184503][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.208732][ T9551] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.248556][ T9551] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.262480][ T9551] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.272074][ T9551] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.294738][ T9792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.317010][ T5836] usb 1-1: config 0 descriptor?? [ 597.407459][ T9792] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.471129][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.478391][ T5964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.602687][ T9927] No control pipe specified [ 597.781563][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.788876][ T5964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.400781][ T5836] hid-multitouch 0003:1FD2:6007.0009: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 598.464933][ T5836] usb 1-1: USB disconnect, device number 22 [ 598.500363][ T6041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.524323][ T6041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.755014][ T982] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 598.837896][ T5964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.854982][ T5964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.925108][ T982] usb 4-1: Using ep0 maxpacket: 16 [ 599.059214][ T982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.145965][ T982] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 599.542123][ T982] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 599.578162][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.602700][ T9937] fido_id[9937]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 599.629392][ T982] usb 4-1: Product: syz [ 599.647294][ T9941] Falling back ldisc for ttyS3. [ 599.649367][ T982] usb 4-1: Manufacturer: syz [ 599.695385][ T982] usb 4-1: SerialNumber: syz [ 599.743778][ T982] usb 4-1: config 0 descriptor?? [ 599.980743][ T9946] audit_log_start: 5991 callbacks suppressed [ 599.980766][ T9946] audit: audit_backlog=65 > audit_backlog_limit=64 [ 600.114010][ T30] audit: type=1400 audit(2000000359.460:221195): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=9946 comm="syz-executor" opid=9946 ocomm="syz-executor" [ 600.134412][ T9949] audit: audit_backlog=65 > audit_backlog_limit=64 [ 600.138652][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 600.150465][ T9946] audit: audit_lost=99342 audit_rate_limit=0 audit_backlog_limit=64 [ 600.160575][ T5206] audit: audit_lost=99343 audit_rate_limit=0 audit_backlog_limit=64 [ 600.229025][ T9950] audit: audit_backlog=65 > audit_backlog_limit=64 [ 600.236042][ T9950] audit: audit_lost=99344 audit_rate_limit=0 audit_backlog_limit=64 [ 600.244116][ T9950] audit: backlog limit exceeded [ 600.249156][ T9950] audit: audit_backlog=65 > audit_backlog_limit=64 [ 601.031918][ T982] usb 4-1: USB disconnect, device number 11 [ 602.256011][ T9954] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 602.269182][ T9954] CPU: 0 UID: 0 PID: 9954 Comm: syz.0.1065 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 602.269204][ T9954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 602.269214][ T9954] Call Trace: [ 602.269221][ T9954] [ 602.269230][ T9954] dump_stack_lvl+0x189/0x250 [ 602.269259][ T9954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 602.269280][ T9954] ? __pfx__printk+0x10/0x10 [ 602.269302][ T9954] ? kernfs_path_from_node+0x2c/0x260 [ 602.269330][ T9954] ? kernfs_path_from_node+0x2c/0x260 [ 602.269348][ T9954] ? kernfs_path_from_node+0x2c/0x260 [ 602.269369][ T9954] ? kernfs_path_from_node+0x22c/0x260 [ 602.269387][ T9954] ? kernfs_path_from_node+0x2c/0x260 [ 602.269409][ T9954] sysfs_warn_dup+0x8e/0xa0 [ 602.269428][ T9954] sysfs_do_create_link_sd+0xc0/0x110 [ 602.269449][ T9954] device_add_class_symlinks+0x1cf/0x240 [ 602.269480][ T9954] device_add+0x475/0xb50 [ 602.269507][ T9954] wiphy_register+0x199a/0x26b0 [ 602.269545][ T9954] ? __pfx_wiphy_register+0x10/0x10 [ 602.269567][ T9954] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 602.269598][ T9954] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 602.269626][ T9954] ieee80211_register_hw+0x33e1/0x4120 [ 602.269665][ T9954] ? ieee80211_register_hw+0x1471/0x4120 [ 602.269697][ T9954] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 602.269727][ T9954] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 602.269760][ T9954] ? __hrtimer_setup+0x187/0x210 [ 602.269776][ T9954] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 602.269813][ T9954] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 602.269865][ T9954] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 602.269887][ T9954] ? trace_kmalloc+0x1f/0xd0 [ 602.269900][ T9954] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 602.269917][ T9954] ? kstrndup+0xbf/0x160 [ 602.269946][ T9954] hwsim_new_radio_nl+0xea4/0x1b10 [ 602.269972][ T9954] ? __pfx___nla_validate_parse+0x10/0x10 [ 602.270004][ T9954] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 602.270039][ T9954] ? __nla_parse+0x40/0x60 [ 602.270066][ T9954] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 602.270093][ T9954] genl_family_rcv_msg_doit+0x215/0x300 [ 602.270117][ T9954] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 602.270146][ T9954] ? bpf_lsm_capable+0x9/0x20 [ 602.270166][ T9954] ? security_capable+0x7e/0x2e0 [ 602.270193][ T9954] genl_rcv_msg+0x60e/0x790 [ 602.270216][ T9954] ? __pfx_genl_rcv_msg+0x10/0x10 [ 602.270232][ T9954] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 602.270269][ T9954] netlink_rcv_skb+0x205/0x470 [ 602.270293][ T9954] ? __pfx_genl_rcv_msg+0x10/0x10 [ 602.270311][ T9954] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 602.270349][ T9954] ? down_read+0x1ad/0x2e0 [ 602.270371][ T9954] genl_rcv+0x28/0x40 [ 602.270385][ T9954] netlink_unicast+0x75c/0x8e0 [ 602.270415][ T9954] netlink_sendmsg+0x805/0xb30 [ 602.270447][ T9954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.270478][ T9954] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 602.270493][ T9954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.270517][ T9954] __sock_sendmsg+0x21c/0x270 [ 602.270539][ T9954] ____sys_sendmsg+0x505/0x830 [ 602.270569][ T9954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.270603][ T9954] ? import_iovec+0x74/0xa0 [ 602.270629][ T9954] ___sys_sendmsg+0x21f/0x2a0 [ 602.270656][ T9954] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.270714][ T9954] ? __fget_files+0x2a/0x420 [ 602.270731][ T9954] ? __fget_files+0x3a0/0x420 [ 602.270759][ T9954] __x64_sys_sendmsg+0x19b/0x260 [ 602.270787][ T9954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 602.270826][ T9954] ? rcu_is_watching+0x15/0xb0 [ 602.270848][ T9954] ? do_syscall_64+0xbe/0x3b0 [ 602.270870][ T9954] do_syscall_64+0xfa/0x3b0 [ 602.270887][ T9954] ? lockdep_hardirqs_on+0x9c/0x150 [ 602.270903][ T9954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.270919][ T9954] ? clear_bhb_loop+0x60/0xb0 [ 602.270939][ T9954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.270954][ T9954] RIP: 0033:0x7fcb7ff8ebe9 [ 602.270970][ T9954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.270985][ T9954] RSP: 002b:00007fcb80d67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 602.271003][ T9954] RAX: ffffffffffffffda RBX: 00007fcb801b5fa0 RCX: 00007fcb7ff8ebe9 [ 602.271015][ T9954] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 602.271025][ T9954] RBP: 00007fcb80011e19 R08: 0000000000000000 R09: 0000000000000000 [ 602.271035][ T9954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.271045][ T9954] R13: 00007fcb801b6038 R14: 00007fcb801b5fa0 R15: 00007ffcd1b58408 [ 602.271073][ T9954] [ 602.832337][ T9792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.069965][ T9967] ./bus: Can't lookup blockdev [ 604.986521][ T30] kauditd_printk_skb: 5740 callbacks suppressed [ 604.986541][ T30] audit: type=1400 audit(2000000364.510:224561): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5823 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.185 dest=57960 netif=eth0 [ 605.186507][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 605.193085][ T5833] audit: audit_lost=100137 audit_rate_limit=0 audit_backlog_limit=64 [ 605.195064][ T9979] audit: audit_backlog=65 > audit_backlog_limit=64 [ 605.214973][ T9728] audit: audit_backlog=66 > audit_backlog_limit=64 [ 605.232981][ T9551] audit: audit_backlog=66 > audit_backlog_limit=64 [ 605.240961][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 605.243049][ T9728] audit: audit_lost=100138 audit_rate_limit=0 audit_backlog_limit=64 [ 605.247625][ C0] audit: audit_lost=100139 audit_rate_limit=0 audit_backlog_limit=64 [ 605.247646][ C0] audit: backlog limit exceeded [ 605.338162][ T9980] mmap: syz.4.1071 (9980) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 607.037845][ T9792] veth0_vlan: entered promiscuous mode [ 607.062808][ T9792] veth1_vlan: entered promiscuous mode [ 607.168015][ T9792] veth0_macvtap: entered promiscuous mode [ 607.258336][ T9792] veth1_macvtap: entered promiscuous mode [ 607.348679][ T9792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.409186][ T9792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.449997][ T9792] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.467839][ T9792] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.480180][ T9792] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.490160][ T9792] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.608091][ T5964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.642129][ T5964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.674465][ T7723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.687535][ T7723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.081926][ T9993] No control pipe specified [ 612.639952][ T30] kauditd_printk_skb: 4987 callbacks suppressed [ 612.639974][ T30] audit: type=1400 audit(2000000372.160:228204): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5206 comm="udevd" opid=9728 ocomm="udevd" [ 612.664152][ T30] audit: type=1400 audit(2000000372.160:228205): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5206 comm="udevd" opid=9727 ocomm="udevd" [ 612.683768][ T30] audit: type=1400 audit(2000000372.160:228206): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5206 comm="udevd" opid=9956 ocomm="udevd" [ 612.704099][ T30] audit: type=1400 audit(2000000372.170:228207): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5206 comm="udevd" opid=9936 ocomm="udevd" [ 612.732714][ T30] audit: type=1400 audit(2000000372.170:228208): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5206 comm="udevd" opid=9726 ocomm="udevd" [ 612.751104][ T30] audit: type=1400 audit(2000000372.170:228209): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="/" dev="sda1" ino=2 [ 612.769306][ T30] audit: type=1400 audit(2000000372.170:228210): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="etc" dev="sda1" ino=116 [ 612.787966][ T30] audit: type=1400 audit(2000000372.170:228211): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="udev" dev="sda1" ino=259 [ 612.810186][ T30] audit: type=1400 audit(2000000372.210:228212): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5206 comm="udevd" path="/etc/udev/rules.d" dev="sda1" ino=261 [ 612.831907][ T30] audit: type=1400 audit(2000000372.210:228213): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="/" dev="sda1" ino=2 [ 624.385180][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 624.385200][ T30] audit: type=1400 audit(2000000383.910:228253): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.0.185 dest=57960 netif=eth0 [ 629.552967][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.559431][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.926489][ T30] audit: type=1400 audit(2000000393.450:228254): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.0.185 dest=57960 netif=eth0 [ 633.974987][ T30] audit: type=1400 audit(2000000393.450:228255): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=30 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.0.185 dest=57960 netif=eth0 [ 634.063043][ T30] audit: type=1400 audit(2000000393.480:228256): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9551 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.185 dest=57960 netif=eth0 [ 634.101304][T10000] audit: audit_backlog=65 > audit_backlog_limit=64 [ 634.101475][T10002] audit: audit_backlog=65 > audit_backlog_limit=64 [ 634.116989][T10000] audit: audit_lost=100588 audit_rate_limit=0 audit_backlog_limit=64 [ 634.125781][ T9999] audit: audit_backlog=65 > audit_backlog_limit=64 [ 634.126279][T10001] audit: audit_backlog=65 > audit_backlog_limit=64 [ 634.132319][ T9999] audit: audit_lost=100589 audit_rate_limit=0 audit_backlog_limit=64 [ 634.132337][ T9999] audit: backlog limit exceeded [ 638.169165][T10014] No control pipe specified [ 638.972474][ T30] kauditd_printk_skb: 2321 callbacks suppressed [ 638.972493][ T30] audit: type=1400 audit(2000000398.490:229820): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10022 comm="syz.4.1080" name="newroot" dev="tmpfs" ino=2 [ 639.014427][T10012] audit: audit_backlog=65 > audit_backlog_limit=64 [ 639.021422][T10033] audit: audit_backlog=65 > audit_backlog_limit=64 [ 639.028148][T10033] audit: audit_lost=100843 audit_rate_limit=0 audit_backlog_limit=64 [ 639.036483][T10033] audit: backlog limit exceeded [ 639.042071][T10024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 639.042950][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 639.101556][T10035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 639.108247][T10035] audit: audit_lost=100844 audit_rate_limit=0 audit_backlog_limit=64 [ 639.117029][T10035] audit: backlog limit exceeded [ 639.168824][T10035] netlink: 'syz.6.1081': attribute type 10 has an invalid length. [ 639.176866][T10035] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1081'. [ 639.193172][T10035] batman_adv: batadv0: Adding interface: vlan1 [ 639.199469][T10035] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.225798][T10035] batman_adv: batadv0: Interface activated: vlan1 [ 641.497986][T10053] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1086'. [ 641.835071][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1087'. [ 643.276363][T10060] tipc: Enabled bearer , priority 0 [ 643.384417][T10061] syzkaller0: entered promiscuous mode [ 643.386894][ T5836] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 643.391594][T10061] syzkaller0: entered allmulticast mode [ 643.463000][T10055] tipc: Resetting bearer [ 643.573852][T10055] tipc: Disabling bearer [ 643.633266][ T5836] usb 7-1: Using ep0 maxpacket: 16 [ 643.999665][ T30] kauditd_printk_skb: 4863 callbacks suppressed [ 643.999688][ T30] audit: type=1400 audit(2000000403.430:233250): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10069 comm="syz.3.1090" name="newroot" dev="tmpfs" ino=2 [ 644.368239][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 644.385041][ T30] audit: type=1400 audit(2000000403.430:233251): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10069 comm="syz.3.1090" name="/" dev="devtmpfs" ino=1 [ 644.387019][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 644.412808][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 644.412854][ C0] audit: audit_lost=101324 audit_rate_limit=0 audit_backlog_limit=64 [ 644.412875][ C0] audit: backlog limit exceeded [ 644.420535][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 644.420573][ C0] audit: audit_lost=101325 audit_rate_limit=0 audit_backlog_limit=64 [ 644.420591][ C0] audit: backlog limit exceeded [ 644.472690][ T5836] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.524889][ T5836] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 644.783966][ T5836] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 644.832378][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.887262][ T5836] usb 7-1: Product: syz [ 644.891562][ T5836] usb 7-1: Manufacturer: syz [ 644.977327][ T5836] usb 7-1: SerialNumber: syz [ 645.016299][ T5836] usb 7-1: config 0 descriptor?? [ 645.850977][ T5836] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 647.003652][ T24] usb 7-1: USB disconnect, device number 2 [ 647.207843][ T5836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.312866][ T5836] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 647.377014][ T5836] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 647.396675][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 647.435686][ T5836] usb 4-1: SerialNumber: syz [ 648.088672][ T5836] usb 4-1: 0:2 : does not exist [ 648.667491][ T5836] usb 4-1: USB disconnect, device number 13 [ 649.005747][ T30] kauditd_printk_skb: 5902 callbacks suppressed [ 649.005767][ T30] audit: type=1400 audit(2000000408.520:237410): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10012 comm="udevd" name="/" dev="sda1" ino=2 [ 649.106659][T10012] audit: audit_backlog=65 > audit_backlog_limit=64 [ 649.115915][T10107] audit: audit_backlog=65 > audit_backlog_limit=64 [ 649.130982][T10012] audit: audit_lost=101908 audit_rate_limit=0 audit_backlog_limit=64 [ 649.264666][T10108] audit: audit_backlog=65 > audit_backlog_limit=64 [ 649.439658][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 649.446409][ C0] audit: audit_lost=101909 audit_rate_limit=0 audit_backlog_limit=64 [ 649.454646][ C0] audit: backlog limit exceeded [ 649.495866][T10107] audit: audit_lost=101910 audit_rate_limit=0 audit_backlog_limit=64 [ 649.505931][T10012] audit: backlog limit exceeded [ 649.694664][T10012] udevd[10012]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 649.905777][T10113] loop6: detected capacity change from 0 to 2560 [ 649.996657][T10115] random: crng reseeded on system resumption [ 650.194053][T10092] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.251833][T10092] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.289340][T10092] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.408490][T10092] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.430081][T10092] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.449030][T10092] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.526821][T10092] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.704607][T10092] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.748894][T10092] ldm_validate_partition_table(): Disk