last executing test programs: 34.199236116s ago: executing program 4 (id=224): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_usb_connect(0x0, 0x39, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$xdp(0x2c, 0x3, 0x0) write(r0, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) 31.108366191s ago: executing program 4 (id=239): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0x42792000) openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x400, 0x0) 29.726194728s ago: executing program 4 (id=244): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fsync(0xffffffffffffffff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x88440) 28.56508401s ago: executing program 4 (id=250): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 28.323132256s ago: executing program 4 (id=252): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080), 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x8000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r5, &(0x7f0000000180), 0x1000) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000280)={0x3, 'veth1_virt_wifi\x00', {0x49789c29}, 0x5}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, 0x0, 0x0) 27.8214986s ago: executing program 4 (id=256): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x0, 0x0, 0x2}}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x1d, r4, 0x2, {0x1, 0x1, 0x5ef7698bdfa249b7}, 0xff}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x2000001d) 27.194878017s ago: executing program 32 (id=256): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x0, 0x0, 0x2}}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x1d, r4, 0x2, {0x1, 0x1, 0x5ef7698bdfa249b7}, 0xff}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x2000001d) 8.837276089s ago: executing program 3 (id=323): openat$mice(0xffffff9c, &(0x7f0000000000), 0x301) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000019140)=ANY=[@ANYBLOB="1201000000000040ac0538024000010203010902240601010000000904000000030102"], 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') 7.269602581s ago: executing program 3 (id=331): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000500)=@v1={0x0, @aes128, 0x3, @desc3}) syz_mount_image$fuse(0x0, &(0x7f0000000e80)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 6.252540359s ago: executing program 3 (id=335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.721838304s ago: executing program 5 (id=338): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x246, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000002100)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@mmap={0x40000401, 0x2, 0x4, 0x804d04, 0x5, {0x77359400}, {0x3, 0x0, 0xf, 0x6, 0x3, 0x1, "a91b72d9"}, 0x3, 0x1, {}, 0x101}) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5.574018208s ago: executing program 3 (id=340): syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1000000, 0x0, 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x13481, 0x0) 5.267616126s ago: executing program 3 (id=342): openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x11) socket(0xa, 0x3, 0xff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x20000, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r2], 0x20}}, 0x0) 4.707556301s ago: executing program 3 (id=346): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[], 0x0) 4.218620045s ago: executing program 33 (id=346): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[], 0x0) 4.191693366s ago: executing program 2 (id=350): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x50900, 0x4) getdents(r0, &(0x7f0000000400)=""/215, 0xd7) 4.048879389s ago: executing program 5 (id=351): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x75, {"f326460f019f00200000420f01c5470f01c248b8f61e0000000000000f23c80f21f835080030000f23f8c462bd9791040000000f07c7442400e3420000c744240264000000c7442406000000000f011c24c421e3d040000f009f082c000066660f388000"}}], 0x75}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x9, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x40, 0xa1d, 0x68ff, 0x5, 0x9, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.921297693s ago: executing program 2 (id=352): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) 3.908105023s ago: executing program 1 (id=353): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0xa) copy_file_range(r1, 0x0, r1, &(0x7f0000000040)=0x9f74, 0xc10, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1e9) fallocate(r2, 0x10, 0xc3b8, 0x8000) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) 3.503578734s ago: executing program 2 (id=354): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x1400) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x0) 3.481789465s ago: executing program 5 (id=355): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x14000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.184587033s ago: executing program 0 (id=356): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x10, &(0x7f0000000240)=ANY=[], 0x1, 0x6c6, &(0x7f0000002e40)="$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") link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000180)='./file3\x00', 0x200) unlink(&(0x7f0000000000)='./file1\x00') 3.162172743s ago: executing program 5 (id=357): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x1b, 0x2, 0x468, 0x590, 0x270, 0xffffffff, 0x0, 0xf0, 0x590, 0x590, 0xffffffff, 0x590, 0x590, 0x5, 0x0, {[{{@ipv6={@loopback, @private2, [], [], 'veth1_virt_wifi\x00', 'tunl0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@empty, @gre_key=0x9, @icmp_id}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@loopback, @ipv4=@loopback, @gre_key=0x8000, @gre_key=0xfffd}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1b}, @local, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4c8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 3.107311725s ago: executing program 2 (id=358): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fcb000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x8000000}}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="3e0f79850e000f01df0fb78a003866b9d50a000066b80050000066ba000000000f30660f38823736f2a50f2286ca0000f30f300f01c8", 0x36}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.288042147s ago: executing program 0 (id=359): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084ffffffff000000000200000000000000000000000000000901f700000000"], 0x0, 0x3e}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) 1.959524226s ago: executing program 2 (id=360): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x246, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000002100)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@mmap={0x40000401, 0x2, 0x4, 0x804d04, 0x5, {0x77359400}, {0x3, 0x0, 0xf, 0x6, 0x3, 0x1, "a91b72d9"}, 0x3, 0x1, {}, 0x101}) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.959316356s ago: executing program 5 (id=361): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa101, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) write$binfmt_aout(r2, &(0x7f0000000e00)=ANY=[], 0x1520) 1.871250469s ago: executing program 0 (id=362): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x3c4c) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.855349479s ago: executing program 1 (id=363): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000062c0)="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", 0x2000, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) 1.278039135s ago: executing program 0 (id=364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x2}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x4}, {0x50000, 0x4, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x25000, 0xb, 0x5, 0xff, 0x3, 0x0, 0x5, 0xef, 0x27, 0xd5, 0x2}, {0x0, 0x8080000, 0xd, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe6}, {0x200000, 0xffff1000, 0xf, 0x0, 0x6, 0x0, 0xde, 0x6, 0x2, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x1, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x8, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x10, 0x7, 0x3, 0x2, 0x87}, {0x6000, 0x8000}, {0x41000, 0x9}, 0x50000, 0x0, 0xdddd0000, 0x400408, 0x6, 0x8000, 0x41000, [0x3, 0x5, 0x5, 0xe]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0xfffd, 0xfffffffd, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0xa, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0x3, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0x3, 0xb, '\x00', 0x5}, {0xf, 0xee, 0xa, '\x00', 0xf}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) 1.276426005s ago: executing program 1 (id=365): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x8, 0xa}]}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.034988952s ago: executing program 0 (id=366): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f00000007c0)=ANY=[@ANYBLOB='cruft,block=0x0000000000000000,showassoc,dmode=0x0000000000000005,nojoliet,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=iocharset=iso8859-9,dmode=0x0000000000000000,nojoliet,\x00'], 0x0, 0x688, &(0x7f0000000100)="$eJzs3V1vFOf1APCzBAvLfwn91VYIIUIm0EogEbO7DkZWbrpdj+1J1jurmXUEVykKdoQwSQupVLgKN2krtR8it/0Q7SeKets7qp3dhQW/rEOCl6DfbwXz7MzZec4Myxw99rwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABC19mq93qhFJ+tu3UwO1l4t8s1Dlo/X9+8XJof0G1Eb/In5+Tg7nHX2V88Xnxn8dTHOD9+dj/nBZD4e/9+Z///olydPjD9/SELH4uGjx/du7+5uP5h1IjOynnazMs82W+tpkpV5srK8XL+2sVYma1knLW+V/XQzaRdpq58XyeX2laSxsrKUpIu38q3u+mqrk45n3vigWa8vJx8v9tJWUebdax8vlu2NrNPJuutVzGDxIObG4Iv4SdZP+mlrM0l27u5uL01LchDUOEpQc1pQs95sNhrNZmP5+sr1G/X6yT0z6i+JPRGz/9IyWz/xERxe3YlR/Y9OZNGNrbgZyb6vdqxGEXlsHrB8ZFz/f3MtHba+2b/fyfo/rvJnny8+F1X9vzB8d+Gg+n9ALsf3ehiP4nHci9uxG7uxHQ9mntHxvtYjjW5kUUYeWWxGq5qTjOYksRLLsRz1+Cw2Yi3KSGItsuhEGmXcijL6kVbfqHYUkUYr+pFHEUlcjnZciSQasRIrsRRJpLEYtyKPrejGeqxGq1rLTtyt9vvSITk+C2ocJah5SJD6zw81v2fO6zmQwyt4Oq7/AAAAwFurVv30fTD+n4t3q9Za1knrs04LAAAA+AlVv/k/P5jMDVrvRs34HwAAAN42teoau1pELMR7w9b4SqjxDwHmZpwiAAAA8CNVv/+/MJgsDFrvRW3P+B8AAAD4mfvr1Hvsz/dO1f71nyiKudqT3s1f1+63BnGt++8MP1dN/vt0aNDur52rnR6tpJosnxy9a6fna6O7Xz67Cebo5ILvd6blUTs0gUkHJxB/j/eHMe/fGU7vjJcMe1lYyzrpYjvvfNSIVuv0iX56s/+nL+/+OarN/1t383Qtdu7ubi9+/tXunSqXJ4O1PLk/uoHinvso7pPLeNHX1f0Wqmsu9t3iuepCjFG/C8N+65Pbf2L48RM/YPu/jYvDmIsL8fRURCy8uP3zgz4biwdt/SiLRpXF/AudHmXLn2dxaRhz6fKl4WSfLJrTsmhO7v9X2hdHyGJpWhZLPzILgFnZmVKFansL/ysc5Y6nun8bl4cxl89VB9aT5/Y5otenHdHrr1jXx339M64MY66Mgw+qsYN+//FSVf1u8IHvDuy37DRrg134ztf3/xBnHj56/MHd+7e/2P5i+8tmc2m5/mG9fr0Zc9VmjCZqDwD7mP6MnakRtQ+njKp/8eyUgsX4PL6K3bgTV6urDaozDvZd60Ls/DZGpyFcnRi1Vl4atS5MPOHl6pRR3cLEg16OHrt0DP8SAHB8Lk6pw0ep/1enjLsXJk4pvDpldDxZywGA1yMtvq8t9P9SK4qs91ljZaXR6m+kSZG3P0mKbHU9TbJuPy3aG63uepr0iryft/POoPFptpqWSbnV6+VFP1nLi6SXl9nN6snvyejR72W62er2s3bZ66StMk3aebffaveT1axsJ72t33WyciMtqg+XvbSdrWXtVj/Lu0mZbxXtdDFJyjSdCMxW024/W8sGzW7SK7LNVnEr+TTvbG2myWpatous18+HKxz3lXXX8mKzWu3irHc2ALwhHj56fO/27u72g9fYiFOz3koAYNJElQYAAAAAAAAAAAAAAN5Qx3H931vY+OPPededejPS0JhJ45vfD//nTwue9ZEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPb6XwAAAP//2kFZhw==") socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xb3e, 0x4, 0x40, 0x2, 0x4, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0xffff, 0x7, 0x0, 0x5, 0x0, 0x8, 0x5, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x84, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x57, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x5, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x84, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x401, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x3, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x10, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000f800000000000000fb"], 0x200000) 943.648084ms ago: executing program 1 (id=367): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x2d2, 0xeeee8000, 0x4, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x10000000000009, 0x4000, 0x1, r2, 0x4}) lseek(0xffffffffffffffff, 0x2, 0x1000000) 646.346192ms ago: executing program 5 (id=368): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) open(0x0, 0x143142, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) 622.760973ms ago: executing program 0 (id=369): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000012640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0x400000000008, 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) 622.346533ms ago: executing program 1 (id=370): socket$inet6(0xa, 0x3, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) unshare(0x400) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x8140) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.7426ms ago: executing program 1 (id=371): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @empty, 0xa}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086610, 0x0) kernel console output (not intermixed with test programs): : link becomes ready [ 82.492908][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.508080][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.524205][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.538601][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.565969][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.573916][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.611965][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.638166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.657242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.694613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.726881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.746635][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.795406][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.826670][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.839780][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.927664][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.937941][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.980383][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.996535][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.008015][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.052026][ T4283] device veth0_vlan entered promiscuous mode [ 83.073947][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.086808][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.094310][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.105428][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.114352][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.160593][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.174761][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.193557][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.216894][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.233079][ T4283] device veth1_vlan entered promiscuous mode [ 83.250085][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.267814][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.285708][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.341186][ T4272] device veth0_vlan entered promiscuous mode [ 83.373381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.382288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.402850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.412600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.427291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.473425][ T4272] device veth1_vlan entered promiscuous mode [ 83.491796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.501534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.510635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.518981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.534075][ T4273] device veth0_vlan entered promiscuous mode [ 83.556745][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.564223][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.574470][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.583829][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.598350][ T4283] device veth0_macvtap entered promiscuous mode [ 83.608218][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.624504][ T4273] device veth1_vlan entered promiscuous mode [ 83.632508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.643330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.652819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.662343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.675617][ T4283] device veth1_macvtap entered promiscuous mode [ 83.717860][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.728636][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.739686][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.752449][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.764773][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.776498][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.787996][ T4272] device veth0_macvtap entered promiscuous mode [ 83.801229][ T4285] device veth0_vlan entered promiscuous mode [ 83.813557][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.822506][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.830631][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.839741][ T4272] device veth1_macvtap entered promiscuous mode [ 83.852857][ T4285] device veth1_vlan entered promiscuous mode [ 83.869550][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.899742][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.909169][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.920309][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.928621][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.937323][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.946407][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.955167][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.967151][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.974616][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.987690][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.996656][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 84.004240][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.035595][ T4285] device veth0_macvtap entered promiscuous mode [ 84.043914][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.053799][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.062811][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.072210][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.081407][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.087953][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 84.090424][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 84.095401][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 84.107830][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 84.115219][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.123976][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.140917][ T4274] device veth0_vlan entered promiscuous mode [ 84.155645][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.165033][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.173932][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.183078][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.191872][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.200530][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.210468][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.221098][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.232729][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.242035][ T4273] device veth0_macvtap entered promiscuous mode [ 84.254300][ T4285] device veth1_macvtap entered promiscuous mode [ 84.262414][ T4283] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.272568][ T4283] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.282915][ T4283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.292057][ T4283] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.307773][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.317163][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.325384][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.334218][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.345707][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.355179][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.364161][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.375269][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.389369][ T4274] device veth1_vlan entered promiscuous mode [ 84.407888][ T4273] device veth1_macvtap entered promiscuous mode [ 84.437190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.445305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.459716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.484174][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.497497][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.508103][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.518917][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.531112][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.544809][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.556101][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.571173][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.581852][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.591954][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.602636][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.614993][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.624507][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.633709][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.644935][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.654122][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.671415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.681116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.690980][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.702786][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.713736][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.729225][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.740578][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.760257][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.777145][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.787404][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.798604][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.808935][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.819429][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.830738][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.840291][ T4274] device veth0_macvtap entered promiscuous mode [ 84.852302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.861283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.870258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.880507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.889807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.900536][ T4285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.910587][ T4285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.919962][ T4285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.929109][ T4285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.958711][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.972119][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.981136][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.990293][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.007498][ T4274] device veth1_macvtap entered promiscuous mode [ 85.045412][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.058203][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.075502][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.086234][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.096129][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.107168][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.118078][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.128686][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.140442][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.172484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.180826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.189933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.199937][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.210795][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.220825][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.231347][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.244332][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.254876][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.264833][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.275428][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.287342][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.315969][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.324554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.335366][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.352808][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.363202][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.375581][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.385243][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.394290][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.414431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.443880][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.464501][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.475898][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.507351][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.515196][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.529100][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.593706][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.605638][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.622694][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.623159][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.668930][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.681345][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.734754][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.751438][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.752066][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.775154][ T4361] FAULT_INJECTION: forcing a failure. [ 85.775154][ T4361] name failslab, interval 1, probability 0, space 0, times 1 [ 85.798675][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.843993][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.852199][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.853775][ T4361] CPU: 1 PID: 4361 Comm: syz.3.4 Not tainted syzkaller #0 [ 85.866413][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.866639][ T4361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.874439][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.884523][ T4361] Call Trace: [ 85.884532][ T4361] [ 85.884540][ T4361] dump_stack_lvl+0x188/0x24e [ 85.884585][ T4361] ? show_regs_print_info+0x12/0x12 [ 85.884614][ T4361] ? load_image+0x410/0x410 [ 85.884640][ T4361] ? __might_sleep+0xd0/0xd0 [ 85.884660][ T4361] ? __lock_acquire+0x7c40/0x7c40 [ 85.884691][ T4361] should_fail_ex+0x390/0x4c0 [ 85.884722][ T4361] should_failslab+0x5/0x20 [ 85.884740][ T4361] slab_pre_alloc_hook+0x59/0x300 [ 85.884763][ T4361] ? snd_seq_oss_readq_new+0x7e/0x240 [ 85.884791][ T4361] __kmem_cache_alloc_node+0x4f/0x270 [ 85.884818][ T4361] ? snd_seq_oss_readq_new+0x7e/0x240 [ 85.884842][ T4361] __kmalloc+0xa3/0x240 [ 85.922460][ T4361] snd_seq_oss_readq_new+0x7e/0x240 [ 85.962396][ T4361] snd_seq_oss_open+0x7e3/0xf00 [ 85.967301][ T4361] ? snd_seq_oss_delete_client+0x50/0x50 [ 85.973030][ T4361] ? trace_raw_output_contention_end+0xd0/0xd0 [ 85.979248][ T4361] ? odev_open+0x58/0x90 [ 85.983530][ T4361] ? __lock_acquire+0x7c40/0x7c40 [ 85.988658][ T4361] ? snd_seq_oss_process_event+0x2910/0x2910 [ 85.994678][ T4361] ? async_call_lookup_ports+0x10/0x10 [ 86.000175][ T4361] ? do_raw_spin_unlock+0x11d/0x230 [ 86.005442][ T4361] ? soundcore_open+0x309/0x4b0 [ 86.010345][ T4361] odev_open+0x63/0x90 [ 86.014451][ T4361] chrdev_open+0x585/0x5f0 [ 86.015669][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.018904][ T4361] ? cd_forget+0x160/0x160 [ 86.018935][ T4361] ? fsnotify_perm+0x39b/0x550 [ 86.029692][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.031152][ T4361] ? cd_forget+0x160/0x160 [ 86.031181][ T4361] do_dentry_open+0x7dd/0x10b0 [ 86.052521][ T4361] path_openat+0x2674/0x2f10 [ 86.057172][ T4361] ? verify_lock_unused+0x140/0x140 [ 86.062415][ T4361] ? do_sys_openat2+0xdd/0x4f0 [ 86.067232][ T4361] ? do_filp_open+0x420/0x420 [ 86.071975][ T4361] do_filp_open+0x1ee/0x420 [ 86.076541][ T4361] ? vfs_tmpfile+0x470/0x470 [ 86.081184][ T4361] ? _raw_spin_unlock+0x24/0x40 [ 86.086076][ T4361] ? alloc_fd+0x590/0x640 [ 86.090473][ T4361] do_sys_openat2+0x14b/0x4f0 [ 86.095199][ T4361] ? do_sys_open+0xe0/0xe0 [ 86.099665][ T4361] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 86.105696][ T4361] ? lock_chain_count+0x20/0x20 [ 86.110656][ T4361] __x64_sys_openat+0x135/0x160 [ 86.115545][ T4361] do_syscall_64+0x4c/0xa0 [ 86.120006][ T4361] ? clear_bhb_loop+0x60/0xb0 [ 86.124733][ T4361] ? clear_bhb_loop+0x60/0xb0 [ 86.129470][ T4361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.135436][ T4361] RIP: 0033:0x7f9b1419e159 [ 86.139894][ T4361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.159514][ T4361] RSP: 002b:00007f9b15039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 86.167946][ T4361] RAX: ffffffffffffffda RBX: 00007f9b14425fa0 RCX: 00007f9b1419e159 [ 86.175932][ T4361] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 86.183917][ T4361] RBP: 00007f9b14235024 R08: 0000000000000000 R09: 0000000000000000 [ 86.191903][ T4361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.198705][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 86.199893][ T4361] R13: 00007f9b14426038 R14: 00007f9b14425fa0 R15: 00007ffd6df2c578 [ 86.199929][ T4361] [ 86.217837][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 86.223877][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 86.229121][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 86.230270][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 86.247289][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.276832][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.289267][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.336071][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.353744][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.401234][ T7] cfg80211: failed to load regulatory.db [ 86.768504][ T4374] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 86.929145][ T4276] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.956434][ T4328] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 87.141681][ T4276] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 87.152773][ T4328] usb 2-1: not running at top speed; connect to a high speed hub [ 87.171437][ T4276] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 87.196649][ T4328] usb 2-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 87.201867][ T4276] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 87.205362][ T4328] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.255877][ T4328] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 87.284062][ T4328] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 87.286026][ T4276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.301181][ T4328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.335362][ T4328] usb 2-1: config 0 descriptor?? [ 87.375133][ T4328] usb 2-1: Found UVC 9.00 device (046d:0825) [ 87.382463][ T4276] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 87.413682][ T4276] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 87.798475][ T4328] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 87.833281][ T4328] videodev: could not get a free minor [ 87.837417][ T4371] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 87.861435][ T4328] uvcvideo 2-1:0.1: Failed to register meta-cap device (-23). [ 87.870188][ T4371] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 87.880857][ T4371] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 87.939012][ T4371] SPCP8x5 ttyUSB0: Set UART format 0xb failed (error = -32) [ 87.997857][ T4407] ======================================================= [ 87.997857][ T4407] WARNING: The mand mount option has been deprecated and [ 87.997857][ T4407] and is ignored by this kernel. Remove the mand [ 87.997857][ T4407] option from the mount to silence this warning. [ 87.997857][ T4407] ======================================================= [ 88.066014][ T4328] usb 2-1: USB disconnect, device number 2 [ 88.121207][ T4408] overlayfs: overlapping lowerdir path [ 88.168762][ T4407] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 88.486214][ T4261] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.540507][ T4415] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.704885][ T4261] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.714655][ T4261] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 88.744935][ T4261] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.755100][ T4261] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 88.766425][ T4261] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 88.788866][ T4261] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.817960][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.852768][ T4261] usb 5-1: Product: syz [ 88.857442][ T4261] usb 5-1: Manufacturer: syz [ 88.879799][ T4261] cdc_wdm 5-1:1.0: skipping garbage [ 88.885191][ T4261] cdc_wdm 5-1:1.0: skipping garbage [ 88.932248][ T4261] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 88.938262][ T4261] cdc_wdm 5-1:1.0: Unknown control protocol [ 88.996985][ T4413] loop2: detected capacity change from 0 to 32768 [ 89.013866][ T4413] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.17 (4413) [ 89.060288][ T4413] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 89.071328][ T4413] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 