last executing test programs: 2m23.531639316s ago: executing program 1 (id=2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010100}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000540)={@void, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x3, 0x74, 0x68, 0x4000, 0x7, 0x1, 0x0, @empty=0x1c, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x6, 0x3, 0x0, {0x16, 0x4, 0x2, 0x34, 0x7, 0x65, 0x8, 0x2, 0x2f, 0x1, @multicast1, @local, {[@timestamp_addr={0x44, 0x3c, 0x27, 0x1, 0x2, [{@multicast1, 0x1ff}, {@broadcast, 0x5}, {@multicast2, 0x80000001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@local, 0xc1ec}, {@loopback, 0xe}, {@loopback, 0x5}]}, @cipso={0x86, 0x6, 0x2}]}}}}}}}}, 0x8a) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) sendmsg$netlink(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="c4000000120001000000000000000000100000000c0000000000000000000000a1001000"], 0xc4}], 0x1}, 0x0) 2m23.211039656s ago: executing program 1 (id=6): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x9, 'r\''}, @main=@item_012={0x1, 0x0, 0x9, 'p'}]}}, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x20020, &(0x7f0000000080)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'xino=on'}}], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x0, 0x0, 0xfffffda7}, &(0x7f0000001500)=[{}]) getdents64(r1, &(0x7f0000000400)=""/4096, 0x1000) 2m21.598113628s ago: executing program 1 (id=10): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8920, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0xc1) io_setup(0x4, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x0, 0xffff, r2, 0x0, 0x0, 0x4, 0x0, 0x0, r2}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0xb522f000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80202, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={@mcast1, @local, @remote, 0xff, 0x5, 0x9, 0x500, 0x5, 0x220006c}) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r6, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x3, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x5, 0x20, 0x0, 0x5, 0x9, 0x6}}, 0x38) close(r6) creat(&(0x7f0000000000)='./file0\x00', 0x40) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mount$9p_unix(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e733d756e69782c766572e6a000003d3970323030302e8b2c00"]) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) clock_getres(0x3, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000e1", @ANYRES16=r8, @ANYBLOB="00012dbd7000fddbdf2504000000080002000400000005000500100000000800020005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r9 = socket$inet_tcp(0x2, 0x1, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000240)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) 2m4.674970799s ago: executing program 32 (id=10): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8920, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0xc1) io_setup(0x4, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x0, 0xffff, r2, 0x0, 0x0, 0x4, 0x0, 0x0, r2}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0xb522f000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80202, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={@mcast1, @local, @remote, 0xff, 0x5, 0x9, 0x500, 0x5, 0x220006c}) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r6, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x3, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x5, 0x20, 0x0, 0x5, 0x9, 0x6}}, 0x38) close(r6) creat(&(0x7f0000000000)='./file0\x00', 0x40) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mount$9p_unix(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e733d756e69782c766572e6a000003d3970323030302e8b2c00"]) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) clock_getres(0x3, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000e1", @ANYRES16=r8, @ANYBLOB="00012dbd7000fddbdf2504000000080002000400000005000500100000000800020005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r9 = socket$inet_tcp(0x2, 0x1, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000240)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) 20.207511495s ago: executing program 0 (id=989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) preadv(r1, &(0x7f0000001d80)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1, 0xfffff001, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x10, 0x0, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4c088}, 0x0) 20.171828996s ago: executing program 0 (id=990): r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0xfffffffffffffffe, 0x8) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r5, r5) fchown(r2, r4, r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r7, 0x1, 0xa, 0x0, &(0x7f00000015c0)) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000e40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000940)={0x4bc, 0x1, 0x5, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [{{0x254, 0x1, {{0x2, 0x8000}, 0x8, 0x37, 0x2, 0x90, 0xa, 'syz1\x00', "9500bb115f4ab2cd740e58ef48dc4eb5011c2e8b011240ad07fb6a2fa8be9aca", "6d6e0f8470c9f9c1268459deb4e07eb8de691bfd9d84adc53a9046dbc166af08", [{0x43, 0x1, {0x1, 0x8}}, {0x1, 0x5, {0x3, 0x3}}, {0x4, 0x5, {0x0, 0x9}}, {0x101, 0x9, {0x0, 0x4}}, {0x7, 0x2, {0x3, 0x8}}, {0x0, 0x1fec, {0x3, 0x7}}, {0x7, 0xffff, {0x2, 0x5}}, {0x81, 0x8, {0x0, 0x3ff}}, {0x7, 0x5, {0xfac1b782823d324e, 0x3}}, {0x4, 0x5, {0x2, 0x1}}, {0x0, 0xff81, {0x2, 0x3}}, {0xfff6, 0x5, {0x3, 0x1}}, {0xb, 0xbc8f, {0x0, 0x9}}, {0xe9, 0xfc00, {0x3, 0xffffffac}}, {0x5b00, 0x1, {0x0, 0x68fa}}, {0x1ff, 0x4, {0x1, 0x8001}}, {0x1, 0x400, {0x0, 0x5}}, {0xfff, 0xf38, {0x1, 0x8}}, {0x4, 0x67a, {0x2, 0x7}}, {0x3efc, 0x8000, {0x2, 0x1}}, {0xe7aa, 0x7, {0x2, 0x3}}, {0x7, 0x6, {0x1, 0x8}}, {0x9, 0xffff, {0x1, 0x50000}}, {0x6, 0x8, {0x2, 0xfffffff7}}, {0x401, 0x3, {0x2, 0xe80}}, {0x7, 0x2, {0x0, 0x383}}, {0x9, 0x62a, {0x0, 0x7}}, {0x4, 0x81, {0x0, 0xff}}, {0x80, 0x3, {0x2, 0x30a}}, {0xe, 0x80, {0x0, 0x4}}, {0x6, 0x40, {0x3, 0x101}}, {0xc, 0x5, {0x3, 0x2}}, {0x611, 0x1, {0x1, 0x4}}, {0x4, 0x3, {0x3, 0x3eba}}, {0x6, 0x0, {0x1, 0x8}}, {0x9, 0x2346, {0x1, 0xffffff72}}, {0xfff0, 0x4, {0x1, 0x4}}, {0xfe01, 0xeafd, {0x1, 0x5}}, {0x2, 0xc, {0x0, 0x2}}, {0xc0, 0xe, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x6, 0x9, 0x2a1, 0xfffc, 0x26, 'syz0\x00', "7d60e22ba77eb388461ce81b15d04ba9a012eec831bfc15f606534d6a3f884b1", "a120b00ef524b41da129bebe4965be22dfe670efa89f830c3a9c4c049a51f1b5", [{0x6, 0xe, {0x0, 0x8}}, {0x9, 0x7c04, {0x1, 0x2}}, {0x9, 0x8000, {0x3, 0xd7cc}}, {0xfffd, 0x7, {0x2}}, {0x6704, 0x5, {0x2, 0x2}}, {0x6, 0x7fff, {0x0, 0xcfe}}, {0x1d00, 0x4f, {0x1, 0x81}}, {0xc8, 0x81, {0x2}}, {0x40, 0x9, {0x2, 0x8}}, {0x7, 0x101, {0x3, 0x8}}, {0xf91, 0x1, {0x3, 0x81}}, {0x4, 0x7, {0x1}}, {0x400, 0xfff, {0x0, 0x6}}, {0x400, 0x9, {0x1, 0x1000}}, {0x4, 0x7fff, {0x0, 0xb8f}}, {0x6, 0x4, {0x3, 0x7}}, {0x4, 0x7, {0x3, 0x6b8}}, {0x1, 0x1, {0x0, 0x2}}, {0x8, 0x5, {0x0, 0x6}}, {0xfffb, 0x6, {0x1, 0x80000000}}, {0x9, 0x0, {0x2, 0xaad}}, {0x8001, 0x9, {0x0, 0xfffffff7}}, {0x8, 0x3, {0x0, 0x800}}, {0x5, 0x4, {0x2}}, {0x8, 0x8001, {0x3, 0x25}}, {0x7, 0x6, {0x1, 0xb}}, {0x4, 0x6, {0x3, 0x6}}, {0x0, 0xe00, {0x0, 0x4}}, {0x1, 0x5, {0x0, 0xce2d}}, {0x1, 0x3, {0x3, 0x3}}, {0x0, 0xb0ca, {0x1, 0x3ff}}, {0x400, 0x60, {0x0, 0x8a62}}, {0x2, 0x9}, {0x5ddf, 0x5, {0x1, 0xe}}, {0x2, 0x7a52, {0x2, 0x5}}, {0xfffa, 0x2, {0x3, 0x9}}, {0x0, 0x4, {0x3, 0x7}}, {0x4, 0xffff, {0x1, 0x9}}, {0x8, 0x2, {0x0, 0xff}}, {0x4, 0xe9d, {0x2, 0x4}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4000080}, 0x8001) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2711, @local}, 0x10) r8 = syz_open_pts(r6, 0x0) ioctl$TCXONC(r8, 0x540a, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000), 0x4) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xb3, 0xb, "6c06002004dc17a8"}) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000004c0)="974501000024491fbb000000eaf38f56120b5500", 0x14}], 0x1, &(0x7f0000000480)}, 0x40040d0) ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f00000000c0)=r3) 20.102794958s ago: executing program 0 (id=991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) syz_io_uring_setup(0x2fb8, 0x0, 0x0, &(0x7f00000004c0), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000080)=""/117, 0x75}], 0x1, 0x7fffffffffffffff, 0x0) sendto$packet(r1, &(0x7f0000000240)="0fb2c77b9519e53ba4c0e0f24ddbb69dd41ea02c9ceec96a526c15ff7ca8b752e06f3204003ece4c7a9228ad", 0x2c, 0x4000000, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff810040000806000108000604000201"], 0x2e) (async) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff810040000806000108000604000201"], 0x2e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[], 0x24, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[], 0x24, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x810) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r6) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r6) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r6) (async) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r6) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r4) (async) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r4) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r8, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000d4}, 0x4000004) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYRES32=r7], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x40000) 20.088258289s ago: executing program 0 (id=993): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) (async, rerun: 32) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) (rerun: 32) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) (async, rerun: 32) r2 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) dup2(r0, r1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="e80000000001050500000000000000000a0000003c0002802c000180140003002001000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000012002927000000000000008b05"], 0x38}}, 0x4) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000006b40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='io\x00') read$FUSE(r7, &(0x7f0000000980)={0x2020}, 0x160e) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async, rerun: 32) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_INIT(r8, &(0x7f0000000080)={0x50, 0x0, r9, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000140)={0x150, 0x0, r9, [{{0x3, 0x1, 0x45, 0x7, 0x5, 0x80000000, {0x5, 0x800, 0x9, 0x7fffffffffffffff, 0x3704, 0x401, 0x5, 0xf6, 0x5, 0x8000, 0x0, r5, r6, 0xf999, 0x1}}, {0x4, 0x7, 0x7, 0x4, '!$\".!-\x1c'}}, {{0x4, 0x0, 0x401, 0xa2d5675, 0x0, 0x6, {0x1, 0x101, 0xa1, 0xf5c, 0x6, 0x9, 0x1c5eddd1, 0x4, 0x4, 0xc000, 0x2, r5, r6, 0x7ff, 0x9}}, {0x2, 0x5, 0x8, 0x354, 'upperdir'}}]}, 0x150) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000080)=0x7) (async, rerun: 64) close_range(r10, 0xffffffffffffffff, 0x0) (rerun: 64) 19.946867343s ago: executing program 0 (id=996): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000202f17020500000000000109022d000100006005090400000903000300092109000101222c0009058103ff03020700090502031000c10707"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200d2c0000002c23e75bcf47a88a34d2dd23ee248c36105a7e746fb1400590136b7103bd4f114e2a60cefa13e8be"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x21000, 0x600000d, 0x12, r2, 0x180000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x30, 0x19, 0x1, 0x0, 0x25dfdbfb, {0xa, 0xd601, 0x9}, [@nested={0x8, 0x12, 0x0, 0x1, [@nested={0x4, 0xf8}]}, @nested={0x14, 0x5, 0x0, 0x1, [@nested={0x10, 0xce, 0x0, 0x1, [@nested={0xc, 0x13e, 0x0, 0x1, [@nested={0x8, 0x95, 0x0, 0x1, [@nested={0x4, 0x61}]}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) 18.408138482s ago: executing program 0 (id=1018): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r3, &(0x7f00000003c0)={@val={0xa, 0xb3f0}, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x168, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x4, 0x200, 0x2000004, 0x54, [{0x5, 0x1f, "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"}, {0x19, 0xa, "ad48eb31858e2be3bc713c589e797119b20cb9606959a12fc99d2ea2131da6f93b86b7645c3887a2b00ef5003f4b5f995553db90f61a77b03c0484d50c7ac9b4df0352683d7ef1d3e5f8120ca548f878"}, {0x5, 0x1, "345716cde04b"}]}}}}}}}, 0x1a2) write$P9_RVERSION(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="1500000065ffff04000000083c00ff0039"], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r4) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) write$tun(r3, &(0x7f00000003c0)={@val={0xa, 0xb3f0}, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x168, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x4, 0x200, 0x2000004, 0x54, [{0x5, 0x1f, "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"}, {0x19, 0xa, "ad48eb31858e2be3bc713c589e797119b20cb9606959a12fc99d2ea2131da6f93b86b7645c3887a2b00ef5003f4b5f995553db90f61a77b03c0484d50c7ac9b4df0352683d7ef1d3e5f8120ca548f878"}, {0x5, 0x1, "345716cde04b"}]}}}}}}}, 0x1a2) (async) write$P9_RVERSION(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="1500000065ffff04000000083c00ff0039"], 0x15) (async) 3.354225993s ago: executing program 33 (id=1018): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r3, &(0x7f00000003c0)={@val={0xa, 0xb3f0}, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x168, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x4, 0x200, 0x2000004, 0x54, [{0x5, 0x1f, "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"}, {0x19, 0xa, "ad48eb31858e2be3bc713c589e797119b20cb9606959a12fc99d2ea2131da6f93b86b7645c3887a2b00ef5003f4b5f995553db90f61a77b03c0484d50c7ac9b4df0352683d7ef1d3e5f8120ca548f878"}, {0x5, 0x1, "345716cde04b"}]}}}}}}}, 0x1a2) write$P9_RVERSION(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="1500000065ffff04000000083c00ff0039"], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r4) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) write$tun(r3, &(0x7f00000003c0)={@val={0xa, 0xb3f0}, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x168, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x4, 0x200, 0x2000004, 0x54, [{0x5, 0x1f, "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"}, {0x19, 0xa, "ad48eb31858e2be3bc713c589e797119b20cb9606959a12fc99d2ea2131da6f93b86b7645c3887a2b00ef5003f4b5f995553db90f61a77b03c0484d50c7ac9b4df0352683d7ef1d3e5f8120ca548f878"}, {0x5, 0x1, "345716cde04b"}]}}}}}}}, 0x1a2) (async) write$P9_RVERSION(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="1500000065ffff04000000083c00ff0039"], 0x15) (async) 3.011340484s ago: executing program 5 (id=1168): setxattr$incfs_metadata(&(0x7f0000000540)='./cgroup\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r2, 0x100000000, 0x1) iopl(0x3) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_clone3(&(0x7f0000000440)={0x4000, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x0, {0x16}, &(0x7f00000002c0)=""/223, 0xdf, &(0x7f00000003c0)=""/9, &(0x7f0000000400)=[0x0, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) write$P9_RGETLOCK(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="20000000370100015402000000000000001e000000000000", @ANYRES32=r5, @ANYRES32=r2], 0x20) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000500)={0xffff, 0x2003}, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0xfffd, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000000580)=0x3bb, 0x4) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r8 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r10, 0x0, 0xf000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) bind$xdp(r4, &(0x7f00000000c0)={0x2c, 0x1, r1, 0x11}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000100), 0x3) r11 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$P9_RSTATu(r3, &(0x7f0000004240)={0x6e, 0x7d, 0x1, {{0x0, 0x56, 0x9, 0x5195, {0x83, 0x0, 0x4}, 0x840000, 0xa, 0xff, 0xfffffffffffffff9, 0xa, '/dev/fuse\x00', 0x2, '@:', 0x3, ')\x99#', 0x14, 'user.incfs.metadata\x00'}, 0x3, 'tls'}}, 0x6e) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r12, 0x4010e501, &(0x7f0000000100)={r11}) 2.991819005s ago: executing program 5 (id=1171): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r1, 0xa01, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x201, 0x8c6, 0x800}}}}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x80, @ipv4={'\x00', '\xff\xff', @empty}, 0xeb}, 0x1c) 2.959937106s ago: executing program 5 (id=1172): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x86e, @any, 0x0, 0x1}, 0xe) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000600)=ANY=[@ANYBLOB="8cc8931e", @ANYRES16=r3, @ANYBLOB="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"], 0x608}, 0x1, 0x0, 0x0, 0x8000}, 0x44091) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100832948c2b34cfd6904af077b1c0001"], 0x30}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2}, 0x24048894) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd70c4fddbdf251200000008000300", @ANYRES32=r10, @ANYBLOB="06001a010200000006001200"], 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4004004) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000cc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x569108ec3ea28340}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x114, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xbf, 0xac, "4b3082bff4a8b7a5a4c9883d9004275dc485653e3f720cf17b69f3d1d5bc35f2fe3576082fb9538b8ff610426eebe64c09154178fa55f84ae652ed320b26e731f1cd15cb79d6e53dbe27d2e05f8dd78cbe735451c9c4365e869895bfd26e268868c137c5fa91033e56837ee02cf90957634e4fb659826231c78c77c47f72fcab115243befd8352c5ca83ef6ea8b1a1bcf4e692c7efa8dabc3053ca58d714a6a5fed939ae3d878803bf42b2a8221c3def74b037424c20f7e626090a"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r11}]}, 0x114}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) sendmsg$netlink(r5, &(0x7f0000002f80)={0x0, 0x1c, &(0x7f0000000040), 0x100000000000028c, 0x0, 0x0, 0x4000000}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x4) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081b3", 0x3, 0xffffffffffffffff) writev(r12, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c0001000a0c100000000000224e0000", 0x58}], 0x1) 2.883109628s ago: executing program 5 (id=1173): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x80000000000, 0x0, 0xfffffffffffff307, 0x5}, 0x0, 0x0, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'c\xb3R$P~\xdco\xc3\"\xef\xf9', 0x3a, '\x00c6Iw\x9a\x8b\x0e\x953\x02S\xb3\xb6(\xb0/V\xca\xc6\x16\x9f\xf8\x1f\x97\x9d[\x7f\xe7\xccxh\xa1\xf2\x02\xa3\xe9*e[\xe5\xc9\x9dKx0xffffffffffffffff}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) close_range(r2, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) read$FUSE(r4, &(0x7f00000102c0)={0x2020}, 0x2020) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3}, {0x60, 0x20}, {0x6}]}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)={0x14, 0x2a, 0x4, 0x100000, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x4008000) 935.216751ms ago: executing program 3 (id=1185): fsopen(&(0x7f0000000bc0)='binder\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4c000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) poll(&(0x7f0000000040)=[{r0, 0x1204}], 0x1, 0x1) write$tcp_mem(r0, &(0x7f00000001c0)={0x4, 0x2d, 0x20800006d2, 0x3a, 0x1, 0x2c}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000000102e10400000000000002000a000000300001802c00018014000300fe8000000000140004"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00c97c000000006c0f41cb48290523dc0000000001080006040001000000000000ffffffff01"], 0x26) 904.097311ms ago: executing program 3 (id=1186): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000040)='./file1\x00', 0x40) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x2, 0x0, 0x2d}, 0x18) 835.778453ms ago: executing program 3 (id=1187): syz_io_uring_setup(0x457f, &(0x7f0000000080)={0x0, 0x182a, 0x800, 0x1, 0x37e}, 0xfffffffffffffffc, 0x0, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80894}, 0x8000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x11000000) write$P9_RGETLOCK(r3, &(0x7f0000000040)=ANY=[], 0xffffff6a) 833.083083ms ago: executing program 2 (id=1191): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x0) setns(r1, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', 0x0, &(0x7f0000000840), 0x1004002, 0x0) setresuid(0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) dup(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd00016c0004000003a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088a8"], 0xfdef) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x24, 0x21, 0x1, 0x0, 0x8000, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @typed={0x8, 0xa, 0x0, 0x0, @binary="283bb5ad"}]}, 0x24}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 803.142864ms ago: executing program 2 (id=1192): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x402, &(0x7f0000000780)={{0x12, 0x1, 0x310, 0x97, 0x86, 0xfe, 0x8, 0x19d2, 0xffa3, 0x1e13, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f0, 0x2, 0xd, 0x2, 0x80, 0xcf, "", [{{0x9, 0x4, 0xbb, 0x2, 0x7, 0xff, 0xff, 0xff, 0x30, [@uac_control={{0xa, 0x24, 0x1, 0x8001, 0x3f}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x3, 0x3, 0x1, 0x1, 0x9, 0x2}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x27acdc8df95145e5, 