read failed. [ 650.787805][T10092] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.863843][T10092] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.932453][T10092] Dev loop6: unable to read RDB block 0 [ 650.981263][T10092] loop6: unable to read partition table [ 654.072959][ T30] kauditd_printk_skb: 5220 callbacks suppressed [ 654.073013][ T30] audit: type=1400 audit(2000000413.590:240267): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10123 comm="syz.5.1105" name="newroot" dev="tmpfs" ino=2 [ 656.593420][ T9551] audit: audit_backlog=65 > audit_backlog_limit=64 [ 656.600222][ T9551] audit: audit_lost=102699 audit_rate_limit=0 audit_backlog_limit=64 [ 656.601488][ T30] audit: type=1400 audit(2000000413.590:240268): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10123 comm="syz.5.1105" name="8" dev="tmpfs" ino=75 [ 656.608523][ T9551] audit: backlog limit exceeded [ 656.628161][ T30] audit: type=1400 audit(2000000413.590:240269): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10123 comm="syz.5.1105" name="/" dev="devtmpfs" ino=1 [ 656.652875][ T30] audit: type=1400 audit(2000000413.590:240270): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10123 comm="syz.5.1105" name="8" dev="tmpfs" ino=75 [ 656.654751][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 656.671940][ T30] audit: type=1400 audit(2000000413.590:240271): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=10123 comm="syz.5.1105" name="kvm" dev="devtmpfs" ino=84 [ 656.671989][ T30] audit: type=1400 audit(2000000413.590:240272): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=10123 comm="syz.5.1105" name="8" dev="tmpfs" ino=75 [ 656.807579][T10141] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1107'. [ 656.825676][ T982] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 656.846044][T10133] Falling back ldisc for ttyS3. [ 659.075398][ T30] kauditd_printk_skb: 4231 callbacks suppressed [ 659.075412][ T30] audit: type=1400 audit(2000000418.600:242501): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=10160 comm="syz.4.1112" opid=10160 ocomm="syz.4.1112" [ 659.246597][ T30] audit: type=1400 audit(2000000418.630:242502): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=10160 comm="syz.4.1112" opid=10160 ocomm="syz.4.1112" [ 659.309187][ T30] audit: type=1400 audit(2000000418.820:242503): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10162 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 659.311945][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 659.396951][T10165] audit: audit_backlog=65 > audit_backlog_limit=64 [ 659.403592][T10165] audit: audit_lost=103368 audit_rate_limit=0 audit_backlog_limit=64 [ 659.412050][T10165] audit: backlog limit exceeded [ 659.418058][T10165] audit: audit_backlog=65 > audit_backlog_limit=64 [ 659.424649][T10165] audit: audit_lost=103369 audit_rate_limit=0 audit_backlog_limit=64 [ 659.432897][T10165] audit: backlog limit exceeded [ 661.006795][T10167] Falling back ldisc for ttyS3. [ 661.286869][T10180] No control pipe specified [ 662.549231][T10192] Falling back ldisc for ttyS3. [ 663.964944][ T927] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 664.089162][ T30] kauditd_printk_skb: 10919 callbacks suppressed [ 664.089182][ T30] audit: type=1400 audit(2000000423.610:247949): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10017 comm="udevd" name="/" dev="sda1" ino=2 [ 664.148909][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 664.156263][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 664.162818][ C0] audit: audit_lost=105195 audit_rate_limit=0 audit_backlog_limit=64 [ 664.170959][ C0] audit: backlog limit exceeded [ 664.176610][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 664.183165][ C0] audit: audit_lost=105196 audit_rate_limit=0 audit_backlog_limit=64 [ 664.191315][ C0] audit: backlog limit exceeded [ 664.196330][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 664.202848][ C0] audit: audit_lost=105197 audit_rate_limit=0 audit_backlog_limit=64 [ 664.248212][ T927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.268791][ T927] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 664.301922][ T927] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 664.329069][ T927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.378969][ T927] usb 4-1: config 0 descriptor?? [ 664.602853][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1125'. [ 664.980581][ T5913] usb 4-1: USB disconnect, device number 15 [ 667.366811][T10265] [ 667.369464][T10265] ============================= [ 