89.105916][ T4413] BTRFS info (device loop2): force clearing of disk cache [ 89.113193][ T4413] BTRFS info (device loop2): metadata ratio 0 [ 89.132003][ T4413] BTRFS info (device loop2): enabling disk space caching [ 89.142026][ T4413] BTRFS info (device loop2): disk space caching is enabled [ 89.343226][ T4413] BTRFS info (device loop2): enabling ssd optimizations [ 89.381734][ T4413] BTRFS info (device loop2): rebuilding free space tree [ 89.401339][ C0] cdc_wdm 5-1:1.0: Unexpected error -71 [ 89.407977][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 89.413548][ T4328] usb 5-1: USB disconnect, device number 2 [ 89.414884][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 89.426553][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 89.435462][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.590647][ T4413] BTRFS info (device loop2): disabling free space tree [ 89.619759][ T4413] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.643208][ T4413] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.661630][ T4276] usb 4-1: USB disconnect, device number 2 [ 89.695699][ T4276] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 89.724918][ T4276] spcp8x5 4-1:1.0: device disconnected [ 89.925088][ T26] audit: type=1800 audit(1788487657.304:2): pid=4413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 90.026342][ T26] audit: type=1800 audit(1788487657.414:3): pid=4455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 90.190133][ T4458] process 'syz.1.25' launched './file0' with NULL argv: empty string added [ 90.373311][ T4273] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.409778][ T4461] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901993312 (7803986624 ns) > initial count (6429106268 ns). Using initial count to start timer. [ 90.448677][ T4464] loop3: detected capacity change from 0 to 512 [ 90.567763][ T4461] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.579972][ T4467] loop1: detected capacity change from 0 to 2048 [ 90.613130][ T4464] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.645808][ T4464] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.795090][ T4464] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 90.894434][ T4464] EXT4-fs (loop3): 1 truncate cleaned up [ 90.940850][ T4476] loop4: detected capacity change from 0 to 512 [ 90.964636][ T4464] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 91.049947][ T4476] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.059830][ T26] audit: type=1800 audit(1788487658.444:4): pid=4464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.28" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 91.085635][ T26] audit: type=1800 audit(1788487658.464:5): pid=4464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.28" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 91.097144][ T4476] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.145868][ T4320] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.345908][ T4320] usb 1-1: Using ep0 maxpacket: 32 [ 91.352236][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 91.354991][ T4320] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 91.368713][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 91.394045][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.407871][ T4320] usb 1-1: config 0 descriptor?? [ 91.423846][ T4320] gspca_main: sunplus-2.14.0 probing 041e:400b [ 91.672657][ T4494] loop1: detected capacity change from 0 to 2048 [ 91.739270][ T4494] EXT4-fs (loop1): cluster size (2048) smaller than block size (4096) [ 91.741653][ T4498] FAULT_INJECTION: forcing a failure. [ 91.741653][ T4498] name failslab, interval 1, probability 0, space 0, times 0 [ 91.770118][ T4498] CPU: 1 PID: 4498 Comm: syz.3.37 Not tainted syzkaller #0 [ 91.777378][ T4498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.787486][ T4498] Call Trace: [ 91.790800][ T4498] [ 91.793762][ T4498] dump_stack_lvl+0x188/0x24e [ 91.798518][ T4498] ? show_regs_print_info+0x12/0x12 [ 91.803765][ T4498] ? load_image+0x410/0x410 [ 91.808313][ T4498] ? __might_sleep+0xd0/0xd0 [ 91.812990][ T4498] ? __lock_acquire+0x7c40/0x7c40 [ 91.818162][ T4498] should_fail_ex+0x390/0x4c0 [ 91.822889][ T4498] should_failslab+0x5/0x20 [ 91.827440][ T4498] slab_pre_alloc_hook+0x59/0x300 [ 91.832504][ T4498] ? mas_next_entry+0xde9/0xe90 [ 91.837418][ T4498] kmem_cache_alloc+0x56/0x2f0 [ 91.842262][ T4498] ? vm_area_dup+0x23/0x1a0 [ 91.846820][ T4498] vm_area_dup+0x23/0x1a0 [ 91.851191][ T4498] copy_mm+0xb13/0x1680 [ 91.855419][ T4498] ? copy_signal+0x640/0x640 [ 91.860048][ T4498] ? lockdep_init_map_type+0x98/0x8d0 [ 91.865493][ T4498] ? __init_rwsem+0x11e/0x160 [ 91.870223][ T4498] ? copy_signal+0x51f/0x640 [ 91.874856][ T4498] copy_process+0x1952/0x4070 [ 91.879622][ T4498] ? copy_process+0x974/0x4070 [ 91.884429][ T4498] ? preempt_schedule_thunk+0x16/0x18 [ 91.889872][ T4498] ? idle_dummy+0x10/0x10 [ 91.894255][ T4498] ? wake_up_q+0x8c/0xc0 [ 91.898548][ T4498] kernel_clone+0x24b/0x900 [ 91.903101][ T4498] ? futex_wake_mark+0x150/0x150 [ 91.908141][ T4498] ? create_io_thread+0x170/0x170 [ 91.913210][ T4498] ? do_futex+0x2e2/0x320 [ 91.917582][ T4498] __x64_sys_clone+0x1a7/0x220 [ 91.918936][ T4501] loop2: detected capacity change from 0 to 128 [ 91.922374][ T4498] ? __ia32_sys_vfork+0x140/0x140 [ 91.922425][ T4498] ? lock_chain_count+0x20/0x20 [ 91.938611][ T4498] ? lockdep_hardirqs_on+0x94/0x140 [ 91.943856][ T4498] do_syscall_64+0x4c/0xa0 [ 91.948340][ T4498] ? clear_bhb_loop+0x60/0xb0 [ 91.953068][ T4498] ? clear_bhb_loop+0x60/0xb0 [ 91.957785][ T4498] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.963717][ T4498] RIP: 0033:0x7f9b1419e159 [ 91.968164][ T4498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.987884][ T4498] RSP: 002b:00007f9b15038fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 91.996317][ T4498] RAX: ffffffffffffffda RBX: 00007f9b14425fa0 RCX: 00007f9b1419e159 [ 92.004332][ T4498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400 [ 92.012348][ T4498] RBP: 00007f9b14235024 R08: 0000000000000000 R09: 0000000000000000 [ 92.020368][ T4498] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 92.028363][ T4498] R13: 00007f9b14426038 R14: 00007f9b14425fa0 R15: 00007ffd6df2c578 [ 92.036426][ T4498] [ 92.066567][ T4501] EXT4-fs (loop2): Test dummy encryption mode enabled [ 92.127238][ T4501] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.189419][ T4501] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.737838][ T4521] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42'. [ 92.835315][ T4320] gspca_sunplus: reg_w_riv err -71 [ 92.846774][ T4320] sunplus: probe of 1-1:0.0 failed with error -71 [ 92.879051][ T4320] usb 1-1: USB disconnect, device number 2 [ 92.902192][ T4526] loop3: detected capacity change from 0 to 512 [ 93.005810][ T4526] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 93.014781][ T4526] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.054816][ T4501] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 93.203581][ T4526] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 93.276201][ T4526] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 93.296564][ T4526] EXT4-fs (loop3): This should not happen!! Data will be lost [ 93.296564][ T4526] [ 93.311039][ T4526] EXT4-fs (loop3): Total free blocks count 0 [ 93.317469][ T4526] EXT4-fs (loop3): Free/Dirty block details [ 93.329683][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 93.336102][ T4526] EXT4-fs (loop3): free_blocks=65280 [ 93.346437][ T4526] EXT4-fs (loop3): dirty_blocks=1 [ 93.356057][ T4526] EXT4-fs (loop3): Block reservation details [ 93.415892][ T4526] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 93.495671][ T4523] loop4: detected capacity change from 0 to 32768 [ 93.529423][ T4538] loop2: detected capacity change from 0 to 256 [ 93.539164][ T4523] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.44 (4523) [ 93.568608][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 93.603953][ T4538] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.642611][ T4523] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 93.707659][ T4523] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 93.740575][ T4523] BTRFS info (device loop4): use zlib compression, level 3 [ 93.775851][ T4523] BTRFS info (device loop4): using free space tree [ 93.973681][ T4523] BTRFS info (device loop4): enabling ssd optimizations [ 94.142909][ T26] audit: type=1800 audit(1788487661.524:6): pid=4523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.44" name="file1" dev="loop4" ino=264 res=0 errno=0 [ 94.353996][ T4573] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 94.407417][ T4285] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 94.796694][ T4589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'. [ 94.900154][ T4593] capability: warning: `syz.3.61' uses deprecated v2 capabilities in a way that may be insecure [ 95.086708][ T4602] block device autoloading is deprecated and will be removed. [ 95.185923][ T4321] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 95.387223][ T4321] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 95.423593][ T4321] usb 3-1: config 0 has an invalid descriptor of length 212, skipping remainder of the config [ 95.475665][ T4321] usb 3-1: config 0 has no interface number 0 [ 95.498693][ T4321] usb 3-1: config 0 interface 175 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 95.550417][ T4321] usb 3-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 95.575832][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.604202][ T4321] usb 3-1: Product: syz [ 95.614307][ T4321] usb 3-1: Manufacturer: syz [ 95.633225][ T4321] usb 3-1: SerialNumber: syz [ 95.647584][ T4321] usb 3-1: config 0 descriptor?? [ 95.674179][ T4321] symbolserial 3-1:0.175: required endpoints missing [ 95.900322][ T4321] usb 3-1: USB disconnect, device number 2 [ 95.931718][ T4614] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.975884][ T4614] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.991323][ T4606] loop4: detected capacity change from 0 to 32768 [ 96.030997][ T4608] loop1: detected capacity change from 0 to 32768 [ 96.040324][ T4614] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 96.048592][ T4614] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.054578][ T4614] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.085623][ T4614] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 96.124658][ T4606] XFS (loop4): Mounting V5 Filesystem [ 96.162978][ T4608] JBD2: Ignoring recovery information on journal [ 96.215063][ T4610] loop0: detected capacity change from 0 to 32768 [ 96.225122][ T4614] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.243165][ T4614] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.288864][ T4610] XFS (loop0): Mounting V5 Filesystem [ 96.308741][ T4608] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 96.344961][ T4614] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 96.356265][ T4614] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 96.362282][ T4614] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 96.388988][ T4614] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 96.450118][ T4606] XFS (loop4): Ending clean mount [ 96.474550][ T4610] XFS (loop0): Ending clean mount [ 96.525660][ T4606] XFS (loop4): Quotacheck needed: Please wait. [ 96.624344][ T4606] XFS (loop4): Quotacheck: Done. [ 96.665898][ T26] audit: type=1804 audit(1788487664.044:7): pid=4636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.66" name="/newroot/16/file1/file1" dev="loop1" ino=17059 res=1 errno=0 [ 96.847003][ T4272] XFS (loop0): Unmounting Filesystem [ 96.985046][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 97.072020][ T4285] XFS (loop4): Unmounting Filesystem [ 97.485834][ T4321] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.691552][ T4321] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.716114][ T4321] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.771366][ T4321] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.822653][ T4654] loop4: detected capacity change from 0 to 128 [ 97.840213][ T4321] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 97.879671][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.892085][ T4654] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 97.935427][ T4321] usb 4-1: Product: syz [ 97.952020][ T4654] hpfs: filesystem error: improperly stopped [ 97.963048][ T4321] usb 4-1: Manufacturer: syz [ 97.975917][ T4654] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 97.993861][ T4654] hpfs: You really don't want any checks? You are crazy... [ 98.002939][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.009206][ T4321] usb 4-1: SerialNumber: syz [ 98.016148][ T4654] hpfs: Code page index out of array [ 98.064538][ T4654] hpfs: code page support is disabled [ 98.090142][ T4321] hub 4-1:1.0: bad descriptor, ignoring hub [ 98.093981][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.098950][ T4654] hpfs: hpfs_map_4sectors(): unaligned read [ 98.126466][ T4654] hpfs: hpfs_map_4sectors(): unaligned read [ 98.133771][ T4321] hub: probe of 4-1:1.0 failed with error -5 [ 98.176193][ T4654] hpfs: filesystem error: unable to find root dir [ 98.235936][ T4287] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.311263][ T4658] loop2: detected capacity change from 0 to 128 [ 98.338828][ T4321] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 98.358477][ T4658] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 98.396355][ T4287] Bluetooth: hci4: command 0x0c1a tx timeout [ 98.721260][ T4668] loop0: detected capacity change from 0 to 128 [ 98.749340][ T4668] EXT4-fs: Ignoring removed nobh option [ 98.810593][ T4668] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 98.829465][ T4668] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.008657][ T4642] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 99.065187][ T4642] usb 4-1: device reset changed ep0 maxpacket size! [ 99.100357][ T4677] loop1: detected capacity change from 0 to 512 [ 99.111093][ T4321] usb 4-1: USB disconnect, device number 3 [ 99.132512][ T4321] usblp0: removed [ 99.162321][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 99.221500][ T4677] EXT4-fs (loop1): 1 truncate cleaned up [ 99.295856][ T4321] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.330859][ T4677] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 99.423666][ T4677] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.83: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 99.485818][ T4321] usb 4-1: Using ep0 maxpacket: 16 [ 99.493106][ T4321] usb 4-1: config 0 has no interfaces? [ 99.512643][ T4321] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 99.546706][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.587882][ T4680] loop0: detected capacity change from 0 to 4096 [ 99.612579][ T4675] loop2: detected capacity change from 0 to 32768 [ 99.614556][ T4321] usb 4-1: Product: syz [ 99.630817][ T4321] usb 4-1: Manufacturer: syz [ 99.646747][ T4321] usb 4-1: SerialNumber: syz [ 99.665307][ T4675] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.82 (4675) [ 99.678001][ T4321] usb 4-1: config 0 descriptor?? [ 99.750037][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 99.763804][ T4675] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.787414][ T4675] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 99.891785][ T4675] BTRFS info (device loop2): disabling tree log [ 99.935817][ T4675] BTRFS info (device loop2): using free space tree [ 99.971430][ T4585] usb 4-1: USB disconnect, device number 4 [ 100.003248][ T4688] device-mapper: ioctl: Unable to rename non-existent device, to uuid j [ 100.075932][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 100.100771][ T4680] EXT4-fs (loop0): Test dummy encryption mode enabled [ 100.155912][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 100.204454][ T4680] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 100.291362][ T4675] BTRFS info (device loop2): enabling ssd optimizations [ 100.315977][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 100.420305][ T26] audit: type=1804 audit(1788487667.804:8): pid=4675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.82" name="/newroot/16/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 100.477759][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 100.512182][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 100.661646][ T4273] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.232331][ T4734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.92'. [ 101.599408][ T4321] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.615885][ T4723] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.751012][ T4721] loop3: detected capacity change from 0 to 32768 [ 101.795936][ T4321] usb 1-1: Using ep0 maxpacket: 32 [ 101.806752][ T4723] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 101.823917][ T4321] usb 1-1: unable to get BOS descriptor or descriptor too short [ 101.842773][ T4321] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 101.851550][ T4723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.859160][ T4321] usb 1-1: can't read configurations, error -71 [ 101.878811][ T4723] usb 2-1: config 0 descriptor?? [ 101.905133][ T4721] XFS (loop3): Mounting V5 Filesystem [ 101.910979][ T4584] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.048145][ T4721] XFS (loop3): Ending clean mount [ 102.131487][ T4584] usb 5-1: Using ep0 maxpacket: 16 [ 102.141137][ T4584] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 102.195877][ T4584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.203952][ T4584] usb 5-1: Product: syz [ 102.214206][ T4584] usb 5-1: Manufacturer: syz [ 102.220900][ T4584] usb 5-1: SerialNumber: syz [ 102.229478][ T4283] XFS (loop3): Unmounting Filesystem [ 102.241116][ T4584] usb 5-1: config 0 descriptor?? [ 102.256285][ T4584] gspca_main: spca508-2.14.0 probing 041e:4018 [ 102.459365][ T4584] gspca_spca508: reg_read err -32 [ 102.465575][ T4584] gspca_spca508: reg_read err -32 [ 102.492565][ T4584] gspca_spca508: reg_read err -32 [ 102.509046][ T4584] gspca_spca508: reg_read err -32 [ 102.528403][ T4584] gspca_spca508: reg_read err -32 [ 102.566462][ T4758] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.584061][ T4758] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.615988][ T4758] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 102.636129][ T4758] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.642278][ T4758] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.651371][ T4758] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 102.659040][ T4758] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.665160][ T4758] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.676691][ T4758] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 102.694316][ T4758] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 102.703497][ T4758] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 102.721042][ T4758] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 102.735669][ T4584] gspca_spca508: reg write: error -71 [ 102.741602][ T4584] spca508: probe of 5-1:0.0 failed with error -71 [ 102.758010][ T4584] usb 5-1: USB disconnect, device number 3 [ 102.911412][ T4766] FAULT_INJECTION: forcing a failure. [ 102.911412][ T4766] name failslab, interval 1, probability 0, space 0, times 0 [ 102.925984][ T4766] CPU: 0 PID: 4766 Comm: syz.2.103 Not tainted syzkaller #0 [ 102.933359][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.943464][ T4766] Call Trace: [ 102.946769][ T4766] [ 102.949735][ T4766] dump_stack_lvl+0x188/0x24e [ 102.954480][ T4766] ? show_regs_print_info+0x12/0x12 [ 102.959729][ T4766] ? load_image+0x410/0x410 [ 102.964284][ T4766] ? __lock_acquire+0x7c40/0x7c40 [ 102.969396][ T4766] should_fail_ex+0x390/0x4c0 [ 102.974123][ T4766] should_failslab+0x5/0x20 [ 102.978658][ T4766] slab_pre_alloc_hook+0x59/0x300 [ 102.983724][ T4766] ? x509_fabricate_name+0x555/0x950 [ 102.989067][ T4766] __kmem_cache_alloc_node+0x4f/0x270 [ 102.994497][ T4766] ? x509_fabricate_name+0x555/0x950 [ 102.999813][ T4766] __kmalloc+0xa3/0x240 [ 103.004018][ T4766] x509_fabricate_name+0x555/0x950 [ 103.009176][ T4766] asn1_ber_decoder+0x1816/0x21b0 [ 103.014263][ T4766] ? __se_sys_add_key+0x34b/0x410 [ 103.019329][ T4766] ? ref_tracker_free+0x830/0x830 [ 103.024400][ T4766] x509_cert_parse+0x1ae/0x7a0 [ 103.029183][ T4766] x509_key_preparse+0x60/0x660 [ 103.034066][ T4766] ? down_read+0x1a8/0x2d0 [ 103.038506][ T4766] asymmetric_key_preparse+0xa5/0x140 [ 103.043907][ T4766] key_create_or_update+0x432/0xa40 [ 103.049115][ T4766] ? security_key_permission+0x7c/0xa0 [ 103.054601][ T4766] ? key_type_put+0x20/0x20 [ 103.059123][ T4766] ? lookup_user_key_possessed+0x40/0x40 [ 103.064781][ T4766] ? __might_fault+0xc2/0x120 [ 103.069476][ T4766] ? __might_fault+0xa6/0x120 [ 103.074172][ T4766] __se_sys_add_key+0x34b/0x410 [ 103.079051][ T4766] ? __x64_sys_add_key+0xc0/0xc0 [ 103.084012][ T4766] ? lockdep_hardirqs_on+0x94/0x140 [ 103.089230][ T4766] ? __x64_sys_add_key+0x1c/0xc0 [ 103.094182][ T4766] do_syscall_64+0x4c/0xa0 [ 103.098628][ T4766] ? clear_bhb_loop+0x60/0xb0 [ 103.103323][ T4766] ? clear_bhb_loop+0x60/0xb0 [ 103.108054][ T4766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.113972][ T4766] RIP: 0033:0x7f629c39e159 [ 103.118400][ T4766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.138018][ T4766] RSP: 002b:00007f629d284028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 103.146461][ T4766] RAX: ffffffffffffffda RBX: 00007f629c625fa0 RCX: 00007f629c39e159 [ 103.154456][ T4766] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 103.162455][ T4766] RBP: 00007f629c435024 R08: 000000002158a927 R09: 0000000000000000 [ 103.170465][ T4766] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 103.178464][ T4766] R13: 00007f629c626038 R14: 00007f629c625fa0 R15: 00007ffcaadb44a8 [ 103.186460][ T4766] [ 103.375799][ T4772] loop2: detected capacity change from 0 to 128 [ 103.392472][ T4723] usb 2-1: Cannot set autoneg [ 103.400381][ T4723] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 103.411224][ T4772] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 103.447477][ T4723] usb 2-1: USB disconnect, device number 3 [ 103.458251][ T4772] UDF-fs: warning (device loop2): udf_fill_super: No fileset found [ 103.609895][ T4774] loop3: detected capacity change from 0 to 1024 [ 104.344644][ T4790] bond0: no command found in slaves file - use +ifname or -ifname [ 104.437895][ T4774] hfsplus: request for non-existent node 62977 in B*Tree [ 104.453500][ T4774] hfsplus: request for non-existent node 62977 in B*Tree [ 104.655850][ T4287] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.662563][ T4287] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.687357][ T4804] netlink: 128 bytes leftover after parsing attributes in process `syz.1.117'. [ 104.725043][ T4287] Bluetooth: hci4: command 0x0c1a tx timeout [ 104.731907][ T4287] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.891867][ T130] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.142641][ T130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.214397][ T130] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 105.332316][ T130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.448723][ T130] usb 3-1: config 0 descriptor?? [ 105.462457][ T4337] hfsplus: b-tree write err: -5, ino 3 [ 105.608790][ T4812] FAULT_INJECTION: forcing a failure. [ 105.608790][ T4812] name failslab, interval 1, probability 0, space 0, times 0 [ 105.648611][ T4812] CPU: 0 PID: 4812 Comm: syz.4.119 Not tainted syzkaller #0 [ 105.655954][ T4812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.666044][ T4812] Call Trace: [ 105.669358][ T4812] [ 105.672334][ T4812] dump_stack_lvl+0x188/0x24e [ 105.677080][ T4812] ? show_regs_print_info+0x12/0x12 [ 105.682352][ T4812] ? load_image+0x410/0x410 [ 105.686903][ T4812] ? __might_sleep+0xd0/0xd0 [ 105.691533][ T4812] ? __lock_acquire+0x7c40/0x7c40 [ 105.696611][ T4812] should_fail_ex+0x390/0x4c0 [ 105.701342][ T4812] should_failslab+0x5/0x20 [ 105.705869][ T4812] slab_pre_alloc_hook+0x59/0x300 [ 105.709701][ T130] usbhid 3-1:0.0: can't add hid device: -71 [ 105.710912][ T4812] ? mas_next_entry+0xde9/0xe90 [ 105.721754][ T4812] kmem_cache_alloc+0x56/0x2f0 [ 105.726574][ T4812] ? vm_area_dup+0x23/0x1a0 [ 105.727909][ T130] usbhid: probe of 3-1:0.0 failed with error -71 [ 105.731109][ T4812] vm_area_dup+0x23/0x1a0 [ 105.741795][ T4812] copy_mm+0xb13/0x1680 [ 105.746036][ T4812] ? copy_signal+0x640/0x640 [ 105.750663][ T4812] ? lockdep_init_map_type+0x98/0x8d0 [ 105.756102][ T4812] ? __init_rwsem+0x11e/0x160 [ 105.760831][ T4812] ? copy_signal+0x51f/0x640 [ 105.765474][ T4812] copy_process+0x1952/0x4070 [ 105.770198][ T4812] ? copy_process+0x974/0x4070 [ 105.774987][ T4812] ? preempt_schedule_thunk+0x16/0x18 [ 105.780391][ T4812] ? idle_dummy+0x10/0x10 [ 105.784784][ T4812] ? wake_up_q+0x8c/0xc0 [ 105.789050][ T4812] kernel_clone+0x24b/0x900 [ 105.793563][ T4812] ? futex_wake_mark+0x150/0x150 [ 105.798536][ T4812] ? create_io_thread+0x170/0x170 [ 105.803590][ T4812] ? do_futex+0x2e2/0x320 [ 105.807940][ T4812] __x64_sys_clone+0x1a7/0x220 [ 105.812756][ T4812] ? __ia32_sys_vfork+0x140/0x140 [ 105.817830][ T4812] ? lock_chain_count+0x20/0x20 [ 105.822714][ T4812] ? lockdep_hardirqs_on+0x94/0x140 [ 105.827943][ T4812] do_syscall_64+0x4c/0xa0 [ 105.832416][ T4812] ? clear_bhb_loop+0x60/0xb0 [ 105.837128][ T4812] ? clear_bhb_loop+0x60/0xb0 [ 105.841869][ T4812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.847793][ T4812] RIP: 0033:0x7f160ed9e159 [ 105.852403][ T4812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.872045][ T4812] RSP: 002b:00007f160fc7ffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 105.880583][ T4812] RAX: ffffffffffffffda RBX: 00007f160f025fa0 RCX: 00007f160ed9e159 [ 105.888589][ T4812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400 [ 105.896591][ T4812] RBP: 00007f160ee35024 R08: 0000000000000000 R09: 0000000000000000 [ 105.904587][ T4812] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 105.912579][ T4812] R13: 00007f160f026038 R14: 00007f160f025fa0 R15: 00007ffe0c8a2ca8 [ 105.920880][ T4812] [ 105.962415][ T130] usb 3-1: USB disconnect, device number 3 [ 106.023784][ T4815] loop3: detected capacity change from 0 to 4096 [ 106.040488][ T4815] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.068978][ T4815] EXT4-fs (loop3): Test dummy encryption mode enabled [ 106.138033][ T4815] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.269922][ T4825] loop1: detected capacity change from 0 to 2048 [ 106.322369][ T4825] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 106.336753][ T130] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.381643][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 106.535827][ T130] usb 3-1: Using ep0 maxpacket: 32 [ 106.543006][ T130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.575238][ T130] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 106.594968][ T130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.615091][ T130] usb 3-1: config 0 descriptor?? [ 106.638556][ T4831] overlayfs: failed to resolve './file0': -2 [ 106.652468][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 106.659695][ T130] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 106.702486][ T130] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 106.715944][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 106.795834][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 106.801944][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 106.808092][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 106.956652][ T4837] loop3: detected capacity change from 0 to 512 [ 106.989749][ T4837] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.127: iget: bad i_size value: -1099511627766 [ 107.005552][ T4837] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.127: couldn't read orphan inode 15 (err -117) [ 107.022147][ T4837] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 107.228728][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 107.235649][ T130] usb 3-1: USB disconnect, device number 4 [ 107.282957][ T130] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 107.626894][ T4853] netlink: 128 bytes leftover after parsing attributes in process `syz.0.131'. [ 108.407992][ T4863] Bluetooth: MGMT ver 1.22 [ 108.414047][ T4863] Bluetooth: hci0: unsupported parameter 13936 [ 108.430851][ T4863] Bluetooth: hci0: invalid len left 4, exp >= 114 [ 108.545286][ T4865] FAULT_INJECTION: forcing a failure. [ 108.545286][ T4865] name failslab, interval 1, probability 0, space 0, times 0 [ 108.595801][ T4865] CPU: 1 PID: 4865 Comm: syz.2.137 Not tainted syzkaller #0 [ 108.603143][ T4865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.613229][ T4865] Call Trace: [ 108.616530][ T4865] [ 108.619490][ T4865] dump_stack_lvl+0x188/0x24e [ 108.624267][ T4865] ? show_regs_print_info+0x12/0x12 [ 108.629502][ T4865] ? load_image+0x410/0x410 [ 108.634055][ T4865] ? __lock_acquire+0x7c40/0x7c40 [ 108.639133][ T4865] ? __prealloc_shrinker+0x6e3/0x7e0 [ 108.644473][ T4865] should_fail_ex+0x390/0x4c0 [ 108.649247][ T4865] should_failslab+0x5/0x20 [ 108.653781][ T4865] slab_pre_alloc_hook+0x59/0x300 [ 108.658855][ T4865] ? idr_alloc_u32+0x330/0x330 [ 108.663658][ T4865] ? lockdep_init_map_type+0x98/0x8d0 [ 108.669098][ T4865] ? __list_lru_init+0xb0/0x600 [ 108.674021][ T4865] __kmem_cache_alloc_node+0x4f/0x270 [ 108.679442][ T4865] ? __list_lru_init+0xb0/0x600 [ 108.684338][ T4865] __kmalloc+0xa3/0x240 [ 108.688545][ T4865] __list_lru_init+0xb0/0x600 [ 108.693286][ T4865] alloc_super+0x766/0x930 [ 108.697757][ T4865] ? kernfs_get_tree+0x710/0x710 [ 108.702748][ T4865] sget_fc+0x2d4/0x750 [ 108.706897][ T4865] ? kernfs_test_super+0x100/0x100 [ 108.712053][ T4865] kernfs_get_tree+0x171/0x710 [ 108.716859][ T4865] ? apparmor_capable+0x12c/0x190 [ 108.721932][ T4865] sysfs_get_tree+0x42/0x110 [ 108.726578][ T4865] vfs_get_tree+0x88/0x270 [ 108.731055][ T4865] do_new_mount+0x247/0xa40 [ 108.735626][ T4865] __se_sys_mount+0x2e3/0x3d0 [ 108.740351][ T4865] ? __x64_sys_mount+0xc0/0xc0 [ 108.745188][ T4865] ? lockdep_hardirqs_on+0x94/0x140 [ 108.750435][ T4865] ? __x64_sys_mount+0x1c/0xc0 [ 108.755241][ T4865] do_syscall_64+0x4c/0xa0 [ 108.759788][ T4865] ? clear_bhb_loop+0x60/0xb0 [ 108.764503][ T4865] ? clear_bhb_loop+0x60/0xb0 [ 108.769221][ T4865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.775162][ T4865] RIP: 0033:0x7f629c39e159 [ 108.779624][ T4865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.799263][ T4865] RSP: 002b:00007f629d284028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 108.807755][ T4865] RAX: ffffffffffffffda RBX: 00007f629c625fa0 RCX: 00007f629c39e159 [ 108.815768][ T4865] RDX: 0000200000000600 RSI: 0000200000000400 RDI: 0000000000000000 [ 108.823774][ T4865] RBP: 00007f629c435024 R08: 0000000000000000 R09: 0000000000000000 [ 108.831774][ T4865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.839804][ T4865] R13: 00007f629c626038 R14: 00007f629c625fa0 R15: 00007ffcaadb44a8 [ 108.841640][ T4850] loop3: detected capacity change from 0 to 32768 [ 108.847806][ T4865] [ 108.847859][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.925226][ T4850] XFS (loop3): Mounting V5 Filesystem [ 109.067531][ T4850] XFS (loop3): Ending clean mount [ 109.146212][ T26] audit: type=1800 audit(1788487676.534:9): pid=4850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.132" name="file1" dev="loop3" ino=4427 res=0 errno=0 [ 109.293768][ T4283] XFS (loop3): Unmounting Filesystem [ 109.845739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.035899][ T4584] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.135767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 110.288354][ T4584] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.312800][ T4584] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 110.365835][ T4584] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.374950][ T4584] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.436737][ T4888] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.540764][ T4882] loop0: detected capacity change from 0 to 40427 [ 110.593546][ T4902] loop3: detected capacity change from 0 to 512 [ 110.602661][ T4882] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 110.610884][ T4882] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 110.644515][ T4882] F2FS-fs (loop0): invalid crc value [ 110.651669][ T4882] F2FS-fs (loop0): invalid crc value [ 110.680305][ T4882] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 110.683461][ T4902] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 110.739526][ T4902] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.773583][ T4693] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.927687][ T4276] usb 2-1: USB disconnect, device number 4 [ 111.076244][ T4912] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.126109][ T4912] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.171440][ T4912] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.205145][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 111.241817][ T4912] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 112.974007][ T4950] blk-mq: reduced tag depth (128 -> 64) [ 112.994940][ T4953] loop0: detected capacity change from 0 to 512 [ 113.067728][ T4957] netlink: 'syz.1.164': attribute type 11 has an invalid length. [ 113.093872][ T4953] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 113.115895][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.189175][ T4953] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.197045][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.205439][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.221340][ T4922] loop3: detected capacity change from 0 to 32768 [ 