0x1, "9b8a7034e5d4"}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x1, 0x6, [0x0, 0xa, 0x5, 0x6, 0x3, 0x8], 0x4}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x3, 0x1, [0xa]}]}, @hid_hid={0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0xb75}}], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0xf9, 0xf9, 0x6}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x1, 0x34, 0xc8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xfd, 0xb}]}}, {{0x9, 0x5, 0x9, 0xc, 0x40, 0x1e, 0x4, 0x59}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x7, 0x9, 0x7f, [@generic={0x23, 0xa, "600b5a1d095f99fab233561b27de8ea2b32d23878b98156a49c087bbcfa0a4c10c"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x8c, 0x7}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x10, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x800}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x9, 0x80, 0x18}}]}}, {{0x9, 0x4, 0x89, 0x8, 0xc, 0x3, 0x25, 0x2, 0x4, [@generic={0x3a, 0x8, "fb8225de4e34422926326b00bbc3f29a3d4667cf9a8f152951fe91c2941cc2346083e5f55fe0a16f6d3d0ffdb7e0aad28cb7b47a5835c407"}], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0x3, 0x7f, 0xd, [@generic={0x8b, 0x2b, "e0fe10e0d7284f8e1fa76122505f4e02f3601f164905427152066220b5c59b8cd737ae70a892f315ef10480674f8537ae967b8ce9343613fcec16310f0f29ba999f0d44443a7b9f67ff2a6e91621614d4ca1e70b89c74cc8c32bd109d4f29c1749c0a0d7033189d0801a88ed45af648b0e1b55bd41e6325dd32f7d4e5c1dbbcf717dc3bf5606521ba8"}, @generic={0xa1, 0xfb1fe9f17f9c1988, "eed321fa5146860925138492af6e976f1c0e5495c18ed3dfa6d1480860a3b8d1a300117ca33677912d22f45e768cf0ec1c745dbcf1bcfad6b20db244e302d38a7db9696ca41570b31ba1cc87a481e711dd0cc024401a771d1214d4127ca110eda85734f72910b4cd15b737fd70b0e910808474dc5b03aa44a780fbfb6eb98a1bd0c72bce17ea0c8b42129d51a3cdd8a7a4c1d2711cf82842d43b85b0738810"}]}}, {{0x9, 0x5, 0xd, 0x4aad3bb1e7d36aa9, 0x400, 0x5, 0x0, 0x5}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0xf8, 0xe, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xd1, 0xc}, @generic={0xa8, 0x23, "c61a151bf53a447b2b7e27fd29838c4f9172472441a83721caeb7eaa46fde11dcb6321594511a801d548d3ed0e883a0a50e152aa7aa26bd36c04b4bd0ba8d6a60171f599ee268056779690571723fd50072e5b8fb2d8e1299ad25de5ce5a0850338b8425a618d0cc2794570bfce19aaf2138912db6739f38f22247beca37201358f0ba1cabf2147d86d18c86d93b0e124609f91e370ac88d755adb0f29f858e0c5e3aec2bc99"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0x7, 0x7, 0x4}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x6, 0x4, 0xf}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0x6, 0x4, 0x3d}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x4, 0xe, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x5, 0x4, 0x7, [@generic={0x8, 0x7, "13dc7afbbdf3"}, @generic={0x17, 0x7, "64435727f6c156fda5d3b34c2788a0c1105e34adab"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x600, 0x8}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x9, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0xa, 0x6, 0x6, [@generic={0x6f, 0x7, "2c5443953ad37dcb474481b8d280d074b028beef19d163832a9e153b49b7176a26848efa622dc123e566d88020331cb2a4aad992f12db0055e72b743fc786067f07f11f48037400d0db8db7b72f4cc8673dde610837e57ed732defa5574be1ddb46df75aecaf180438241bd71b"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x7, 0x81, 0x95}}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x300, 0xe0, 0x9, 0x0, 0x20, 0x46}, 0x61, &(0x7f0000000c00)={0x5, 0xf, 0x61, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x5, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8d, 0x10, 0x3, 0x10, 0x2}, @ssp_cap={0x24, 0x10, 0xa, 0x22, 0x6, 0x7fffffa, 0xff00, 0xf651, [0x3f00, 0xc090, 0x2e, 0x3f, 0x3f00, 0xff00c0]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "2d023c567da104809178f03a000047e1"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x6, 0x4}, @wireless={0xb, 0x10, 0x1, 0x0, 0x8, 0x6b, 0x8f, 0xf, 0x5}]}, 0x9, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x380a}}, {0x47, &(0x7f0000000d00)=@string={0x47, 0x3, "900594e473073dc46bf164a00e59eb6b94797cfbac8bd6af2cd45f52b97bfd40315716cfd873d28c682eb267cb40e937cc43691fdbbd6b629b0538a7c5b98e4103a728faec"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x1001}}, {0x8d, &(0x7f0000000dc0)=@string={0x8d, 0x3, "e7dd2694b813c888d52c03017ea9f8a96afa51326f3ebf377ea786cff5d05437148e5c9ef11efcacd397f38aa8853214c5b951d932472b823d095568dd2d4c60ba1f9db85bb24825e55ee56d1a428f0562ad77906ea518ded931292f6f8d618bb16562faa9ad2270723045ae5924691deb065eb9992e31cb7c96d0f5c641e03e988dac740d18aa303b848c"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x414}}, {0x2c, &(0x7f0000000ec0)=@string={0x2c, 0x3, "105c3ec07d09e4ea634f5b19a32b6a31b8d81a402e970dd60eb306feee5bce1c7884d90537ea8c6bb3ac"}}, {0x6, &(0x7f0000000f00)=@string={0x6, 0x3, "109ec4c2"}}, {0x4f, &(0x7f0000000f40)=@string={0x4f, 0x3, "5810f5dbf3db490ec61330a8a12f2e882ed57365af98462f554e17e5c85dc86523c4305ab04736f89339633838fcb83c6eb181d43fb63cf465e7bcf8d446a180e4a3ec8b62bba91142f7147499"}}]}) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="28972a001e0021000000000018000000070000000a1a5356730001000000060000000000000000"], 0x28}}, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000740)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x30}}, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000480)=@caif=@dgm={0x25, 0xd, 0x80}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000440)="4ba72c4cfd81685544f46c3f0800461d05e65c9191e2b7cbc51cc0a9f93c840183c46a0fefa1deca", 0x28}], 0x1, 0x0, 0x0, 0x11000000}, 0x4000) 613.582701ms ago: executing program 4 (id=1199): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, '\x00', "cd178e27c9f2efcc95cfdcb7c5d6c030", "61fe1374", "55b60162d58b6bff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x1200}], 0x400000000000172, 0x4000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x430082, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000500)="3e660f382118c7442400d0000000c744240231a80000c7442406000000000f011424f3460f0967d079006526f2f3f30f2153b9440a00000f32c402792b6e71983666f20f01b80000000066ba4200", 0x4e}], 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x143a00, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @private1, 0x8}, 0x1a) 510.571414ms ago: executing program 4 (id=1200): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, &(0x7f0000000140), 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f0000000280)={0x20, 0x30, 0xb0, {0xb0, 0x10, "3c6e578c1cb1cc5edfad831d83cabbdd86f630cdd9853c9be74ee5b8aaf9aa4dc119559ee470eb5a8b054cc8b7e4ac49120ec601d2bb7125e5fe7919615c0857a66d0e09bce304a5e870b39e0c3c97009d42d50633edba2b782ca0b3224d79f3bf496073e1b4cab9d29ce57766afff457a3b2953908521775f40196885ce69ab1a9a9605483d280cb5c4585c2440ed22b8f122f10d8d794be228ec50637dc98a23ee0fc9231f711b5c4c8f3853f5"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}, &(0x7f00000004c0)={0x0, 0xf, 0x128, {0x5, 0xf, 0x128, 0x6, [@generic={0xfd, 0x10, 0xa, "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"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0xc, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x84, 0xc, 0x29, 0x5, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xf, 0x8, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xa, 0x4, 0x2d7}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x10, 0x8, 0x8, "f6bea6a8", "a8bfa34f"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x80, 0x6, 0x20, 0x7, 0xc, 0x5}}}, &(0x7f0000000c40)={0x84, &(0x7f0000001340)=ANY=[@ANYBLOB="4014b00000006d9ccfcbb0feaaa39295f13b0a4b86c9950b6d95becbfe30a91b4f04c5e26c38d9d6fa944c64c0a5638481f11973ea9c0dd4dc5fb77d2c7763886a5653e773ca67ff07627870df0609997e1384834927c4071053381a226e0c9f920ccf02f7e4dc0dcbe354f280a2b3db99705cb15769f89a61628931f5c0a5af1714c4d7db7218067af05c1321387d6b6a6b8a5308c8bee9c5d30708137a47e8f7ed04c5a2d8483f94ce5cbbb240c73e1401a3b2ec4a767b78b85fdb05ee16f0d7053a81859c1aa29198b27cb5e24d71dfce60a905df5bd88e0dc7783ee0261d895b95e99b73f3df0a4bd8"], &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000980)={0x40, 0x7, 0x2}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0xfb}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "7bc9"}, &(0x7f0000000a40)={0x40, 0xf, 0x2}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @random="6d40d10cc3d9"}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "1df4"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x40}}) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0x8, 0x8000, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000002c0)=0xd9, 0x4) read(r1, &(0x7f0000000300)=""/4067, 0xfe3) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 294.128471ms ago: executing program 2 (id=1201): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x0) setns(r1, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', 0x0, &(0x7f0000000840), 0x1004002, 0x0) setresuid(0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) dup(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd00016c0004000003a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088a8"], 0xfdef) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x24, 0x21, 0x1, 0x0, 0x8000, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @typed={0x8, 0xa, 0x0, 0x0, @binary="283bb5ad"}]}, 0x24}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 265.472272ms ago: executing program 2 (id=1202): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000080)=""/137, 0x89, 0x0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x3, 0x4, 0x3, {0xa, 0x4e22, 0xfe, @private1, 0x2}}}, 0x80) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/consoles\x00', 0x0, 0x0) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) connect$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0x1, @empty}}, 0x1e) 209.976474ms ago: executing program 2 (id=1203): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)}, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) close(r1) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000010200)={&(0x7f0000019180)={0x10024, 0x3f7, 0x0, 0x70bd29, 0x25dfdbfc, {0xffff, 0xd, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0/file0'}}, 0x10024}}, 0x4000) execve(&(0x7f0000019140)='./file0\x00', 0x0, &(0x7f0000000040)={[&(0x7f0000000200)=' ']}) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) flock(r2, 0x1) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x200040, 0xc3, 0x4}, 0x18) open(&(0x7f0000000040)='./file0\x00', 0x101000, 0x4) mknodat(r3, &(0x7f0000000100)='./file0\x00', 0x8000, 0x100025f8) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000010240)) 209.239014ms ago: executing program 2 (id=1204): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d0a547192a90"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x20000) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x20, 0x8, 0xfffffffe, 0x46}) r2 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x2, 0x90, 0x6f, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, ':|'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xdaa7, 0x8001, 0xfc}, {0x6, 0x24, 0x1a, 0x5, 0x20}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x100}, @obex={0x5, 0x24, 0x15, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xb, 0x7f, 0x26}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xf, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x0, 0x7}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x7, 0x1, 0x3, 0xff, 0xf}, 0x3f, &(0x7f0000000240)={0x5, 0xf, 0x3f, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x188, 0x5, 0x6, 0x9, 0x9}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "ea973afd9f3225104ea3c0f9eb4d8d04"}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x4, 0xf000, 0xd, [0xff0000, 0xff0000, 0x3fcf]}]}, 0x5, [{0x19, &(0x7f0000000280)=@string={0x19, 0x3, "013adc01ebd8e426f19e4d049ea85e86c7cba11a7ffe0c"}}, {0xa2, &(0x7f00000002c0)=@string={0xa2, 0x3, "c9f65827f06f439a3316dbe5b740fafec7c7526c609169c5d35c13ac8254edcfa5549ee84876da4b71bd1e72d115892e27eb37060880359f7a65285fb5b74b1de0b7c7500124d106443e836f8e5739096d9dfa1bf27d29ab17b8c8aa7ef1e1a9902dda5334f4925440ae4a7774b59754bf37c72a145dde9d26ef3a212eecef853938bd1ca150a9ee45f88f9ae7c53b6cf393f9ac8bed1f0b343a146351baa3b7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x422}}, {0x71, &(0x7f0000000440)=@string={0x71, 0x3, "e2417325368ec96a1f1c31c6151c27c68102884d3f09b8b495f7b6c25815acac360d16b56a41f78494536f66b55248a5e7cb7a8c3f9e07c87e580b251e1d9ff56b4be8a123eaaa34c34df8ebf1e69ec1e0f2dfcb266a3fa14fd478c8d2ac2bef911c0120b1ee465fbfc81a56c17149"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1001}}]}) close_range(r1, r1, 0x2) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000600)={0x14, &(0x7f0000000580)={0x40, 0x9, 0x8, {0x8, 0x2d, "7ecdbcf0e8a4"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="4007490000007c88fa6028187f902f9ab3b4f0eaf25507e0a02765bef0ce40c13308206dcc050bf5a1b74c6562e7db5dfffb5a8f6a98c8c2f5640f3dcdbd762d4cf01ed4ecc31c8c4836f300000000000000000000000008000000"], &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x5, 0x4b68, 0x1, 0xa, 0x6, 0x4bd, 0x2, 0x5, 0x101, 0x800, 0xda28, 0x1}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x7fff}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000840)={0x20, 0x89, 0x2, 0x1}}) 53.587098ms ago: executing program 3 (id=1205): mmap(&(0x7f0000c2a000/0x2000)=nil, 0x2000, 0xb635773f06ebbeed, 0x810, 0xffffffffffffffff, 0xf6d0a000) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) set_robust_list(0x0, 0x0) (async) setitimer(0x2, &(0x7f0000000040)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000080)) (async) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000001700)={0x352004200, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 37.219609ms ago: executing program 4 (id=1206): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x8000, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x8841) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f0000000100)="0d769e2bb4789fe97e663bea30d5f53c3128b3da49798ff01307545fd6aece830c0c273ba90a7a6f1623d6ba0e942fbea0c20afe0b21ec31d6612e51935d7396e35ed8c3fe674699d90e964eea2afa197b3596de5067ef8287814228981cdc62a4a6dab4c2755ea0e7db326308c599495b", 0x71}, {&(0x7f00000001c0)="9875da2c88c417221169db2008d14fcdcf1147058f9dfa89e91b4107d4b5d8611ee67ffefab9520dd8c14996606d", 0x2e}, {&(0x7f0000000240)="12c2a48369e06ac8abd91345edad1ca610d4efd9487b2c3b4d844028f1ec6b2e93e543c3a6a430da8cb541a144d5a5f28a85b55ebeec22e381fb211557f8596a88796564173a608f860905069a93443c05335e4232089c1956374c48b1985dc6802d416a576652444c40078718657e5396b469520a9cc6a984575d9888e42ed4cf4e11eef9f8aadecbf3114c9412b26ea72b761d490f7e3f71ce3ea7cde25d45e0a9", 0xa2}, {&(0x7f0000000300)="fb4d5daa88020900580ad4bee717f98e1bbbc519c4bb05c2d1dfbf5ad9eaf86a29d1352d373356139ca388c03739232978b3bf456e7fa09fe96b9ac10ad618fda82f273435aa0a6802c2f7390225662d48150866fd9515c6360624aa75", 0x5d}, {&(0x7f0000000380)="73ec4d88a840453bdc1c9a8fb7103011d373d090274fdb2c0ff7e9a1f1b9f3ab7934ca610e6384bb10a4e0a0c8fd673deb57b2221eb8e80ddd04ddd6c1530c7930dc7d459791a1c7c011f267b04867c6ac546830eda405bad90570a970552a7f432763e72730e5a8b09b67bc1d78513793e46981dddbfa445684586f", 0x7c}, {&(0x7f0000000540)="1f462287054f6a793a98b41d7d463798c469683d76aa399c5e9e223fb3629a0ed861c24ca53e755296e9f4f08ca1ccd0687a7e27d81b9579a82b0c8274a8657e34794c90ba56f5e4b99c1a594e4aecf14dca008003b0433f7e4e46ae022f4d5cf9e38747ef040e41aa9ef48c86f2e038474e3b8d9bcb1809e32b012a3ed3db33fc7b323f038078cbaca5876e142cfd04b0a40c0929ea4de71fef9e91f92f9eeb6275dc386ad9829d7f5aa86dc3cd797e0bce8b9da6811735d389dfb527a5579b61c7d473f42af36dc16ffceb5dd4bb0c5e86099ec7dbf8feb7e96323b50b33b1483174ff42433392b3d77f154599499ea5ab7f74e7284f22", 0xf8}, {&(0x7f0000000640)="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", 0x1000}], 0x7) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r4, 0x4) ioctl$TCFLSH(r3, 0x400455c8, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cc, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe80"], 0xfdef) 4.85389ms ago: executing program 3 (id=1207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x1000f, 0xdfdf, 0x10015, 0x81, 0x80, 0x2, 0xd2, 0xfffffffffffffffd, 0x5, 0x7ffffffffffffffc, 0x1, 0x9, 0x5, 0x800, 0xfffffffffffffffa], 0x0, 0x1119c4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123502, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80800) splice(r5, 0x0, r4, 0x0, 0x40010003, 0x0) r6 = openat(r5, &(0x7f0000000440)='./file1\x00', 0x64842, 0x32) ftruncate(r6, 0x6000000) copy_file_range(r6, 0x0, r6, &(0x7f00000004c0)=0x100, 0x9, 0x0) syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000100)=@arm64_bitmap={0x6030000000160001, &(0x7f00000000c0)=0x5}) 1.95587ms ago: executing program 4 (id=1208): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x4e22, @multicast2}}}, 0x88) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) memfd_create(&(0x7f0000000980)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7\xc6yE\xa8\xd6A\xe8*\xedEd\x14m|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6E&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00'/717, 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) (async) pipe(&(0x7f0000000440)) (async) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) (async) r9 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) process_mrelease(r10, 0x700000000000000) (async) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0xcedb, 0x10700, 0x0, 0xd1}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x10002, 0x1, 0x3ab, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x0, 0x9, 0x265, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10, 0x3, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2030, 0x5200, 0x2, 0x9e, 0x0, r3}}], 0x16, &(0x7f0000001540)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r7, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) (async) r11 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r12 = dup(r11) ioctl$PTP_EXTTS_REQUEST2(r12, 0x40043d0d, 0x0) (async) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',afid=0x000080000000']) 626.29µs ago: executing program 4 (id=1209): prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000000)="61762d20af5347a37eca8bbda404b352") prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000080)={0xfe, 0x80, 0x19, 0x4, 0x10001, 0x0, 0x81}) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) 0s ago: executing program 4 (id=1210): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x0) setns(r1, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', 0x0, &(0x7f0000000840), 0x1004002, 0x0) setresuid(0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) dup(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd00016c0004000003a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088a8"], 0xfdef) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x24, 0x21, 0x1, 0x0, 0x8000, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @typed={0x8, 0xa, 0x0, 0x0, @binary="283bb5ad"}]}, 0x24}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) kernel console output (not intermixed with test programs): 125.865008][ T2828] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 125.865019][ T2828] R13: 00007f6caca16038 R14: 00007f6caca15fa0 R15: 00007ffd021300d8 [ 125.865033][ T2828] [ 125.865059][ T2828] memory: usage 307200kB, limit 307200kB, failcnt 20508 [ 126.318117][ T2828] memory+swap: usage 431864kB, limit 9007199254740988kB, failcnt 0 [ 126.326411][ T2828] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 126.333381][ T2828] Memory cgroup stats for /syz4: [ 126.333493][ T2828] cache 314134528 [ 126.342113][ T2828] rss 438272 [ 126.345339][ T2828] rss_huge 0 [ 126.348519][ T2828] shmem 314114048 [ 126.352171][ T2828] mapped_file 0 [ 126.355617][ T2828] dirty 0 [ 126.358531][ T2828] writeback 0 [ 126.361868][ T2828] workingset_refault_anon 8 [ 126.366380][ T2828] workingset_refault_file 5911 [ 126.371162][ T2828] swap 127655936 [ 126.374701][ T2828] swapcached 32768 [ 126.378406][ T2828] pgpgin 298176 [ 126.381872][ T2828] pgpgout 222909 [ 126.385406][ T2828] pgfault 90062 [ 126.388841][ T2828] pgmajfault 127 [ 126.392401][ T2828] inactive_anon 243335168 [ 126.396719][ T2828] active_anon 71217152 [ 126.400799][ T2828] inactive_file 20480 [ 126.404769][ T2828] active_file 0 [ 126.408221][ T2828] unevictable 0 [ 126.411752][ T2828] hierarchical_memory_limit 314572800 [ 126.417182][ T2828] hierarchical_memsw_limit 9223372036854771712 [ 126.423356][ T2828] total_cache 314134528 [ 126.427523][ T2828] total_rss 438272 [ 126.431262][ T2828] total_rss_huge 0 [ 126.434993][ T2828] total_shmem 314114048 [ 126.439144][ T2828] total_mapped_file 0 [ 126.443146][ T2828] total_dirty 0 [ 126.446595][ T2828] total_writeback 0 [ 126.450655][ T2828] total_workingset_refault_anon 8 [ 126.455768][ T2828] total_workingset_refault_file 5911 [ 126.461218][ T2828] total_swap 127655936 [ 126.465315][ T2828] total_swapcached 32768 [ 126.469555][ T2828] total_pgpgin 298176 [ 126.473798][ T2828] total_pgpgout 222909 [ 126.477904][ T2828] total_pgfault 90062 [ 126.482548][ T2828] total_pgmajfault 127 [ 126.486701][ T2828] total_inactive_anon 243335168 [ 126.491664][ T2828] total_active_anon 71217152 [ 126.496285][ T2828] total_inactive_file 20480 [ 126.501051][ T2828] total_active_file 0 [ 126.505060][ T2828] total_unevictable 