667.374727][T10265] WARNING: suspicious RCU usage [ 667.380285][T10265] 6.16.0-syzkaller #0 Not tainted [ 667.385797][T10265] ----------------------------- [ 667.390688][T10265] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage! [ 667.399726][T10265] [ 667.399726][T10265] other info that might help us debug this: [ 667.399726][T10265] [ 667.410217][T10265] [ 667.410217][T10265] rcu_scheduler_active = 2, debug_locks = 1 [ 667.418834][T10265] 1 lock held by syz.6.1146/10265: [ 667.420972][T10266] C: renamed from team_slave_0 (while UP) [ 667.423962][T10265] #0: ffffffff8e13f2c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 667.440167][T10265] [ 667.440167][T10265] stack backtrace: [ 667.446155][T10265] CPU: 1 UID: 0 PID: 10265 Comm: syz.6.1146 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 667.446184][T10265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 667.446198][T10265] Call Trace: [ 667.446207][T10265] [ 667.446217][T10265] dump_stack_lvl+0x189/0x250 [ 667.446253][T10265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.446280][T10265] ? __pfx__printk+0x10/0x10 [ 667.446328][T10265] lockdep_rcu_suspicious+0x140/0x1d0 [ 667.446359][T10265] task_cls_state+0x1a5/0x1d0 [ 667.446385][T10265] bpf_get_cgroup_classid_curr+0x18/0x60 [ 667.446416][T10265] bpf_prog_dcc3114d982422cf+0x2c/0x5e [ 667.446438][T10265] bpf_prog_run_pin_on_cpu+0x67/0x150 [ 667.446478][T10265] bpf_prog_test_run_syscall+0x312/0x4b0 [ 667.446517][T10265] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 667.446550][T10265] ? __fget_files+0x2a/0x420 [ 667.446584][T10265] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 667.446620][T10265] bpf_prog_test_run+0x2c7/0x340 [ 667.446661][T10265] __sys_bpf+0x4a4/0x860 [ 667.446697][T10265] ? __pfx___sys_bpf+0x10/0x10 [ 667.446756][T10265] ? rcu_is_watching+0x15/0xb0 [ 667.446790][T10265] __x64_sys_bpf+0x7c/0x90 [ 667.446822][T10265] do_syscall_64+0xfa/0x3b0 [ 667.446846][T10265] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.446870][T10265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.446893][T10265] ? clear_bhb_loop+0x60/0xb0 [ 667.446921][T10265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.446943][T10265] RIP: 0033:0x7f593238ebe9 [ 667.446964][T10265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.446993][T10265] RSP: 002b:00007f5933284038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 667.447017][T10265] RAX: ffffffffffffffda RBX: 00007f59325b5fa0 RCX: 00007f593238ebe9 [ 667.447033][T10265] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 667.447047][T10265] RBP: 00007f5932411e19 R08: 0000000000000000 R09: 0000000000000000 [ 667.447061][T10265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.447074][T10265] R13: 00007f59325b6038 R14: 00007f59325b5fa0 R15: 00007ffd456d7a38 [ 667.447113][T10265] [ 667.465366][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 667.587341][T10266] netlink: 'syz.3.1145': attribute type 3 has an invalid length. [ 671.238734][ T30] kauditd_printk_skb: 17049 callbacks suppressed [ 671.238755][ T30] audit: type=1400 audit(2000000430.760:256074): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5206 comm="udevd" opid=10142 ocomm="udevd" [ 671.277713][ T30] audit: type=1400 audit(2000000430.770:256075): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5206 comm="udevd" opid=10012 ocomm="udevd" [ 671.301780][ T30] audit: type=1400 audit(2000000430.770:256076): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5206 comm="udevd" opid=10017 ocomm="udevd" [ 671.324351][ T30] audit: type=1400 audit(2000000430.770:256077): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5206 comm="udevd" opid=10092 ocomm="udevd" [ 671.343466][ T30] audit: type=1400 audit(2000000430.770:256078): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5206 comm="udevd" opid=10016 ocomm="udevd" [ 671.362292][ T30] audit: type=1400 audit(2000000430.770:256079): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="/" dev="sda1" ino=2 [ 671.381971][ T30] audit: type=1400 audit(2000000430.770:256080): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="etc" dev="sda1" ino=116 [ 671.400617][ T30] audit: type=1400 audit(2000000430.770:256081): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="udev" dev="sda1" ino=259 [ 671.419158][ T30] audit: type=1400 audit(2000000430.770:256082): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5206 comm="udevd" path="/etc/udev/rules.d" dev="sda1" ino=261 [ 671.440418][ T30] audit: type=1400 audit(2000000430.770:256083): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="/" dev="sda1" ino=2