113.278054][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 113.323914][ T4953] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.163: corrupted inode contents [ 113.371572][ T4922] XFS (loop3): Mounting V5 Filesystem [ 113.404849][ T4953] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #2: comm syz.0.163: mark_inode_dirty error [ 113.426890][ T4953] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.163: corrupted inode contents [ 113.551148][ T4970] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.163: corrupted inode contents [ 113.590500][ T4922] XFS (loop3): Ending clean mount [ 113.608206][ T4970] EXT4-fs error (device loop0): ext4_setattr:5538: inode #2: comm syz.0.163: mark_inode_dirty error [ 113.638034][ T4922] XFS (loop3): Quotacheck needed: Please wait. [ 113.690829][ T4974] loop2: detected capacity change from 0 to 4096 [ 113.729414][ T4922] XFS (loop3): Quotacheck: Done. [ 113.770124][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 113.912154][ T4981] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.972835][ T26] audit: type=1800 audit(1788487681.354:10): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.166" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 114.154290][ T4283] XFS (loop3): Unmounting Filesystem [ 114.673547][ T5001] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 114.975314][ T5008] loop4: detected capacity change from 0 to 512 [ 115.088022][ T5008] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 115.105949][ T5008] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.226828][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 115.245956][ T4276] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 115.464177][ T4276] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.477737][ T4276] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 115.499208][ T4276] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.518574][ T4276] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 115.541993][ T4276] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 115.576881][ T4276] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.597046][ T4276] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.622581][ T4276] usb 1-1: Product: syz [ 115.631351][ T4276] usb 1-1: Manufacturer: syz [ 115.647720][ T4276] cdc_wdm 1-1:1.0: skipping garbage [ 115.659728][ T4276] cdc_wdm 1-1:1.0: skipping garbage [ 115.678718][ T4276] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 115.698385][ T4276] cdc_wdm 1-1:1.0: Unknown control protocol [ 115.717718][ T5014] loop3: detected capacity change from 0 to 40427 [ 115.760963][ T5014] F2FS-fs (loop3): invalid crc value [ 115.790707][ T5014] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.948341][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 115.949387][ T4321] usb 1-1: USB disconnect, device number 5 [ 115.955012][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 115.955030][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 116.017310][ T5014] F2FS-fs (loop3): Start checkpoint disabled! [ 116.089473][ T5014] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 116.277173][ T5024] loop1: detected capacity change from 0 to 32768 [ 116.407414][ T5024] XFS (loop1): Mounting V5 Filesystem [ 116.488810][ T5050] loop4: detected capacity change from 0 to 512 [ 116.560501][ T5050] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 116.595583][ T5024] XFS (loop1): Ending clean mount [ 116.620869][ T5050] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.644922][ T5024] XFS (loop1): Quotacheck needed: Please wait. [ 116.678536][ T33] kworker/u4:2: attempt to access beyond end of device [ 116.678536][ T33] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.735485][ T5024] XFS (loop1): Quotacheck: Done. [ 116.804903][ T5050] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.189: Invalid inode table block 507161293 in block_group 0 [ 116.910833][ T5050] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 116.950810][ T5050] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #4: comm syz.4.189: mark_inode_dirty error [ 116.982746][ T4274] XFS (loop1): Unmounting Filesystem [ 116.998543][ T5050] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.189: Invalid block bitmap block 678357485 in block_group 0 [ 117.035838][ T5012] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 117.062585][ T5050] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.189: Invalid inode table block 507161293 in block_group 0 [ 117.089665][ T5050] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 117.100415][ T5050] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #4: comm syz.4.189: mark_inode_dirty error [ 117.113280][ T5050] Quota error (device loop4): write_blk: dquota write failed [ 117.149322][ T5050] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 117.173965][ T5050] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.189: Failed to acquire dquot type 1 [ 117.270112][ T5057] loop3: detected capacity change from 0 to 2048 [ 117.328213][ T5057] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 117.339128][ T4336] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm kworker/u4:6: Invalid inode table block 507161293 in block_group 0 [ 117.363977][ T5057] syz.3.190 (pid 5057) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 117.406919][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 117.455543][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 117.688874][ T5071] FAULT_INJECTION: forcing a failure. [ 117.688874][ T5071] name failslab, interval 1, probability 0, space 0, times 0 [ 117.702178][ T5071] CPU: 0 PID: 5071 Comm: syz.2.197 Not tainted syzkaller #0 [ 117.709514][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.719642][ T5071] Call Trace: [ 117.722961][ T5071] [ 117.725939][ T5071] dump_stack_lvl+0x188/0x24e [ 117.730704][ T5071] ? show_regs_print_info+0x12/0x12 [ 117.735964][ T5071] ? load_image+0x410/0x410 [ 117.740528][ T5071] ? verify_lock_unused+0x140/0x140 [ 117.745802][ T5071] ? verify_lock_unused+0x140/0x140 [ 117.751060][ T5071] should_fail_ex+0x390/0x4c0 [ 117.755798][ T5071] should_failslab+0x5/0x20 [ 117.760344][ T5071] slab_pre_alloc_hook+0x59/0x300 [ 117.765419][ T5071] ? ref_tracker_alloc+0x14f/0x490 [ 117.770592][ T5071] __kmem_cache_alloc_node+0x4f/0x270 [ 117.776026][ T5071] ? ref_tracker_alloc+0x14f/0x490 [ 117.781196][ T5071] kmalloc_trace+0x26/0xe0 [ 117.785671][ T5071] ref_tracker_alloc+0x14f/0x490 [ 117.790675][ T5071] ? ref_tracker_dir_print+0x150/0x150 [ 117.796194][ T5071] ? do_raw_spin_lock+0x128/0x2f0 [ 117.801264][ T5071] ? read_lock_is_recursive+0x10/0x10 [ 117.806691][ T5071] ? __rwlock_init+0x140/0x140 [ 117.811527][ T5071] ? packet_do_bind+0x9d/0xd40 [ 117.816349][ T5071] packet_do_bind+0x852/0xd40 [ 117.821084][ T5071] ? packet_do_bind+0x9d/0xd40 [ 117.825910][ T5071] __sys_bind+0x2e9/0x3e0 [ 117.830330][ T5071] ? __ia32_sys_socketpair+0xb0/0xb0 [ 117.835704][ T5071] __x64_sys_bind+0x76/0x80 [ 117.840269][ T5071] do_syscall_64+0x4c/0xa0 [ 117.844740][ T5071] ? clear_bhb_loop+0x60/0xb0 [ 117.849499][ T5071] ? clear_bhb_loop+0x60/0xb0 [ 117.854243][ T5071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.860220][ T5071] RIP: 0033:0x7f629c39e159 [ 117.864689][ T5071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.884336][ T5071] RSP: 002b:00007f629d284028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 117.892897][ T5071] RAX: ffffffffffffffda RBX: 00007f629c625fa0 RCX: 00007f629c39e159 [ 117.900925][ T5071] RDX: 0000000000000014 RSI: 0000200000000300 RDI: 0000000000000003 [ 117.908955][ T5071] RBP: 00007f629c435024 R08: 0000000000000000 R09: 0000000000000000 [ 117.916972][ T5071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.925015][ T5071] R13: 00007f629c626038 R14: 00007f629c625fa0 R15: 00007ffcaadb44a8 [ 117.933056][ T5071] [ 117.937699][ T5071] memory allocation failure, unreliable refcount tracker. [ 118.027855][ C1] af_packet: tpacket_rcv: packet too big, clamped from 5872 to 3952. macoff=96 [ 118.719455][ T5104] loop3: detected capacity change from 0 to 512 [ 118.779239][ T5106] loop2: detected capacity change from 0 to 512 [ 118.792078][ T5104] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.206: inode has both inline data and extents flags [ 118.847669][ T5104] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.206: couldn't read orphan inode 15 (err -117) [ 118.872571][ T5106] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.205: iget: bad i_size value: -1099511627766 [ 118.930476][ T5114] loop4: detected capacity change from 0 to 256 [ 118.943468][ T5104] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 118.988193][ T5106] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.205: couldn't read orphan inode 15 (err -117) [ 119.071385][ T5106] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.294086][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 119.381686][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 119.878316][ T5136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.218'. [ 119.914355][ T5138] loop0: detected capacity change from 0 to 2049 [ 120.001284][ T5138] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 120.016893][ T4585] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.054181][ T5138] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 120.075192][ T5138] loop0: [ 120.227423][ T4585] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.264455][ T4585] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.314887][ T4585] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 120.345348][ T5142] loop4: detected capacity change from 0 to 16 [ 120.346631][ T4585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.367861][ T4585] usb 1-1: config 0 descriptor?? [ 120.390163][ T5142] erofs: (device loop4): mounted with root inode @ nid 36. [ 120.532740][ T5144] overlayfs: upper fs does not support file handles, falling back to index=off. [ 120.575899][ T4321] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 120.779589][ T4321] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 120.793965][ T4585] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 120.799131][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.803592][ T4585] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 120.819835][ T4585] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 120.827487][ T4585] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 120.834008][ T4321] usb 4-1: Product: syz [ 120.835368][ T4585] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 120.847928][ T4321] usb 4-1: Manufacturer: syz [ 120.862756][ T4321] usb 4-1: SerialNumber: syz [ 120.868573][ T4585] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 120.878561][ T4321] usb 4-1: config 0 descriptor?? [ 120.942114][ T5156] loop1: detected capacity change from 0 to 16 [ 120.980355][ T5156] erofs: (device loop1): mounted with root inode @ nid 36. [ 121.101316][ T5158] loop2: detected capacity change from 0 to 1024 [ 121.124004][ T4321] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 121.391391][ T4585] playstation 0003:054C:0DF2.0001: Invalid gyro calibration data for axis (3), disabling calibration. [ 121.402906][ T4585] playstation 0003:054C:0DF2.0001: Invalid gyro calibration data for axis (5), disabling calibration. [ 121.414334][ T4585] playstation 0003:054C:0DF2.0001: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 121.441052][ T4585] playstation 0003:054C:0DF2.0001: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 121.463247][ T4585] input: HID 054c:0df2 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0001/input/input8 [ 121.515487][ T4585] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0001/input/input9 [ 121.544818][ T4585] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0001/input/input10 [ 121.557448][ T4276] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 121.593130][ T4585] playstation 0003:054C:0DF2.0001: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 121.641056][ T4585] usb 1-1: USB disconnect, device number 6 [ 121.765994][ T4276] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 121.792891][ T4276] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.831796][ T4276] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 121.848086][ T4276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.884079][ T4276] hub 2-1:4.0: USB hub found [ 121.986332][ T5168] fido_id[5168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 122.081037][ T4276] hub 2-1:4.0: 2 ports detected [ 122.086337][ T4276] usb 2-1: selecting invalid altsetting 1 [ 122.092164][ T4276] hub 2-1:4.0: Using single TT (err -22) [ 122.281564][ T4276] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 122.294572][ T4276] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 122.356413][ T4276] usb 2-1: USB disconnect, device number 5 [ 122.690141][ T4321] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 122.856446][ T4321] usb 4-1: USB disconnect, device number 5 [ 123.112989][ T5149] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 123.491243][ T5191] netlink: 'syz.0.237': attribute type 12 has an invalid length. [ 123.504837][ T5191] netlink: 'syz.0.237': attribute type 29 has an invalid length. [ 123.512965][ T5191] netlink: 148 bytes leftover after parsing attributes in process `syz.0.237'. [ 123.540446][ T5191] netlink: 'syz.0.237': attribute type 3 has an invalid length. [ 123.555481][ T5191] Zero length message leads to an empty skb [ 123.608301][ T5193] loop3: detected capacity change from 0 to 128 [ 123.661783][ T5193] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.672822][ T5193] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.836117][ T5203] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.845636][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 124.862128][ T5203] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.868532][ T5203] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.874683][ T5203] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 125.299599][ T4288] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 126.440404][ T5227] loop3: detected capacity change from 0 to 4096 [ 126.460438][ T5227] EXT4-fs: Ignoring removed nobh option [ 126.490186][ T5227] EXT4-fs: Ignoring removed bh option [ 126.518443][ T5227] EXT4-fs (loop3): Test dummy encryption mode enabled [ 126.602491][ T5227] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 126.885981][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.892172][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.898425][ T4275] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.048714][ T5246] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.064242][ T5227] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 127.087557][ T5246] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.106410][ T5246] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.271198][ T4808] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.309040][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 127.581740][ T4808] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.720933][ T5255] FAULT_INJECTION: forcing a failure. [ 127.720933][ T5255] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 127.747344][ T4808] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.774394][ T5255] CPU: 0 PID: 5255 Comm: syz.1.259 Not tainted syzkaller #0 [ 127.781794][ T5255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.791907][ T5255] Call Trace: [ 127.795236][ T5255] [ 127.798216][ T5255] dump_stack_lvl+0x188/0x24e [ 127.802965][ T5255] ? show_regs_print_info+0x12/0x12 [ 127.808236][ T5255] ? load_image+0x410/0x410 [ 127.812805][ T5255] ? __lock_acquire+0x7c40/0x7c40 [ 127.817899][ T5255] ? __lock_acquire+0x7c40/0x7c40 [ 127.822993][ T5255] should_fail_ex+0x390/0x4c0 [ 127.827739][ T5255] prepare_alloc_pages+0x1e1/0x5b0 [ 127.832928][ T5255] __alloc_pages+0x130/0x4f0 [ 127.837585][ T5255] ? zone_statistics+0x170/0x170 [ 127.842604][ T5255] ? alloc_pages+0x4dd/0x740 [ 127.847269][ T5255] ? lock_chain_count+0x20/0x20 [ 127.852187][ T5255] __get_free_pages+0x8/0x30 [ 127.856843][ T5255] __se_sys_mincore+0x19e/0x720 [ 127.861750][ T5255] ? syscall_enter_from_user_mode+0x21/0x80 [ 127.867710][ T5255] ? lockdep_hardirqs_on+0x94/0x140 [ 127.873054][ T5255] do_syscall_64+0x4c/0xa0 [ 127.877521][ T5255] ? clear_bhb_loop+0x60/0xb0 [ 127.882243][ T5255] ? clear_bhb_loop+0x60/0xb0 [ 127.886960][ T5255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.892897][ T5255] RIP: 0033:0x7f21e4d9e159 [ 127.897351][ T5255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.917124][ T5255] RSP: 002b:00007f21e5ba2028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 127.925584][ T5255] RAX: ffffffffffffffda RBX: 00007f21e5025fa0 RCX: 00007f21e4d9e159 [ 127.933595][ T5255] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000ffc000 [ 127.941599][ T5255] RBP: 00007f21e4e35024 R08: 0000000000000000 R09: 0000000000000000 [ 127.949603][ T5255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.957601][ T5255] R13: 00007f21e5026038 R14: 00007f21e5025fa0 R15: 00007ffc93d81ae8 [ 127.965614][ T5255] [ 128.089040][ T4808] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.116160][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.116280][ T4287] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.128747][ T4275] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.609645][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.620450][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.631001][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.647380][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.655243][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 129.664075][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.643071][ T5275] chnl_net:caif_netlink_parms(): no params data found [ 131.755951][ T4275] Bluetooth: hci4: command 0x0409 tx timeout [ 132.567187][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.575165][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.839389][ T5328] FAULT_INJECTION: forcing a failure. [ 132.839389][ T5328] name failslab, interval 1, probability 0, space 0, times 0 [ 132.853029][ T5328] CPU: 1 PID: 5328 Comm: syz.3.274 Not tainted syzkaller #0 [ 132.860385][ T5328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.870484][ T5328] Call Trace: [ 132.873814][ T5328] [ 132.876804][ T5328] dump_stack_lvl+0x188/0x24e [ 132.881550][ T5328] ? show_regs_print_info+0x12/0x12 [ 132.886839][ T5328] ? load_image+0x410/0x410 [ 132.891666][ T5328] ? __might_sleep+0xd0/0xd0 [ 132.896308][ T5328] ? __lock_acquire+0x7c40/0x7c40 [ 132.901392][ T5328] ? mark_lock+0x94/0x320 [ 132.905816][ T5328] should_fail_ex+0x390/0x4c0 [ 132.910563][ T5328] should_failslab+0x5/0x20 [ 132.915133][ T5328] slab_pre_alloc_hook+0x59/0x300 [ 132.920232][ T5328] kmem_cache_alloc+0x56/0x2f0 [ 132.925061][ T5328] ? __kernfs_new_node+0xe1/0x7f0 [ 132.930167][ T5328] __kernfs_new_node+0xe1/0x7f0 [ 132.935078][ T5328] ? kernfs_add_one+0x14e/0x8f0 [ 132.939992][ T5328] ? kernfs_new_node+0x250/0x250 [ 132.945016][ T5328] ? kernfs_create_dir_ns+0x10e/0x120 [ 132.950467][ T5328] ? sysfs_create_dir_ns+0x12c/0x290 [ 132.955809][ T5328] ? sysfs_create_dir_ns+0x167/0x290 [ 132.961165][ T5328] ? __lock_acquire+0x7c40/0x7c40 [ 132.966257][ T5328] kernfs_new_node+0x148/0x250 [ 132.971076][ T5328] __kernfs_create_file+0x47/0x2e0 [ 132.976248][ T5328] sysfs_add_file_mode_ns+0x233/0x2f0 [ 132.981716][ T5328] sysfs_create_file_ns+0x128/0x1b0 [ 132.986986][ T5328] ? sysfs_add_bin_file_mode_ns+0x200/0x200 [ 132.992985][ T5328] ? __dev_fwnode+0x4c/0x80 [ 132.997596][ T5328] device_add+0x554/0x1050 [ 133.002080][ T5328] netdev_register_kobject+0x184/0x320 [ 133.007611][ T5328] register_netdevice+0x133a/0x1b80 [ 133.012871][ T5328] ? netif_stacked_transfer_operstate+0x200/0x200 [ 133.019337][ T5328] ? tun_net_initialize+0x154/0x430 [ 133.024595][ T5328] ? tun_setup+0x2b0/0x2b0 [ 133.029111][ T5328] ? alloc_netdev_mqs+0xb56/0xf10 [ 133.034186][ T5328] tun_set_iff+0x82b/0xea0 [ 133.038654][ T5328] __tun_chr_ioctl+0x770/0x1ed0 [ 133.043582][ T5328] ? tun_flow_create+0x310/0x310 [ 133.048611][ T5328] ? bpf_lsm_file_ioctl+0x5/0x10 [ 133.053605][ T5328] ? security_file_ioctl+0x7c/0xa0 [ 133.058783][ T5328] ? tun_chr_poll+0x630/0x630 [ 133.063536][ T5328] __se_sys_ioctl+0xfa/0x170 [ 133.068196][ T5328] do_syscall_64+0x4c/0xa0 [ 133.072663][ T5328] ? clear_bhb_loop+0x60/0xb0 [ 133.077382][ T5328] ? clear_bhb_loop+0x60/0xb0 [ 133.082138][ T5328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.088092][ T5328] RIP: 0033:0x7f9b1419e159 [ 133.092573][ T5328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.112238][ T5328] RSP: 002b:00007f9b15039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.120715][ T5328] RAX: ffffffffffffffda RBX: 00007f9b14425fa0 RCX: 00007f9b1419e159 [ 133.128740][ T5328] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 133.136757][ T5328] RBP: 00007f9b14235024 R08: 0000000000000000 R09: 0000000000000000 [ 133.144765][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.152767][ T5328] R13: 00007f9b14426038 R14: 00007f9b14425fa0 R15: 00007ffd6df2c578 [ 133.160808][ T5328] [ 133.319646][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.327157][ T5275] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.335541][ T5275] device bridge_slave_0 entered promiscuous mode [ 133.345408][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.353384][ T5275] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.363471][ T5275] device bridge_slave_1 entered promiscuous mode [ 133.565900][ T4363] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 133.845839][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 134.409934][ T4808] device hsr_slave_0 left promiscuous mode [ 134.432886][ T4808] device hsr_slave_1 left promiscuous mode [ 134.469728][ T4363] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.481463][ T4808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.489315][ T4363] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 134.514877][ T4808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.555826][ T4363] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.572071][ T4363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.599602][ T5337] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 134.609457][ T4808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.632232][ T4808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.699366][ T4808] device bridge_slave_1 left promiscuous mode [ 134.711998][ T4808] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.790485][ T4808] device bridge_slave_0 left promiscuous mode [ 134.811724][ T4808] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.960037][ T4808] device veth1_macvtap left promiscuous mode [ 135.005603][ T4808] device veth0_macvtap left promiscuous mode [ 135.095019][ T4808] device veth1_vlan left promiscuous mode [ 135.113806][ T4808] device veth0_vlan left promiscuous mode [ 135.151138][ T4321] usb 1-1: USB disconnect, device number 7 [ 135.658021][ T5354] loop2: detected capacity change from 0 to 40427 [ 135.718783][ T5354] F2FS-fs (loop2): invalid crc value [ 135.780280][ T5354] F2FS-fs (loop2): Found nat_bits in checkpoint [ 135.925931][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 136.049872][ T5354] F2FS-fs (loop2): Start checkpoint disabled! [ 136.201985][ T5354] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 136.655861][ T4321] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 136.862926][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.894404][ T4321] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 136.925845][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.937584][ T4321] usb 4-1: config 0 descriptor?? [ 136.978708][ T47] kworker/u4:3: attempt to access beyond end of device [ 136.978708][ T47] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 137.159931][ T4321] usbhid 4-1:0.0: can't add hid device: -71 [ 137.167637][ T4321] usbhid: probe of 4-1:0.0 failed with error -71 [ 137.191747][ T4321] usb 4-1: USB disconnect, device number 6 [ 137.229911][ T4808] team0 (unregistering): Port device team_slave_1 removed [ 137.303355][ T4808] team0 (unregistering): Port device team_slave_0 removed [ 137.426413][ T4808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.551625][ T4808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.746163][ T4321] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.907298][ T22] libceph: connect (1)[c::]:6789 error -101 [ 137.914195][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 137.927652][ T5399] ceph: No mds server is up or the cluster is laggy [ 137.951422][ T22] libceph: connect (1)[c::]:6789 error -101 [ 137.959282][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 137.979028][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.990373][ T4321] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 137.999791][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 138.006740][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.017576][ T4321] usb 4-1: config 0 descriptor?? [ 138.046965][ T4321] hub 4-1:0.0: USB hub found [ 138.205903][ T4276] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 138.250387][ T4321] hub 4-1:0.0: 1 port detected [ 138.280118][ T4808] bond0 (unregistering): Released all slaves [ 138.358111][ T5275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.374924][ T5275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.396140][ T4276] usb 1-1: Using ep0 maxpacket: 32 [ 138.424229][ T5275] team0: Port device team_slave_0 added [ 138.431011][ T4276] usb 1-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40 [ 138.463764][ T4321] hub 4-1:0.0: hub_hub_status failed (err = 0) [ 138.475005][ T4276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.484246][ T4321] hub 4-1:0.0: config failed, can't get hub status (err -5) [ 138.493613][ T4276] usb 1-1: Product: syz [ 138.498340][ T4276] usb 1-1: Manufacturer: syz [ 138.502988][ T4276] usb 1-1: SerialNumber: syz [ 138.588667][ T5275] team0: Port device team_slave_1 added [ 138.699420][ T5275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.735862][ T5275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.843391][ T4276] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 138.855928][ T5275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.902724][ T4276] usb 1-1: USB disconnect, device number 8 [ 138.914254][ T5275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.939463][ T5275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.994790][ T5275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.076504][ T4321] usbhid 4-1:0.0: can't add hid device: -71 [ 139.082617][ T4321] usbhid: probe of 4-1:0.0 failed with error -71 [ 139.156640][ T4321] usb 4-1: USB disconnect, device number 7 [ 139.193967][ T5275] device hsr_slave_0 entered promiscuous mode [ 139.208584][ T5275] device hsr_slave_1 entered promiscuous mode [ 139.268870][ T5275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.285408][ T5275] Cannot create hsr debugfs directory [ 140.738329][ T5275] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.777014][ T5275] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 140.834116][ T5275] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 140.888063][ T5275] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.116332][ T5449] loop1: detected capacity change from 0 to 512 [ 141.160418][ T5275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.216062][ T5449] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.266748][ T5275] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.285036][ T5449] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.303: bad orphan inode 131083 [ 141.308094][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.325060][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.351653][ T5449] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 141.464066][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.484171][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.531476][ T4856] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.538746][ T4856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.633249][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.669145][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.691722][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.719966][ T4856] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.727209][ T4856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.775490][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.829126][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.847006][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.891893][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.949226][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.959721][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.970337][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.983466][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 142.047606][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.070388][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.110507][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.138657][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.167268][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.186779][ T4363] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 142.356071][ T4276] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 142.399681][ T4363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.430638][ T4363] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 142.453272][ T4363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.488469][ T4363] usb 1-1: config 0 descriptor?? [ 142.570643][ T4276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.602842][ T4276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.643124][ T4276] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 142.667352][ T4276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.710470][ T4276] usb 3-1: config 0 descriptor?? [ 142.718590][ T4363] usbhid 1-1:0.0: can't add hid device: -71 [ 142.724703][ T4363] usbhid: probe of 1-1:0.0 failed with error -71 [ 142.771670][ T4363] usb 1-1: USB disconnect, device number 9 [ 143.149108][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.162901][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.184465][ T4276] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 143.203535][ T4276] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 143.216459][ T5275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.222979][ T4276] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 143.264020][ T4276] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 143.284659][ T4276] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 143.336154][ T4276] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 143.358496][ T4363] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 143.568752][ T4363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.601476][ T4363] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 143.646707][ T4363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.689652][ T4363] usb 1-1: config 0 descriptor?? [ 143.717271][ T4363] hub 1-1:0.0: USB hub found [ 143.838562][ T4276] playstation 0003:054C:0DF2.0002: Invalid gyro calibration data for axis (3), disabling calibration. [ 143.870673][ T4276] playstation 0003:054C:0DF2.0002: Invalid gyro calibration data for axis (5), disabling calibration. [ 143.900344][ T4363] hub 1-1:0.0: 1 port detected [ 143.904056][ T4276] playstation 0003:054C:0DF2.0002: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 143.943478][ T4276] playstation 0003:054C:0DF2.0002: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 143.964089][ T5513] FAULT_INJECTION: forcing a failure. [ 143.964089][ T5513] name failslab, interval 1, probability 0, space 0, times 0 [ 143.987353][ T4276] input: HID 054c:0df2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0002/input/input11 [ 144.013633][ T4276] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0002/input/input12 [ 144.035986][ T5513] CPU: 0 PID: 5513 Comm: syz.3.315 Not tainted syzkaller #0 [ 144.043373][ T5513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.053484][ T5513] Call Trace: [ 144.056812][ T5513] [ 144.059794][ T5513] dump_stack_lvl+0x188/0x24e [ 144.064547][ T5513] ? show_regs_print_info+0x12/0x12 [ 144.069820][ T5513] ? load_image+0x410/0x410 [ 144.074392][ T5513] ? __might_sleep+0xd0/0xd0 [ 144.079053][ T5513] ? __lock_acquire+0x7c40/0x7c40 [ 144.084134][ T5513] ? memset+0x1e/0x40 [ 144.088175][ T5513] should_fail_ex+0x390/0x4c0 [ 144.092932][ T5513] should_failslab+0x5/0x20 [ 144.097503][ T5513] slab_pre_alloc_hook+0x59/0x300 [ 144.102605][ T5513] kmem_cache_alloc+0x56/0x2f0 [ 144.107408][ T5513] ? security_inode_alloc+0x30/0x110 [ 144.112742][ T5513] security_inode_alloc+0x30/0x110 [ 144.117890][ T5513] inode_init_always+0x910/0xc90 [ 144.122867][ T5513] new_inode_pseudo+0x91/0x1c0 [ 144.127674][ T5513] new_inode+0x25/0x1d0 [ 144.131936][ T5513] proc_pid_make_inode+0x20/0x1a0 [ 144.137011][ T5513] proc_pident_instantiate+0x69/0x2a0 [ 144.142425][ T5513] proc_pident_lookup+0x1b8/0x260 [ 144.147493][ T5513] __lookup_slow+0x29d/0x3f0 [ 144.152304][ T5513] ? lookup_one_len+0x2d0/0x2d0 [ 144.157203][ T5513] ? down_read+0x1a8/0x2d0 [ 144.161669][ T5513] lookup_slow+0x53/0x70 [ 144.165952][ T5513] link_path_walk+0x976/0xea0 [ 144.170679][ T5513] ? handle_lookup_down+0x130/0x130 [ 144.175928][ T5513] path_openat+0x285/0x2f10 [ 144.180481][ T5513] ? verify_lock_unused+0x140/0x140 [ 144.185725][ T5513] ? do_sys_openat2+0xdd/0x4f0 [ 144.190536][ T5513] ? do_filp_open+0x420/0x420 [ 144.195261][ T5513] do_filp_open+0x1ee/0x420 [ 144.199803][ T5513] ? vfs_tmpfile+0x470/0x470 [ 144.204434][ T5513] ? noop_direct_IO+0x10/0x10 [ 144.209164][ T5513] ? _raw_spin_unlock+0x24/0x40 [ 144.214050][ T5513] ? alloc_fd+0x590/0x640 [ 144.218429][ T5513] do_sys_openat2+0x14b/0x4f0 [ 144.223144][ T5513] ? do_sys_open+0xe0/0xe0 [ 144.227598][ T5513] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 144.233618][ T5513] ? lock_chain_count+0x20/0x20 [ 144.238507][ T5513] __x64_sys_openat+0x135/0x160 [ 144.243406][ T5513] do_syscall_64+0x4c/0xa0 [ 144.247861][ T5513] ? clear_bhb_loop+0x60/0xb0 [ 144.252579][ T5513] ? clear_bhb_loop+0x60/0xb0 [ 144.257304][ T5513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.263234][ T5513] RIP: 0033:0x7f9b1415e98e [ 144.267686][ T5513] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 144.287326][ T5513] RSP: 002b:00007f9b15038ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 144.295774][ T5513] RAX: ffffffffffffffda RBX: 00007f9b150396c0 RCX: 00007f9b1415e98e [ 144.303770][ T5513] RDX: 0000000000000002 RSI: 00007f9b15038f90 RDI: ffffffffffffff9c [ 144.311770][ T5513] RBP: 00007f9b14235024 R08: 0000000000000000 R09: 0000000000000000 [ 144.319766][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.327768][ T5513] R13: 00007f9b14426038 R14: 00007f9b14425fa0 R15: 00007ffd6df2c578 [ 144.335789][ T5513] [ 144.350132][ T4363] hub 1-1:0.0: hub_hub_status failed (err = 0) [ 144.368246][ T4363] hub 1-1:0.0: config failed, can't get hub status (err -5) [ 144.405947][ T4276] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0002/input/input13 [ 144.472548][ T4276] playstation 0003:054C:0DF2.0002: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 144.548084][ T4276] usb 3-1: USB disconnect, device number 5 [ 144.853840][ T5521] fido_id[5521]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 144.886425][ T5524] loop1: detected capacity change from 0 to 512 [ 144.943068][ T5524] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.317: missing EA_INODE flag [ 144.973553][ T4363] usbhid 1-1:0.0: can't add hid device: -71 [ 144.985111][ T4363] usbhid: probe of 1-1:0.0 failed with error -71 [ 145.011131][ T5524] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.317: error while reading EA inode 2 err=-117 [ 145.076729][ T4363] usb 1-1: USB disconnect, device number 10 [ 145.106833][ T5524] EXT4-fs (loop1): 1 orphan inode deleted [ 145.112670][ T5524] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 145.264003][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.315150][ T5272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.390575][ T5532] input: syz0 as /devices/virtual/input/input14 [ 145.409063][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.420686][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.450994][ T5275] device veth0_vlan entered promiscuous mode [ 145.460366][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.482405][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.545094][ T5275] device veth1_vlan entered promiscuous mode [ 145.627421][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 145.686990][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.702903][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.712701][ T5537] loop2: detected capacity change from 0 to 1024 [ 145.732314][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.769698][ T5537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.807170][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.849656][ T5275] device veth0_macvtap entered promiscuous mode [ 145.869429][ T5537] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 145.939025][ T5275] device veth1_macvtap entered promiscuous mode [ 145.969645][ T5550] EXT4-fs error (device loop2) in ext4_setattr:5695: Corrupt filesystem [ 146.141012][ T5275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.202102][ T5275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.222681][ T5275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.234690][ T5275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.258891][ T5275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.274047][ T5275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.285477][ T5275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.303708][ T5275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.334976][ T5275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.350396][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 146.386349][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.395254][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.451766][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.506049][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.515856][ T4276] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 146.543125][ T5275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.587248][ T5564] loop1: detected capacity change from 0 to 128 [ 146.624673][ T5275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.689428][ T5275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.718216][ T4276] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 146.725189][ T5275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.765824][ T4276] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.777566][ T5275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.804822][ T4276] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 146.820402][ T5275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.835042][ T4276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.844382][ T5275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.872843][ T4276] usb 4-1: Product: syz [ 146.877304][ T5275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.878178][ T4276] usb 4-1: Manufacturer: syz [ 146.901115][ T4276] usb 4-1: SerialNumber: syz [ 146.953690][ T5275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.955621][ T4276] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input15 [ 147.008738][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.041103][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.081966][ T5275] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.111743][ T5275] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.152898][ T5275] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.189259][ T5275] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.249818][ T3623] bcm5974 4-1:1.0: could not read from device [ 147.278203][ T4276] bcm5974 4-1:1.0: could not read from device [ 147.295282][ T5582] overlayfs: failed to clone upperpath [ 147.331880][ T3623] bcm5974 4-1:1.0: could not read from device [ 147.417242][ T4276] input: failed to attach handler mousedev to device input15, error: -5 [ 147.484420][ T3623] bcm5974 4-1:1.0: could not read from device [ 147.507955][ T4276] usb 4-1: USB disconnect, device number 8 [ 147.557482][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.565387][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.651712][ T5587] loop3: detected capacity change from 0 to 512 [ 147.696165][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.711552][ T5588] loop2: detected capacity change from 0 to 512 [ 147.755499][ T5588] EXT4-fs: Ignoring removed bh option [ 147.761642][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.773605][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.783064][ T5588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.801870][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.840600][ T5587] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.331: missing EA_INODE flag [ 147.889029][ T5588] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 147.916669][ T5588] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 147.929531][ T5587] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.331: error while reading EA inode 2 err=-117 [ 148.013519][ T5588] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.330: Corrupt directory, running e2fsck is recommended [ 148.087733][ T5587] EXT4-fs (loop3): 1 orphan inode deleted [ 148.095036][ T5587] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 148.119876][ T5588] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 148.156821][ T5588] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.330: corrupted in-inode xattr [ 148.233792][ T5588] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.330: couldn't read orphan inode 15 (err -117) [ 148.300231][ T5588] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 148.432050][ T5588] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 148.466066][ T5588] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 148.472379][ T5602] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 148.521190][ T5588] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.330: Corrupt directory, running e2fsck is recommended [ 148.603969][ T5588] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 148.669969][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 148.696832][ T5588] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 148.786738][ T5588] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.330: Corrupt directory, running e2fsck is recommended [ 148.872373][ T5605] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 148.906053][ T5605] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 148.989544][ T5605] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.330: Corrupt directory, running e2fsck is recommended [ 149.017618][ T5615] loop0: detected capacity change from 0 to 8 [ 149.180670][ T5588] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 149.219392][ T5615] SQUASHFS error: Failed to read block 0x6e6: -5 [ 149.263857][ T5615] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 149.282698][ T5605] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #2: block 3: comm syz.2.330: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 149.338119][ T5615] SQUASHFS error: Unable to read directory block [6e4:0] [ 149.372589][ T5622] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 149.463654][ T5622] SQUASHFS error: Unable to read directory block [6aa:26] [ 149.518624][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 150.234816][ T33] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.521837][ T33] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.662402][ T33] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.831398][ T33] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.825323][ T5671] loop0: detected capacity change from 0 to 1024 [ 151.877107][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.895672][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.904897][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.916074][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.925220][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.933544][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.983125][ T5678] FAULT_INJECTION: forcing a failure. [ 151.983125][ T5678] name failslab, interval 1, probability 0, space 0, times 0 [ 152.104048][ T5678] CPU: 0 PID: 5678 Comm: syz.5.357 Not tainted syzkaller #0 [ 152.111459][ T5678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.121546][ T5678] Call Trace: [ 152.124879][ T5678] [ 152.127834][ T5678] dump_stack_lvl+0x188/0x24e [ 152.132549][ T5678] ? show_regs_print_info+0x12/0x12 [ 152.137801][ T5678] ? load_image+0x410/0x410 [ 152.142390][ T5678] ? __might_sleep+0xd0/0xd0 [ 152.147028][ T5678] ? __lock_acquire+0x7c40/0x7c40 [ 152.152133][ T5678] should_fail_ex+0x390/0x4c0 [ 152.156887][ T5678] should_failslab+0x5/0x20 [ 152.161446][ T5678] slab_pre_alloc_hook+0x59/0x300 [ 152.166539][ T5678] ? __lock_acquire+0x138a/0x7c40 [ 152.171628][ T5678] ? __kernfs_new_node+0xa6/0x7f0 [ 152.176711][ T5678] __kmem_cache_alloc_node+0x4f/0x270 [ 152.182142][ T5678] ? mark_lock+0x94/0x320 [ 152.186545][ T5678] ? __kernfs_new_node+0xa6/0x7f0 [ 152.191628][ T5678] __kmalloc_node_track_caller+0xa0/0x240 [ 152.197433][ T5678] kstrdup_const+0x56/0x90 [ 152.201921][ T5678] __kernfs_new_node+0xa6/0x7f0 [ 152.206834][ T5678] ? kernfs_new_node+0x250/0x250 [ 152.211827][ T5678] ? mark_lock+0x94/0x320 [ 152.216238][ T5678] ? mark_lock+0x94/0x320 [ 152.219052][ T5671] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 152.220624][ T5678] ? __lock_acquire+0x138a/0x7c40 [ 152.220706][ T5678] kernfs_new_node+0x148/0x250 [ 152.220741][ T5678] __kernfs_create_file+0x47/0x2e0 [ 152.242475][ T5678] cgroup_addrm_files+0x80c/0xd50 [ 152.243373][ T5671] hfsplus: xattr search failed [ 152.247556][ T5678] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 152.247590][ T5678] ? mark_lock+0x94/0x320 [ 152.247626][ T5678] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 152.247695][ T5678] ? css_next_descendant_pre+0x179/0x250 [ 152.247724][ T5678] css_populate_dir+0x1da/0x3b0 [ 152.247753][ T5678] cgroup_mkdir+0xc61/0xe70 [ 152.247788][ T5678] ? css_task_iter_end+0x280/0x280 [ 152.247825][ T5678] ? kernfs_iop_permission+0x26d/0x350 [ 152.247853][ T5678] ? css_task_iter_end+0x280/0x280 [ 152.247879][ T5678] kernfs_iop_mkdir+0x23d/0x3d0 [ 152.247913][ T5678] vfs_mkdir+0x386/0x570 [ 152.247953][ T5678] do_mkdirat+0x1d8/0x440 [ 152.247981][ T5678] ? vfs_mkdir+0x570/0x570 [ 152.248015][ T5678] __x64_sys_mkdirat+0x85/0x90 [ 152.248040][ T5678] do_syscall_64+0x4c/0xa0 [ 152.248071][ T5678] ? clear_bhb_loop+0x60/0xb0 [ 152.248101][ T5678] ? clear_bhb_loop+0x60/0xb0 [ 152.248136][ T5678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.248167][ T5678] RIP: 0033:0x7fa15d19e159 [ 152.248190][ T5678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.248211][ T5678] RSP: 002b:00007fa15b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 152.248238][ T5678] RAX: ffffffffffffffda RBX: 00007fa15d425fa0 RCX: 00007fa15d19e159 [ 152.248256][ T5678] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 152.248272][ T5678] RBP: 00007fa15d235024 R08: 0000000000000000 R09: 0000000000000000 [ 152.248287][ T5678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.407529][ T5678] R13: 00007fa15d426038 R14: 00007fa15d425fa0 R15: 00007fff61fadba8 [ 152.415579][ T5678] [ 152.515810][ T5678] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 [ 152.536744][ T5272] hfsplus: b-tree write err: -5, ino 25 [ 152.555072][ T5272] hfsplus: b-tree write err: -5, ino 4 [ 152.576252][ T5272] hfsplus: b-tree write err: -5, ino 2 [ 152.586031][ T5272] hfsplus: b-tree write err: -5, ino 28 [ 153.050844][ T5696] loop0: detected capacity change from 0 to 2048 [ 153.113816][ T5696] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.303451][ T5673] chnl_net:caif_netlink_parms(): no params data found [ 153.929669][ T5673] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.944211][ T5673] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.970732][ T5673] device bridge_slave_0 entered promiscuous mode [ 153.995942][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 154.215125][ T5673] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.223038][ T5673] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.253769][ T5673] device bridge_slave_1 entered promiscuous mode [ 154.372511][ T5720] FAULT_INJECTION: forcing a failure. [ 154.372511][ T5720] name failslab, interval 1, probability 0, space 0, times 0 [ 154.414862][ T5673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.434426][ T5720] CPU: 1 PID: 5720 Comm: syz.5.368 Not tainted syzkaller #0 [ 154.441924][ T5720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.452035][ T5720] Call Trace: [ 154.455366][ T5720] [ 154.458361][ T5720] dump_stack_lvl+0x188/0x24e [ 154.463106][ T5720] ? show_regs_print_info+0x12/0x12 [ 154.468362][ T5720] ? load_image+0x410/0x410 [ 154.472905][ T5720] ? __might_sleep+0xd0/0xd0 [ 154.477530][ T5720] ? __lock_acquire+0x7c40/0x7c40 [ 154.482607][ T5720] should_fail_ex+0x390/0x4c0 [ 154.487329][ T5720] should_failslab+0x5/0x20 [ 154.491880][ T5720] slab_pre_alloc_hook+0x59/0x300 [ 154.496945][ T5720] ? kvmalloc_node+0x6c/0x180 [ 154.501673][ T5720] __kmem_cache_alloc_node+0x4f/0x270 [ 154.507084][ T5720] ? __kmem_cache_alloc_node+0x19d/0x270 [ 154.512758][ T5720] ? kvmalloc_node+0x6c/0x180 [ 154.517483][ T5720] __kmalloc_node+0xa2/0x240 [ 154.522116][ T5720] kvmalloc_node+0x6c/0x180 [ 154.526660][ T5720] nf_tables_newchain+0x1dae/0x2a30 [ 154.531913][ T5720] ? nf_tables_deltable+0xd90/0xd90 [ 154.537166][ T5720] ? __lock_acquire+0x7c40/0x7c40 [ 154.542241][ T5720] ? nf_tables_newtable+0xce0/0x1680 [ 154.547599][ T5720] ? __nla_parse+0x3c/0x50 [ 154.552063][ T5720] nfnetlink_rcv+0x1119/0x2470 [ 154.556887][ T5720] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 154.562478][ T5720] ? ref_tracker_free+0x682/0x830 [ 154.567556][ T5720] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.572782][ T5720] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 154.578275][ T5720] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.583511][ T5720] netlink_unicast+0x7ad/0x920 [ 154.588374][ T5720] netlink_sendmsg+0x8ad/0xbd0 [ 154.593176][ T5720] ? netlink_getsockopt+0x550/0x550 [ 154.598403][ T5720] ? apparmor_socket_sendmsg+0x8a/0x330 [ 154.603986][ T5720] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 154.609305][ T5720] ? security_socket_sendmsg+0x7c/0xa0 [ 154.614815][ T5720] ? netlink_getsockopt+0x550/0x550 [ 154.620051][ T5720] ____sys_sendmsg+0x5ed/0x9a0 [ 154.624862][ T5720] ? __sys_sendmsg_sock+0x30/0x30 [ 154.629920][ T5720] ? __import_iovec+0x306/0x510 [ 154.634811][ T5720] ? import_iovec+0x6f/0xa0 [ 154.639359][ T5720] ___sys_sendmsg+0x2a2/0x360 [ 154.644081][ T5720] ? __sys_sendmsg+0x2a0/0x2a0 [ 154.648939][ T5720] __se_sys_sendmsg+0x1c3/0x2b0 [ 154.653842][ T5720] ? __x64_sys_sendmsg+0x80/0x80 [ 154.658843][ T5720] ? lockdep_hardirqs_on+0x94/0x140 [ 154.664082][ T5720] do_syscall_64+0x4c/0xa0 [ 154.668539][ T5720] ? clear_bhb_loop+0x60/0xb0 [ 154.673256][ T5720] ? clear_bhb_loop+0x60/0xb0 [ 154.677976][ T5720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.683903][ T5720] RIP: 0033:0x7fa15d19e159 [ 154.688345][ T5720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.707982][ T5720] RSP: 002b:00007fa15b3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.716419][ T5720] RAX: ffffffffffffffda RBX: 00007fa15d425fa0 RCX: 00007fa15d19e159 [ 154.724413][ T5720] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000004 [ 154.732405][ T5720] RBP: 00007fa15d235024 R08: 0000000000000000 R09: 0000000000000000 [ 154.740399][ T5720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.748394][ T5720] R13: 00007fa15d426038 R14: 00007fa15d425fa0 R15: 00007fff61fadba8 [ 154.756410][ T5720] [ 154.772176][ T33] device hsr_slave_0 left promiscuous mode [ 154.779215][ T33] device hsr_slave_1 left promiscuous mode [ 154.786134][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.793659][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.812345][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.825033][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.847073][ T33] device bridge_slave_1 left promiscuous mode [ 154.853518][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.879080][ C0] [ 154.881585][ C0] ================================ [ 154.886740][ C0] WARNING: inconsistent lock state [ 154.891902][ C0] syzkaller #0 Not tainted [ 154.896361][ C0] -------------------------------- [ 154.901517][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 154.908410][ C0] ksoftirqd/0/15 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 154.914781][ C0] ffff888146ec6130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x109/0x250 [ 154.924158][ C0] {SOFTIRQ-ON-W} state was registered at: [ 154.929915][ C0] lock_acquire+0x1bb/0x4a0 [ 154.934568][ C0] lock_sock_nested+0x44/0x100 [ 154.939481][ C0] x25_bind+0x1aa/0x3e0 [ 154.943793][ C0] __sys_bind+0x2e9/0x3e0 [ 154.948268][ C0] __x64_sys_bind+0x76/0x80 [ 154.952912][ C0] do_syscall_64+0x4c/0xa0 [ 154.957480][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.963544][ C0] irq event stamp: 790722 [ 154.967912][ C0] hardirqs last enabled at (790722): [] __local_bh_enable_ip+0x136/0x1c0 [ 154.978034][ C0] hardirqs last disabled at (790721): [] __local_bh_enable_ip+0xd7/0x1c0 [ 154.980452][ T5725] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted [ 154.988044][ C0] softirqs last enabled at (790664): [] run_ksoftirqd+0xa4/0x100 [ 154.988078][ C0] softirqs last disabled at (790669): [] run_ksoftirqd+0xa4/0x100 [ 154.988102][ C0] [ 154.988102][ C0] other info that might help us debug this: [ 154.988109][ C0] Possible unsafe locking scenario: [ 154.988109][ C0] [ 154.988115][ C0] CPU0 [ 154.988118][ C0] ---- [ 154.988122][ C0] lock(sk_lock-AF_X25); [ 154.988138][ C0] [ 154.988141][ C0] lock(sk_lock-AF_X25); [ 154.988154][ C0] [ 154.988154][ C0] *** DEADLOCK *** [ 154.988154][ C0] [ 154.988159][ C0] 1 lock held by ksoftirqd/0/15: [ 154.988171][ C0] #0: ffffffff8cb2dc20 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_core+0x30/0x230 [ 154.988235][ C0] [ 154.988235][ C0] stack backtrace: [ 154.988243][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 154.988263][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.988274][ C0] Call Trace: [ 154.988280][ C0] [ 154.988287][ C0] dump_stack_lvl+0x188/0x24e [ 155.108890][ C0] ? show_regs_print_info+0x12/0x12 [ 155.114138][ C0] valid_state+0x13b/0x1d0 [ 155.118590][ C0] mark_lock_irq+0xa9/0x900 [ 155.123120][ C0] ? stack_trace_save+0xa6/0xf0 [ 155.127996][ C0] ? save_trace+0xbb0/0xbb0 [ 155.132530][ C0] ? mark_lock+0x94/0x320 [ 155.136886][ C0] ? save_trace+0x5a/0xbb0 [ 155.141329][ C0] mark_lock+0x208/0x320 [ 155.145616][ C0] __lock_acquire+0xce0/0x7c40 [ 155.150421][ C0] ? debug_objects_fill_pool+0x87/0x780 [ 155.155998][ C0] ? verify_lock_unused+0x140/0x140 [ 155.161227][ C0] ? verify_lock_unused+0x140/0x140 [ 155.166457][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 155.172470][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 155.177527][ C0] ? lock_chain_count+0x20/0x20 [ 155.182414][ C0] lock_acquire+0x1bb/0x4a0 [ 155.186944][ C0] ? x25_kill_by_neigh+0x109/0x250 [ 155.192078][ C0] ? x25_kill_by_neigh+0xff/0x250 [ 155.197128][ C0] ? read_lock_is_recursive+0x10/0x10 [ 155.202522][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 155.207914][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 155.213136][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 155.218527][ C0] ? _local_bh_enable+0xa0/0xa0 [ 155.223396][ C0] lock_sock_nested+0x44/0x100 [ 155.228184][ C0] ? x25_kill_by_neigh+0x109/0x250 [ 155.233329][ C0] x25_kill_by_neigh+0x109/0x250 [ 155.238349][ C0] x25_lapb_receive_frame+0x1a3/0xf20 [ 155.243755][ C0] ? psi_task_switch+0x400/0x740 [ 155.248715][ C0] ? netif_receive_skb_core+0x30/0x230 [ 155.254197][ C0] ? netif_receive_skb_core+0x30/0x230 [ 155.259715][ C0] ? x25_device_event+0x250/0x250 [ 155.264780][ C0] netif_receive_skb_core+0x166/0x230 [ 155.270185][ C0] lapbeth_napi_poll+0x3e/0x80 [ 155.274976][ C0] __napi_poll+0xbb/0x460 [ 155.279337][ C0] net_rx_action+0x622/0xbc0 [ 155.283947][ C0] ? net_tx_action+0x930/0x930 [ 155.288730][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 155.294738][ C0] ? __bpf_trace_tasklet+0x10/0x10 [ 155.299875][ C0] ? lock_chain_count+0x20/0x20 [ 155.304758][ C0] ? finish_task_switch+0x262/0x8e0 [ 155.309987][ C0] handle_softirqs+0x291/0x910 [ 155.314779][ C0] ? run_ksoftirqd+0xa4/0x100 [ 155.319479][ C0] ? do_softirq+0x210/0x210 [ 155.324017][ C0] run_ksoftirqd+0xa4/0x100 [ 155.328556][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 155.333775][ C0] ? takeover_tasklets+0x770/0x770 [ 155.338905][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 155.344162][ C0] smpboot_thread_fn+0x667/0xa30 [ 155.349130][ C0] ? smpboot_thread_fn+0x49/0xa30 [ 155.354184][ C0] kthread+0x29d/0x330 [ 155.358280][ C0] ? cpu_report_death+0x250/0x250 [ 155.363340][ C0] ? kthread_blkcg+0xd0/0xd0 [ 155.367956][ C0] ret_from_fork+0x1f/0x30 [ 155.372408][ C0] [ 155.375579][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3506 [ 155.384418][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 15, name: ksoftirqd/0 [ 155.393443][ C0] preempt_count: 100, expected: 0 [ 155.398534][ C0] RCU nest depth: 1, expected: 0 [ 155.403510][ C0] INFO: lockdep is turned off. [ 155.408342][ C0] Preemption disabled at: [ 155.408354][ C0] [] handle_softirqs+0xfd/0x910 [ 155.419222][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 155.426566][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.436671][ C0] Call Trace: [ 155.440027][ C0] [ 155.443014][ C0] dump_stack_lvl+0x188/0x24e [ 155.447764][ C0] ? show_regs_print_info+0x12/0x12 [ 155.453027][ C0] ? load_image+0x410/0x410 [ 155.457578][ C0] ? handle_softirqs+0xfd/0x910 [ 155.462447][ C0] __might_resched+0x489/0x5f0 [ 155.467260][ C0] ? handle_softirqs+0xfd/0x910 [ 155.472132][ C0] ? __might_sleep+0xd0/0xd0 [ 155.476772][ C0] ? read_lock_is_recursive+0x10/0x10 [ 155.482198][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 155.487609][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 155.492831][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 155.498218][ C0] ? _local_bh_enable+0xa0/0xa0 [ 155.503085][ C0] lock_sock_nested+0x59/0x100 [ 155.507873][ C0] x25_kill_by_neigh+0x109/0x250 [ 155.512861][ C0] x25_lapb_receive_frame+0x1a3/0xf20 [ 155.518298][ C0] ? psi_task_switch+0x400/0x740 [ 155.523296][ C0] ? netif_receive_skb_core+0x30/0x230 [ 155.528834][ C0] ? netif_receive_skb_core+0x30/0x230 [ 155.534356][ C0] ? x25_device_event+0x250/0x250 [ 155.539441][ C0] netif_receive_skb_core+0x166/0x230 [ 155.544875][ C0] lapbeth_napi_poll+0x3e/0x80 [ 155.549697][ C0] __napi_poll+0xbb/0x460 [ 155.554088][ C0] net_rx_action+0x622/0xbc0 [ 155.558742][ C0] ? net_tx_action+0x930/0x930 [ 155.563556][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 155.569590][ C0] ? __bpf_trace_tasklet+0x10/0x10 [ 155.574757][ C0] ? lock_chain_count+0x20/0x20 [ 155.579669][ C0] ? finish_task_switch+0x262/0x8e0 [ 155.584930][ C0] handle_softirqs+0x291/0x910 [ 155.589745][ C0] ? run_ksoftirqd+0xa4/0x100 [ 155.594474][ C0] ? do_softirq+0x210/0x210 [ 155.599032][ C0] run_ksoftirqd+0xa4/0x100 [ 155.603595][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 155.608838][ C0] ? takeover_tasklets+0x770/0x770 [ 155.613983][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 155.619216][ C0] smpboot_thread_fn+0x667/0xa30 [ 155.624206][ C0] ? smpboot_thread_fn+0x49/0xa30 [ 155.629291][ C0] kthread+0x29d/0x330 [ 155.634527][ C0] ? cpu_report_death+0x250/0x250 [ 155.639596][ C0] ? kthread_blkcg+0xd0/0xd0 [ 155.644224][ C0] ret_from_fork+0x1f/0x30 [ 155.648693][ C0] [ 155.662035][ T33] device bridge_slave_0 left promiscuous mode [ 155.680269][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.719790][ T33] device veth1_macvtap left promiscuous mode [ 155.735694][ T33] device veth0_macvtap left promiscuous mode [ 155.765927][ T33] device veth1_vlan left promiscuous mode [ 155.780923][ T33] device veth0_vlan left promiscuous mode [ 155.860071][ T4363] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 155.997977][ T5744] zram0: detected capacity change from 0 to 8 [ 156.008112][ T5744] zram: Can't change algorithm for initialized device [ 156.075807][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 156.102267][ T5730] overlayfs: failed to clone upperpath [ 156.136262][ T4321] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 156.255211][ T33] team0 (unregistering): Port device team_slave_1 removed [ 156.296289][ T33] team0 (unregistering): Port device team_slave_0 removed [ 156.331135][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.368860][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.495475][ T33] bond0 (unregistering): Released all slaves [ 156.531478][ T5673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.547458][ T26] audit: type=1800 audit(1788487723.934:11): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.374" name="file0" dev="fuse" ino=68719476738 res=0 errno=0 [ 156.588507][ T5673] team0: Port device team_slave_0 added [ 156.613930][ T5673] team0: Port device team_slave_1 added [ 156.652020][ T5673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.660782][ T4321] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 156.663530][ T5739] ceph: No mds server is up or the cluster is laggy [ 156.681260][ T5673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.728656][ T5673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.741494][ T5673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.750044][ T5673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.786049][ T5673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.851804][ T5673] device hsr_slave_0 entered promiscuous mode [ 156.859278][ T5673] device hsr_slave_1 entered promiscuous mode [ 156.866195][ T5673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.873965][ T5673] Cannot create hsr debugfs directory [ 156.983560][ T5673] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 156.995007][ T5673] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 157.004765][ T5673] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 157.017735][ T5673] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 157.112824][ T5673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.129368][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.144751][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.158252][ T5673] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.174005][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.187851][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.199442][ T4857] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.206623][ T4857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.217642][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.238641][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.248349][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.258811][ T4857] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.266003][ T4857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.278198][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.297676][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.307014][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.327734][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.338062][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.347475][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.360642][ T5673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.373300][ T5673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.382110][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.602748][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.612222][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.624546][ T5673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.907635][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.917167][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.939830][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.951466][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.962252][ T5673] device veth0_vlan entered promiscuous mode [ 157.972897][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.981927][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.994461][ T5673] device veth1_vlan entered promiscuous mode [ 158.019905][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 158.029284][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 158.039409][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.049714][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.060913][ T5673] device veth0_macvtap entered promiscuous mode [ 158.072107][ T5673] device veth1_macvtap entered promiscuous mode [ 158.092020][ T5673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.103856][ T5673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.116926][ T5673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.128624][ T5673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.139729][ T5673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.151095][ T5673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.163913][ T5673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.166260][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 158.181652][ T5673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.193142][ T5673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.204172][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.213624][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.223173][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.232236][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.247186][ T5673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.260093][ T5673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.271937][ T5673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.284318][ T5673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.294812][ T5673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.305949][ T5673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.316424][ T5673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.327232][ T5673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.338737][ T5673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.349385][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.358230][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.377208][ T5673] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.395905][ T5673] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.404676][ T5673] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.421426][ T5673] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.463110][ T5673] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 158.494650][ T4857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.497730][ T5673] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 158.513877][ T4857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.523185][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.549440][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.559021][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.568296][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.236083][ T4275] Bluetooth: hci3: command 0x0419 tx timeout