0 [ 126.509035][ T2828] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.768,pid=2798,uid=0 [ 126.523897][ T2828] Memory cgroup out of memory: Killed process 2798 (syz.4.768) total-vm:90512kB, anon-rss:1236kB, file-rss:30860kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:0 [ 126.537643][ T3024] netlink: 400 bytes leftover after parsing attributes in process `syz.2.835'. [ 126.594078][ T2793] syz.4.768 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 126.623907][ T2793] CPU: 0 UID: 0 PID: 2793 Comm: syz.4.768 Not tainted syzkaller #0 46888e5e5e1e1e111dd74017fc0802fda26c1cfc [ 126.623942][ T2793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.623954][ T2793] Call Trace: [ 126.623961][ T2793] [ 126.623968][ T2793] __dump_stack+0x21/0x30 [ 126.623998][ T2793] dump_stack_lvl+0x140/0x1c0 [ 126.624025][ T2793] ? __cfi_dump_stack_lvl+0x10/0x10 [ 126.624050][ T2793] ? ___ratelimit+0x40e/0x5b0 [ 126.624072][ T2793] dump_stack+0x19/0x20 [ 126.624094][ T2793] dump_header+0xd6/0x490 [ 126.624116][ T2793] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 126.624140][ T2793] oom_kill_process+0x35d/0x640 [ 126.624168][ T2793] out_of_memory+0x624/0xa30 [ 126.624188][ T2793] ? __cfi_out_of_memory+0x10/0x10 [ 126.624208][ T2793] ? mutex_lock_killable+0x115/0x1d0 [ 126.624230][ T2793] ? __cfi_mutex_lock_killable+0x10/0x10 [ 126.624255][ T2793] mem_cgroup_out_of_memory+0x2c8/0x390 [ 126.624273][ T2793] ? css_next_descendant_pre+0x202/0x230 [ 126.624295][ T2793] ? drain_obj_stock+0xed0/0xed0 [ 126.624315][ T2793] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 126.624333][ T2793] try_charge_memcg+0x91c/0xe10 [ 126.624357][ T2793] ? _raw_spin_lock+0x92/0x120 [ 126.624375][ T2793] ? __cfi_try_charge_memcg+0x10/0x10 [ 126.624399][ T2793] ? __alloc_pages_noprof+0x35f/0x7e0 [ 126.624424][ T2793] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 126.624449][ T2793] __mem_cgroup_charge+0xfc/0x420 [ 126.624466][ T2793] ? folio_add_lru+0x116/0x400 [ 126.624487][ T2793] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 126.624506][ T2793] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 126.624530][ T2793] ? shmem_replace_folio+0x9b0/0x9b0 [ 126.624552][ T2793] ? shmem_huge_global_enabled+0x2da/0x360 [ 126.624574][ T2793] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 126.624595][ T2793] ? __kasan_check_write+0x18/0x20 [ 126.624613][ T2793] ? _raw_spin_lock+0x92/0x120 [ 126.624630][ T2793] shmem_get_folio_gfp+0x607/0x1390 [ 126.624652][ T2793] ? shmem_get_folio+0xc0/0xc0 [ 126.624671][ T2793] ? follow_page_pte+0x90f/0xbc0 [ 126.624695][ T2793] ? inode_to_bdi+0x6d/0x100 [ 126.624719][ T2793] shmem_write_begin+0xf4/0x270 [ 126.624739][ T2793] generic_perform_write+0x328/0x970 [ 126.624761][ T2793] ? __cfi_generic_perform_write+0x10/0x10 [ 126.624781][ T2793] ? down_write+0xee/0x2b0 [ 126.624805][ T2793] ? file_update_time+0xa3/0x210 [ 126.624829][ T2793] shmem_file_write_iter+0x105/0x130 [ 126.624852][ T2793] __kernel_write_iter+0x42c/0x8a0 [ 126.624871][ T2793] ? __cfi___kernel_write_iter+0x10/0x10 [ 126.624888][ T2793] ? get_dump_page+0x165/0x220 [ 126.624910][ T2793] ? __asan_memset+0x39/0x50 [ 126.624927][ T2793] ? iov_iter_bvec+0xc0/0x180 [ 126.624948][ T2793] dump_user_range+0xb8b/0xe60 [ 126.624968][ T2793] ? __cfi_dump_user_range+0x10/0x10 [ 126.624986][ T2793] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 126.625013][ T2793] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 126.625039][ T2793] ? elf_core_dump+0x24c0/0x3960 [ 126.625061][ T2793] elf_core_dump+0x2e7e/0x3960 [ 126.625084][ T2793] ? __cfi_elf_core_dump+0x10/0x10 [ 126.625110][ T2793] ? dump_interrupted+0xf0/0xf0 [ 126.625128][ T2793] ? 0xffffffffff600000 [ 126.625141][ T2793] ? put_dmabuf_info+0xf5/0x200 [ 126.625169][ T2793] do_coredump+0x208d/0x2fe0 [ 126.625189][ T2793] ? __cfi_do_coredump+0x10/0x10 [ 126.625205][ T2793] ? asm_exc_page_fault+0x2b/0x30 [ 126.625231][ T2793] ? __kasan_slab_free+0x6a/0x80 [ 126.625251][ T2793] ? kmem_cache_free+0x1bd/0x4f0 [ 126.625270][ T2793] ? get_signal+0xa74/0x14e0 [ 126.625294][ T2793] get_signal+0x11f8/0x14e0 [ 126.625319][ T2793] arch_do_signal_or_restart+0xbc/0x760 [ 126.625337][ T2793] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 126.625357][ T2793] irqentry_exit_to_user_mode+0x4d/0xb0 [ 126.625381][ T2793] irqentry_exit+0x16/0x60 [ 126.625403][ T2793] exc_page_fault+0x65/0xc0 [ 126.625424][ T2793] asm_exc_page_fault+0x2b/0x30 [ 126.625443][ T2793] RIP: 0033:0x7f6cac79ce61 [ 126.625458][ T2793] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 126.625473][ T2793] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 126.625490][ T2793] RAX: 0000000000000000 RBX: 00007f6caca15fa0 RCX: 00007f6cac79ce59 [ 126.625503][ T2793] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000100411 [ 126.625514][ T2793] RBP: 00007f6cac832d6f R08: 0000000000000000 R09: 0000000000000000 [ 126.625527][ T2793] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 126.625538][ T2793] R13: 00007f6caca16038 R14: 00007f6caca15fa0 R15: 00007ffd021300d8 [ 126.625554][ T2793] [ 126.625575][ T2793] memory: usage 307152kB, limit 307200kB, failcnt 21325 [ 127.045054][ T3035] incfs: ino conflict with backing FS 1 [ 127.063581][ T2793] memory+swap: usage 431652kB, limit 9007199254740988kB, failcnt 0 [ 127.096175][ T2793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 127.103430][ T2793] Memory cgroup stats for /syz4: [ 127.103626][ T2793] cache 314093568 [ 127.106717][ T3037] overlayfs: failed to resolve './bus': -2 [ 127.108766][ T2793] rss 438272 [ 127.121375][ T9] usb 1-1: 6:0: failed to get current value for ch 0 (-71) [ 127.128886][ T9] usb 1-1: unit 72 not found! [ 127.129881][ T2793] rss_huge 0 [ 127.137056][ T9] usb 1-1: USB disconnect, device number 44 [ 127.138116][ T2793] shmem 314081280 [ 127.148887][ T2793] mapped_file 0 [ 127.157746][ T465] udevd[465]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 127.159722][ T2793] dirty 0 [ 127.178908][ T36] audit: type=1400 audit(1780355401.413:404): avc: denied { append } for pid=3038 comm="syz.0.840" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.189869][ T2793] writeback 0 [ 127.229877][ T2793] workingset_refault_anon 8 [ 127.234561][ T2793] workingset_refault_file 6923 [ 127.239420][ T2793] swap 127614976 [ 127.243068][ T2793] swapcached 73728 [ 127.246900][ T2793] pgpgin 312002 [ 127.252473][ T2793] pgpgout 236735 [ 127.256101][ T2793] pgfault 90700 [ 127.259584][ T2793] pgmajfault 133 [ 127.263222][ T2793] inactive_anon 260665344 [ 127.267698][ T2793] active_anon 53854208 [ 127.272186][ T2793] inactive_file 12288 [ 127.276261][ T2793] active_file 0 [ 127.279770][ T2793] unevictable 0 [ 127.283285][ T2793] hierarchical_memory_limit 314572800 [ 127.288818][ T2793] hierarchical_memsw_limit 9223372036854771712 [ 127.295395][ T2793] total_cache 314093568 [ 127.299630][ T2793] total_rss 438272 [ 127.303401][ T2793] total_rss_huge 0 [ 127.307460][ T2793] total_shmem 314081280 [ 127.316482][ T2793] total_mapped_file 0 [ 127.320219][ T36] audit: type=1400 audit(1780355401.553:405): avc: denied { read } for pid=3047 comm="syz.0.843" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.320557][ T2793] total_dirty 0 [ 127.345834][ T3048] overlayfs: cannot append lower layer [ 127.348472][ T2793] total_writeback 0 [ 127.357564][ T2793] total_workingset_refault_anon 8 [ 127.363150][ T2793] total_workingset_refault_file 6923 [ 127.368497][ T2793] total_swap 127614976 [ 127.369873][ T36] audit: type=1400 audit(1780355401.583:406): avc: denied { open } for pid=3047 comm="syz.0.843" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.372845][ T2793] total_swapcached 73728 [ 127.401541][ T2793] total_pgpgin 312002 [ 127.405584][ T2793] total_pgpgout 236735 [ 127.420503][ T2793] total_pgfault 90700 [ 127.425580][ T2793] total_pgmajfault 133 [ 127.429797][ T2793] total_inactive_anon 260665344 [ 127.442432][ T2793] total_active_anon 53854208 [ 127.447209][ T2793] total_inactive_file 12288 [ 127.451819][ T2793] total_active_file 0 [ 127.455920][ T2793] total_unevictable 0 [ 127.460111][ T2793] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.768,pid=2792,uid=0 [ 127.477498][ T2793] Memory cgroup out of memory: Killed process 2792 (syz.4.768) total-vm:90512kB, anon-rss:1236kB, file-rss:27156kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:0 [ 127.522642][ T2826] syz.4.768 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 127.584793][ T2826] CPU: 0 UID: 0 PID: 2826 Comm: syz.4.768 Not tainted syzkaller #0 46888e5e5e1e1e111dd74017fc0802fda26c1cfc [ 127.584828][ T2826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.584840][ T2826] Call Trace: [ 127.584846][ T2826] [ 127.584853][ T2826] __dump_stack+0x21/0x30 [ 127.584883][ T2826] dump_stack_lvl+0x140/0x1c0 [ 127.584981][ T2826] ? __cfi_dump_stack_lvl+0x10/0x10 [ 127.585007][ T2826] ? ___ratelimit+0x40e/0x5b0 [ 127.585027][ T2826] dump_stack+0x19/0x20 [ 127.585048][ T2826] dump_header+0xd6/0x490 [ 127.585070][ T2826] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 127.585092][ T2826] oom_kill_process+0x35d/0x640 [ 127.585112][ T2826] ? __pv_queued_spin_lock_slowpath+0x22e/0xe90 [ 127.585134][ T2826] out_of_memory+0x624/0xa30 [ 127.585153][ T2826] ? __cfi_out_of_memory+0x10/0x10 [ 127.585171][ T2826] ? mutex_lock_killable+0x115/0x1d0 [ 127.585192][ T2826] ? __cfi_mutex_lock_killable+0x10/0x10 [ 127.585214][ T2826] mem_cgroup_out_of_memory+0x2c8/0x390 [ 127.585233][ T2826] ? css_next_descendant_pre+0x202/0x230 [ 127.585255][ T2826] ? drain_obj_stock+0xed0/0xed0 [ 127.585274][ T2826] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 127.585292][ T2826] try_charge_memcg+0x91c/0xe10 [ 127.585316][ T2826] ? __cfi_try_charge_memcg+0x10/0x10 [ 127.585339][ T2826] ? __alloc_pages_noprof+0x35f/0x7e0 [ 127.585363][ T2826] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 127.585387][ T2826] __mem_cgroup_charge+0xfc/0x420 [ 127.585404][ T2826] ? folio_add_lru+0x116/0x400 [ 127.585425][ T2826] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 127.585443][ T2826] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 127.585465][ T2826] ? shmem_replace_folio+0x9b0/0x9b0 [ 127.585482][ T2826] ? shmem_huge_global_enabled+0x2da/0x360 [ 127.585501][ T2826] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 127.585517][ T2826] ? __kasan_check_write+0x18/0x20 [ 127.585533][ T2826] ? _raw_spin_lock+0x92/0x120 [ 127.585549][ T2826] shmem_get_folio_gfp+0x607/0x1390 [ 127.585571][ T2826] ? shmem_get_folio+0xc0/0xc0 [ 127.585589][ T2826] ? follow_page_pte+0x90f/0xbc0 [ 127.585612][ T2826] ? inode_to_bdi+0x6d/0x100 [ 127.585636][ T2826] shmem_write_begin+0xf4/0x270 [ 127.585656][ T2826] generic_perform_write+0x328/0x970 [ 127.585680][ T2826] ? __cfi_generic_perform_write+0x10/0x10 [ 127.585703][ T2826] ? down_write+0xee/0x2b0 [ 127.585726][ T2826] ? file_update_time+0xa3/0x210 [ 127.585750][ T2826] shmem_file_write_iter+0x105/0x130 [ 127.585773][ T2826] __kernel_write_iter+0x42c/0x8a0 [ 127.585793][ T2826] ? __cfi___kernel_write_iter+0x10/0x10 [ 127.585811][ T2826] ? get_dump_page+0x165/0x220 [ 127.585874][ T2826] ? __asan_memset+0x39/0x50 [ 127.585892][ T2826] ? iov_iter_bvec+0xc0/0x180 [ 127.585912][ T2826] dump_user_range+0xb8b/0xe60 [ 127.585933][ T2826] ? __cfi_dump_user_range+0x10/0x10 [ 127.585952][ T2826] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 127.585979][ T2826] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 127.586005][ T2826] ? elf_core_dump+0x24c0/0x3960 [ 127.586028][ T2826] elf_core_dump+0x2e7e/0x3960 [ 127.586051][ T2826] ? __cfi_elf_core_dump+0x10/0x10 [ 127.586078][ T2826] ? dump_interrupted+0xf0/0xf0 [ 127.586095][ T2826] ? 0xffffffffff600000 [ 127.586109][ T2826] ? put_dmabuf_info+0xf5/0x200 [ 127.586132][ T2826] do_coredump+0x208d/0x2fe0 [ 127.586153][ T2826] ? __cfi_do_coredump+0x10/0x10 [ 127.586171][ T2826] ? asm_exc_page_fault+0x2b/0x30 [ 127.586198][ T2826] ? __kasan_slab_free+0x6a/0x80 [ 127.586220][ T2826] ? kmem_cache_free+0x1bd/0x4f0 [ 127.586238][ T2826] ? get_signal+0xa74/0x14e0 [ 127.586262][ T2826] get_signal+0x11f8/0x14e0 [ 127.586286][ T2826] arch_do_signal_or_restart+0xbc/0x760 [ 127.586305][ T2826] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 127.586325][ T2826] irqentry_exit_to_user_mode+0x4d/0xb0 [ 127.586349][ T2826] irqentry_exit+0x16/0x60 [ 127.586371][ T2826] exc_page_fault+0x65/0xc0 [ 127.586393][ T2826] asm_exc_page_fault+0x2b/0x30 [ 127.586412][ T2826] RIP: 0033:0x7f6cac79ce61 [ 127.586429][ T2826] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 127.586444][ T2826] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 127.586461][ T2826] RAX: 0000000000000000 RBX: 00007f6caca15fa0 RCX: 00007f6cac79ce59 [ 127.586475][ T2826] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000100411 [ 127.586487][ T2826] RBP: 00007f6cac832d6f R08: 0000000000000000 R09: 0000000000000000 [ 127.586500][ T2826] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 127.586512][ T2826] R13: 00007f6caca16038 R14: 00007f6caca15fa0 R15: 00007ffd021300d8 [ 127.586527][ T2826] [ 127.586535][ T2826] memory: usage 305836kB, limit 307200kB, failcnt 23375 [ 127.770378][ T3061] incfs: ino conflict with backing FS 1 [ 127.777690][ T2826] memory+swap: usage 421592kB, limit 9007199254740988kB, failcnt 0 [ 128.056870][ T2826] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 128.064035][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 128.064049][ T36] audit: type=1400 audit(1780355402.303:414): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 128.110216][ T2826] Memory cgroup stats for /syz4: [ 128.110355][ T2826] cache 313966592 [ 128.119685][ T3068] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 128.132234][ T3068] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 128.157733][ T2826] rss 438272 [ 128.169590][ T2826] rss_huge 0 [ 128.181614][ T2826] shmem 309825536 [ 128.196040][ T2826] mapped_file 4136960 [ 128.203493][ T2826] dirty 0 [ 128.206535][ T2826] writeback 0 [ 128.209862][ T2826] workingset_refault_anon 10 [ 128.214437][ T2826] workingset_refault_file 7931 [ 128.219242][ T2826] swap 127246336 [ 128.222841][ T2826] swapcached 69632 [ 128.226551][ T2826] pgpgin 324527 [ 128.230036][ T2826] pgpgout 249291 [ 128.233573][ T2826] pgfault 91405 [ 128.237005][ T2826] pgmajfault 137 [ 128.240561][ T2826] inactive_anon 211701760 [ 128.245163][ T2826] active_anon 98525184 [ 128.249229][ T2826] inactive_file 0 [ 128.253086][ T2826] active_file 4141056 [ 128.257139][ T2826] unevictable 0 [ 128.259999][ T3073] syzkaller1: entered promiscuous mode [ 128.260639][ T2826] hierarchical_memory_limit 314572800 [ 128.266441][ T3073] syzkaller1: entered allmulticast mode [ 128.271640][ T2826] hierarchical_memsw_limit 9223372036854771712 [ 128.283294][ T2826] total_cache 313966592 [ 128.287625][ T2826] total_rss 438272 [ 128.291380][ T2826] total_rss_huge 0 [ 128.295103][ T2826] total_shmem 309825536 [ 128.299314][ T2826] total_mapped_file 4136960 [ 128.303852][ T2826] total_dirty 0 [ 128.307315][ T2826] total_writeback 0 [ 128.311141][ T2826] total_workingset_refault_anon 10 [ 128.316238][ T2826] total_workingset_refault_file 7931 [ 128.321898][ T2826] total_swap 127246336 [ 128.325961][ T2826] total_swapcached 69632 [ 128.330229][ T2826] total_pgpgin 324527 [ 128.334231][ T2826] total_pgpgout 249291 [ 128.338296][ T2826] total_pgfault 91405 [ 128.342322][ T2826] total_pgmajfault 137 [ 128.346380][ T2826] total_inactive_anon 211701760 [ 128.351242][ T2826] total_active_anon 98525184 [ 128.355823][ T2826] total_inactive_file 0 [ 128.360016][ T2826] total_active_file 4141056 [ 128.364917][ T2826] total_unevictable 0 [ 128.368881][ T2826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.768,pid=2803,uid=0 [ 128.383616][ T2826] Memory cgroup out of memory: Killed process 2803 (syz.4.768) total-vm:90512kB, anon-rss:1364kB, file-rss:42196kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:0 [ 128.507039][ T2795] syz.4.768 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 128.559878][ T1212] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.583913][ T3076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60067 sclass=netlink_route_socket pid=3076 comm=syz.2.851 [ 128.583956][ T2795] CPU: 0 UID: 0 PID: 2795 Comm: syz.4.768 Not tainted syzkaller #0 46888e5e5e1e1e111dd74017fc0802fda26c1cfc [ 128.583977][ T2795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.583987][ T2795] Call Trace: [ 128.583991][ T2795] [ 128.583997][ T2795] __dump_stack+0x21/0x30 [ 128.584023][ T2795] dump_stack_lvl+0x140/0x1c0 [ 128.584044][ T2795] ? __cfi_dump_stack_lvl+0x10/0x10 [ 128.584067][ T2795] ? ___ratelimit+0x40e/0x5b0 [ 128.584089][ T2795] dump_stack+0x19/0x20 [ 128.584111][ T2795] dump_header+0xd6/0x490 [ 128.584131][ T2795] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 128.584154][ T2795] oom_kill_process+0x35d/0x640 [ 128.584174][ T2795] ? get_page_from_freelist+0x497c/0x4a20 [ 128.584199][ T2795] out_of_memory+0x624/0xa30 [ 128.584217][ T2795] ? __cfi_out_of_memory+0x10/0x10 [ 128.584235][ T2795] ? mutex_lock_killable+0x97/0x1d0 [ 128.584257][ T2795] ? __cfi_mutex_lock_killable+0x10/0x10 [ 128.584280][ T2795] mem_cgroup_out_of_memory+0x2c8/0x390 [ 128.584299][ T2795] ? css_next_descendant_pre+0x202/0x230 [ 128.584320][ T2795] ? drain_obj_stock+0xed0/0xed0 [ 128.584339][ T2795] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 128.584356][ T2795] try_charge_memcg+0x91c/0xe10 [ 128.584380][ T2795] ? __cfi_try_charge_memcg+0x10/0x10 [ 128.584403][ T2795] ? __alloc_pages_noprof+0x35f/0x7e0 [ 128.584425][ T2795] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 128.584449][ T2795] __mem_cgroup_charge+0xfc/0x420 [ 128.584466][ T2795] ? folio_add_lru+0x116/0x400 [ 128.584486][ T2795] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 128.584504][ T2795] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 128.584527][ T2795] ? shmem_replace_folio+0x9b0/0x9b0 [ 128.584547][ T2795] ? shmem_huge_global_enabled+0x2da/0x360 [ 128.584567][ T2795] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 128.584586][ T2795] ? __kasan_check_write+0x18/0x20 [ 128.584604][ T2795] ? _raw_spin_lock+0x92/0x120 [ 128.584620][ T2795] shmem_get_folio_gfp+0x607/0x1390 [ 128.584641][ T2795] ? shmem_get_folio+0xc0/0xc0 [ 128.584659][ T2795] ? follow_page_pte+0x90f/0xbc0 [ 128.584681][ T2795] ? inode_to_bdi+0x6d/0x100 [ 128.584704][ T2795] shmem_write_begin+0xf4/0x270 [ 128.584724][ T2795] generic_perform_write+0x328/0x970 [ 128.584748][ T2795] ? __cfi_generic_perform_write+0x10/0x10 [ 128.584770][ T2795] ? down_write+0xee/0x2b0 [ 128.584792][ T2795] ? file_update_time+0xa3/0x210 [ 128.584815][ T2795] shmem_file_write_iter+0x105/0x130 [ 128.584845][ T2795] __kernel_write_iter+0x42c/0x8a0 [ 128.584864][ T2795] ? __cfi___kernel_write_iter+0x10/0x10 [ 128.584882][ T2795] ? get_dump_page+0x165/0x220 [ 128.584904][ T2795] ? __asan_memset+0x39/0x50 [ 128.584920][ T2795] ? iov_iter_bvec+0xc0/0x180 [ 128.584941][ T2795] dump_user_range+0xb8b/0xe60 [ 128.584961][ T2795] ? __cfi_dump_user_range+0x10/0x10 [ 128.584979][ T2795] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 128.585004][ T2795] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 128.585028][ T2795] ? elf_core_dump+0x24c0/0x3960 [ 128.585050][ T2795] elf_core_dump+0x2e7e/0x3960 [ 128.585073][ T2795] ? __cfi_elf_core_dump+0x10/0x10 [ 128.585098][ T2795] ? dump_interrupted+0xf0/0xf0 [ 128.585115][ T2795] ? 0xffffffffff600000 [ 128.585128][ T2795] ? put_dmabuf_info+0xf5/0x200 [ 128.585150][ T2795] do_coredump+0x208d/0x2fe0 [ 128.585169][ T2795] ? __cfi_do_coredump+0x10/0x10 [ 128.585185][ T2795] ? asm_exc_page_fault+0x2b/0x30 [ 128.585210][ T2795] ? __kasan_slab_free+0x6a/0x80 [ 128.585229][ T2795] ? kmem_cache_free+0x1bd/0x4f0 [ 128.585247][ T2795] ? get_signal+0xa74/0x14e0 [ 128.585270][ T2795] get_signal+0x11f8/0x14e0 [ 128.585294][ T2795] arch_do_signal_or_restart+0xbc/0x760 [ 128.585313][ T2795] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 128.585332][ T2795] irqentry_exit_to_user_mode+0x4d/0xb0 [ 128.585356][ T2795] irqentry_exit+0x16/0x60 [ 128.585377][ T2795] exc_page_fault+0x65/0xc0 [ 128.585399][ T2795] asm_exc_page_fault+0x2b/0x30 [ 128.585417][ T2795] RIP: 0033:0x7f6cac79ce61 [ 128.585432][ T2795] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 128.585447][ T2795] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 128.585465][ T2795] RAX: 0000000000000000 RBX: 00007f6caca15fa0 RCX: 00007f6cac79ce59 [ 128.585479][ T2795] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000100411 [ 128.585491][ T2795] RBP: 00007f6cac832d6f R08: 0000000000000000 R09: 0000000000000000 [ 128.585504][ T2795] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 128.585515][ T2795] R13: 00007f6caca16038 R14: 00007f6caca15fa0 R15: 00007ffd021300d8 [ 128.585530][ T2795] [ 128.585538][ T2795] memory: usage 307200kB, limit 307200kB, failcnt 29165 [ 128.619878][ T36] audit: type=1400 audit(1780355402.843:415): avc: denied { write } for pid=3075 comm="syz.2.851" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 128.621457][ T2795] memory+swap: usage 431656kB, limit 9007199254740988kB, failcnt 0 [ 129.080154][ T2795] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 129.087125][ T2795] Memory cgroup stats for /syz4: [ 129.087295][ T2795] cache 314228736 [ 129.095954][ T2795] rss 286720 [ 129.099202][ T2795] rss_huge 0 [ 129.105383][ T2795] shmem 312975360 [ 129.109036][ T2795] mapped_file 1245184 [ 129.113069][ T2795] dirty 0 [ 129.116002][ T2795] writeback 0 [ 129.119296][ T2795] workingset_refault_anon 12 [ 129.124396][ T2795] workingset_refault_file 8682 [ 129.129350][ T2795] swap 127664128 [ 129.133250][ T2795] swapcached 24576 [ 129.137007][ T2795] pgpgin 338390 [ 129.140562][ T2795] pgpgout 263123 [ 129.144439][ T2795] pgfault 92499 [ 129.147903][ T2795] pgmajfault 153 [ 129.151711][ T2795] inactive_anon 199016448 [ 129.156046][ T2795] active_anon 114245632 [ 129.160444][ T2795] inactive_file 360448 [ 129.166261][ T2795] active_file 163840 [ 129.181628][ T2795] unevictable 0 [ 129.185150][ T2795] hierarchical_memory_limit 314572800 [ 129.190596][ T2795] hierarchical_memsw_limit 9223372036854771712 [ 129.196743][ T2795] total_cache 314228736 [ 129.201119][ T2795] total_rss 286720 [ 129.204958][ T2795] total_rss_huge 0 [ 129.208694][ T2795] total_shmem 312975360 [ 129.213066][ T2795] total_mapped_file 1245184 [ 129.217595][ T2795] total_dirty 0 [ 129.221111][ T2795] total_writeback 0 [ 129.224930][ T2795] total_workingset_refault_anon 12 [ 129.230114][ T2795] total_workingset_refault_file 8682 [ 129.235481][ T2795] total_swap 127664128 [ 129.239654][ T2795] total_swapcached 24576 [ 129.244054][ T2795] total_pgpgin 338390 [ 129.248051][ T2795] total_pgpgout 263123 [ 129.252189][ T2795] total_pgfault 92499 [ 129.256193][ T2795] total_pgmajfault 153 [ 129.260321][ T2795] total_inactive_anon 199016448 [ 129.265215][ T2795] total_active_anon 114245632 [ 129.269918][ T2795] total_inactive_file 360448 [ 129.274500][ T2795] total_active_file 163840 [ 129.278906][ T2795] total_unevictable 0 [ 129.282936][ T2795] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.768,pid=2809,uid=0 [ 129.297935][ T2795] Memory cgroup out of memory: Killed process 2809 (syz.4.768) total-vm:90512kB, anon-rss:1236kB, file-rss:36756kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:0 [ 129.324874][ T2818] syz.4.768 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 129.361203][ T2818] CPU: 1 UID: 0 PID: 2818 Comm: syz.4.768 Not tainted syzkaller #0 46888e5e5e1e1e111dd74017fc0802fda26c1cfc [ 129.361237][ T2818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.361248][ T2818] Call Trace: [ 129.361254][ T2818] [ 129.361262][ T2818] __dump_stack+0x21/0x30 [ 129.361289][ T2818] dump_stack_lvl+0x140/0x1c0 [ 129.361309][ T2818] ? __cfi_dump_stack_lvl+0x10/0x10 [ 129.361330][ T2818] ? ___ratelimit+0x40e/0x5b0 [ 129.361350][ T2818] dump_stack+0x19/0x20 [ 129.361370][ T2818] dump_header+0xd6/0x490 [ 129.361390][ T2818] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 129.361410][ T2818] oom_kill_process+0x35d/0x640 [ 129.361430][ T2818] out_of_memory+0x624/0xa30 [ 129.361448][ T2818] ? __cfi_out_of_memory+0x10/0x10 [ 129.361466][ T2818] ? mutex_lock_killable+0x115/0x1d0 [ 129.361486][ T2818] ? __cfi_mutex_lock_killable+0x10/0x10 [ 129.361507][ T2818] mem_cgroup_out_of_memory+0x2c8/0x390 [ 129.361524][ T2818] ? css_next_descendant_pre+0x202/0x230 [ 129.361543][ T2818] ? drain_obj_stock+0xed0/0xed0 [ 129.361561][ T2818] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 129.361577][ T2818] try_charge_memcg+0x91c/0xe10 [ 129.361598][ T2818] ? __cfi_try_charge_memcg+0x10/0x10 [ 129.361619][ T2818] ? __alloc_pages_noprof+0x35f/0x7e0 [ 129.361641][ T2818] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 129.361663][ T2818] __mem_cgroup_charge+0xfc/0x420 [ 129.361678][ T2818] ? folio_add_lru+0x116/0x400 [ 129.361698][ T2818] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 129.361714][ T2818] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 129.361733][ T2818] ? shmem_replace_folio+0x9b0/0x9b0 [ 129.361749][ T2818] ? shmem_huge_global_enabled+0x2da/0x360 [ 129.361772][ T2818] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 129.361791][ T2818] ? __kasan_check_write+0x18/0x20 [ 129.361807][ T2818] ? _raw_spin_lock+0x92/0x120 [ 129.361823][ T2818] shmem_get_folio_gfp+0x607/0x1390 [ 129.361843][ T2818] ? shmem_get_folio+0xc0/0xc0 [ 129.361859][ T2818] ? follow_page_pte+0x90f/0xbc0 [ 129.361880][ T2818] ? inode_to_bdi+0x6d/0x100 [ 129.361901][ T2818] shmem_write_begin+0xf4/0x270 [ 129.361920][ T2818] generic_perform_write+0x328/0x970 [ 129.361943][ T2818] ? __cfi_generic_perform_write+0x10/0x10 [ 129.361964][ T2818] ? down_write+0xee/0x2b0 [ 129.361999][ T2818] ? file_update_time+0xa3/0x210 [ 129.362020][ T2818] shmem_file_write_iter+0x105/0x130 [ 129.362040][ T2818] __kernel_write_iter+0x42c/0x8a0 [ 129.362057][ T2818] ? __cfi___kernel_write_iter+0x10/0x10 [ 129.362073][ T2818] ? get_dump_page+0x165/0x220 [ 129.362094][ T2818] ? __asan_memset+0x39/0x50 [ 129.362109][ T2818] ? iov_iter_bvec+0xc0/0x180 [ 129.362128][ T2818] dump_user_range+0xb8b/0xe60 [ 129.362146][ T2818] ? __cfi_dump_user_range+0x10/0x10 [ 129.362163][ T2818] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 129.362186][ T2818] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 129.362209][ T2818] ? elf_core_dump+0x24c0/0x3960 [ 129.362228][ T2818] elf_core_dump+0x2e7e/0x3960 [ 129.362249][ T2818] ? __cfi_elf_core_dump+0x10/0x10 [ 129.362273][ T2818] ? dump_interrupted+0xf0/0xf0 [ 129.362289][ T2818] ? 0xffffffffff600000 [ 129.362302][ T2818] ? put_dmabuf_info+0xf5/0x200 [ 129.362321][ T2818] do_coredump+0x208d/0x2fe0 [ 129.362339][ T2818] ? __cfi_do_coredump+0x10/0x10 [ 129.362354][ T2818] ? asm_exc_page_fault+0x2b/0x30 [ 129.362378][ T2818] ? __kasan_slab_free+0x6a/0x80 [ 129.362397][ T2818] ? kmem_cache_free+0x1bd/0x4f0 [ 129.362414][ T2818] ? get_signal+0xa74/0x14e0 [ 129.362435][ T2818] get_signal+0x11f8/0x14e0 [ 129.362457][ T2818] arch_do_signal_or_restart+0xbc/0x760 [ 129.362475][ T2818] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 129.362493][ T2818] irqentry_exit_to_user_mode+0x4d/0xb0 [ 129.362516][ T2818] irqentry_exit+0x16/0x60 [ 129.362535][ T2818] exc_page_fault+0x65/0xc0 [ 129.362555][ T2818] asm_exc_page_fault+0x2b/0x30 [ 129.362573][ T2818] RIP: 0033:0x7f6cac79ce61 [ 129.362587][ T2818] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 129.362601][ T2818] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 129.362616][ T2818] RAX: 0000000000000000 RBX: 00007f6caca15fa0 RCX: 00007f6cac79ce59 [ 129.362629][ T2818] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000100411 [ 129.362640][ T2818] RBP: 00007f6cac832d6f R08: 0000000000000000 R09: 0000000000000000 [ 129.362652][ T2818] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 129.362664][ T2818] R13: 00007f6caca16038 R14: 00007f6caca15fa0 R15: 00007ffd021300d8 [ 129.362678][ T2818] [ 129.364913][ T2818] memory: usage 306380kB, limit 307200kB, failcnt 31377 [ 129.589894][ T311] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 129.609890][ T2818] memory+swap: usage 431668kB, limit 9007199254740988kB, failcnt 0 [ 129.759879][ T311] usb 1-1: device descriptor read/64, error -71 [ 129.762836][ T2818] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 129.781181][ T558] Bluetooth: hci0: Frame reassembly failed (-84) [ 129.786744][ T2818] Memory cgroup stats for [ 129.795510][ T558] Bluetooth: hci0: Frame reassembly failed (-84) [ 129.803308][ T2818] /syz4 [ 129.806094][ T558] Bluetooth: hci0: Frame reassembly failed (-84) [ 129.812766][ T2818] : [ 129.867446][ T2818] cache 314318848 [ 129.873538][ T2818] rss 131072 [ 129.876735][ T2818] rss_huge 0 [ 129.879964][ T2818] shmem 314314752 [ 129.883684][ T2818] mapped_file 0 [ 129.887143][ T2818] dirty 0 [ 129.890100][ T2818] writeback 0 [ 129.893384][ T2818] workingset_refault_anon 12 [ 129.897967][ T2818] workingset_refault_file 8684 [ 129.902757][ T2818] swap 127578112 [ 129.906290][ T2818] swapcached 24576 [ 129.910026][ T2818] pgpgin 345334 [ 129.913471][ T2818] pgpgout 270097 [ 129.917000][ T2818] pgfault 92935 [ 129.920475][ T2818] pgmajfault 155 [ 129.924019][ T2818] inactive_anon 215982080 [ 129.928335][ T2818] active_anon 98402304 [ 129.932519][ T2818] inactive_file 0 [ 129.936240][ T2818] active_file 4096 [ 129.939980][ T2818] unevictable 0 [ 129.943423][ T2818] hierarchical_memory_limit 314572800 [ 129.948781][ T2818] hierarchical_memsw_limit 9223372036854771712 [ 129.954983][ T2818] total_cache 314318848 [ 129.959139][ T2818] total_rss 131072 [ 129.962888][ T2818] total_rss_huge 0 [ 129.966597][ T2818] total_shmem 314314752 [ 129.970801][ T2818] total_mapped_file 0 [ 129.974773][ T2818] total_dirty 0 [ 129.978216][ T2818] total_writeback 0 [ 129.982067][ T2818] total_workingset_refault_anon 12 [ 129.987394][ T2818] total_workingset_refault_file 8684 [ 129.992712][ T2818] total_swap 127578112 [ 129.996779][ T2818] total_swapcached 24576 [ 130.001052][ T2818] total_pgpgin 345334 [ 130.005021][ T2818] total_pgpgout 270097 [ 130.009079][ T2818] total_pgfault 92935 [ 130.013083][ T2818] total_pgmajfault 155 [ 130.017139][ T2818] total_inactive_anon 215982080 [ 130.022013][ T2818] total_active_anon 98402304 [ 130.026686][ T2818] total_inactive_file 0 [ 130.029858][ T311] usb 1-1: device descriptor read/64, error -71 [ 130.030876][ T2818] total_active_file 4096 [ 130.041329][ T2818] total_unevictable 0 [ 130.045356][ T2818] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.768,pid=2801,uid=0 [ 130.060278][ T2818] Memory cgroup out of memory: Killed process 2801 (syz.4.768) total-vm:90512kB, anon-rss:1236kB, file-rss:42644kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 130.140734][ T3065] overlayfs: failed to clone upperpath [ 130.160148][ T3066] overlayfs: failed to clone upperpath [ 130.196359][ T36] audit: type=1326 audit(1780355404.423:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3101 comm="syz.3.861" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffbbbd9ce59 code=0x0 [ 130.238387][ T2797] syz.4.768 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 130.303231][ T311] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 130.319891][ T2797] CPU: 1 UID: 0 PID: 2797 Comm: syz.4.768 Not tainted syzkaller #0 46888e5e5e1e1e111dd74017fc0802fda26c1cfc [ 130.319924][ T2797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 130.319935][ T2797] Call Trace: [ 130.319941][ T2797] [ 130.319950][ T2797] __dump_stack+0x21/0x30 [ 130.319980][ T2797] dump_stack_lvl+0x140/0x1c0 [ 130.320004][ T2797] ? __cfi_dump_stack_lvl+0x10/0x10 [ 130.320028][ T2797] ? ___ratelimit+0x40e/0x5b0 [ 130.320050][ T2797] dump_stack+0x19/0x20 [ 130.320074][ T2797] dump_header+0xd6/0x490 [ 130.320096][ T2797] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 130.320121][ T2797] oom_kill_process+0x35d/0x640 [ 130.320143][ T2797] out_of_memory+0x624/0xa30 [ 130.320163][ T2797] ? __cfi_out_of_memory+0x10/0x10 [ 130.320182][ T2797] ? mutex_lock_killable+0x115/0x1d0 [ 130.320206][ T2797] ? __cfi_mutex_lock_killable+0x10/0x10 [ 130.320236][ T2797] mem_cgroup_out_of_memory+0x2c8/0x390 [ 130.320256][ T2797] ? css_next_descendant_pre+0x202/0x230 [ 130.320279][ T2797] ? drain_obj_stock+0xed0/0xed0 [ 130.320299][ T2797] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 130.320318][ T2797] try_charge_memcg+0x91c/0xe10 [ 130.320342][ T2797] ? _raw_spin_lock+0x92/0x120 [ 130.320360][ T2797] ? __cfi_try_charge_memcg+0x10/0x10 [ 130.320385][ T2797] ? __alloc_pages_noprof+0x35f/0x7e0 [ 130.320411][ T2797] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 130.320436][ T2797] __mem_cgroup_charge+0xfc/0x420 [ 130.320454][ T2797] ? folio_add_lru+0x116/0x400 [ 130.320475][ T2797] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 130.320495][ T2797] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 130.320519][ T2797] ? shmem_replace_folio+0x9b0/0x9b0 [ 130.320541][ T2797] ? shmem_huge_global_enabled+0x2da/0x360 [ 130.320563][ T2797] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 130.320590][ T2797] ? __kasan_check_write+0x18/0x20 [ 130.320609][ T2797] ? _raw_spin_lock+0x92/0x120 [ 130.320627][ T2797] shmem_get_folio_gfp+0x607/0x1390 [ 130.320650][ T2797] ? shmem_get_folio+0xc0/0xc0 [ 130.320668][ T2797] ? follow_page_pte+0x90f/0xbc0 [ 130.320691][ T2797] ? inode_to_bdi+0x6d/0x100 [ 130.320716][ T2797] shmem_write_begin+0xf4/0x270 [ 130.320738][ T2797] generic_perform_write+0x328/0x970 [ 130.320764][ T2797] ? __cfi_generic_perform_write+0x10/0x10 [ 130.320787][ T2797] ? down_write+0xee/0x2b0 [ 130.320811][ T2797] ? file_update_time+0xa3/0x210 [ 130.320836][ T2797] shmem_file_write_iter+0x105/0x130 [ 130.320859][ T2797] __kernel_write_iter+0x42c/0x8a0 [ 130.320879][ T2797] ? __cfi___kernel_write_iter+0x10/0x10 [ 130.320897][ T2797] ? get_dump_page+0x165/0x220 [ 130.320920][ T2797] ? __asan_memset+0x39/0x50 [ 130.320938][ T2797] ? iov_iter_bvec+0xc0/0x180 [ 130.320957][ T2797] dump_user_range+0xb8b/0xe60 [ 130.320976][ T2797] ? __cfi_dump_user_range+0x10/0x10 [ 130.320995][ T2797] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 130.321023][ T2797] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 130.321049][ T2797] ? elf_core_dump+0x24c0/0x3960 [ 130.321073][ T2797] elf_core_dump+0x2e7e/0x3960 [ 130.321097][ T2797] ? __cfi_elf_core_dump+0x10/0x10 [ 130.321125][ T2797] ? dump_interrupted+0xf0/0xf0 [ 130.321143][ T2797] ? 0xffffffffff600000 [ 130.321157][ T2797] ? put_dmabuf_info+0xf5/0x200 [ 130.321181][ T2797] do_coredump+0x208d/0x2fe0 [ 130.321201][ T2797] ? __cfi_do_coredump+0x10/0x10 [ 130.321219][ T2797] ? asm_exc_page_fault+0x2b/0x30 [ 130.321245][ T2797] ? __kasan_slab_free+0x6a/0x80 [ 130.321267][ T2797] ? kmem_cache_free+0x1bd/0x4f0 [ 130.321286][ T2797] ? get_signal+0xa74/0x14e0 [ 130.321310][ T2797] get_signal+0x11f8/0x14e0 [ 130.321336][ T2797] arch_do_signal_or_restart+0xbc/0x760 [ 130.321355][ T2797] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 130.321377][ T2797] irqentry_exit_to_user_mode+0x4d/0xb0 [ 130.321402][ T2797] irqentry_exit+0x16/0x60 [ 130.321424][ T2797] exc_page_fault+0x65/0xc0 [ 130.321446][ T2797] asm_exc_page_fault+0x2b/0x30 [ 130.321467][ T2797] RIP: 0033:0x7f6cac79ce61 [ 130.321484][ T2797] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 130.321499][ T2797] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 130.321517][ T2797] RAX: 0000000000000000 RBX: 00007f6caca15fa0 RCX: 00007f6cac79ce59 [ 130.321531][ T2797] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000100411 [ 130.321544][ T2797] RBP: 00007f6cac832d6f R08: 0000000000000000 R09: 0000000000000000 [ 130.321557][ T2797] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 130.321569][ T2797] R13: 00007f6caca16038 R14: 00007f6caca15fa0 R15: 00007ffd021300d8 [ 130.321593][ T2797] [ 130.321601][ T2797] memory: usage 301536kB, limit 307200kB, failcnt 32247 [ 130.459898][ T311] usb 1-1: device descriptor read/64, error -71 [ 130.499600][ T2797] memory+swap: usage 431872kB, limit 9007199254740988kB, failcnt 0 [ 130.789493][ T2797] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 130.789965][ T311] usb 1-1: device descriptor read/64, error -71 [ 130.796400][ T2797] Memory cgroup stats for /syz4: [ 130.802827][ T2797] cache 314445824 [ 130.811430][ T2797] rss 126976 [ 130.814621][ T2797] rss_huge 0 [ 130.817808][ T2797] shmem 312008704 [ 130.821442][ T2797] mapped_file 0 [ 130.824890][ T2797] dirty 0 [ 130.827805][ T2797] writeback 0 [ 130.831116][ T2797] workingset_refault_anon 12 [ 130.835701][ T2797] workingset_refault_file 8909 [ 130.840518][ T2797] swap 127664128 [ 130.844054][ T2797] swapcached 24576 [ 130.847786][ T2797] pgpgin 353453 [ 130.851254][ T2797] pgpgout 278186 [ 130.854787][ T2797] pgfault 93208 [ 130.858224][ T2797] pgmajfault 162 [ 130.861775][ T2797] inactive_anon 287510528 [ 130.866092][ T2797] active_anon 24625152 [ 130.870173][ T2797] inactive_file 0 [ 130.873801][ T2797] active_file 4096 [ 130.877501][ T2797] unevictable 2433024 [ 130.881491][ T2797] hierarchical_memory_limit 314572800 [ 130.886862][ T2797] hierarchical_memsw_limit 9223372036854771712 [ 130.893037][ T2797] total_cache 314445824 [ 130.897181][ T2797] total_rss 126976 [ 130.900904][ T2797] total_rss_huge 0 [ 130.904609][ T2797] total_shmem 312008704 [ 130.908738][ T2797] total_mapped_file 0 [ 130.912786][ T2797] total_dirty 0 [ 130.916253][ T2797] total_writeback 0 [ 130.919990][ T311] usb usb1-port1: attempt power cycle [ 130.920070][ T2797] total_workingset_refault_anon 12 [ 130.930523][ T2797] total_workingset_refault_file 8909 [ 130.935801][ T2797] total_swap 127664128 [ 130.939897][ T2797] total_swapcached 24576 [ 130.944133][ T2797] total_pgpgin 353453 [ 130.948091][ T2797] total_pgpgout 278186 [ 130.952161][ T2797] total_pgfault 93208 [ 130.956131][ T2797] total_pgmajfault 162 [ 130.960204][ T2797] total_inactive_anon 287510528 [ 130.965040][ T2797] total_active_anon 24625152 [ 130.969605][ T2797] total_inactive_file 0 [ 130.973764][ T2797] total_active_file 4096 [ 130.978033][ T2797] total_unevictable 2433024 [ 130.982546][ T2797] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.768,pid=2805,uid=0 [ 130.997363][ T2797] Memory cgroup out of memory: Killed process 2805 (syz.4.768) total-vm:90512kB, anon-rss:1236kB, file-rss:41852kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 131.112996][ T2820] syz.4.768 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 131.200168][ T2820] CPU: 1 UID: 0 PID: 2820 Comm: syz.4.768 Not tainted syzkaller #0 46888e5e5e1e1e111dd74017fc0802fda26c1cfc [ 131.200200][ T2820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 131.200211][ T2820] Call Trace: [ 131.200217][ T2820] [ 131.200225][ T2820] __dump_stack+0x21/0x30 [ 131.200252][ T2820] dump_stack_lvl+0x140/0x1c0 [ 131.200274][ T2820] ? __cfi_dump_stack_lvl+0x10/0x10 [ 131.200295][ T2820] ? ___ratelimit+0x40e/0x5b0 [ 131.200316][ T2820] dump_stack+0x19/0x20 [ 131.200335][ T2820] dump_header+0xd6/0x490 [ 131.200353][ T2820] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 131.200372][ T2820] oom_kill_process+0x35d/0x640 [ 131.200390][ T2820] out_of_memory+0x624/0xa30 [ 131.200406][ T2820] ? __cfi_out_of_memory+0x10/0x10 [ 131.200424][ T2820] ? mutex_lock_killable+0x97/0x1d0 [ 131.200443][ T2820] ? __cfi_mutex_lock_killable+0x10/0x10 [ 131.200462][ T2820] mem_cgroup_out_of_memory+0x2c8/0x390 [ 131.200480][ T2820] ? css_next_descendant_pre+0x202/0x230 [ 131.200499][ T2820] ? drain_obj_stock+0xed0/0xed0 [ 131.200516][ T2820] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 131.200531][ T2820] try_charge_memcg+0x91c/0xe10 [ 131.200553][ T2820] ? __cfi_try_charge_memcg+0x10/0x10 [ 131.200574][ T2820] ? __alloc_pages_noprof+0x35f/0x7e0 [ 131.200607][ T2820] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 131.200632][ T2820] __mem_cgroup_charge+0xfc/0x420 [ 131.200647][ T2820] ? folio_add_lru+0x116/0x400 [ 131.200667][ T2820] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 131.200685][ T2820] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 131.200708][ T2820] ? shmem_replace_folio+0x9b0/0x9b0 [ 131.200729][ T2820] ? shmem_huge_global_enabled+0x2da/0x360 [ 131.200749][ T2820] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 131.200769][ T2820] ? __kasan_check_write+0x18/0x20 [ 131.200787][ T2820] ? _raw_spin_lock+0x92/0x120 [ 131.200806][ T2820] shmem_get_folio_gfp+0x607/0x1390 [ 131.200826][ T2820] ? shmem_get_folio+0xc0/0xc0 [ 131.200842][ T2820] ? follow_page_pte+0x90f/0xbc0 [ 131.200866][ T2820] ? inode_to_bdi+0x6d/0x100 [ 131.200888][ T2820] shmem_write_begin+0xf4/0x270 [ 131.200906][ T2820] generic_perform_write+0x328/0x970 [ 131.200929][ T2820] ? __cfi_generic_perform_write+0x10/0x10 [ 131.200951][ T2820] ? down_write+0xee/0x2b0 [ 131.200975][ T2820] ? file_update_time+0xa3/0x210 [ 131.200996][ T2820] shmem_file_write_iter+0x105/0x130 [ 131.201018][ T2820] __kernel_write_iter+0x42c/0x8a0 [ 131.201037][ T2820] ? __cfi___kernel_write_iter+0x10/0x10 [ 131.201055][ T2820] ? get_dump_page+0x165/0x220 [ 131.201078][ T2820] ? __asan_memset+0x39/0x50 [ 131.201095][ T2820] ? iov_iter_bvec+0xc0/0x180 [ 131.201116][ T2820] dump_user_range+0xb8b/0xe60 [ 131.201137][ T2820] ? __cfi_dump_user_range+0x10/0x10 [ 131.201155][ T2820] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 131.201182][ T2820] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 131.201209][ T2820] ? elf_core_dump+0x24c0/0x3960 [ 131.201231][ T2820] elf_core_dump+0x2e7e/0x3960 [ 131.201255][ T2820] ? __cfi_elf_core_dump+0x10/0x10 [ 131.201282][ T2820] ? dump_interrupted+0xf0/0xf0 [ 131.201300][ T2820] ? 0xffffffffff600000 [ 131.201314][ T2820] ? put_dmabuf_info+0xf5/0x200 [ 131.201336][ T2820] do_coredump+0x208d/0x2fe0 [ 131.201355][ T2820] ? __cfi_do_coredump+0x10/0x10 [ 131.201370][ T2820] ? asm_exc_page_fault+0x2b/0x30 [ 131.201396][ T2820] ? __kasan_slab_free+0x6a/0x80 [ 131.201417][ T2820] ? kmem_cache_free+0x1bd/0x4f0 [ 131.201436][ T2820] ? get_signal+0xa74/0x14e0 [ 131.201461][ T2820] get_signal+0x11f8/0x14e0 [ 131.201486][ T2820] arch_do_signal_or_restart+0xbc/0x760 [ 131.201506][ T2820] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 131.201528][ T2820] irqentry_exit_to_user_mode+0x4d/0xb0 [ 131.201553][ T2820] irqentry_exit+0x16/0x60 [ 131.201575][ T2820] exc_page_fault+0x65/0xc0 [ 131.201605][ T2820] asm_exc_page_fault+0x2b/0x30 [ 131.201624][ T2820] RIP: 0033:0x7f6cac79ce61 [ 131.201641][ T2820] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 131.201656][ T2820] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 131.201673][ T2820] RAX: 0000000000000000 RBX: 00007f6caca15fa0 RCX: 00007f6cac79ce59 [ 131.201688][ T2820] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000100411 [ 131.201699][ T2820] RBP: 00007f6cac832d6f R08: 0000000000000000 R09: 0000000000000000 [ 131.201711][ T2820] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 131.201724][ T2820] R13: 00007f6caca16038 R14: 00007f6caca15fa0 R15: 00007ffd021300d8 [ 131.201740][ T2820] [ 131.201748][ T2820] memory: usage 303372kB, limit 307200kB, failcnt 33375 [ 131.269865][ T311] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 131.538345][ T2820] memory+swap: usage 431848kB, limit 9007199254740988kB, failcnt 0 [ 131.561035][ T311] usb 1-1: device descriptor read/8, error -71 [ 131.564879][ T2820] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 131.678148][ T2820] Memory cgroup stats for /syz4: [ 131.678310][ T2820] cache 314421248 [ 131.686992][ T2820] rss 126976 [ 131.690208][ T2820] rss_huge 0 [ 131.693481][ T2820] shmem 308449280 [ 131.697089][ T2820] mapped_file 0 [ 131.700583][ T2820] dirty 0 [ 131.701087][ T311] usb 1-1: device descriptor read/8, error -71 [ 131.703508][ T2820] writeback 0 [ 131.703516][ T2820] workingset_refault_anon 12 [ 131.703522][ T2820] workingset_refault_file 10864 [ 131.703529][ T2820] swap 127639552 [ 131.703536][ T2820] swapcached 49152 [ 131.703542][ T2820] pgpgin 363227 [ 131.733026][ T2820] pgpgout 287960 [ 131.736557][ T2820] pgfault 93742 [ 131.740021][ T2820] pgmajfault 189 [ 131.743559][ T2820] inactive_anon 22011904 [ 131.747780][ T2820] active_anon 286588928 [ 131.751960][ T2820] inactive_file 0 [ 131.755587][ T2820] active_file 4096 [ 131.759290][ T2820] unevictable 5967872 [ 131.763614][ T2820] hierarchical_memory_limit 314572800 [ 131.768990][ T2820] hierarchical_memsw_limit 9223372036854771712 [ 131.775191][ T2820] total_cache 314421248 [ 131.779338][ T2820] total_rss 126976 [ 131.783104][ T2820] total_rss_huge 0 [ 131.786832][ T2820] total_shmem 308449280 [ 131.790991][ T2820] total_mapped_file 0 [ 131.794955][ T2820] total_dirty 0 [ 131.798388][ T2820] total_writeback 0 [ 131.802238][ T2820] total_workingset_refault_anon 12 [ 131.807336][ T2820] total_workingset_refault_file 10864 [ 131.812723][ T2820] total_swap 127639552 [ 131.816794][ T2820] total_swapcached 49152 [ 131.821049][ T2820] total_pgpgin 363227 [ 131.825364][ T2820] total_pgpgout 287960 [ 131.829407][ T2820] total_pgfault 93742 [ 131.833386][ T2820] total_pgmajfault 189 [ 131.837437][ T2820] total_inactive_anon 22011904 [ 131.842383][ T2820] total_active_anon 286588928 [ 131.847075][ T2820] total_inactive_file 0 [ 131.851300][ T1212] Bluetooth: hci0: command 0x1003 tx timeout [ 131.851558][ T2820] total_active_file 4096 [ 131.857282][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 131.861691][ T2820] total_unevictable 5967872 [ 131.872249][ T2820] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.768,pid=2795,uid=0 [ 131.883512][ T3106] netlink: 'syz.2.862': attribute type 10 has an invalid length. [ 131.887247][ T2820] Memory cgroup out of memory: Killed process 2795 (syz.4.768) total-vm:90512kB, anon-rss:1236kB, file-rss:35276kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 131.922126][ T480] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 131.939884][ T311] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 131.964665][ T36] audit: type=1400 audit(1780355406.193:417): avc: denied { create } for pid=3111 comm="syz.2.865" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 131.970854][ T311] usb 1-1: device descriptor read/8, error -71 [ 131.991459][ T480] CPU: 0 UID: 0 PID: 480 Comm: syz-executor Not tainted syzkaller #0 46888e5e5e1e1e111dd74017fc0802fda26c1cfc [ 131.991490][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 131.991501][ T480] Call Trace: [ 131.991508][ T480] [ 131.991516][ T480] __dump_stack+0x21/0x30 [ 131.991546][ T480] dump_stack_lvl+0x140/0x1c0 [ 131.991568][ T480] ? __cfi_dump_stack_lvl+0x10/0x10 [ 131.991590][ T480] ? ___ratelimit+0x40e/0x5b0 [ 131.991612][ T480] dump_stack+0x19/0x20 [ 131.991636][ T480] dump_header+0xd6/0x490 [ 131.991658][ T480] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 131.991683][ T480] oom_kill_process+0x35d/0x640 [ 131.991704][ T480] out_of_memory+0x624/0xa30 [ 131.991724][ T480] ? __cfi_out_of_memory+0x10/0x10 [ 131.991744][ T480] ? mutex_lock_killable+0x115/0x1d0 [ 131.991767][ T480] ? __cfi_mutex_lock_killable+0x10/0x10 [ 131.991791][ T480] mem_cgroup_out_of_memory+0x2c8/0x390 [ 131.991811][ T480] ? css_next_descendant_pre+0x202/0x230 [ 131.991834][ T480] ? drain_obj_stock+0xed0/0xed0 [ 131.991854][ T480] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 131.991874][ T480] try_charge_memcg+0x91c/0xe10 [ 131.991899][ T480] ? __cfi_try_charge_memcg+0x10/0x10 [ 131.991923][ T480] ? __alloc_pages_noprof+0x35f/0x7e0 [ 131.991949][ T480] ? kvm_sched_clock_read+0x15/0x30 [ 131.991972][ T480] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 131.991997][ T480] __mem_cgroup_charge+0xfc/0x420 [ 131.992016][ T480] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 131.992035][ T480] folio_prealloc+0x67/0x220 [ 131.992058][ T480] do_wp_page+0x1895/0x2e90 [ 131.992080][ T480] ? folio_put+0x90/0x90 [ 131.992099][ T480] ? __cfi__raw_spin_lock+0x10/0x10 [ 131.992118][ T480] ? __pte_offset_map+0x1b0/0x230 [ 131.992144][ T480] ? pte_offset_map_rw_nolock+0xba/0x110 [ 131.992162][ T480] handle_mm_fault+0x103e/0x1bf0 [ 131.992185][ T480] ? __cfi_handle_mm_fault+0x10/0x10 [ 131.992205][ T480] ? lock_vma_under_rcu+0x4d1/0x590 [ 131.992228][ T480] ? __cfi___x64_sys_clone+0x10/0x10 [ 131.992253][ T480] ? __se_sys_rt_sigprocmask+0x237/0x2a0 [ 131.992279][ T480] do_user_addr_fault+0x963/0x11e0 [ 131.992299][ T480] exc_page_fault+0x58/0xc0 [ 131.992322][ T480] asm_exc_page_fault+0x2b/0x30 [ 131.992342][ T480] RIP: 0033:0x7f6cac7c591e [ 131.992358][ T480] Code: 00 66 48 0f 6e c7 66 0f 6c c0 0f 11 80 d8 02 00 00 b8 11 01 00 00 0f 05 48 83 3d 84 16 22 00 00 74 05 e8 e5 9a f7 ff 48 89 df 5d 8b f7 ff 48 8b 44 24 08 64 48 2b 04 25 28 00 00 00 75 20 48 [ 131.992373][ T480] RSP: 002b:00007ffd021302f0 EFLAGS: 00010206 [ 131.992391][ T480] RAX: 00000000000002bd RBX: 00007ffd021302f0 RCX: 00007f6cac7c58d2 [ 131.992406][ T480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffd021302f0 [ 131.992418][ T480] RBP: 00000000000002bd R08: 0000000000000000 R09: 0000000000000001 [ 131.992430][ T480] R10: 00005555640737d0 R11: 0000000000000246 R12: 0000000000000000 [ 131.992449][ T480] R13: 00000000000927c0 R14: 000000000001f83b R15: 00007ffd021304d0 [ 131.992466][ T480] [ 131.992474][ T480] memory: usage 306704kB, limit 307200kB, failcnt 35599 [ 132.141971][ T3116] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=3116 comm=syz.2.866 [ 132.142897][ T480] memory+swap: usage 425252kB, limit 9007199254740988kB, failcnt 0 [ 132.173948][ T3118] mmap: syz.2.867 (3118): VmData 29077504 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 132.178174][ T480] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 132.330740][ T311] usb 1-1: device descriptor read/8, error -71 [ 132.338330][ T480] Memory cgroup stats for /syz4: [ 132.338475][ T480] cache 314392576 [ 132.358277][ T3123] incfs: ino conflict with backing FS 1 [ 132.371886][ T3123] overlayfs: upper fs does not support tmpfile. [ 132.389462][ T3123] overlayfs: upper fs does not support tmpfile. [ 132.406895][ T480] rss 98304 [ 132.420677][ T3126] netlink: 124 bytes leftover after parsing attributes in process `syz.0.870'. [ 132.421349][ T558] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.440076][ T311] usb usb1-port1: unable to enumerate USB device [ 132.456567][ T480] rss_huge 0 [ 132.468324][ T480] shmem 306790400 [ 132.469912][ T36] audit: type=1400 audit(1780355406.693:418): avc: denied { write } for pid=3127 comm="syz.2.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.473089][ T480] mapped_file 1392640 [ 132.498602][ T480] dirty 0 [ 132.501601][ T480] writeback 4096 [ 132.505143][ T480] workingset_refault_anon 12 [ 132.510094][ T480] workingset_refault_file 11403 [ 132.514974][ T480] swap 127229952 [ 132.518557][ T480] swapcached 32768 [ 132.523072][ T480] pgpgin 372187 [ 132.528460][ T480] pgpgout 296938 [ 132.532146][ T480] pgfault 94135 [ 132.535605][ T480] pgmajfault 194 [ 132.539148][ T480] inactive_anon 250855424 [ 132.548311][ T480] active_anon 55390208 [ 132.552578][ T480] inactive_file 0 [ 132.556427][ T480] active_file 1634304 [ 132.563307][ T480] unevictable 5967872 [ 132.574716][ T480] hierarchical_memory_limit 314572800 [ 132.580394][ T480] hierarchical_memsw_limit 9223372036854771712 [ 132.586719][ T480] total_cache 314392576 [ 132.591435][ T480] total_rss 98304 [ 132.595291][ T480] total_rss_huge 0 [ 132.599052][ T480] total_shmem 306790400 [ 132.599741][ T3137] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.603230][ T480] total_mapped_file 1392640 [ 132.607687][ T3137] rust_binder: 3136:3137 transaction to 0 failed: ENOENT [ 132.609636][ T480] total_dirty 0 [ 132.609647][ T480] total_writeback 4096 [ 132.609654][ T480] total_workingset_refault_anon 12 [ 132.636507][ T480] total_workingset_refault_file 11403 [ 132.641964][ T480] total_swap 127229952 [ 132.646031][ T480] total_swapcached 32768 [ 132.650551][ T480] total_pgpgin 372187 [ 132.654555][ T480] total_pgpgout 296938 [ 132.658626][ T480] total_pgfault 94135 [ 132.662662][ T480] total_pgmajfault 194 [ 132.666731][ T480] total_inactive_anon 250855424 [ 132.671636][ T480] total_active_anon 55390208 [ 132.676218][ T480] total_inactive_file 0 [ 132.680417][ T480] total_active_file 1634304 [ 132.684918][ T480] total_unevictable 5967872 [ 132.689422][ T480] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.768,pid=2799,uid=0 [ 132.704223][ T480] Memory cgroup out of memory: Killed process 2799 (syz.4.768) total-vm:90512kB, anon-rss:1236kB, file-rss:35900kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:0 [ 132.834872][ T2813] syz.4.768 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 132.859860][ T66] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 132.866245][ T2813] CPU: 0 UID: 0 PID: 2813 Comm: syz.4.768 Not tainted syzkaller #0 46888e5e5e1e1e111dd74017fc0802fda26c1cfc [ 132.866278][ T2813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 132.866291][ T2813] Call Trace: [ 132.866297][ T2813] [ 132.866305][ T2813] __dump_stack+0x21/0x30 [ 132.866333][ T2813] dump_stack_lvl+0x140/0x1c0 [ 132.866356][ T2813] ? __cfi_dump_stack_lvl+0x10/0x10 [ 132.866379][ T2813] ? ___ratelimit+0x40e/0x5b0 [ 132.866406][ T2813] dump_stack+0x19/0x20 [ 132.866428][ T2813] dump_header+0xd6/0x490 [ 132.866449][ T2813] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 132.866473][ T2813] oom_kill_process+0x35d/0x640 [ 132.866494][ T2813] out_of_memory+0x624/0xa30 [ 132.866513][ T2813] ? __cfi_out_of_memory+0x10/0x10 [ 132.866532][ T2813] ? mutex_lock_killable+0x97/0x1d0 [ 132.866553][ T2813] ? __cfi_mutex_lock_killable+0x10/0x10 [ 132.866576][ T2813] mem_cgroup_out_of_memory+0x2c8/0x390 [ 132.866595][ T2813] ? css_next_descendant_pre+0x202/0x230 [ 132.866617][ T2813] ? drain_obj_stock+0xed0/0xed0 [ 132.866635][ T2813] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 132.866653][ T2813] try_charge_memcg+0x91c/0xe10 [ 132.866676][ T2813] ? __cfi_try_charge_memcg+0x10/0x10 [ 132.866698][ T2813] ? __alloc_pages_noprof+0x35f/0x7e0 [ 132.866721][ T2813] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 132.866744][ T2813] __mem_cgroup_charge+0xfc/0x420 [ 132.866761][ T2813] ? folio_add_lru+0x116/0x400 [ 132.866782][ T2813] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 132.866800][ T2813] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 132.866823][ T2813] ? shmem_replace_folio+0x9b0/0x9b0 [ 132.866842][ T2813] ? shmem_huge_global_enabled+0x2da/0x360 [ 132.866862][ T2813] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 132.866882][ T2813] ? __kasan_check_write+0x18/0x20 [ 132.866899][ T2813] ? _raw_spin_lock+0x92/0x120 [ 132.866916][ T2813] shmem_get_folio_gfp+0x607/0x1390 [ 132.866937][ T2813] ? shmem_get_folio+0xc0/0xc0 [ 132.866954][ T2813] ? follow_page_pte+0x90f/0xbc0 [ 132.866977][ T2813] ? inode_to_bdi+0x6d/0x100 [ 132.867002][ T2813] shmem_write_begin+0xf4/0x270 [ 132.867022][ T2813] generic_perform_write+0x328/0x970 [ 132.867046][ T2813] ? __cfi_generic_perform_write+0x10/0x10 [ 132.867067][ T2813] ? down_write+0xee/0x2b0 [ 132.867092][ T2813] ? file_update_time+0xa3/0x210 [ 132.867115][ T2813] shmem_file_write_iter+0x105/0x130 [ 132.867138][ T2813] __kernel_write_iter+0x42c/0x8a0 [ 132.867155][ T2813] ? __cfi___kernel_write_iter+0x10/0x10 [ 132.867173][ T2813] ? get_dump_page+0x165/0x220 [ 132.867195][ T2813] ? __asan_memset+0x39/0x50 [ 132.867211][ T2813] ? iov_iter_bvec+0xc0/0x180 [ 132.867231][ T2813] dump_user_range+0xb8b/0xe60 [ 132.867250][ T2813] ? __cfi_dump_user_range+0x10/0x10 [ 132.867268][ T2813] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 132.867294][ T2813] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 132.867319][ T2813] ? elf_core_dump+0x24c0/0x3960 [ 132.867340][ T2813] elf_core_dump+0x2e7e/0x3960 [ 132.867362][ T2813] ? __cfi_elf_core_dump+0x10/0x10 [ 132.867394][ T2813] ? dump_interrupted+0xf0/0xf0 [ 132.867411][ T2813] ? 0xffffffffff600000 [ 132.867424][ T2813] ? put_dmabuf_info+0xf5/0x200 [ 132.867445][ T2813] do_coredump+0x208d/0x2fe0 [ 132.867462][ T2813] ? __cfi_do_coredump+0x10/0x10 [ 132.867477][ T2813] ? asm_exc_page_fault+0x2b/0x30 [ 132.867503][ T2813] ? __kasan_slab_free+0x6a/0x80 [ 132.867524][ T2813] ? kmem_cache_free+0x1bd/0x4f0 [ 132.867542][ T2813] ? get_signal+0xa74/0x14e0 [ 132.867566][ T2813] get_signal+0x11f8/0x14e0 [ 132.867590][ T2813] arch_do_signal_or_restart+0xbc/0x760 [ 132.867607][ T2813] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 132.867628][ T2813] irqentry_exit_to_user_mode+0x4d/0xb0 [ 132.867648][ T2813] irqentry_exit+0x16/0x60 [ 132.867668][ T2813] exc_page_fault+0x65/0xc0 [ 132.867689][ T2813] asm_exc_page_fault+0x2b/0x30 [ 132.867706][ T2813] RIP: 0033:0x7f6cac79ce61 [ 132.867723][ T2813] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 132.867737][ T2813] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 132.867753][ T2813] RAX: 0000000000000000 RBX: 00007f6caca15fa0 RCX: 00007f6cac79ce59 [ 132.867766][ T2813] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000100411 [ 132.867777][ T2813] RBP: 00007f6cac832d6f R08: 0000000000000000 R09: 0000000000000000 [ 132.867789][ T2813] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 132.867799][ T2813] R13: 00007f6caca16038 R14: 00007f6caca15fa0 R15: 00007ffd021300d8 [ 132.867813][ T2813] [ 132.867822][ T2813] memory: usage 307200kB, limit 307200kB, failcnt 38763 [ 133.041282][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 133.044490][ T2813] memory+swap: usage 402224kB, limit 9007199254740988kB, failcnt 0 [ 133.050938][ T66] usb 3-1: not running at top speed; connect to a high speed hub [ 133.054371][ T2813] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 133.060209][ T66] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 133.063887][ T2813] Memory cgroup stats for [ 133.068818][ T66] usb 3-1: config 0 has no interface number 0 [ 133.074025][ T2813] /syz4: [ 133.074140][ T2813] cache 291536896 [ 133.080292][ T66] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 133.084231][ T2813] rss 73728 [ 133.084242][ T2813] rss_huge 0 [ 133.084247][ T2813] shmem 285564928 [ 133.084253][ T2813] mapped_file 0 [ 133.084260][ T2813] dirty 0 [ 133.089219][ T66] usb 3-1: config 0 interface 88 has no altsetting 0 [ 133.094470][ T2813] writeback 0 [ 133.094480][ T2813] workingset_refault_anon 12 [ 133.094487][ T2813] workingset_refault_file 11512 [ 133.094494][ T2813] swap 120258560 [ 133.100593][ T66] usb 3-1: string descriptor 0 read error: -22 [ 133.105233][ T2813] swapcached 28672 [ 133.110133][ T66] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 133.114805][ T2813] pgpgin 372817 [ 133.119462][ T66] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 133.124466][ T2813] pgpgout 303154 [ 133.145422][ T66] usb 3-1: config 0 descriptor?? [ 133.150297][ T2813] pgfault 94164 [ 133.152547][ T3137] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 133.157186][ T2813] pgmajfault 200 [ 133.157195][ T2813] inactive_anon 11915264 [ 133.163905][ T66] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input13 [ 133.172542][ T2813] active_anon 273731584 [ 133.207960][ T36] audit: type=1400 audit(1780355407.433:419): avc: denied { getopt } for pid=3138 comm="syz.3.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.210587][ T2813] inactive_file 0 [ 133.210597][ T2813] active_file 4096 [ 133.369752][ T66] usb 3-1: USB disconnect, device number 62 [ 133.371523][ C1] usb_acecad 3-1:0.88: can't resubmit intr, dummy_hcd.2-1/input0, status -19 [ 133.372226][ T2813] unevictable 5967872 [ 133.541485][ T2813] hierarchical_memory_limit 314572800 [ 133.546979][ T2813] hierarchical_memsw_limit 9223372036854771712 [ 133.553216][ T2813] total_cache 291536896 [ 133.557588][ T2813] total_rss 73728 [ 133.559270][ T464] udevd[464]: Error opening device "/dev/input/event3": No such device [ 133.561459][ T2813] total_rss_huge 0 [ 133.573310][ T2813] total_shmem 285564928 [ 133.577467][ T36] audit: type=1400 audit(1780355407.793:420): avc: denied { mount } for pid=3147 comm="syz.3.878" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 133.577477][ T2813] total_mapped_file 0 [ 133.577488][ T2813] total_dirty 0 [ 133.577495][ T2813] total_writeback 0 [ 133.577502][ T2813] total_workingset_refault_anon 12 [ 133.601183][ T464] udevd[464]: Unable to EVIOCGABS device "/dev/input/event3" [ 133.603413][ T2813] total_workingset_refault_file 11512 [ 133.606947][ T464] udevd[464]: Unable to EVIOCGABS device "/dev/input/event3" [ 133.611340][ T2813] total_swap 120258560 [ 133.641950][ T3152] incfs: ino conflict with backing FS 1 [ 133.648482][ T3152] overlayfs: upper fs does not support tmpfile. [ 133.655077][ T2813] total_swapcached 28672 [ 133.659481][ T2813] total_pgpgin 372817 [ 133.663698][ T2813] total_pgpgout 303154 [ 133.667768][ T2813] total_pgfault 94164 [ 133.673069][ T3152] overlayfs: upper fs does not support tmpfile. [ 133.679717][ T2813] total_pgmajfault 200 [ 133.684013][ T2813] total_inactive_anon 11915264 [ 133.688777][ T2813] total_active_anon 273731584 [ 133.693883][ T2813] total_inactive_file 0 [ 133.698211][ T2813] total_active_file 4096 [ 133.703928][ T2813] total_unevictable 5967872 [ 133.708445][ T2813] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.768,pid=2820,uid=0 [ 133.724388][ T2813] Memory cgroup out of memory: Killed process 2820 (syz.4.768) total-vm:90512kB, anon-rss:1236kB, file-rss:38304kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:0 [ 133.851197][ T3158] netlink: 4632 bytes leftover after parsing attributes in process `syz.3.882'. [ 133.879891][ T66] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 133.888679][ T3158] netlink: 4632 bytes leftover after parsing attributes in process `syz.3.882'. [ 134.000133][ T3160] netlink: 16 bytes leftover after parsing attributes in process `syz.4.856'. [ 134.019403][ T3165] tmpfs: Bad value for 'nr_inodes' [ 134.029858][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 134.040816][ T66] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.055290][ T66] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 134.065229][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.079891][ T66] usb 3-1: Product: syz [ 134.084608][ T66] usb 3-1: Manufacturer: syz [ 134.099405][ T66] usb 3-1: SerialNumber: syz [ 134.108193][ T66] usb 3-1: config 0 descriptor?? [ 134.120715][ T66] usb 3-1: bad CDC descriptors [ 134.127120][ T66] usb 3-1: unsupported MDLM descriptors [ 134.146942][ T2793] syz.4.768 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 134.192691][ T2793] CPU: 1 UID: 0 PID: 2793 Comm: syz.4.768 Not tainted syzkaller #0 46888e5e5e1e1e111dd74017fc0802fda26c1cfc [ 134.192727][ T2793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 134.192739][ T2793] Call Trace: [ 134.192746][ T2793] [ 134.192753][ T2793] __dump_stack+0x21/0x30 [ 134.192782][ T2793] dump_stack_lvl+0x140/0x1c0 [ 134.192806][ T2793] ? __cfi_dump_stack_lvl+0x10/0x10 [ 134.192830][ T2793] ? ___ratelimit+0x40e/0x5b0 [ 134.192852][ T2793] dump_stack+0x19/0x20 [ 134.192875][ T2793] dump_header+0xd6/0x490 [ 134.192898][ T2793] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 134.192922][ T2793] oom_kill_process+0x35d/0x640 [ 134.192944][ T2793] out_of_memory+0x624/0xa30 [ 134.192964][ T2793] ? __cfi_out_of_memory+0x10/0x10 [ 134.192984][ T2793] ? mutex_lock_killable+0x97/0x1d0 [ 134.193007][ T2793] ? __cfi_mutex_lock_killable+0x10/0x10 [ 134.193031][ T2793] mem_cgroup_out_of_memory+0x2c8/0x390 [ 134.193050][ T2793] ? css_next_descendant_pre+0x202/0x230 [ 134.193072][ T2793] ? drain_obj_stock+0xed0/0xed0 [ 134.193092][ T2793] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 134.193110][ T2793] try_charge_memcg+0x91c/0xe10 [ 134.193133][ T2793] ? __cfi_try_charge_memcg+0x10/0x10 [ 134.193156][ T2793] ? __alloc_pages_noprof+0x35f/0x7e0 [ 134.193182][ T2793] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 134.193207][ T2793] __mem_cgroup_charge+0xfc/0x420 [ 134.193224][ T2793] ? folio_add_lru+0x116/0x400 [ 134.193272][ T2793] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 134.193291][ T2793] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 134.193315][ T2793] ? shmem_replace_folio+0x9b0/0x9b0 [ 134.193336][ T2793] ? shmem_huge_global_enabled+0x2da/0x360 [ 134.193357][ T2793] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 134.193377][ T2793] ? __kasan_check_write+0x18/0x20 [ 134.193396][ T2793] ? _raw_spin_lock+0x92/0x120 [ 134.193415][ T2793] shmem_get_folio_gfp+0x607/0x1390 [ 134.193437][ T2793] ? shmem_get_folio+0xc0/0xc0 [ 134.193455][ T2793] ? follow_page_pte+0x90f/0xbc0 [ 134.193479][ T2793] ? inode_to_bdi+0x6d/0x100 [ 134.193502][ T2793] shmem_write_begin+0xf4/0x270 [ 134.193524][ T2793] generic_perform_write+0x328/0x970 [ 134.193549][ T2793] ? __cfi_generic_perform_write+0x10/0x10 [ 134.193572][ T2793] ? down_write+0xee/0x2b0 [ 134.193600][ T2793] ? file_update_time+0xa3/0x210 [ 134.193623][ T2793] shmem_file_write_iter+0x105/0x130 [ 134.193647][ T2793] __kernel_write_iter+0x42c/0x8a0 [ 134.193667][ T2793] ? __cfi___kernel_write_iter+0x10/0x10 [ 134.193684][ T2793] ? get_dump_page+0x165/0x220 [ 134.193707][ T2793] ? __asan_memset+0x39/0x50 [ 134.193725][ T2793] ? iov_iter_bvec+0xc0/0x180 [ 134.193746][ T2793] dump_user_range+0xb8b/0xe60 [ 134.193766][ T2793] ? __cfi_dump_user_range+0x10/0x10 [ 134.193786][ T2793] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 134.193812][ T2793] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 134.193838][ T2793] ? elf_core_dump+0x24c0/0x3960 [ 134.193862][ T2793] elf_core_dump+0x2e7e/0x3960 [ 134.193886][ T2793] ? __cfi_elf_core_dump+0x10/0x10 [ 134.193913][ T2793] ? dump_interrupted+0xf0/0xf0 [ 134.193931][ T2793] ? 0xffffffffff600000 [ 134.193945][ T2793] ? put_dmabuf_info+0xf5/0x200 [ 134.193972][ T2793] do_coredump+0x208d/0x2fe0 [ 134.193992][ T2793] ? __cfi_do_coredump+0x10/0x10 [ 134.194009][ T2793] ? asm_exc_page_fault+0x2b/0x30 [ 134.194035][ T2793] ? __kasan_slab_free+0x6a/0x80 [ 134.194057][ T2793] ? kmem_cache_free+0x1bd/0x4f0 [ 134.194076][ T2793] ? get_signal+0xa74/0x14e0 [ 134.194100][ T2793] get_signal+0x11f8/0x14e0 [ 134.194123][ T2793] arch_do_signal_or_restart+0xbc/0x760 [ 134.194140][ T2793] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 134.194161][ T2793] irqentry_exit_to_user_mode+0x4d/0xb0 [ 134.194184][ T2793] irqentry_exit+0x16/0x60 [ 134.194207][ T2793] exc_page_fault+0x65/0xc0 [ 134.194229][ T2793] asm_exc_page_fault+0x2b/0x30 [ 134.194260][ T2793] RIP: 0033:0x7f6cac79ce61 [ 134.194276][ T2793] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 134.194291][ T2793] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 134.194309][ T2793] RAX: 0000000000000000 RBX: 00007f6caca15fa0 RCX: 00007f6cac79ce59 [ 134.194323][ T2793] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000100411 [ 134.194336][ T2793] RBP: 00007f6cac832d6f R08: 0000000000000000 R09: 0000000000000000 [ 134.194348][ T2793] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 134.194360][ T2793] R13: 00007f6caca16038 R14: 00007f6caca15fa0 R15: 00007ffd021300d8 [ 134.194378][ T2793] [ 134.194386][ T2793] memory: usage 307200kB, limit 307200kB, failcnt 41188 [ 134.355237][ T323] usb 3-1: USB disconnect, device number 63 [ 134.355327][ T2793] memory+swap: usage 431828kB, limit 9007199254740988kB, failcnt 0 [ 134.489862][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.493401][ T1212] Bluetooth: hci0: command 0x1003 tx timeout [ 134.497546][ T2793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 134.675326][ T2793] Memory cgroup stats for /syz4: [ 134.675514][ T2793] cache 314449920 [ 134.684198][ T2793] rss 73728 [ 134.687370][ T2793] rss_huge 0 [ 134.690634][ T2793] shmem 304857088 [ 134.694316][ T2793] mapped_file 0 [ 134.697782][ T2793] dirty 0 [ 134.700749][ T2793] writeback 0 [ 134.704021][ T2793] workingset_refault_anon 13 [ 134.708596][ T2793] workingset_refault_file 12419 [ 134.713513][ T2793] swap 127619072 [ 134.717065][ T2793] swapcached 69632 [ 134.720784][ T2793] pgpgin 387079 [ 134.724229][ T2793] pgpgout 311812 [ 134.727842][ T2793] pgfault 94946 [ 134.731298][ T2793] pgmajfault 208 [ 134.734838][ T2793] inactive_anon 298930176 [ 134.739141][ T2793] active_anon 6049792 [ 134.743123][ T2793] inactive_file 8192 [ 134.747011][ T2793] active_file 0 [ 134.750608][ T2793] unevictable 9584640 [ 134.754605][ T2793] hierarchical_memory_limit 314572800 [ 134.760042][ T2793] hierarchical_memsw_limit 9223372036854771712 [ 134.766197][ T2793] total_cache 314449920 [ 134.770378][ T2793] total_rss 73728 [ 134.774384][ T2793] total_rss_huge 0 [ 134.778087][ T2793] total_shmem 304857088 [ 134.782247][ T2793] total_mapped_file 0 [ 134.786215][ T2793] total_dirty 0 [ 134.789647][ T2793] total_writeback 0 [ 134.793467][ T2793] total_workingset_refault_anon 13 [ 134.798569][ T2793] total_workingset_refault_file 12419 [ 134.803941][ T2793] total_swap 127619072 [ 134.807995][ T2793] total_swapcached 69632 [ 134.812266][ T343] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 134.812465][ T2793] total_pgpgin 387079 [ 134.823858][ T2793] total_pgpgout 311812 [ 134.828003][ T2793] total_pgfault 94946 [ 134.832000][ T2793] total_pgmajfault 208 [ 134.836062][ T2793] total_inactive_anon 298930176 [ 134.840927][ T2793] total_active_anon 6049792 [ 134.845421][ T2793] total_inactive_file 8192 [ 134.849858][ T2793] total_active_file 0 [ 134.853828][ T2793] total_unevictable 9584640 [ 134.858312][ T2793] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.768,pid=2828,uid=0 [ 134.873084][ T2793] Memory cgroup out of memory: Killed process 2828 (syz.4.768) total-vm:90512kB, anon-rss:1236kB, file-rss:38304kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:0 [ 134.918466][ T2800] syz.4.768 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 134.948312][ T2800] CPU: 1 UID: 0 PID: 2800 Comm: syz.4.768 Not tainted syzkaller #0 46888e5e5e1e1e111dd74017fc0802fda26c1cfc [ 134.948346][ T2800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 134.948359][ T2800] Call Trace: [ 134.948365][ T2800] [ 134.948372][ T2800] __dump_stack+0x21/0x30 [ 134.948402][ T2800] dump_stack_lvl+0x140/0x1c0 [ 134.948426][ T2800] ? __cfi_dump_stack_lvl+0x10/0x10 [ 134.948449][ T2800] ? ___ratelimit+0x40e/0x5b0 [ 134.948478][ T2800] dump_stack+0x19/0x20 [ 134.948501][ T2800] dump_header+0xd6/0x490 [ 134.948524][ T2800] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 134.948553][ T2800] oom_kill_process+0x35d/0x640 [ 134.948574][ T2800] out_of_memory+0x624/0xa30 [ 134.948594][ T2800] ? __cfi_out_of_memory+0x10/0x10 [ 134.948613][ T2800] ? mutex_lock_killable+0x115/0x1d0 [ 134.948637][ T2800] ? __cfi_mutex_lock_killable+0x10/0x10 [ 134.948660][ T2800] mem_cgroup_out_of_memory+0x2c8/0x390 [ 134.948680][ T2800] ? css_next_descendant_pre+0x202/0x230 [ 134.948702][ T2800] ? drain_obj_stock+0xed0/0xed0 [ 134.948721][ T2800] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 134.948740][ T2800] try_charge_memcg+0x91c/0xe10 [ 134.948765][ T2800] ? __cfi_try_charge_memcg+0x10/0x10 [ 134.948789][ T2800] ? __alloc_pages_noprof+0x35f/0x7e0 [ 134.948814][ T2800] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 134.948839][ T2800] __mem_cgroup_charge+0xfc/0x420 [ 134.948857][ T2800] ? folio_add_lru+0x116/0x400 [ 134.948879][ T2800] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 134.948898][ T2800] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 134.948922][ T2800] ? shmem_replace_folio+0x9b0/0x9b0 [ 134.948943][ T2800] ? shmem_huge_global_enabled+0x2da/0x360 [ 134.948964][ T2800] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 134.948985][ T2800] ? __kasan_check_write+0x18/0x20 [ 134.949004][ T2800] ? _raw_spin_lock+0x92/0x120 [ 134.949022][ T2800] shmem_get_folio_gfp+0x607/0x1390 [ 134.949044][ T2800] ? shmem_get_folio+0xc0/0xc0 [ 134.949063][ T2800] ? __kasan_check_write+0x18/0x20 [ 134.949081][ T2800] ? inode_to_bdi+0x6d/0x100 [ 134.949105][ T2800] shmem_write_begin+0xf4/0x270 [ 134.949126][ T2800] generic_perform_write+0x328/0x970 [ 134.949150][ T2800] ? inode_update_timestamps+0x4f0/0x700 [ 134.949176][ T2800] ? __cfi_generic_perform_write+0x10/0x10 [ 134.949199][ T2800] ? down_write+0xee/0x2b0 [ 134.949220][ T2800] ? mnt_get_write_access_file+0x1af/0x3b0 [ 134.949244][ T2800] ? mnt_put_write_access_file+0xc2/0x100 [ 134.949267][ T2800] ? file_update_time+0x1de/0x210 [ 134.949290][ T2800] shmem_file_write_iter+0x105/0x130 [ 134.949314][ T2800] __kernel_write_iter+0x42c/0x8a0 [ 134.949334][ T2800] ? __cfi___kernel_write_iter+0x10/0x10 [ 134.949353][ T2800] ? get_dump_page+0x165/0x220 [ 134.949376][ T2800] ? __asan_memset+0x39/0x50 [ 134.949393][ T2800] ? iov_iter_bvec+0xc0/0x180 [ 134.949414][ T2800] dump_user_range+0xb8b/0xe60 [ 134.949435][ T2800] ? __cfi_dump_user_range+0x10/0x10 [ 134.949454][ T2800] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 134.949490][ T2800] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 134.949517][ T2800] ? elf_core_dump+0x24c0/0x3960 [ 134.949540][ T2800] elf_core_dump+0x2e7e/0x3960 [ 134.949565][ T2800] ? __cfi_elf_core_dump+0x10/0x10 [ 134.949591][ T2800] ? dump_interrupted+0xf0/0xf0 [ 134.949609][ T2800] ? 0xffffffffff600000 [ 134.949623][ T2800] ? put_dmabuf_info+0xf5/0x200 [ 134.949646][ T2800] do_coredump+0x208d/0x2fe0 [ 134.949666][ T2800] ? __cfi_do_coredump+0x10/0x10 [ 134.949684][ T2800] ? asm_exc_page_fault+0x2b/0x30 [ 134.949715][ T2800] ? __kasan_slab_free+0x6a/0x80 [ 134.949741][ T2800] ? kmem_cache_free+0x1bd/0x4f0 [ 134.949760][ T2800] ? get_signal+0xa74/0x14e0 [ 134.949789][ T2800] get_signal+0x11f8/0x14e0 [ 134.949817][ T2800] arch_do_signal_or_restart+0xbc/0x760 [ 134.949833][ T2800] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 134.949851][ T2800] irqentry_exit_to_user_mode+0x4d/0xb0 [ 134.949872][ T2800] irqentry_exit+0x16/0x60 [ 134.949891][ T2800] exc_page_fault+0x65/0xc0 [ 134.949911][ T2800] asm_exc_page_fault+0x2b/0x30 [ 134.949929][ T2800] RIP: 0033:0x7f6cac79ce61 [ 134.949945][ T2800] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 134.949958][ T2800] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 134.949974][ T2800] RAX: 0000000000000000 RBX: 00007f6caca15fa0 RCX: 00007f6cac79ce59 [ 134.949989][ T2800] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000100411 [ 134.950002][ T2800] RBP: 00007f6cac832d6f R08: 0000000000000000 R09: 0000000000000000 [ 134.950016][ T2800] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 134.950028][ T2800] R13: 00007f6caca16038 R14: 00007f6caca15fa0 R15: 00007ffd021300d8 [ 134.950046][ T2800] [ 135.406547][ T2800] memory: usage 288384kB, limit 307200kB, failcnt 41880 [ 135.413587][ T2800] memory+swap: usage 409684kB, limit 9007199254740988kB, failcnt 0 [ 135.421568][ T2800] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 135.421574][ T343] usb 1-1: Using ep0 maxpacket: 16 [ 135.422644][ T343] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.428493][ T2800] Memory cgroup stats for [ 135.433609][ T343] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.444768][ T2800] /syz4 [ 135.448957][ T343] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 135.458918][ T2800] : [ 135.461555][ T343] usb 1-1: config 0 interface 0 has no altsetting 0 [ 135.474749][ T2800] cache 295186432 [ 135.476930][ T343] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 135.483614][ T2800] rss 69632 [ 135.487128][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.496302][ T2800] rss_huge 0 [ 135.506742][ T343] usb 1-1: config 0 descriptor?? [ 135.510069][ T2800] shmem 283852800 [ 135.518971][ T2800] mapped_file 0 [ 135.522642][ T2800] dirty 0 [ 135.525588][ T2800] writeback 0 [ 135.528873][ T2800] workingset_refault_anon 13 [ 135.533489][ T2800] workingset_refault_file 12585 [ 135.538334][ T2800] swap 124211200 [ 135.541890][ T2800] swapcached 69632 [ 135.545602][ T2800] pgpgin 388454 [ 135.549044][ T2800] pgpgout 317891 [ 135.552600][ T2800] pgfault 95016 [ 135.556050][ T2800] pgmajfault 213 [ 135.559591][ T2800] inactive_anon 6254592 [ 135.563760][ T2800] active_anon 277651456 [ 135.567910][ T2800] inactive_file 0 [ 135.571559][ T2800] active_file 4096 [ 135.575284][ T2800] unevictable 11329536 [ 135.579340][ T2800] hierarchical_memory_limit 314572800 [ 135.584718][ T2800] hierarchical_memsw_limit 9223372036854771712 [ 135.590940][ T2800] total_cache 295186432 [ 135.595093][ T2800] total_rss 69632 [ 135.598710][ T2800] total_rss_huge 0 [ 135.602462][ T2800] total_shmem 283852800 [ 135.606612][ T2800] total_mapped_file 0 [ 135.610637][ T2800] total_dirty 0 [ 135.614088][ T2800] total_writeback 0 [ 135.617876][ T2800] total_workingset_refault_anon 13 [ 135.623001][ T2800] total_workingset_refault_file 12585 [ 135.628363][ T2800] total_swap 124211200 [ 135.632449][ T2800] total_swapcached 69632 [ 135.636683][ T2800] total_pgpgin 388454 [ 135.640688][ T2800] total_pgpgout 317891 [ 135.644749][ T2800] total_pgfault 95016 [ 135.648710][ T2800] total_pgmajfault 213 [ 135.652794][ T2800] total_inactive_anon 6254592 [ 135.657463][ T2800] total_active_anon 277651456 [ 135.662145][ T2800] total_inactive_file 0 [ 135.666296][ T2800] total_active_file 4096 [ 135.670553][ T2800] total_unevictable 11329536 [ 135.675162][ T2800] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.768,pid=2818,uid=0 [ 135.690145][ T2800] Memory cgroup out of memory: Killed process 2818 (syz.4.768) total-vm:90512kB, anon-rss:1236kB, file-rss:38796kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:0 [ 135.950726][ T3170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.960405][ T3170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.091106][ T2790] syz.4.768 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 136.181550][ T3185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.186066][ T2790] CPU: 0 UID: 0 PID: 2790 Comm: syz.4.768 Not tainted syzkaller #0 46888e5e5e1e1e111dd74017fc0802fda26c1cfc [ 136.186097][ T2790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.186150][ T2790] Call Trace: [ 136.186156][ T2790] [ 136.186163][ T2790] __dump_stack+0x21/0x30 [ 136.186194][ T2790] dump_stack_lvl+0x140/0x1c0 [ 136.186216][ T2790] ? __cfi_dump_stack_lvl+0x10/0x10 [ 136.186239][ T2790] ? ___ratelimit+0x40e/0x5b0 [ 136.186261][ T2790] dump_stack+0x19/0x20 [ 136.186282][ T2790] dump_header+0xd6/0x490 [ 136.186303][ T2790] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 136.186326][ T2790] oom_kill_process+0x35d/0x640 [ 136.186347][ T2790] out_of_memory+0x624/0xa30 [ 136.186365][ T2790] ? __cfi_out_of_memory+0x10/0x10 [ 136.186384][ T2790] ? mutex_lock_killable+0x97/0x1d0 [ 136.186406][ T2790] ? __cfi_mutex_lock_killable+0x10/0x10 [ 136.186429][ T2790] mem_cgroup_out_of_memory+0x2c8/0x390 [ 136.186449][ T2790] ? css_next_descendant_pre+0x202/0x230 [ 136.186470][ T2790] ? drain_obj_stock+0xed0/0xed0 [ 136.186488][ T2790] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 136.186507][ T2790] try_charge_memcg+0x91c/0xe10 [ 136.186530][ T2790] ? __cfi_try_charge_memcg+0x10/0x10 [ 136.186553][ T2790] ? __alloc_pages_noprof+0x35f/0x7e0 [ 136.186575][ T2790] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 136.186599][ T2790] __mem_cgroup_charge+0xfc/0x420 [ 136.186616][ T2790] ? folio_add_lru+0x116/0x400 [ 136.186636][ T2790] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 136.186654][ T2790] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 136.186676][ T2790] ? shmem_replace_folio+0x9b0/0x9b0 [ 136.186696][ T2790] ? shmem_huge_global_enabled+0x2da/0x360 [ 136.186716][ T2790] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 136.186736][ T2790] ? __kasan_check_write+0x18/0x20 [ 136.186753][ T2790] ? _raw_spin_lock+0x92/0x120 [ 136.186770][ T2790] shmem_get_folio_gfp+0x607/0x1390 [ 136.186795][ T2790] ? shmem_get_folio+0xc0/0xc0 [ 136.186812][ T2790] ? follow_page_pte+0x90f/0xbc0 [ 136.186835][ T2790] ? inode_to_bdi+0x6d/0x100 [ 136.186858][ T2790] shmem_write_begin+0xf4/0x270 [ 136.186878][ T2790] generic_perform_write+0x328/0x970 [ 136.186902][ T2790] ? __cfi_generic_perform_write+0x10/0x10 [ 136.186923][ T2790] ? down_write+0xee/0x2b0 [ 136.186946][ T2790] ? file_update_time+0xa3/0x210 [ 136.186969][ T2790] shmem_file_write_iter+0x105/0x130 [ 136.186991][ T2790] __kernel_write_iter+0x42c/0x8a0 [ 136.187010][ T2790] ? __cfi___kernel_write_iter+0x10/0x10 [ 136.187027][ T2790] ? get_dump_page+0x165/0x220 [ 136.187048][ T2790] ? __asan_memset+0x39/0x50 [ 136.187065][ T2790] ? iov_iter_bvec+0xc0/0x180 [ 136.187085][ T2790] dump_user_range+0xb8b/0xe60 [ 136.187110][ T2790] ? __cfi_dump_user_range+0x10/0x10 [ 136.187128][ T2790] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 136.187154][ T2790] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 136.187179][ T2790] ? elf_core_dump+0x24c0/0x3960 [ 136.187200][ T2790] elf_core_dump+0x2e7e/0x3960 [ 136.187224][ T2790] ? __cfi_elf_core_dump+0x10/0x10 [ 136.187251][ T2790] ? dump_interrupted+0xf0/0xf0 [ 136.187268][ T2790] ? 0xffffffffff600000 [ 136.187281][ T2790] ? put_dmabuf_info+0xf5/0x200 [ 136.187302][ T2790] do_coredump+0x208d/0x2fe0 [ 136.187321][ T2790] ? __cfi_do_coredump+0x10/0x10 [ 136.187338][ T2790] ? asm_exc_page_fault+0x2b/0x30 [ 136.187362][ T2790] ? __kasan_slab_free+0x6a/0x80 [ 136.187381][ T2790] ? kmem_cache_free+0x1bd/0x4f0 [ 136.187399][ T2790] ? get_signal+0xa74/0x14e0 [ 136.187422][ T2790] get_signal+0x11f8/0x14e0 [ 136.187446][ T2790] arch_do_signal_or_restart+0xbc/0x760 [ 136.187463][ T2790] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 136.187483][ T2790] irqentry_exit_to_user_mode+0x4d/0xb0 [ 136.187507][ T2790] irqentry_exit+0x16/0x60 [ 136.187528][ T2790] exc_page_fault+0x65/0xc0 [ 136.187549][ T2790] asm_exc_page_fault+0x2b/0x30 [ 136.187568][ T2790] RIP: 0033:0x7f6cac79ce61 [ 136.187582][ T2790] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 136.187596][ T2790] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 136.187612][ T2790] RAX: 0000000000000000 RBX: 00007f6caca15fa0 RCX: 00007f6cac79ce59 [ 136.187625][ T2790] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000100411 [ 136.187638][ T2790] RBP: 00007f6cac832d6f R08: 0000000000000000 R09: 0000000000000000 [ 136.187650][ T2790] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 136.187661][ T2790] R13: 00007f6caca16038 R14: 00007f6caca15fa0 R15: 00007ffd021300d8 [ 136.187676][ T2790] [ 136.195386][ T2790] memory: usage 307200kB, limit 307200kB, failcnt 42993 [ 136.220051][ T3185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.222420][ T3170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.529880][ T2790] memory+swap: usage 431600kB, limit 9007199254740988kB, failcnt 0 [ 136.532662][ T3170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.571824][ T2790] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 136.676768][ T2790] Memory cgroup stats for /syz4: [ 136.676895][ T2790] cache 314179584 [ 136.686648][ T2790] rss 344064 [ 136.689887][ T2790] rss_huge 0 [ 136.693229][ T2790] shmem 297132032 [ 136.696855][ T2790] mapped_file 0 [ 136.719852][ T2790] dirty 0 [ 136.722868][ T2790] writeback 0 [ 136.726145][ T2790] workingset_refault_anon 43 [ 136.733183][ T311] usb 1-1: USB disconnect, device number 49 [ 136.769864][ T2790] workingset_refault_file 12860 [ 136.774757][ T2790] swap 127541248 [ 136.778295][ T2790] swapcached 147456 [ 136.786858][ T2790] pgpgin 399958 [ 136.799636][ T2790] pgpgout 324691 [ 136.803272][ T2790] pgfault 96458 [ 136.806723][ T2790] pgmajfault 243 [ 136.810447][ T2790] inactive_anon 116445184 [ 136.814837][ T2790] active_anon 180809728 [ 136.818983][ T2790] inactive_file 0 [ 136.822833][ T2790] active_file 0 [ 136.826285][ T2790] unevictable 17047552 [ 136.831292][ T2790] hierarchical_memory_limit 314572800 [ 136.836666][ T2790] hierarchical_memsw_limit 9223372036854771712 [ 136.842988][ T2790] total_cache 314179584 [ 136.847142][ T2790] total_rss 344064 [ 136.851059][ T2790] total_rss_huge 0 [ 136.854999][ T2790] total_shmem 297132032 [ 136.859244][ T2790] total_mapped_file 0 [ 136.868245][ T2790] total_dirty 0 [ 136.871925][ T2790] total_writeback 0 [ 136.875778][ T2790] total_workingset_refault_anon 43 [ 136.881484][ T2790] total_workingset_refault_file 12860 [ 136.886892][ T2790] total_swap 127541248 [ 136.891160][ T2790] total_swapcached 147456 [ 136.895482][ T2790] total_pgpgin 399958 [ 136.899450][ T2790] total_pgpgout 324691 [ 136.903990][ T2790] total_pgfault 96458 [ 136.907969][ T2790] total_pgmajfault 243 [ 136.912225][ T2790] total_inactive_anon 116445184 [ 136.917067][ T2790] total_active_anon 180809728 [ 136.922046][ T2790] total_inactive_file 0 [ 136.926437][ T3196] ip6gretap0: entered promiscuous mode [ 136.931978][ T3196] ip6gretap0: entered allmulticast mode [ 136.952276][ T2790] total_active_file 0 [ 136.956313][ T2790] total_unevictable 17047552 [ 136.969261][ T36] audit: type=1400 audit(1780355411.193:421): avc: denied { create } for pid=3198 comm="syz.3.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 136.990349][ T2790] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.768,pid=2813,uid=0 [ 137.005420][ T2790] Memory cgroup out of memory: Killed process 2813 (syz.4.768) total-vm:90512kB, anon-rss:1236kB, file-rss:43936kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:0 [ 137.145245][ T2826] syz.4.768 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 137.239857][ T2826] CPU: 1 UID: 0 PID: 2826 Comm: syz.4.768 Not tainted syzkaller #0 46888e5e5e1e1e111dd74017fc0802fda26c1cfc [ 137.239890][ T2826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.239902][ T2826] Call Trace: [ 137.239909][ T2826] [ 137.239917][ T2826] __dump_stack+0x21/0x30 [ 137.239946][ T2826] dump_stack_lvl+0x140/0x1c0 [ 137.239971][ T2826] ? __cfi_dump_stack_lvl+0x10/0x10 [ 137.239996][ T2826] ? ___ratelimit+0x40e/0x5b0 [ 137.240017][ T2826] dump_stack+0x19/0x20 [ 137.240040][ T2826] dump_header+0xd6/0x490 [ 137.240063][ T2826] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 137.240092][ T2826] oom_kill_process+0x35d/0x640 [ 137.240114][ T2826] out_of_memory+0x624/0xa30 [ 137.240134][ T2826] ? __cfi_out_of_memory+0x10/0x10 [ 137.240154][ T2826] ? mutex_lock_killable+0x97/0x1d0 [ 137.240178][ T2826] ? __cfi_mutex_lock_killable+0x10/0x10 [ 137.240203][ T2826] mem_cgroup_out_of_memory+0x2c8/0x390 [ 137.240223][ T2826] ? css_next_descendant_pre+0x202/0x230 [ 137.240246][ T2826] ? drain_obj_stock+0xed0/0xed0 [ 137.240273][ T2826] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 137.240292][ T2826] try_charge_memcg+0x91c/0xe10 [ 137.240318][ T2826] ? __cfi_try_charge_memcg+0x10/0x10 [ 137.240342][ T2826] ? __alloc_pages_noprof+0x35f/0x7e0 [ 137.240368][ T2826] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 137.240394][ T2826] __mem_cgroup_charge+0xfc/0x420 [ 137.240410][ T2826] ? folio_add_lru+0x116/0x400 [ 137.240431][ T2826] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 137.240450][ T2826] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 137.240474][ T2826] ? shmem_replace_folio+0x9b0/0x9b0 [ 137.240496][ T2826] ? shmem_huge_global_enabled+0x2da/0x360 [ 137.240518][ T2826] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 137.240539][ T2826] ? __kasan_check_write+0x18/0x20 [ 137.240558][ T2826] ? _raw_spin_lock+0x92/0x120 [ 137.240576][ T2826] shmem_get_folio_gfp+0x607/0x1390 [ 137.240599][ T2826] ? shmem_get_folio+0xc0/0xc0 [ 137.240618][ T2826] ? follow_page_pte+0x90f/0xbc0 [ 137.240641][ T2826] ? inode_to_bdi+0x6d/0x100 [ 137.240666][ T2826] shmem_write_begin+0xf4/0x270 [ 137.240687][ T2826] generic_perform_write+0x328/0x970 [ 137.240713][ T2826] ? __cfi_generic_perform_write+0x10/0x10 [ 137.240737][ T2826] ? down_write+0xee/0x2b0 [ 137.240761][ T2826] ? file_update_time+0xa3/0x210 [ 137.240786][ T2826] shmem_file_write_iter+0x105/0x130 [ 137.240810][ T2826] __kernel_write_iter+0x42c/0x8a0 [ 137.240831][ T2826] ? __cfi___kernel_write_iter+0x10/0x10 [ 137.240849][ T2826] ? get_dump_page+0x165/0x220 [ 137.240873][ T2826] ? __asan_memset+0x39/0x50 [ 137.240891][ T2826] ? iov_iter_bvec+0xc0/0x180 [ 137.240913][ T2826] dump_user_range+0xb8b/0xe60 [ 137.240934][ T2826] ? __cfi_dump_user_range+0x10/0x10 [ 137.240953][ T2826] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 137.240981][ T2826] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 137.241007][ T2826] ? elf_core_dump+0x24c0/0x3960 [ 137.241030][ T2826] elf_core_dump+0x2e7e/0x3960 [ 137.241054][ T2826] ? __cfi_elf_core_dump+0x10/0x10 [ 137.241082][ T2826] ? dump_interrupted+0xf0/0xf0 [ 137.241101][ T2826] ? 0xffffffffff600000 [ 137.241115][ T2826] ? put_dmabuf_info+0xf5/0x200 [ 137.241138][ T2826] do_coredump+0x208d/0x2fe0 [ 137.241159][ T2826] ? __cfi_do_coredump+0x10/0x10 [ 137.241177][ T2826] ? asm_exc_page_fault+0x2b/0x30 [ 137.241204][ T2826] ? __kasan_slab_free+0x6a/0x80 [ 137.241226][ T2826] ? kmem_cache_free+0x1bd/0x4f0 [ 137.241246][ T2826] ? get_signal+0xa74/0x14e0 [ 137.241276][ T2826] get_signal+0x11f8/0x14e0 [ 137.241302][ T2826] arch_do_signal_or_restart+0xbc/0x760 [ 137.241322][ T2826] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 137.241344][ T2826] irqentry_exit_to_user_mode+0x4d/0xb0 [ 137.241369][ T2826] irqentry_exit+0x16/0x60 [ 137.241392][ T2826] exc_page_fault+0x65/0xc0 [ 137.241415][ T2826] asm_exc_page_fault+0x2b/0x30 [ 137.241435][ T2826] RIP: 0033:0x7f6cac79ce61 [ 137.241452][ T2826] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 137.241468][ T2826] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 137.241485][ T2826] RAX: 0000000000000000 RBX: 00007f6caca15fa0 RCX: 00007f6cac79ce59 [ 137.241498][ T2826] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000100411 [ 137.241511][ T2826] RBP: 00007f6cac832d6f R08: 0000000000000000 R09: 0000000000000000 [ 137.241524][ T2826] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 137.241537][ T2826] R13: 00007f6caca16038 R14: 00007f6caca15fa0 R15: 00007ffd021300d8 [ 137.241554][ T2826] [ 137.749923][ T2826] memory: usage 282636kB, limit 307200kB, failcnt 44684 [ 137.828745][ T3206] netlink: 104 bytes leftover after parsing attributes in process `syz.3.895'. [ 137.876671][ T2826] memory+swap: usage 352080kB, limit 9007199254740988kB, failcnt 0 [ 137.889935][ T3208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 137.919946][ T3208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 138.047355][ T2826] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 138.175671][ T2826] Memory cgroup stats for /syz4: [ 138.175812][ T2826] cache 257708032 [ 138.249870][ T2826] rss 327680 [ 138.283325][ T2826] rss_huge 0 [ 138.328478][ T2826] shmem 234188800 [ 138.332476][ T3221] netlink: 44 bytes leftover after parsing attributes in process `syz.0.900'. [ 138.349868][ T3221] netlink: 59 bytes leftover after parsing attributes in process `syz.0.900'. [ 138.367557][ T2826] mapped_file 0 [ 138.368912][ T3221] netlink: 59 bytes leftover after parsing attributes in process `syz.0.900'. [ 138.412473][ T2826] dirty 0 [ 138.414584][ T3225] SELinux: Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped). [ 138.415541][ T2826] writeback 217088 [ 138.430089][ T36] audit: type=1400 audit(1780355412.663:422): avc: denied { relabelto } for pid=3224 comm="syz.3.902" name="file0" dev="tmpfs" ino=1756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 138.478001][ T36] audit: type=1400 audit(1780355412.683:423): avc: denied { associate } for pid=3224 comm="syz.3.902" name="file0" dev="tmpfs" ino=1756 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:etc_mail_t:s0" [ 138.539873][ T36] audit: type=1400 audit(1780355412.683:424): avc: denied { setattr } for pid=3224 comm="syz.3.902" name="file0" dev="tmpfs" ino=1756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 138.540142][ T2826] workingset_refault_anon 59 [ 138.576149][ T36] audit: type=1400 audit(1780355412.693:425): avc: denied { unlink } for pid=296 comm="syz-executor" name="file0" dev="tmpfs" ino=1756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 138.689885][ T2826] workingset_refault_file 12860 [ 138.699892][ T311] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 138.717626][ T2826] swap 125661184 [ 138.749848][ T2826] swapcached 499712 [ 138.753703][ T2826] pgpgin 411022 [ 138.764666][ T3233] netlink: 'syz.2.906': attribute type 17 has an invalid length. [ 138.785529][ T3235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=3235 comm=syz.2.907 [ 138.808447][ T2826] pgpgout 349452 [ 138.838889][ T2826] pgfault 96784 [ 138.859133][ T2826] pgmajfault 253 [ 138.860888][ T311] usb 1-1: config 120 has an invalid interface number: 125 but max is 0 [ 138.871230][ T2826] inactive_anon 62881792 [ 138.875486][ T2826] active_anon 172056576 [ 138.879879][ T311] usb 1-1: config 120 has no interface number 0 [ 138.890483][ T311] usb 1-1: config 120 interface 125 altsetting 8 endpoint 0x3 has invalid maxpacket 33206, setting to 64 [ 138.910353][ T311] usb 1-1: config 120 interface 125 altsetting 8 endpoint 0x84 has invalid wMaxPacketSize 0 [ 138.920767][ T311] usb 1-1: config 120 interface 125 has no altsetting 0 [ 138.932920][ T2826] inactive_file 0 [ 138.936662][ T2826] active_file 0 [ 138.940286][ T2826] unevictable 23396352 [ 138.944429][ T2826] hierarchical_memory_limit 314572800 [ 138.951474][ T311] usb 1-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 138.962140][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.970781][ T311] usb 1-1: Product: syz [ 138.974963][ T311] usb 1-1: Manufacturer: syz [ 138.979562][ T311] usb 1-1: SerialNumber: syz [ 138.984899][ T2826] hierarchical_memsw_limit 9223372036854771712 [ 138.993787][ T2826] total_cache 257708032 [ 139.001517][ T2826] total_rss 327680 [ 139.005447][ T3223] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 139.012973][ T2826] total_rss_huge 0 [ 139.016977][ T2826] total_shmem 234188800 [ 139.021404][ T2826] total_mapped_file 0 [ 139.025457][ T2826] total_dirty 0 [ 139.028982][ T2826] total_writeback 217088 [ 139.033742][ T2826] total_workingset_refault_anon 59 [ 139.039355][ T2826] total_workingset_refault_file 12860 [ 139.045112][ T2826] total_swap 125661184 [ 139.049208][ T2826] total_swapcached 499712 [ 139.053867][ T2826] total_pgpgin 411022 [ 139.057881][ T2826] total_pgpgout 349452 [ 139.062224][ T2826] total_pgfault 96784 [ 139.066283][ T2826] total_pgmajfault 253 [ 139.070587][ T2826] total_inactive_anon 62881792 [ 139.075361][ T2826] total_active_anon 172056576 [ 139.080319][ T2826] total_inactive_file 0 [ 139.084506][ T2826] total_active_file 0 [ 139.088503][ T2826] total_unevictable 23396352 [ 139.093460][ T2826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.768,pid=2827,uid=0 [ 139.108483][ T2826] Memory cgroup out of memory: OOM victim 2827 (syz.4.768) is already exiting. Skip killing the task [ 139.144935][ T3188] incfs: ino conflict with backing FS 1 [ 139.171009][ T3188] overlayfs: upper fs does not support tmpfile. [ 139.199309][ T3188] overlayfs: upper fs does not support tmpfile. [ 139.217614][ T3223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.230791][ T3223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.257141][ T311] ums-usbat 1-1:120.125: USB Mass Storage device detected [ 139.304683][ T311] ums-usbat 1-1:120.125: probe with driver ums-usbat failed with error -5 [ 139.320094][ T311] usb 1-1: USB disconnect, device number 50 [ 139.339889][ T343] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 139.490920][ T343] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 139.501908][ T343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 139.518460][ T343] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 139.539862][ T343] usb 3-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 139.559212][ T343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.568011][ T343] usb 3-1: config 0 descriptor?? [ 139.573534][ T3246] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 139.671597][ T3261] netlink: 104 bytes leftover after parsing attributes in process `syz.3.916'. [ 139.983792][ T343] betop 0003:11C2:2208.0010: ignoring exceeding usage max [ 139.991589][ T343] betop 0003:11C2:2208.0010: unknown main item tag 0x4 [ 139.999101][ T343] betop 0003:11C2:2208.0010: hidraw0: USB HID v0.01 Device [HID 11c2:2208] on usb-dummy_hcd.2-1/input0 [ 140.010261][ T343] betop 0003:11C2:2208.0010: no inputs found [ 140.018720][ T36] audit: type=1400 audit(1780355414.243:426): avc: denied { checkpoint_restore } for pid=3262 comm="syz.4.917" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 140.685932][ T311] usb 3-1: USB disconnect, device number 64 [ 141.039896][ T311] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 141.169874][ T311] usb 3-1: device descriptor read/64, error -71 [ 141.199389][ T3281] incfs: ino conflict with backing FS 1 [ 141.206011][ T3281] overlayfs: upper fs does not support tmpfile. [ 141.214368][ T3281] overlayfs: upper fs does not support tmpfile. [ 141.271478][ T36] audit: type=1400 audit(1780355415.503:427): avc: denied { sys_module } for pid=3285 comm="syz.3.924" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 141.279882][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 141.317346][ T36] audit: type=1400 audit(1780355415.543:428): avc: denied { bind } for pid=3285 comm="syz.3.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.317516][ T3288] netlink: 156 bytes leftover after parsing attributes in process `syz.3.924'. [ 141.360920][ T3294] netlink: 72 bytes leftover after parsing attributes in process `syz.0.926'. [ 141.429869][ T311] usb 3-1: device descriptor read/64, error -71 [ 141.619877][ T343] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 141.669880][ T311] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 141.769892][ T343] usb 1-1: device descriptor read/64, error -71 [ 141.799896][ T311] usb 3-1: device descriptor read/64, error -71 [ 142.009884][ T343] usb 1-1: device descriptor read/64, error -71 [ 142.039898][ T311] usb 3-1: device descriptor read/64, error -71 [ 142.149990][ T311] usb usb3-port1: attempt power cycle [ 142.249875][ T343] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 142.379893][ T343] usb 1-1: device descriptor read/64, error -71 [ 142.482885][ T3303] netlink: 'syz.3.930': attribute type 10 has an invalid length. [ 142.490725][ T311] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 142.510975][ T311] usb 3-1: device descriptor read/8, error -71 [ 142.629919][ T343] usb 1-1: device descriptor read/64, error -71 [ 142.650866][ T311] usb 3-1: device descriptor read/8, error -71 [ 142.739986][ T343] usb usb1-port1: attempt power cycle [ 142.860094][ T3307] incfs: ino conflict with backing FS 1 [ 142.866751][ T3307] overlayfs: upper fs does not support tmpfile. [ 142.874993][ T3307] overlayfs: upper fs does not support tmpfile. [ 142.890056][ T311] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 142.938888][ T311] usb 3-1: device descriptor read/8, error -71 [ 143.080853][ T311] usb 3-1: device descriptor read/8, error -71 [ 143.089863][ T343] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 143.120961][ T343] usb 1-1: device descriptor read/8, error -71 [ 143.189982][ T311] usb usb3-port1: unable to enumerate USB device [ 143.250848][ T343] usb 1-1: device descriptor read/8, error -71 [ 143.411576][ T3335] tipc: Started in network mode [ 143.416463][ T3335] tipc: Node identity ac14140f, cluster identity 4711 [ 143.423417][ T3335] tipc: New replicast peer: 255.255.255.255 [ 143.429486][ T3335] tipc: Enabled bearer , priority 10 [ 143.489881][ T343] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 143.510867][ T343] usb 1-1: device descriptor read/8, error -71 [ 143.640898][ T343] usb 1-1: device descriptor read/8, error -71 [ 143.712452][ T3339] incfs: ino conflict with backing FS 1 [ 143.719221][ T3339] overlayfs: upper fs does not support tmpfile. [ 143.727363][ T3339] overlayfs: upper fs does not support tmpfile. [ 143.747213][ T3342] netlink: 72 bytes leftover after parsing attributes in process `syz.2.942'. [ 143.750755][ T343] usb usb1-port1: unable to enumerate USB device [ 143.766976][ T3342] netlink: 64 bytes leftover after parsing attributes in process `syz.2.942'. [ 143.803060][ T3346] overlayfs: missing 'lowerdir' [ 143.953209][ T36] audit: type=1400 audit(1780355418.183:429): avc: denied { accept } for pid=3349 comm="syz.4.946" path="socket:[20747]" dev="sockfs" ino=20747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.340996][ T3362] incfs: ino conflict with backing FS 1 [ 144.347657][ T3362] overlayfs: upper fs does not support tmpfile. [ 144.357884][ T3362] overlayfs: upper fs does not support tmpfile. [ 144.410111][ T36] audit: type=1326 audit(1780355418.633:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3359 comm="syz.3.950" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbbbd9ce59 code=0x0 [ 144.418769][ T3372] x_tables: duplicate entry at hook 2 [ 144.479097][ T36] audit: type=1400 audit(1780355418.703:431): avc: denied { ioctl } for pid=3359 comm="syz.3.950" path="socket:[20831]" dev="sockfs" ino=20831 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 144.549901][ T343] tipc: Node number set to 2886997007 [ 144.979894][ T311] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 145.129875][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 145.141245][ T3397] incfs: ino conflict with backing FS 1 [ 145.146931][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.158266][ T3397] overlayfs: upper fs does not support tmpfile. [ 145.169688][ T311] usb 1-1: too many endpoints for config 1 interface 2 altsetting 242: 255, using maximum allowed: 30 [ 145.184686][ T3397] overlayfs: upper fs does not support tmpfile. [ 145.191017][ T311] usb 1-1: config 1 interface 2 altsetting 242 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 145.213517][ T311] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.223702][ T311] usb 1-1: config 1 interface 2 has no altsetting 0 [ 145.232443][ T311] usb 1-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 145.242700][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.251350][ T311] usb 1-1: Product: syz [ 145.255566][ T311] usb 1-1: Manufacturer: syz [ 145.260410][ T311] usb 1-1: SerialNumber: syz [ 145.468486][ T3403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.488129][ T3403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.500790][ T311] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 145.509885][ T311] usb 1-1: unit 4 not found! [ 145.514514][ T311] usb 1-1: unit 144 not found! [ 145.527290][ T311] usb 1-1: USB disconnect, device number 55 [ 145.808776][ T3425] incfs: ino conflict with backing FS 1 [ 145.818097][ T3425] overlayfs: upper fs does not support tmpfile. [ 145.830693][ T3425] overlayfs: upper fs does not support tmpfile. [ 145.903519][ T3431] overlayfs: failed to resolve './file2': -2 [ 145.981564][ T3442] overlayfs: failed to clone upperpath [ 146.099207][ T3456] incfs: ino conflict with backing FS 1 [ 146.105815][ T3456] overlayfs: upper fs does not support tmpfile. [ 146.113549][ T3456] overlayfs: upper fs does not support tmpfile. [ 146.751412][ T3468] batadv_slave_1: entered promiscuous mode [ 146.757913][ T3467] batadv_slave_1: left promiscuous mode [ 146.877241][ T36] audit: type=1400 audit(1780355421.103:432): avc: denied { read } for pid=3471 comm="syz.0.989" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 146.899874][ T36] audit: type=1400 audit(1780355421.103:433): avc: denied { open } for pid=3471 comm="syz.0.989" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 146.971469][ T3480] incfs: ino conflict with backing FS 1 [ 146.978043][ T3480] overlayfs: upper fs does not support tmpfile. [ 146.986317][ T3480] overlayfs: upper fs does not support tmpfile. [ 147.000147][ T3482] overlay: filesystem on ./bus not supported as upperdir [ 147.002823][ T36] audit: type=1400 audit(1780355421.223:434): avc: denied { append } for pid=3481 comm="syz.0.993" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 147.030180][ T36] audit: type=1400 audit(1780355421.233:435): avc: denied { bind } for pid=3485 comm="syz.4.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 147.030362][ T3482] overlay: filesystem on ./bus not supported as upperdir [ 147.051707][ T36] audit: type=1400 audit(1780355421.263:436): avc: denied { mounton } for pid=3481 comm="syz.0.993" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 147.167241][ T3494] tipc: Enabling of bearer rejected, failed to enable media [ 147.285045][ T36] audit: type=1400 audit(1780355421.513:437): avc: denied { bind } for pid=3495 comm="syz.3.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 147.304220][ T36] audit: type=1400 audit(1780355421.513:438): avc: denied { name_bind } for pid=3495 comm="syz.3.998" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 147.329884][ T343] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 147.448536][ T3503] fuse: Bad value for 'fd' [ 147.466419][ T3507] incfs: ino conflict with backing FS 1 [ 147.472889][ T3507] overlayfs: upper fs does not support tmpfile. [ 147.480952][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 147.481128][ T3507] overlayfs: upper fs does not support tmpfile. [ 147.492009][ T343] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 147.511119][ T343] usb 1-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 147.520205][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.528898][ T343] usb 1-1: config 0 descriptor?? [ 147.544865][ T3491] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.554259][ T3513] fuse: Bad value for 'fd' [ 147.953476][ T343] hid (null): bogus close delimiter [ 147.960571][ T343] waltop 0003:172F:0502.0011: unknown main item tag 0x2 [ 147.967705][ T343] waltop 0003:172F:0502.0011: bogus close delimiter [ 147.974489][ T343] waltop 0003:172F:0502.0011: item 0 0 2 10 parsing failed [ 147.982045][ T343] waltop 0003:172F:0502.0011: probe with driver waltop failed with error -22 [ 148.069458][ T3529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 148.078375][ T3529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 148.097280][ T3531] overlayfs: failed to resolve './bus': -2 [ 148.156760][ T311] usb 1-1: USB disconnect, device number 56 [ 148.764247][ T3570] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=3570 comm=syz.4.1020 [ 148.777482][ T3570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1020'. [ 150.412486][ T3602] GUP no longer grows the stack in syz.3.1032 (3602): 200000008000-20000000a000 (200000007000) [ 150.422936][ T3602] CPU: 1 UID: 0 PID: 3602 Comm: syz.3.1032 Not tainted syzkaller #0 46888e5e5e1e1e111dd74017fc0802fda26c1cfc [ 150.422966][ T3602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.422977][ T3602] Call Trace: [ 150.422984][ T3602] [ 150.422993][ T3602] __dump_stack+0x21/0x30 [ 150.423021][ T3602] dump_stack_lvl+0x140/0x1c0 [ 150.423040][ T3602] ? __cfi_dump_stack_lvl+0x10/0x10 [ 150.423054][ T3602] ? find_vma+0xd3/0x120 [ 150.423065][ T3602] ? __reset_page_owner+0x450/0x450 [ 150.423078][ T3602] ? zone_page_state_add+0x43/0x90 [ 150.423090][ T3602] dump_stack+0x19/0x20 [ 150.423103][ T3602] __get_user_pages+0x1e37/0x22d0 [ 150.423116][ T3602] ? __kasan_check_write+0x18/0x20 [ 150.423126][ T3602] ? __update_page_owner_handle+0x318/0x370 [ 150.423139][ T3602] ? rwsem_read_trylock+0x274/0x5b0 [ 150.423156][ T3602] ? down_read_killable+0x7f/0x100 [ 150.423170][ T3602] ? populate_vma_page_range+0x220/0x220 [ 150.423183][ T3602] ? post_alloc_hook+0x37d/0x3b0 [ 150.423196][ T3602] __gup_longterm_locked+0xc5a/0x1600 [ 150.423210][ T3602] ? try_grab_folio_fast+0x155/0x520 [ 150.423223][ T3602] ? prep_new_page+0x7c/0x190 [ 150.423235][ T3602] ? follow_pfn_pte+0x110/0x110 [ 150.423248][ T3602] ? get_page_from_freelist+0x496e/0x4a20 [ 150.423262][ T3602] ? __pte_offset_map+0x1b0/0x230 [ 150.423276][ T3602] gup_fast_fallback+0x12d7/0x14d0 [ 150.423291][ T3602] ? get_user_pages_fast_only+0xc0/0xc0 [ 150.423304][ T3602] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 150.423317][ T3602] ? static_key_count+0x45/0x70 [ 150.423331][ T3602] get_user_pages_fast+0x73/0xb0 [ 150.423343][ T3602] __iov_iter_get_pages_alloc+0x3ca/0xa30 [ 150.423357][ T3602] iov_iter_get_pages2+0x68/0xb0 [ 150.423369][ T3602] sk_msg_zerocopy_from_iter+0x212/0x890 [ 150.423384][ T3602] ? __cfi_sk_msg_zerocopy_from_iter+0x10/0x10 [ 150.423397][ T3602] ? skb_page_frag_refill+0x22e/0x4f0 [ 150.423408][ T3602] tls_sw_sendmsg+0xa35/0x2260 [ 150.423424][ T3602] ? __cfi_tls_sw_sendmsg+0x10/0x10 [ 150.423437][ T3602] ? avc_has_perm_noaudit+0x1d7/0x360 [ 150.423449][ T3602] ? inet_send_prepare+0x64/0x4e0 [ 150.423460][ T3602] ? __cfi_tls_sw_sendmsg+0x10/0x10 [ 150.423472][ T3602] inet6_sendmsg+0x113/0x120 [ 150.423483][ T3602] ? __cfi_inet6_sendmsg+0x10/0x10 [ 150.423492][ T3602] sock_write_iter+0x2f2/0x490 [ 150.423504][ T3602] ? __cfi_sock_write_iter+0x10/0x10 [ 150.423515][ T3602] ? selinux_file_permission+0x8a4/0xb60 [ 150.423530][ T3602] do_iter_readv_writev+0x62f/0x820 [ 150.423542][ T3602] ? vfs_iter_read+0x5f0/0x5f0 [ 150.423553][ T3602] ? bpf_lsm_file_permission+0xd/0x20 [ 150.423566][ T3602] vfs_writev+0x4a8/0xe50 [ 150.423578][ T3602] ? do_writev+0x2e0/0x2e0 [ 150.423592][ T3602] do_writev+0x151/0x2e0 [ 150.423603][ T3602] ? vfs_readv+0xa10/0xa10 [ 150.423615][ T3602] ? __kasan_check_write+0x18/0x20 [ 150.423625][ T3602] ? fpregs_restore_userregs+0x11c/0x260 [ 150.423638][ T3602] __x64_sys_writev+0x81/0x90 [ 150.423649][ T3602] x64_sys_call+0x1fbb/0x2ee0 [ 150.423659][ T3602] do_syscall_64+0x57/0xf0 [ 150.423669][ T3602] ? clear_bhb_loop+0x50/0xa0 [ 150.423681][ T3602] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 150.423693][ T3602] RIP: 0033:0x7ffbbbd9ce59 [ 150.423702][ T3602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.423711][ T3602] RSP: 002b:00007ffbbcb7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 150.423723][ T3602] RAX: ffffffffffffffda RBX: 00007ffbbc015fa0 RCX: 00007ffbbbd9ce59 [ 150.423731][ T3602] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000007 [ 150.423738][ T3602] RBP: 00007ffbbbe32d6f R08: 0000000000000000 R09: 0000000000000000 [ 150.423745][ T3602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.423752][ T3602] R13: 00007ffbbc016038 R14: 00007ffbbc015fa0 R15: 00007ffe0600f488 [ 150.423760][ T3602] [ 153.727692][ T3686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1064'. [ 154.668492][ T3704] fuse: Bad value for 'fd' [ 154.687602][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 154.687618][ T36] audit: type=1400 audit(1780355428.913:442): avc: denied { execute } for pid=3708 comm="syz.4.1073" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 155.095092][ T3719] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3719 comm=syz.3.1077 [ 155.108082][ T3719] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3719 comm=syz.3.1077 [ 155.770233][ T3742] fuse: Bad value for 'fd' [ 156.287052][ T36] audit: type=1400 audit(1780355430.513:443): avc: denied { mount } for pid=3745 comm="syz.4.1087" name="/" dev="pstore" ino=2692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 156.317595][ T3750] tipc: Can't bind to reserved service type 0 [ 156.319934][ T3748] futex_wake_op: syz.3.1088 tries to shift op by 144; fix this program [ 156.357783][ T36] audit: type=1400 audit(1780355430.583:444): avc: denied { connect } for pid=3755 comm="syz.3.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.401441][ T3752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1090'. [ 156.460518][ T3765] overlayfs: failed to resolve './bus': -2 [ 156.517541][ T36] audit: type=1400 audit(1780355430.743:445): avc: denied { mounton } for pid=3783 comm="syz.3.1101" path="/399/file0" dev="tmpfs" ino=2133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 156.517558][ T3784] fuse: Unknown parameter 'root)od^6:00000000000000ÿ100000' [ 156.965222][ T3791] overlayfs: failed to resolve './bus': -2 [ 157.001988][ T3806] overlayfs: failed to resolve './cgroup': -2 [ 157.643243][ T3827] overlayfs: failed to resolve './bus': -2 [ 160.043534][ T3852] overlayfs: failed to resolve './bus': -2 [ 160.179404][ T3876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3876 comm=syz.4.1130 [ 160.305033][ T3883] overlayfs: failed to resolve './bus': -2 [ 160.318714][ T3885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1134'. [ 160.328303][ T3885] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1134'. [ 160.338009][ T3885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=3885 comm=syz.3.1134 [ 161.619725][ T3902] 9pnet: Could not find request transport: fZ [ 162.156041][ T3911] 9pnet: Could not find request transport: fd$rfdNo=0x0000000000000003 [ 162.232368][ T3926] syz.3.1152 uses obsolete (PF_INET,SOCK_PACKET) [ 162.252107][ T3931] overlayfs: failed to clone upperpath [ 162.288697][ T3937] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1153'. [ 162.321540][ T3941] netlink: 'syz.2.1157': attribute type 4 has an invalid length. [ 162.331500][ T3941] netlink: 'syz.2.1157': attribute type 4 has an invalid length. [ 162.598935][ T3964] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=62489 sclass=netlink_xfrm_socket pid=3964 comm=syz.2.1164 [ 162.612616][ T3964] fuse: Bad value for 'fd' [ 163.785117][ T36] audit: type=1400 audit(1780355438.013:446): avc: denied { mounton } for pid=3983 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 163.819616][ T3983] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.826698][ T3983] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.833938][ T3983] bridge_slave_0: entered allmulticast mode [ 163.840180][ T3983] bridge_slave_0: entered promiscuous mode [ 163.846494][ T3983] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.853566][ T3983] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.860678][ T3983] bridge_slave_1: entered allmulticast mode [ 163.866908][ T3983] bridge_slave_1: entered promiscuous mode [ 163.903622][ T3983] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.910698][ T3983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.917952][ T3983] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.925022][ T3983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.944117][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.951617][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.961120][ T392] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.968182][ T392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.977263][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.984354][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.007135][ T3983] veth0_vlan: entered promiscuous mode [ 164.017082][ T3983] veth1_macvtap: entered promiscuous mode [ 164.035617][ T36] audit: type=1400 audit(1780355438.263:447): avc: denied { mounton } for pid=3983 comm="syz-executor" path="/root/syzkaller.59G1Lr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 164.123679][ T3992] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1172'. [ 164.134342][ T3992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3992 comm=syz.5.1172 [ 164.400054][ T323] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 164.549895][ T323] usb 6-1: Using ep0 maxpacket: 16 [ 164.556064][ T323] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.566974][ T323] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.576733][ T323] usb 6-1: config 0 interface 0 has no altsetting 0 [ 164.583401][ T323] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 164.592454][ T323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.600991][ T323] usb 6-1: config 0 descriptor?? [ 164.785856][ T4004] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1177'. [ 165.062383][ T323] hid (null): unknown global tag 0xe [ 165.068006][ T323] hid (null): invalid report_count 1432730018 [ 165.307341][ T36] audit: type=1326 audit(1780355439.533:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4012 comm="syz.3.1179" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbbbd9ce59 code=0x0 [ 165.614479][ T4015] incfs: Backing dir is not set, filesystem can't be mounted. [ 165.622092][ T4015] incfs: mount failed -2 [ 165.627327][ T4015] overlayfs: upper fs does not support tmpfile. [ 165.641229][ T4015] overlayfs: upper fs does not support tmpfile. [ 165.871935][ T36] audit: type=1400 audit(1780355440.103:449): avc: denied { setattr } for pid=4022 comm="syz.4.1183" path="pipe:[22468]" dev="pipefs" ino=22468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 166.147085][ T4027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=4027 comm=syz.3.1185 [ 166.160214][ T4027] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1185'. [ 166.217923][ T36] audit: type=1400 audit(1780355440.443:450): avc: denied { write } for pid=4042 comm="syz.2.1190" path="socket:[22489]" dev="sockfs" ino=22489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.251526][ T4045] overlayfs: upper fs does not support tmpfile. [ 166.259241][ T4045] overlayfs: upper fs does not support tmpfile. [ 166.790541][ T4071] overlayfs: upper fs does not support tmpfile. [ 166.798409][ T4071] overlayfs: upper fs does not support tmpfile. [ 167.080209][ T4095] ------------[ cut here ]------------ [ 167.085747][ T4095] WARNING: CPU: 0 PID: 4095 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 167.093788][ T4095] Modules linked in: [ 167.097695][ T4095] CPU: 0 UID: 0 PID: 4095 Comm: syz.4.1210 Not tainted syzkaller #0 46888e5e5e1e1e111dd74017fc0802fda26c1cfc [ 167.109290][ T4095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.119380][ T4095] RIP: 0010:drop_nlink+0xce/0x110 [ 167.124530][ T4095] Code: 04 00 00 be 08 00 00 00 e8 7f 12 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 6d 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 167.144274][ T4095] RSP: 0018:ffffc90011657210 EFLAGS: 00010283 [ 167.150396][ T4095] RAX: ffffffff81f2597e RBX: ffff888122526a40 RCX: 0000000000080000 [ 167.158476][ T4095] RDX: ffffc9000e44d000 RSI: 00000000000009b9 RDI: 00000000000009ba [ 167.166536][ T4095] RBP: ffffc90011657238 R08: 0000000000000003 R09: 0000000000000004 [ 167.169432][ T334] usb 6-1: USB disconnect, device number 2 [ 167.174547][ T4095] R10: dffffc0000000000 R11: fffff520022cae38 R12: dffffc0000000000 [ 167.174571][ T4095] R13: 1ffff110244a4d51 R14: ffff888122526a88 R15: 0000000000000000 [ 167.196542][ T4095] FS: 00007f6cad6986c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 167.205573][ T4095] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.212203][ T4095] CR2: 0000200000001000 CR3: 000000011de8e000 CR4: 00000000003526b0 [ 167.220231][ T4095] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 167.228211][ T4095] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 167.236233][ T4095] Call Trace: [ 167.239516][ T4095] [ 167.242482][ T4095] simple_rmdir+0x153/0x260 [ 167.247014][ T4095] vfs_rmdir+0x3e3/0x560 [ 167.251314][ T4095] dir_rmdir+0x23a/0x320 [ 167.255589][ T4095] ? __cfi_dir_rmdir+0x10/0x10 [ 167.260406][ T4095] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 167.265453][ T4095] vfs_rmdir+0x3e3/0x560 [ 167.269850][ T4095] ovl_workdir_cleanup+0x1a4/0x800 [ 167.274985][ T4095] ? path_put+0x5b/0x70 [ 167.279152][ T4095] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 167.284894][ T4095] ? lookup_one+0x2dc/0x2f0 [ 167.289426][ T4095] ? __cfi_lookup_one+0x10/0x10 [ 167.294341][ T4095] ovl_workdir_create+0x29e/0x6f0 [ 167.299397][ T4095] ? ovl_statfs+0x2d0/0x2d0 [ 167.303962][ T4095] ? _raw_spin_lock+0x92/0x120 [ 167.308835][ T4095] ? _raw_spin_unlock+0x45/0x60 [ 167.313747][ T4095] ? mnt_want_write+0x321/0x510 [ 167.318617][ T4095] ovl_get_workdir+0x328/0x16d0 [ 167.323511][ T4095] ? pcpu_alloc_noprof+0xd44/0x13f0 [ 167.328720][ T4095] ? ovl_fill_super+0x3de0/0x3de0 [ 167.329672][ T4099] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 167.333794][ T4095] ? __kasan_check_write+0x18/0x20 [ 167.333825][ T4095] ? _raw_spin_lock+0x92/0x120 [ 167.357792][ T4095] ? __cfi__raw_spin_lock+0x10/0x10 [ 167.363254][ T4095] ? __kasan_check_write+0x18/0x20 [ 167.368405][ T4095] ? _raw_spin_lock+0x92/0x120 [ 167.373259][ T4095] ? __cfi__raw_spin_lock+0x10/0x10 [ 167.378473][ T4095] ? __kasan_check_write+0x18/0x20 [ 167.383642][ T4095] ? up_read+0x26/0x1c0 [ 167.387840][ T4095] ? _raw_spin_unlock+0x45/0x60 [ 167.392752][ T4095] ? ovl_inuse_trylock+0xbd/0x110 [ 167.397789][ T4095] ovl_fill_super+0x1608/0x3de0 [ 167.402716][ T4095] ? xas_nomem+0x71/0x2c0 [ 167.407059][ T4095] ? ida_alloc_range+0xa48/0xa80 [ 167.412053][ T4095] ? __kmalloc_cache_noprof+0x23c/0x470 [ 167.417619][ T4095] ? __cfi_ovl_fill_super+0x10/0x10 [ 167.422862][ T4095] ? __kasan_check_write+0x18/0x20 [ 167.427986][ T4095] ? mutex_unlock+0x90/0x240 [ 167.432630][ T4095] ? __cfi_mutex_unlock+0x10/0x10 [ 167.437666][ T4095] ? __kasan_check_write+0x18/0x20 [ 167.442823][ T4095] ? _raw_spin_lock+0x92/0x120 [ 167.447597][ T4095] ? sget_fc+0x9ce/0xad0 [ 167.451887][ T4095] ? __cfi_set_anon_super_fc+0x10/0x10 [ 167.457360][ T4095] get_tree_nodev+0xce/0x170 [ 167.462017][ T4095] ? __cfi_ovl_fill_super+0x10/0x10 [ 167.467236][ T4095] ovl_get_tree+0x20/0x30 [ 167.471615][ T4095] vfs_get_tree+0x9e/0x290 [ 167.476151][ T4095] do_new_mount+0x251/0xb30 [ 167.480705][ T4095] ? security_capable+0x44/0x130 [ 167.485650][ T4095] path_mount+0x682/0x1010 [ 167.490102][ T4095] __se_sys_mount+0x2bf/0x480 [ 167.494785][ T4095] ? __x64_sys_mount+0xf0/0xf0 [ 167.499567][ T4095] ? __kasan_check_write+0x18/0x20 [ 167.504726][ T4095] ? fpregs_restore_userregs+0x11c/0x260 [ 167.510407][ T4095] __x64_sys_mount+0xc3/0xf0 [ 167.515016][ T4095] x64_sys_call+0x2021/0x2ee0 [ 167.519706][ T4095] do_syscall_64+0x57/0xf0 [ 167.524189][ T4095] ? clear_bhb_loop+0x50/0xa0 [ 167.528880][ T4095] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 167.534830][ T4095] RIP: 0033:0x7f6cac79ce59 [ 167.539258][ T4095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.558914][ T4095] RSP: 002b:00007f6cad698028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 167.567353][ T4095] RAX: ffffffffffffffda RBX: 00007f6caca15fa0 RCX: 00007f6cac79ce59 [ 167.575381][ T4095] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 167.583390][ T4095] RBP: 00007f6cac832d6f R08: 0000200000000040 R09: 0000000000000000 [ 167.591390][ T4095] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 167.599374][ T4095] R13: 00007f6caca16038 R14: 00007f6caca15fa0 R15: 00007ffd021300d8 [ 167.607376][ T4095] [ 167.610412][ T4095] ---[ end trace 0000000000000000 ]--- [ 167.616013][ T4095] ------------[ cut here ]------------ [ 167.621518][ T4095] WARNING: CPU: 1 PID: 4095 at fs/dcache.c:774 dput+0x3cd/0x510 [ 167.629186][ T4095] Modules linked in: [ 167.633106][ T4095] CPU: 1 UID: 0 PID: 4095 Comm: syz.4.1210 Tainted: G W syzkaller #0 46888e5e5e1e1e111dd74017fc0802fda26c1cfc [ 167.646173][ T4095] Tainted: [W]=WARN [ 167.650108][ T4095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.660193][ T4095] RIP: 0010:dput+0x3cd/0x510 [ 167.664783][ T4095] Code: 63 96 ff 48 b8 00 00 00 00 00 fc ff df 48 8b 4d d0 0f b6 04 01 84 c0 0f 85 21 01 00 00 80 0b 40 e9 a8 fe ff ff e8 d3 63 96 ff <0f> 0b e9 9c fe ff ff e8 c7 63 96 ff 48 89 df e8 2f 01 00 00 84 c0 [ 167.684537][ T4095] RSP: 0018:ffffc900116574a8 EFLAGS: 00010246 [ 167.690649][ T4095] RAX: ffffffff81f162fd RBX: ffff888123b44880 RCX: 0000000000080000 [ 167.698711][ T4095] RDX: ffffc9000e44d000 RSI: 000000000007ffff RDI: 0000000000080000 [ 167.706709][ T4095] RBP: ffffc900116574d8 R08: 0000000000000003 R09: 0000000000000004 [ 167.714785][ T4095] R10: dffffc0000000000 R11: fffff520022cae84 R12: 00000000ffffff80 [ 167.722773][ T4095] R13: ffff888123b44904 R14: ffff888123b44900 R15: 1ffff11024768920 [ 167.730762][ T4095] FS: 00007f6cad6986c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 167.739685][ T4095] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.746286][ T4095] CR2: 00007f6cac7ea540 CR3: 000000011de8e000 CR4: 00000000003526b0 [ 167.754302][ T4095] Call Trace: [ 167.757571][ T4095] [ 167.760522][ T4095] path_put+0x3d/0x70 [ 167.764526][ T4095] dentry_release+0x53/0xb0 [ 167.769017][ T4095] ? __cfi_dentry_release+0x10/0x10 [ 167.774235][ T4095] __dentry_kill+0x22e/0x5f0 [ 167.778830][ T4095] ? lock_for_kill+0xae/0x230 [ 167.783522][ T4095] dput+0x3f2/0x510 [ 167.787334][ T4095] ovl_workdir_create+0x2ae/0x6f0 [ 167.792374][ T4095] ? ovl_statfs+0x2d0/0x2d0 [ 167.796881][ T4095] ? _raw_spin_lock+0x92/0x120 [ 167.801657][ T4095] ? _raw_spin_unlock+0x45/0x60 [ 167.806511][ T4095] ? mnt_want_write+0x321/0x510 [ 167.811374][ T4095] ovl_get_workdir+0x328/0x16d0 [ 167.816230][ T4095] ? pcpu_alloc_noprof+0xd44/0x13f0 [ 167.821461][ T4095] ? ovl_fill_super+0x3de0/0x3de0 [ 167.826500][ T4095] ? __kasan_check_write+0x18/0x20 [ 167.831644][ T4095] ? _raw_spin_lock+0x92/0x120 [ 167.836405][ T4095] ? __cfi__raw_spin_lock+0x10/0x10 [ 167.841778][ T4095] ? __kasan_check_write+0x18/0x20 [ 167.846903][ T4095] ? _raw_spin_lock+0x92/0x120 [ 167.851677][ T4095] ? __cfi__raw_spin_lock+0x10/0x10 [ 167.856961][ T4095] ? __kasan_check_write+0x18/0x20 [ 167.862082][ T4095] ? up_read+0x26/0x1c0 [ 167.866253][ T4095] ? _raw_spin_unlock+0x45/0x60 [ 167.871113][ T4095] ? ovl_inuse_trylock+0xbd/0x110 [ 167.876140][ T4095] ovl_fill_super+0x1608/0x3de0 [ 167.881018][ T4095] ? xas_nomem+0x71/0x2c0 [ 167.885350][ T4095] ? ida_alloc_range+0xa48/0xa80 [ 167.890305][ T4095] ? __kmalloc_cache_noprof+0x23c/0x470 [ 167.895871][ T4095] ? __cfi_ovl_fill_super+0x10/0x10 [ 167.901088][ T4095] ? __kasan_check_write+0x18/0x20 [ 167.906212][ T4095] ? mutex_unlock+0x90/0x240 [ 167.910834][ T4095] ? __cfi_mutex_unlock+0x10/0x10 [ 167.915874][ T4095] ? __kasan_check_write+0x18/0x20 [ 167.921124][ T4095] ? _raw_spin_lock+0x92/0x120 [ 167.925895][ T4095] ? sget_fc+0x9ce/0xad0 [ 167.930163][ T4095] ? __cfi_set_anon_super_fc+0x10/0x10 [ 167.935629][ T4095] get_tree_nodev+0xce/0x170 [ 167.940242][ T4095] ? __cfi_ovl_fill_super+0x10/0x10 [ 167.945437][ T4095] ovl_get_tree+0x20/0x30 [ 167.949751][ T4095] vfs_get_tree+0x9e/0x290 [ 167.954176][ T4095] do_new_mount+0x251/0xb30 [ 167.958678][ T4095] ? security_capable+0x44/0x130 [ 167.963628][ T4095] path_mount+0x682/0x1010 [ 167.968042][ T4095] __se_sys_mount+0x2bf/0x480 [ 167.972741][ T4095] ? __x64_sys_mount+0xf0/0xf0 [ 167.977507][ T4095] ? __kasan_check_write+0x18/0x20 [ 167.982632][ T4095] ? fpregs_restore_userregs+0x11c/0x260 [ 167.988278][ T4095] __x64_sys_mount+0xc3/0xf0 [ 167.992895][ T4095] x64_sys_call+0x2021/0x2ee0 [ 167.997572][ T4095] do_syscall_64+0x57/0xf0 [ 168.002012][ T4095] ? clear_bhb_loop+0x50/0xa0 [ 168.006691][ T4095] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 168.012599][ T4095] RIP: 0033:0x7f6cac79ce59 [ 168.017011][ T4095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.036630][ T4095] RSP: 002b:00007f6cad698028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 168.045073][ T4095] RAX: ffffffffffffffda RBX: 00007f6caca15fa0 RCX: 00007f6cac79ce59 [ 168.053069][ T4095] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 168.061062][ T4095] RBP: 00007f6cac832d6f R08: 0000200000000040 R09: 0000000000000000 [ 168.069040][ T4095] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 168.077030][ T4095] R13: 00007f6caca16038 R14: 00007f6caca15fa0 R15: 00007ffd021300d8 [ 168.085036][ T4095] [ 168.088050][ T4095] ---[ end trace 0000000000000000 ]--- [ 168.093959][ T4095] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 168.103574][ T4095] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 168.105613][ T4099] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 168.126794][ T4099] overlayfs: upper fs does not support tmpfile.